Method, system, and article of manufacture for remote management of devices

• US 20040179683A1
• Filed: 03/14/2003
• Published: 09/16/2004
• Est. Priority Date: 03/14/2003
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Forte, John, von Behren, Paul D., Hui, Waikwan
• Granted Patent: US 7,302,568 B2
• Time in Patent Office: Days
• US Class Current: 380/44
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Provided are a method, system, and article of manufacture. A first process creates a second process. A cipher is generated. The first process is terminated. Access is controlled to the generated cipher.

Claims

1. A method, comprising:

creating, by a first process, a second process;

generating a cipher;

terminating the first process; and

controlling access to the generated cipher.

2. The method of claim 1, further comprising:

authorizing only processes that are permitted to read the generated cipher to access the second process.

3. The method of claim 1, further comprising:

storing the cipher;

allowing access to the stored cipher to a third process; and

encrypting, with the stored cipher, a message from the third process to the second process.

4. The method of claim 1, wherein the authorization further comprises:

receiving a message at the second process from a third process;

decrypting the received message with the cipher;

determining if the decrypted message is valid;

if the decrypted message is valid, then allowing the third process to access the second process; and

if the decrypted message is invalid, then preventing the third process from accessing the second process.

5. The method of claim 1, wherein the first process and the second process are generated by an application executing on a client, the method further comprising:

selecting a scripting language;

determining a first command in a script written in the scripting language; and

establishing a network session connecting the client and a server with the second process, wherein the first process is created by executing the first command at the client.

6. The method of claim 1, wherein the second process further performs:

establishing a network session between a client and a server;

sending a command, via the network session, from the client to the server; and

receiving a response from the server, based on the execution of the command at the server.

7. The method of claim 1, wherein the second process communicates with other processes via an interprocess communication mechanism, wherein the interprocess communication mechanism allows the second process to be accessed by other processes.

8. The method of claim 1, wherein the creation, generation, termination and authorization are performed by an application that sends a series of commands for execution on a remote device, and wherein the cipher is generated by the first process or the second process.

9. A system, comprising:

means for creating, by a first process, a second process;

means for generating a cipher;

means for terminating the first process; and

means for controlling access to the generated cipher.

10. The system of claim 9, further comprising:

means for authorizing only processes that are permitted to read the generated cipher to access the second process.

11. The system of claim 9, further comprising:

means for storing the cipher;

means for allowing access to the stored cipher to a third process; and

means for encrypting, with the stored cipher, a message from the third process to the second process.

12. The system of claim 9, wherein the authorization further comprises:

means for receiving a message at the second process from a third process;

means for decrypting the received message with the cipher;

means for determining if the decrypted message is valid;

means for allowing the third process to access the second process if the decrypted message is valid; and

means for preventing the third process from accessing the second process if the decrypted message is invalid.

13. The system of claim 9, wherein the first process and the second process are generated by an application executing on a client, the system further comprising:

means for determining a first command in a script written in a scripting language; and

means for establishing a network session connecting the client and a server with the second process, wherein the first process is created by executing the first command at the client.

14. The system of claim 9, wherein the second process further performs:

establishing a network session between a client and a server;

sending a command, via the network session, from the client to the server; and

receiving a response from the server, based on the execution of the command at the server.

15. The system of claim 9, wherein the second process communicates with other processes via an interprocess communication mechanism, wherein the interprocess communication mechanism allows the second process to be accessed by other processes.

16. The system of claim 9, wherein the creation, generation, termination and authorization are performed by an application that sends a series of commands for execution on a remote device, and wherein the cipher is generated by the first process or the second process.

17. An article of manufacture, wherein the article of manufacture is capable of causing operations, the operations comprising:

creating, by a first process, a second process;

generating a cipher;

terminating the first process; and

controlling access to the generated cipher.

18. The article of manufacture of claim 17, the operations further comprising:

authorizing only processes that are permitted to read the generated cipher to access the second process.

19. The article of manufacture of claim 17, the operations further comprising:

storing the cipher;

allowing access to the stored cipher to a third process; and

encrypting with the stored cipher a message from the third process to the second process.

20. The article of manufacture of claim 17, wherein the authorization further comprises:

receiving a message at the second process from a third process;

decrypting the received message with the cipher;

determining if the decrypted message is valid;

if the decrypted message is valid, then allowing the third process to access the second process; and

if the decrypted message is invalid, then preventing the third process from accessing the second process.

21. The article of manufacture of claim 17, wherein the first process and the second process are generated by an application executing on a client, the operations further comprising:

selecting a scripting language;

determining a first command in a script written in the scripting language; and

establishing a network session connecting the client and a server with the second process, wherein the first process is created by executing the first command at the client.

22. The article of manufacture of claim 17, wherein the second process further performs:

establishing a network session between a client and a server;

sending a command, via the network session, from the client to the server; and

receiving a response from the server, based on the execution of the command at the server.

23. The article of manufacture of claim 17, wherein the second process communicates with other processes via an interprocess communication mechanism, wherein the interprocess communication mechanism allows the second process to be accessed by other processes.

24. The article of manufacture of claim 17, wherein the creation, generation, termination and authorization are performed by an application that sends a series of commands for execution on a remote device, and wherein the cipher is generated by the first process or the second process.