Secure management access control for computers, embedded and card embodiment

• US 20050086494A1
• Filed: 10/20/2004
• Published: 04/21/2005
• Est. Priority Date: 06/13/2003
• Status: Active Grant

• Current Assignee: Intellectual Ventures II LLC (Intellectual Ventures LLC)
• Original Assignee: Engedi Technologies, Inc.
• Inventors: Carley, Jeffrey Alan
• Granted Patent: US 7,325,140 B2
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A computer network management system for remotely managing a network device. The system includes a secure management access controller which is in direct communication with the network device. The secure management access controller provides access for remotely and securely managing a network. The secure management access controller further separates management communications from user communications to ensure the security of the management communications. The system further includes network and power monitoring and notification systems. The system further provides authentication and authorization capabilities for security purposes.

Claims

1. A remote management system for securely managing a network device in a computer network, comprising:

at least one secure management access controller in direct communication with the network device;

a remote connection means for remotely communicating with the secure management access controller; and

at least one network communication means for connecting the network device to the computer network.

2. The system of claim 1 wherein the at least one secure management access controller includes a flash chip, non-volatile random access memory and random access memory.

3. The system of claim 1 wherein the at least one secure management access controller is embedded in the network device to be managed.

4. The system of claim 1 wherein the at least one secure management access controller accesses a flash chip, non-volatile random access memory and random access memory embedded in a main processor on the network device.

5. The system of claim 1 wherein the network device includes a card reader and the at least one secure management access controller is embedded in a card capable of being read by the card reader.

6. The system of claim 1 wherein the remote connection means comprises:

a communication system; and

a secure management access controller interface device.

7. The system of claim 6 wherein the communication system is selected from the group consisting of a Public Switched Telephone Network, a broadband connection and a Virtual Private Network and the interface device is selected from the group consisting of an analog modem, a broadband modem, an Ethernet interface, a cellular interface and a card slot for accepting interface cards.

8. The system of claim 1 wherein the at least one network communication means is selected from the group consisting of a local area network, a serial interface and a network connection.

9. The system of claim 1 wherein the at least one network communication means supports at least one protocol selected from the group consisting of Transmission Control Protocol/Internet Protocol, Simple Network Management Protocol, Telnet, Trivial File Transfer Protocol, File Transfer Protocol, Hypertext Transfer Protocol, Hypertext Transfer Protocol over Secure Socket Layer and Secure Shell.

10. The system of claim 1 wherein user and management communications are transmitted to the at least one secure management access controller and the at least one controller further comprises a virtual management interface for separating the user communications from the management communications.

11. The system of claim 10 wherein the virtual management interface includes a protection means for protecting the management data.

12. The system of claim 10 wherein the virtual management interface includes a secure transmission tunnel to protect management communications and a firewall to protect the at least one management access controller from unauthorized access.

13. The system of claim 1 wherein the at least one the management access controller includes a monitoring means for monitoring the status of at least one computer network component and a network interface for reporting a status of the at least one computer network component to a network management station.

14. The system of claim 1 further comprising:

a network power supply;

a monitoring means for monitoring the status of the network power supply; and

a reporting means for reporting the status of the network power supply.

15. The system of claim 1 further comprising an independent power supply for supplying power to the management access controller.

16. The system of claim 1 further comprising a means for monitoring connection attempts made through the management access controller.

17. A remote management method for securely managing a network device in a computer network, comprising:

connecting a remote administrator to a secure management access controller in direct communication with the device to be managed;

verifying the identity of the remote administrator;

securing the connection between the remote administrator and the network device; and

providing a network communication means between the network device and the computer network.

18. The method of claim 17 in which the remote administrator is connected by means of a communication system and a secure management access controller interface device.

19. The method of claim 17 further comprising the step of:

providing a virtual management interface for separating user communications and management communications which are transmitted to the at least one secure management access controller.

20. The method of claim 17 in which the virtual management interface includes a secure transmission tunnel to protect management communications and a firewall to protect the secure management access controller from unauthorized access.