Administration of computing entities in a network

• US 20050132231A1
• Filed: 12/03/2004
• Published: 06/16/2005
• Est. Priority Date: 12/11/2003
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Griffin, Jonathan, Norman, Andrew Patrick, Williamson, Matthew Murray
• Application Number:
  US11/004,349
• Publication Number:
  US 20050132231A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

A computer program product for monitoring a user computing entity'"'"'s status, the program being adapted to: evaluate one more parameters of operation of one more functional elements of the user entity; if an evaluated parameter has a value outside of a predetermined range which is indicative of normal user entity behaviour, operate the user entity to enable, in a predetermined manner, administrative access to the user entity to be gained by an administrative computing entity, thereby to permit the administrative entity to perform an administrative operation on the user entity.

Claims

1. A method of administering a network having a user and an administrator entity, the method comprising the steps of:

operating the user entity to enable administrative access for the administrative entity via network using a secure connection;

operating the user entity to disable the secure connection;

evaluating, at the user entity, one more parameters of operation of one or more functional elements of the user entity; and

if a parameter lies outside a predetermined range, operating the user entity to enable the secure connection.

2. A method according to claim 1 further comprising the step of allowing administrative access upon performance by the administrative entity of an authentication process.

3. A method according to claim 1 wherein the secure connection is enabled and disabled by the implementation of a firewall rule.

4. A method according to claim 3 wherein the firewall rule blocks communication on a predetermined port.

5. A method according to claim 1 wherein administrative access enables an administrator to perform one of the following operations:

installing software or firmware, uninstalling software or firmware, changing a password, configuring a resource in the user entity, and establishing and labelling a path from the user entity to a network resource.

6. A method according to claim 1 wherein the step of evaluating one or more parameters includes the step of evaluating at least one of:

CPU useage, number of sockets requested, system idle requirements, memory useage, storage useage, number of packets dispatched in a given time interval.

22. A method according to claim 2 wherein the step of establishing administrative access include an authentication step, performed by the administrator entity.

7. A method of administering a network having a user and an administrator entity, the method comprising the steps of:

operating the administrator entity to attempt to establish a secure connection with the user entity while the user entity is configured to prevent establishment of such a secure connection

when a parameter of operation of a functional element of the user entity lies outside a predetermined range, operating the user entity to enable establishment of the secure connection by the administrator entity;

operating the administrator entity to establish the secure connection; and

operating the administrator entity to perform an administrative operation on the user entity.

8. A method according to claim 7 further comprising the step of operating the administrator entity to perform an authentication step upon establishment of the secure connection, and before performing the administrative operation.

9. A method according to claim 7 further comprising the step, following performance of the administrative operation, of disabling the secure connection at the user entity.

10. A method according to claim 9 further comprising the step, following disabling the secure connection, of generating and sending a message from the user entity indicating that the secure connection with the administrator entity is disabled.

11. A method according to claim 9 further comprising the step of monitoring a total number of user entities with enabled secure connections at any one time.

12. A method according to claim 11 further comprising the step, in the event of, the total number exceeding a predetermined threshold, of disabling one or more enabled secure connections.

13. A method according to claim 12, wherein the record is maintained within the user entity, and the disabling of a secure connection to a given user entity occurs as a result of operations taking place within that entity.

14. A method according to claim 10 wherein the record is maintained using the message generated from the user entity indicating that the secure connection with the administrator entity is disabled.

15. A method according to claim 13 wherein the network comprises a plurality of user entities, and each one is adapted to disable the secure connection upon the total number exceeding a predetermined threshold after time delay, and wherein at least two user entities have different time delays.

16. A method according to claim 13 wherein all user entities have unique time delays.

17. A method according to claim 7 further comprising the step of the administrator entity performing an authentication step to obtain administrative access.

19. A computer medium according to claim 17 wherein the program product is adapted to monitor a total number of user entities in a network which enable secure connection at any one time, and if the number of secure connections which are enabled exceeds a predetermined number, disabling the secure connection in the user entity.

18. Computer medium having recorded thereon a computer program product adapted to enable remote administration of a user entity, by implementing the steps of:

operating the user entity to enable administrative access for the administrative entity via network using a secure connection;

operating the user entity to disable the secure connection;

in response to a parameter of operation of the user entity lying outside a predetermined range, operating the user entity to enable the secure connection.

20. A method of regulating administrative access to a plurality of user entities by an administrator entity in a network of computing entities, the method comprising the steps of:

establishing administrative access between a user entity and the administrator entity when a parameter of operation of a user entity lies outside a predetermined threshold;

operating the administrator entity to perform an administrative operation on the user entity; and

operating the user entity to disabling the administrative access.

21. A method according to claim 20 wherein establishing administrative access includes the step of establishing a secure connection.

23. A method according to claim 20 further comprising the step of limiting a number of user entities to which administrative access is simultaneously established to a predetermined maximum.