Sytems, Methods And Devices For Remotely Administering A Target Device

• US 20060176884A1
• Filed: 02/04/2005
• Published: 08/10/2006
• Est. Priority Date: 02/04/2005
• Status: Abandoned Application

• Current Assignee: Sytex, Inc. (Leidos Holdings, Inc.)
• Original Assignee: Sytex, Inc. (Leidos Holdings, Inc.)
• Inventors: Cole, Eric B., Fair, Donald T., Teran, Evan M.
• Application Number:
  US10/906,144
• Publication Number:
  US 20060176884A1
• Time in Patent Office: Days
• US Class Current: 370/400
• CPC Class Codes: H04L 63/0414 during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 67/08 specially adapted for terminal emulation, e.g. Telnet
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network

Abstract

The present invention relates to the manipulation or monitoring of one communications device from another via a network. More particularly, the invention relates to remote control or administration of a target computer from a launch computer via predetermined relay routes therebetween. To this end, systems, devices and methodologies are provided.

Claims

1. A system, comprising:

a. first and second network communications devices adapted to communicate with one another according to a layered communications protocol that is characterized by a protocol stack, said first network communications device for issuing a data request to said second network communications device along a predetermined first relay route therebetween, and said second network communications device for transmitting a reply to said data request along a predetermined second relay route therebetween; and

b. a relay subnet defining the predetermined first relay route and the predetermined second relay route, said relay subnet including at least one intermediary network communications device adapted to communicate according to said layered communications protocol that is characterized by an associated intermediary device protocol stack and configured to forward;

(i) outbound traffic corresponding to said data request to the second network communications device without revealing the first network communications device as an origin of said data request; and

(ii) inbound traffic corresponding to said reply toward said first network communications device.

2. A system according to claim 1 wherein said data request is transmitted within an outbound relay packet, and wherein said reply is transmitted within a reply relay packet.

3. A system according to claim 1 wherein said outbound traffic, upon arrival at the second network communications device, identifies said intermediary network communications device as an origin of said data request.

4. A system according to claim 1 wherein traffic arriving at said intermediary network communications device which is derived from data request is forwarded without being passed entirely up the intermediary device'"'"'s protocol stack.

5. A command and control system, comprising

a. a launch computer having installed thereon a launch tool set configured to issue data requests;

b. a target computer having installed thereon a target tool set configured to respond to said data requests with data replies; and

c. at least one relay computer having installed thereon a relay tool set configured;

(i) to forward data requests from the launch computer to the target computer, while not identifying the target computer to the launch computer as an origin of said data requests; and

(ii) to forward said data replies from the target computer toward the launch computer.

6. A command and control system, comprising:

a. a launch computer adapted to communicate according to a layered communications protocol that is characterized by a launch computer protocol stack;

b. a target computer adapted to communicate according to said layered communications protocol that is characterized by an associated target computer protocol stack;

c. a front end trigger component issuing data requests to the target computer;

d. a response component replying to said data requests with data replies; and

e. a data transmission component which;

(i) transmits said data requests from the launch computer to the target computer via a predetermined outbound relay route, while concealing an identity of the launch computer from the target computer; and

(ii) transmits said data replies from the target computer to the launch computer via a predetermined reply relay route.

7. A command and control system according to claim 6 wherein said front end trigger component resides on the launch computer and includes a command and control console for generating trigger commands corresponding to said data requests.

8. A command and control system according to claim 7 wherein said trigger commands are transmitted to the target computer according to the user datagram protocol (UDP).

9. A command and control system according to claim 6 wherein each of said launch and target computers includes an associated Telnet server for establishing connections therebetween.

10. A command and control system according to claim 6 wherein each of said launch and target computers includes an associated stream server to permit encrypted transmissions therebetween.

11. A command and control system according to claim 10 wherein said encrypted transmissions are in accordance with the transmission control protocol (TCP).

12. A command and control system according to claim 10 wherein each of said launch and target computers stores a unique key used for encrypting the transmissions therebetween.

13. A command and control system according to claim 6 wherein said data transmission component comprises an outbound relay subnet including at least one outbound relay computer for forwarding data requests originating from the launch computer toward the target computer, and a return relay subnet including at least one return relay computer for forwarding data replies originating from the target computer toward the launch computer.

14. A command and control system according to claim 13 wherein said outbound relay computer and said return relay computer are the same.

15. A command and control system according to claim 13 wherein said outbound relay subnet includes a plurality of outbound relay computers and said return relay subnet includes a plurality of return relay computers.

16. A network communications device configured for use as a participant in a command and control system, said device comprising:

a. a memory storing an operating system which allows the network communications device to communicate with other computers on a relay network according to a layered communications protocol that is characterized by a protocol stack, wherein said relay network comprises an outbound relay subnet and a return relay subnet;

b. a storage device storing a tool set for issuing data requests to a target computer via the outbound relay network;

c. an input/output system which includes a network adapter for interfacing the network communications device to the relay network; and

d. a processor that is programmed;

(i) with respect to each outgoing packet which corresponds to a data request destined for the target computer, to incorporate into the outgoing packet associated outbound routing information, prior to continued processing by the protocol stack;

(ii) with respect to each outgoing packet that is not destined for said target computer, to allow said outgoing packet to be processed by the protocol stack without modification;

(iii) with respect to each inbound packet arriving from a relay computer along the return relay subnet, to convert the respective inbound packet into one which corresponds to a reply transmission from the target computer prior to continued processing by the protocol stack; and

(iv) with respect to each inbound packet arriving from a non-relay computer along the return relay subnet, to allow the respective inbound packet to be processed by the protocol stack without modification.

17. A network communications device according to claim 16 wherein said layered communications protocol is TCP/IP.

18. A network communications device according to claim 16 wherein said tool set includes a front end trigger component for generating trigger commands corresponding to said data requests.

19. A network communications device according to claim 16 including a Telnet server for establishing connections to the computers on the relay network.

20. A network communications device according to claim 16 including a stream server to permit encrypted transmission between the network communications device and the computers on the relay network.

21. A network communications device according to claim 16 wherein said storage device stores a key file having a unique key used for encrypting transmissions to the computers on the relay network.

22. A method of remotely accessing and controlling a target computer from a launch computer, comprising:

a. installing a set of launch tools on the launch computer;

b. obtaining system level access to the target computer;

c. uploading a set of target tools to the target computer, wherein said target tools include a loadable kernel module (LKM) responsible for retrieving reply data from the target computer in response to a data request issued from the launch computer;

d. installing said LKM on the target computer;

e. logging off the target computer;

f. sending an outbound relay packet containing said data request along a predetermined outbound relay route from the launch computer to the target computer; and

g. receiving from the target computer a reply relay packet in response to said outbound transmission packet, wherein said reply relay packet is one which traveled along a predetermined return relay route from the target computer to the launch computer.

23. A method according to claim 22 wherein each of the set of launch tools and the set of target tools includes an associated Telnet server for establishing connections between the launch and target computers.

24. A method according to claim 23 comprising sending said outbound packet according to the user datagram protocol (UDP).

25. A method according to claim any one of claims 22 and 23 wherein each of the set of launch tools and the set of target tools includes an associated stream server for permitting encrypted packet transmissions between the launch computer and the target computer.

26. A method according to claim 25 wherein each of the set of launch tools and the set of target tools includes an associated key file which stores a unique key used for encrypting said transmissions.

27. A method according to claim 25 comprising encrypting said outbound packet before it is sent toward the launch computer, and encrypting said reply packet before sending it toward the launch computer.

28. A method according to claim 22 whereby said LKM is installed in a location on the target computer which is unlikely to be accessed by an authorized user of the target computer.

29. A method according to claim 28 wherein said location is a hard disk associated with the target system.