Proxy method and system for secure wireless administration of managed entities

• US 20060218402A1
• Filed: 06/02/2006
• Published: 09/28/2006
• Est. Priority Date: 12/19/2002
• Status: Active Grant

• Current Assignee: Vertiv IT Systems, Inc. (Vertiv Holdings Co.)
• Original Assignee: Sonic Mobility Inc. (Vertiv Holdings Co.)
• Inventors: Van Schaick, Allan, Doree, Jim, Kerstens, Kevin
• Granted Patent: US 7,577,255 B2
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/08 specially adapted for terminal emulation, e.g. Telnet
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/08 Access security

Abstract

A method, system and apparatus are described for avoiding the use of a web-server or generic security when providing network administration services remotely to managed entities using wireless technology. Instead a true Proxy device, not operating as a web-server, is used to pre-process all command traffic from wireless input devices (WID). The intervention between the WID and the managed entities of the Proxy isolating the managed entities from the WID, enhanced by encoding using a novel messaging protocol, further enhanced by a novel security model based on multiple pre-shared keys and algorithms together with identifiers and passwords that are not transmitted, achieves several bandwidth and security advantages including the ability to deliver TELNET services across the Internet and behind a firewall.

Claims

1. A method of encoding commands for the purpose of preparing an administrative message for transmission between a wireless input device and a Managed Entity, comprising the steps:

map at least one command to an identifier comprising a first symbol,

map at least one parameter to each said first symbol,

map at least one value to each said parameter,

create a first symbol-second symbol combination by appending a second symbol to said first symbol for the purpose of defining whether the transmission of said first symbol-second symbol combination is a request for or a confirmation of compliance,

define a sequence according to which said first symbol-second symbol combination will be positioned within said message relative to said value of each said parameter, and assemble said message using said first symbol to represent at least one command recognized by said Managed Entity, and

arranging said first symbol-second symbol combination together with said value of each said parameter in accordance with said sequence.