System and method for controlling security of a remote network power device

• US 20070089163A1
• Filed: 10/18/2005
• Published: 04/19/2007
• Est. Priority Date: 10/18/2005
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Denton, Guy
• Application Number:
  US11/252,945
• Publication Number:
  US 20070089163A1
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A system and method for controlling security of a remote network power device powering a remote network device are disclosed. The system includes a remote network power supply device having a secure standard implemented thereon and having a power-supply-identity, a remote unattended network device powered from the power supply device, a portal having a secure connection for controlling the power supply device, and a power addressable protocol based on the secure standard and running on the portal for receiving and sending one or more secure communications over the secure connection in response to a directive issued by an authorized client for controlling the power supply device powering the remote unattended network device. The portal uses the power-supply-identity of the power supply device to authenticate the power supply device. Preferably, the secure standard is an IEEE 802.1x standard and, preferably, the power addressable protocol is based on the IEEE 802.1x standard.

Claims

1. A system for controlling security of a remote network power supply device, comprising:

a remote network power supply device having a secure standard implemented thereon and having a power-supply-identity;

a remote unattended network device powered from said remote network power supply device;

a portal having a secure connection for controlling said remote network power supply device; and

a power addressable protocol based on said secure standard and running on said portal for receiving and sending one or more secure communications over said secure connection in response to a directive issued by an authorized client for controlling said remote network power supply device powering said remote unattended network device.

2. The system according to claim 1, further comprising:

an authentication server employing said secure standard and securely linked to said portal for validating said remote network power supply device.

3. The system according to claim 1, wherein said secure standard is an IEEE 802.1x standard;

and wherein said power addressable protocol is based on said IEEE 802.1x standard.

4. The system according to claim 3, wherein said portal uses said power-supply-identity of said remote network power supply device to authenticate said remote network power supply device.

5. The system according to claim 4, wherein said power-supply-identity comprises at least one of:

a unique serial number of said remote network power supply device, a secret key based on a unique serial number of said remote network power supply device, and an IEEE 802.1x certificate based on a unique serial number of said remote network power supply device.

6. The system according to claim 5, wherein said portal uses an encryption algorithm based on said secure standard to encrypt said power-supply-identity for authenticating said remote network power supply device;

and wherein said power addressable protocol uses an encryption algorithm based on said secure standard to encrypt said directive issued by said authorized client for transmitting said encrypted directive to said remote network power supply device.

7. The system according to claim 5, wherein said portal authenticates said authorized client using an authentication method supported by said IEEE 802.1x standard.

8. The system according to claim 5, wherein said remote unattended network device and said remote network power supply device are each registered with said portal, and wherein said portal logs each request to access said system and wherein said portal logs any result of said request.

9. The system according to claim 5, wherein said remote network power supply device is a wireless remote network power supply device and wherein said system further comprises:

a wireless access point having said secure standard implemented thereon and linked to said portal for securely connecting said wireless remote network power supply device to said portal.

10. A method of providing an information security service to a customer, said method comprising the steps of:

embedding a secure standard in a wireless power supply device powering a remote unattended network device;

providing a portal having a secure connection for controlling said wireless power supply device;

implementing said secure standard in a wireless access point that links said wireless power supply device to said portal;

registering with said portal said wireless power supply device, said remote unattended network device and said wireless access point;

authenticating via said portal said wireless power supply device and said wireless access point; and

executing on said portal a power addressable protocol based on said secure standard for communicating one or more secure communications over said secure connection in response to a directive issued by an authorized client for controlling said wireless power supply device powering said remote unattended network device.

11. A method according to claim 10, further comprising the step of:

keeping a log of all clients that request access to said portal; and

wherein said secure standard is an IEEE 802.1x standard and wherein said power addressable protocol is based on said IEEE 802.1x standard.

12. A method according to claim 11, wherein said registering step further comprises the step of:

assigning a role-group to each of said remote unattended network device, said wireless power supply device, and said client such that said portal is able to validate authentication and authorization of said client in relation to said wireless power supply device and said remote unattended network device before allowing any access to control said wireless power supply device powering said remote unattended network device.

13. A method according to claim 11, wherein said authenticating step further comprises the steps of:

using a power-supply-identity of said wireless power supply device for authenticating said wireless power supply device; and

using an encryption algorithm based on said secure standard to encrypt said power-supply-identity for authenticating said wireless power supply device.

14. A method according to claim 11, wherein said executing step further comprises the step of:

using an encryption algorithm to encrypt said directive issued by said authorized client and transmitting said encrypted directive to said wireless power supply device.

15. Programmable media containing programmable software for controlling security of a remote network power device powering a remote unattended network device, said programmable software comprising the steps of:

registering said remote unattended network device and said remote network power supply device with a portal having a secure connection;

authenticating said power supply device using a power-supply-identity of said power supply device having a secure standard embedded thereon; and

executing a power addressable protocol on said portal for transmitting one or more secure communications over said secure connection in response to a directive issued by an authorized client for controlling said power supply device powering said remote unattended network device.

16. The programmable media according to claim 15, wherein said programmable software further comprises the step of:

validating said power-supply-identity via an authentication server having said secure standard and securely linked to said portal; and

keeping a log of all clients that request access to said portal.

17. The programmable media according to claim 15, wherein said secure standard is an IEEE 802.1x standard and wherein said power addressable protocol is based on said IEEE 802.1x standard.

18. The programmable media according to claim 15, wherein said power-supply-identity comprises at least one of:

a unique serial number of said power supply device, a secret key based on a unique serial number of said power supply device, and an IEEE 802.1x certificate based on a unique serial number of said power supply device.

19. The programmable media according to claim 15, wherein said power addressable protocol uses an encryption algorithm based on said secure standard to encrypt said power-supply-identity of said power supply device to authenticate said power supply device;

and wherein said power addressable protocol uses an encryption algorithm to encrypt said directive issued by said authorized client and transmits said encrypted directive to said power supply device.

20. The programmable media according to claim 19, wherein said power supply device is a wireless power supply device and wherein said programmable software further comprises:

a wireless access point having said secure standard implemented thereon and linked to said portal for securely connecting said wireless power supply device to said portal.