TWO-FACTOR AUTHENTICATION OF A REMOTE ADMINISTRATOR

• US 20080046967A1
• Filed: 08/21/2006
• Published: 02/21/2008
• Est. Priority Date: 08/21/2006
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Liu, Gang, Pan, Weimin
• Granted Patent: US 7,971,238 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/351 Virtual cards
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273

Abstract

An information handling system includes a processor, system memory, and a remote access resource that includes a virtual card reader enabled to establish a communication channel between the remote access resource and a remote card reader to communicate smart card reader access requests and response between them. The system may include an authentication module requiring two factor authentication including userid/password authentication and a physical card authentication. The communication channel enables remote physical card authentication. The resource further supports redirection of system console traffic enabling remote userid/password authentication. The virtual card reader is preferably operable to download a virtual card reader client to a remote management station to which the smart card reader is attached. The remote access resource may be operable to direct console traffic of the system to the remote management station to display a system login screen on the remote management station.

Claims

1. An information handling system, comprising:

a processor and system memory accessible to the processor;

a bus bridge providing an interface between a peripheral bus and the processor;

a remote access resource connected to the peripheral bus;

wherein the remote access resource includes a virtual card reader enabled to establish a communication channel between the remote access resource and a remotely located smart card reader to communicate smart card reader access requests and response between them.

2. The system of claim 1, wherein the information handling system includes an authentication module requiring two factor authentication including userid/password authentication and a physical card authentication and further wherein the communication channel enables remote physical card authentication.

3. The system of claim 2, wherein the remote access resource further support redirection of system console traffic enabling remote userid/password authentication.

4. The system of claim 1, wherein the virtual card reader is operable to download a virtual card reader client to a remote management station to which the smart card reader is attached.

5. The system of claim 4, wherein the remote access resource is operable to direct console traffic of the system to the remote management station to display a system login screen on the remote management station.

6. The system of claim 5, wherein the remote access resource is operable to establish the communication channel by downloading a virtual card reader client to the remote management station, operably attaching the smart card reader to the virtual card reader client, and establishing a the communication channel between the virtual card reader client and a virtual card reader server on the remote access resource.

7. The system of claim 1, wherein the remote access resource is connected to a service processor resource by an IPMI connection.

8. A computer program product comprising computer executable instructions, stored on a computer readable medium, for enabling remote authentication to a server using a remote access resource of the server, the instructions comprising:

instructions for responding to a web request from a remote management station by providing a user interface to the remote management station; and

instructions for responding to user interface input from the remote management station including instructions for redirecting traffic associated with a console of a data processing system to the remote management station and instructions for virtualizing a smart card reader.

9. The computer program product of claim 8, further comprising instructions for attaching the smart card reader to the server.

10. The computer program product of claim 8, instructions for emulating a Ctrl Alt Del sequence responsive to user interface input.

11. The computer program product of claim 8, further comprising instructions for detecting a removal of a smart card from the smart card reader.

12. The computer program product of claim 11, further comprising instructions for responding to said removal by closing the virtual card reader connection.

13. The computer program product of claim 8, further comprising instructions for providing a web server.

14. A remote access resource for use in an information handling system, the remote access resource being operable to support management of the information handling system from a remote management station and further operable to establish a communication channel between the remote access resource and a remote smart card reader.

15. The remote access resource of claim 14, wherein the communication channel is suitable to communicate smart card reader access requests and response between the remote access resource and the smart card reader.

16. The remote access resource of claim 14, wherein the remote access resource supports two factor authentication including userid/password authentication and a physical card authentication and further wherein the communication channel enables remote physical card authentication.

17. The remote access resource of claim 16, wherein the remote access resource further supports redirection of system console traffic enabling remote userid/password authentication.

18. The remote access resource of claim 16, wherein the virtual card reader is operable to download a virtual card reader client to a remote management station to which the smart card reader is attached.

19. The remote access resource of claim 18, wherein the remote access resource is operable to direct console traffic of the system to the remote management station to display a system login screen on the remote management station.

20. The remote access resource of claim 19, wherein the remote access resource is operable to establish the communication channel by downloading a virtual card reader client to the remote management station, operably attaching the smart card reader to the virtual card reader client, and establishing a the communication channel between the virtual card reader client and a virtual card reader server on the remote access resource.