Device Management Across Firewall Architecture

• US 20100070582A1
• Filed: 07/04/2005
• Published: 03/18/2010
• Est. Priority Date: 07/04/2005
• Status: Abandoned Application

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Inventors: Somasekhar, Viswanath
• Application Number:
  US11/993,021
• Publication Number:
  US 20100070582A1
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: H04L 41/026 using e-messaging for transporting management information, e.g. email, instant messaging or chat
• CPC Class Codes: H04L 41/0266 using meta-data, objects or commands for formatting management information, e.g. using eXtensible markup language [XML]
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 51/18 Commands or executable codes
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

A technique that provides device management network for managing one or more devices located across a firewall. In one example embodiment, this is achieved by sending an Email, including an EDMP-PDU that uses SMTP, POP3, and/or IMAP as a transport mechanism, by a remote host. The Email sent by the remote host is then received by an agent as the firewall is configured to allow the Email. The agent then parses the received Email and reads it. The agent then initiates an action by creating an SNMP command, to be performed on one of the one or more devices, as a function of the parsed Email.

Claims

1. A method for managing one or more devices via an agent located within a firewall and a LAN by a remote host located outside the firewall comprising transmitting an Email from the remote host, wherein the Email includes a EDMP that uses a SMTP, a POP3, or an IMAP as a transport mechanism, to the one or more devices via the agent.

2. The method of claim 1, further comprising:

receiving the Email from the remote host by the agent;

parsing the received Email by the agent;

reading the parsed Email by the agent; and

initiating an action by creating an SNMP command to be performed on one of the one or more devices by the agent as a function of the parsed Email.

3. The method of claim 2, wherein the PDU includes data selected from the group consisting of device IP address, device name, device specific parameters and its associated values, and device firmware to upgrade a device.

4. The method of claim 3, wherein transmitting the Email from the remote host comprises:

generating a unique token by the remote host upon a user performing a management operation;

forming the Email including the Email command, the payload, and the unique token by the remote host;

encrypting the Email by the remote host; and

transmitting the encrypted Email by the remote host.

5. The method of claim 4, wherein receiving the Email from the remote host by the agent located that is within the firewall comprises:

receiving the encrypted Email by the agent; and

decrypting the encrypted Email by the agent.

6. The method of claim 4, further comprising:

storing the unique token by the agent upon parsing the Email; and

sending an acknowledgement of the receipt of the Email to the remote host.

7. The method of claim 6, further comprising:

resending the Email by the remote host upon not receiving the acknowledgement from the agent within a predetermined time of sending the Email; and

verifying the receipt of the Email and rejecting the resent Email as a function of the stored unique token by the agent.

8. The method of claim 4, further comprising:

creating a SNMP command by the agent as a function of the parsed Email received from the remote host; and

sending the SNMP command to an associated one of the one or more devices coupled to the agent within the LAN.

9. The method of claim 8, further comprising:

creating a SNMP response by the associated one of the one or more devices upon receiving the SNMP command sent by the agent and completion of the action associated with the SNMP command; and

sending the SNMP response to the agent.

10. The method of claim 9, further comprising:

receiving the SNMP response from the device by the agent;

creating an Email including a return EDMP-PDU, wherein the return EDMP-PDU to include information associated with the received SNMP response; and

sending the Email including the return EDMP-PDU to the remote host.

11. The method of claim 1, further comprising:

generating an alert SNMP trap by the one of the one or more devices and sending the alert SNMP trap to the agent;

receiving the sent alert SNMP trap from the one of the one or more devices by the agent;

creating an alert EDMP-PDU as a function of the received alert SNMP trap by the agent; and

sending the Email including the alert EDMP-PDU to the remote host by the agent.

12. (canceled)

13. (canceled)

14. (canceled)

15. (canceled)

16. (canceled)

17. (canceled)

18. (canceled)

19. A device management architecture to manage one or more LAN enabled devices using an agent located within a firewall from a remote host located across a firewall using Email including an EDMP that uses a SMTP, a POP3, or an IMAP as a transport mechanism.

20. The architecture of claim 19, wherein the EDMP includes a command, a PDU, and a unique token, and

wherein the agent receives the Email and parses the Email, wherein the agent reads the parsed Email and initiates an action by creating an SNMP command to manage the one or more LAN enabled devices as a function of the parsed Email.

21. The architecture of claim 20, wherein the remote host that forms the Email and sends it to the one or more LAN enabled devices within the firewall comprises:

a host command builder that builds a desired command, wherein the host command builder attaches an EDMP-PDU and a unique token to the desired command, and wherein the host command builder converts the EDMP-PDU and the unique token to an XML format;

a host dispatcher coupled to the host command builder creates an Email which includes the EDMP-PDU along with the unique token in the XML format, and wherein the PDU includes the agent'"'"'s e-mail ID, device ID, command, and device specific parameter and its associated values; and

a host Email service module that is coupled to the host dispatcher that dispatches the Email across the firewall using the SMTP transport mechanism.

22. The architecture of claim 21, wherein the agent that receives the Email and parses the Email comprises:

an agent Email service module to receive the Email including the EDMP-PDU along with the unique token from the host Email service module via the firewall; and

an agent command parser receives the Email from the agent Email service module and parses the received Email, wherein the command parser reads the parsed Email including the EDMP-PDU along the unique token, and wherein the command parser to initiate an action by creating an SNMP command to be performed on the one of the one or more LAN enabled devices as a function of the parsed EDMP-PDU.

23. The architecture of claim 22, further comprising:

an agent translate module that is coupled to the agent command parser extracts the desired command upon parsing the Email including the EDMP-PDU and translates the parsed EDMP-PDU to the SNMP command and wherein the agent Email service module sends the translated SNMP command to one of the one or more LAN enabled devices as a function of the parsed EDMP-PDU.

24. The architecture of claim 23, wherein the agent further comprises:

an agent command builder that receives a result upon completion of the action associated with the SNMP command sent by the agent Email service module and forms a SNMP response; and

an agent dispatcher coupled to the agent command builder receives the SNMP response and sends it to the agent Email service module, and wherein the agent Email service module receives the SNMP response from the agent dispatcher and forms a return EDMP-PDU and sends it to the remote host via the firewall.

25. The architecture of claim 24, wherein the one of the one or more LAN enabled devices extracts the SNMP command information and create any associated alert SNMP traps upon registering the SNMP command received from the agent, wherein the agent command builder receives the associated alert SNMP traps from the one of the one or more LAN enabled devices and forms the SNMP response and passes it to the agent dispatcher, wherein the agent dispatcher to send the SNMP response including the alert SNMP traps to the agent Email service module, and wherein the agent Email service module forms the return EDMP-PDU and sends it to the remote host via the firewall.

26. A computer system comprising:

a network interface;

an input module coupled to the network interface that receives the input data via the network interface;

a processing unit; and

a memory coupled to the processor, the memory having stored therein code which when decoded by the processor, the code causes the processor to perform a method comprising;

managing one or more devices via an agent within a firewall and a LAN by a remote host located outside the firewall comprising transmitting an Email from the remote host, wherein the Email includes an EDMP that uses a SMTP, a POP3, or an IMAP as a transport mechanism, to the one or more devices via the agent.

27. The system of claim 26, further comprising:

receiving the Email from the remote host by the agent;

parsing the received Email by the agent;

reading the parsed Email by the agent; and

initiating an action by creating an SNMP command to be performed on one of the one or more devices by the agent as a function of the parsed Email.

28. The system of claim 27, wherein transmitting the Email from the remote host comprises:

generating a unique token by the remote host upon a user performing a management operation;

forming the Email including the Email command, the payload, and the unique token by the remote host;

encrypting the Email by the remote host; and

transmitting the encrypted Email by the remote host.

29. The system of claim 28, further comprising:

creating a SNMP command by the agent as a function of the parsed Email received from the remote host; and

sending the SNMP command to an associated one of the one or more devices coupled to the agent within the LAN.

30. The system of claim 29, further comprising:

creating a SNMP response by the associated one of the one or more devices upon receiving the SNMP command sent by the agent and completion of the action associated with the SNMP command; and

sending the SNMP response to the agent.

31. The system of claim 30, further comprising:

receiving the SNMP response from the device by the agent;

creating an Email including a return EDMP-PDU, wherein the return EDMP-PDU to include information associated with the received SNMP response; and

sending the Email including the return EDMP-PDU to the remote host.

32. The system of claim 31, further comprising:

generating an alert SNMP trap by the one of the one or more devices and sending the alert SNMP trap to the agent;

receiving the sent alert SNMP trap from the one of the one or more devices by the agent;

creating an alert EDMP-PDU as a function of the received alert SNMP trap by the agent; and

sending the Email including the alert EDMP-PDU to the remote host by the agent.