KEYSTROKE LOGGER FOR UNIX-BASED SYSTEMS

• US 20110047596A1
• Filed: 08/21/2009
• Published: 02/24/2011
• Est. Priority Date: 08/21/2009
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: MILLER, Andrew G.
• Granted Patent: US 8,418,227 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect

Abstract

A device receives, from an Internet program manager (IPM) server, an identification (ID) of a user associated with a user device and an Internet protocol (IP) address of the user device, and connects to the user device based on the user ID and the IP address of the user device. The device also receives, from the IPM server, a request to execute a logging application for the user device, and executes the logging application based on the request. The device further receives, via the logging application, one or more inputs or outputs associated with the user device, and records the one or more inputs or outputs associated with the user device.

Claims

1. A computing device-implemented method, comprising:

receiving, from an Internet program manager (IPM) server and by the computing device, an identification (ID) of a user associated with a user device and an Internet protocol (IP) address of the user device;

connecting the computing device to the user device based on the user ID and the IP address of the user device;

receiving, from the IPM server and by the computing device, a request to execute a logging application for the user device;

executing, by the computing device, the logging application based on the request;

receiving, by the computing device and via the logging application, one or more inputs or outputs associated with the user device; and

recording, by the computing device, the one or more inputs or outputs associated with the user device.

2. The computing device-implemented method of claim 1, further comprising:

receiving a request to connect the user device to a target device;

verifying the request to connect based on the user ID, the IP address of the user device, and information associated with the target device; and

connecting the user device to the target device when the request to connect is verified.

3. The computing device-implemented method of claim 2, further comprising:

providing, to the user device, a logging application window for the target device; and

receiving the one or more inputs or outputs associated with the user device via the logging application window.

4. The computing device-implemented method of claim 2, where verifying the request to connect comprises one or more of:

verifying that the user ID is valid;

verifying that an IP address of the target device is valid;

verifying that the IP address of the user device is valid;

or

verifying that the user device is permitted to connect to the target device.

5. The computing device-implemented method of claim 2, where the target device comprises a Unix-based device.

6. The computing device-implemented method of claim 1, further comprising:

storing the one or more inputs or outputs associated with the user device.

7. The computing device-implemented method of claim 1, where the computing device comprises a demilitarized (DMZ) log server.

8. The computing device-implemented method of claim 1, where the one or more inputs or outputs associated with the user device comprises at least one of:

text input by the user via the user device,

text the user cuts, or copies, and pastes via the user device,

configuration file changes made via the user device,

database changes made via the user device, or

passwords used by the user device.

9. A computing device-implemented method, comprising:

receiving, by the computing device, login information from a user device associated with a user;

determining, by the computing device, a user identification (ID) and an Internet protocol (IP) address of the user device based on the login information;

receiving, by the computing device and from the user device, a name and IP address of a target device to be connected to the user device;

requesting, by the computing device, connection of the user device to the target device via a demilitarized (DMZ) log server and based on the name and IP address of the target device, the user ID, and the IP address of the user device; and

causing, by the computing device, execution of a logging application within the DMZ log server, where the logging application records one or more inputs or outputs associated with the user device.

10. The computing device-implemented method of claim 9, where the computing device comprises an Internet program manager (IPM) server.

11. The computing device-implemented method of claim 9, where the target device comprises a Unix-based device.

12. The computing device-implemented method of claim 9, where the one or more inputs or outputs associated with the user device comprises at least one of:

text input by the user via the user device,

text the user cuts, or copies, and pastes via the user device,

configuration file changes made via the user device,

database changes made via the user device, or

passwords used by the user device.

13. A device, comprising:

a memory to store a plurality of instructions; and

a processor to execute instructions in the memory to;

receive, from an Internet program manager (IPM) server, an identification (ID) of a user associated with a user device and an Internet protocol (IP) address of the user device,

connect the device to the user device based on the user ID and the IP address of the user device,

receive, from the IPM server, a request to execute a logging application for the user device and to connect the user device to a target device,

connect the user device to the target device based on the request,

execute the logging application based on the request,

receive, via the logging application, one or more inputs or outputs associated with the user device, and

record the one or more inputs or outputs associated with the user device.

14. The device of claim 13, where the processor is further to execute instructions in the memory to:

verify the request based on the user ID, the IP address of the user device, and information associated with the target device, and

connect the user device to the target device when the request is verified.

15. The device of claim 14, where, when verifying the request, the processor is further to execute instructions in the memory to one or more of:

verify that the user ID is valid,

verify that an IP address of the target device is valid,

verify that the IP address of the user device is valid, or

verify that the user device is permitted to connect to the target device.

16. The device of claim 13, where the processor is further to execute instructions in the memory to:

provide, to the user device, a logging application window for the target device, and

receive the one or more inputs or outputs associated with the user device via the logging application window.

17. The device of claim 13, where the target device comprises a Unix-based device.

18. The device of claim 13, where the processor is further to execute instructions in the memory to:

store, in a database server, the one or more inputs or outputs associated with the user device.

19. The device of claim 13, where the device comprises a demilitarized (DMZ) log server.

20. The device of claim 13, where the one or more inputs or outputs associated with the user device comprises at least one of:

text input by the user via the user device,

text the user cuts, or copies, and pastes via the user device,

configuration file changes made via the user device,

database changes made via the user device, or

passwords used by the user device.

21. A system, comprising:

a user device associated with a user;

an Internet program manager (IPM) server to;

receive login information from the user device,

determine a user identification (ID) and an Internet protocol (IP) address of the user device based on the login information,

receive, from the user device, a name and IP address of a target device to be connected to the user device, and

provide, to a demilitarized (DMZ) log server and based on the name and IP address of the target device, the user ID, and the IP address of the user device, a request to execute a logging application for the user device and to connect the user device to the target device; and

the DMZ log server to;

receive, from the IPM server, the request to execute the logging application for the user device and to connect the user device to the target device,

connect the user device to the target device based on the request,

execute the logging application based on the request,

receive, via the logging application, one or more inputs or outputs associated with the user device, and

record the one or more inputs or outputs associated with the user device.

22. The system of claim 21, where the DMZ log server is further to:

verify the request based on the user ID, the IP address of the user device, and the name and IP address of the target device, and

connect the user device to the target device when the request is verified.

23. The system of claim 21, where the DMZ log server is further to:

provide, to the user device, a logging application window for the target device, and

receive the one or more inputs or outputs associated with the user device via the logging application window.

24. The system of claim 21, where the target device comprises a Unix-based device.

25. The system of claim 21, where the DMZ log server is further to:

store, in a database server, the one or more inputs or outputs associated with the user device.