SERIAL PORT FORWARDING OVER SECURE SHELL FOR SECURE REMOTE MANAGEMENT OF NETWORKED DEVICES

• US 20110055367A1
• Filed: 08/26/2010
• Published: 03/03/2011
• Est. Priority Date: 08/28/2009
• Status: Abandoned Application

• Current Assignee: Uplogix, Inc. (Lantronix Incorporated)
• Original Assignee: Uplogix, Inc. (Lantronix Incorporated)
• Inventors: Dollar, James E.
• Application Number:
  US12/869,508
• Publication Number:
  US 20110055367A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 41/042 comprising distributed management centres cooperatively managing the network
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network

Abstract

A system and method for the management of one or more wide area or local area network connected devices by a collocated managing device. The managing device uses serial port forwarding over a secure connection, such as a secure shell connection, to allow a centrally located administrative user to control the managed device.

Claims

1. An apparatus for autonomously managing one or more collocated managed devices, comprising:

a secure remote manager (SRM) device, connected to at least one of said one or more managed devices, the SRM device located in the same network locale as the managed devices;

said SRM device further comprising;

a serial port communication connection to at least one of the managed devices;

a controller embedded in the SRM device; and

wherein said controller uses serial port forwarding over a secure connection to provide connectivity between the managed devices and an administrative user workstation.

2. The apparatus of claim 1 wherein the secure connection is provided using Secure Shell (SSH).

3. The apparatus of claim 1 wherein a virtual serial port is used to connect the administrative workstation to the managed device through the secure remote manager.

4. The apparatus of claim 1 wherein element manager processing executes in the central administrative workstation.

5. The apparatus of claim 1 wherein database data concerning end user information is not accessible at the administrative workstations.

6. The apparatus of claim 1 wherein the SRM device further manages administrative user authentication and login.

7. The apparatus of claim 1 wherein the connection from the SRM device to the administrative workstation is not shared.

8. A method for managing one or more collocated managed devices, the method comprising:

establishing a console communication connection to at least one managed device to be managed, the console communication connection respective to each of the managed devices and independent of all other connections to managed devices; and

forwarding the console communication connection to a centrally located administrative workstation over a secure wide area network connection, the wide area network connection established using serial port forwarding over a secure shell networking protocol.

9. The method according to claim 8 additionally comprising:

forwarding one or more operations to one or more of the managed devices, as received from the administrative workstation, to manage the one or more collocated managed devices.

10. The method according to claim 8 further comprising

storing information regarding a managing device or the managed devices, the information not accessible to the managed devices or the administrative workstation.

11. The method according to claim 8 further comprising:

communicating with the managed device via a command line interpreter over the forwarded serial connection.

12. The method according to claim 8 further comprising:

obtaining an operation to be processed for one of the managed devices;

authorizing the operation;

connecting to the managed device via the console communication connection forwarded via serial port forwarding over a secure shell connection, to provide a forwarded console communication connection;

detecting a state of the managed device via the forwarded console communication connection;

transmitting the operation to the managed device via the forwarded console communication connection; and

receiving data indicative of execution of the operation from the managed device via the forwarded console communication connection.

13. The method according to claim 12 and further comprising:

parsing the operation'"'"'s results; and

storing the operation'"'"'s results.

14. The method according to claim 8 and further wherein the forwarded console connection is provided to an element manager executing on an administrative workstation.

15. The method according to claim 14 wherein the administrative workstation is located at a central enterprise location, and the managing device and managed devices are located at a remote location.