SYSTEM AND METHOD FOR CONTROLLING AN UN-ADDRESSABLE NETWORK APPLIANCE

• US 20120131169A1
• Filed: 11/23/2011
• Published: 05/24/2012
• Est. Priority Date: 11/24/2010
• Status: Abandoned Application

• Current Assignee: Timofei Adamovich Mouraveiko
• Original Assignee: Timofei Adamovich Mouraveiko
• Inventors: Mouraveiko, Timofei Adamovich
• Application Number:
  US13/304,213
• Publication Number:
  US 20120131169A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088

Abstract

A network appliance is provided. The network appliance includes an un-addressable communication sub-system positioned in a communication path electronically connecting a control computing device to a target computing device that are both addressable via one or more standard networking protocols that can employed to achieve addressed communications in a structured communications network, the un-addressable communication sub-system being configured to access a data stream traveling through the communication path. The network appliance further includes memory comprising code executable by a processor to determine that a control command is present in the data stream, and permit the control command to control the network appliance only in response to an affirmative determination that the control computing device and the network appliance possess mating key portions, the mating key portions being constructed from a master key.

Claims

1. A network appliance comprising:

an un-addressable communication sub-system positioned in a communication path electronically connecting a control computing device to a target computing device that are both addressable via one or more standard networking protocols that can employed to achieve addressed communications in a structured communications network, the un-addressable communication sub-system being configured to access a data stream traveling through the communication path; and

memory comprising code executable by a processor to;

determine that a control command is present in the data stream; and

permit the control command to control the network appliance only in response to an affirmative determination that the control computing device and the network appliance possess mating key portions, the mating key portions being constructed from a master key.

2. The network appliance of claim 1, where the master key has a format that does not conform to pre-defined network standards.

3. The network appliance of claim 2, where the pre-defined network standards include a length of the key, a key sequence, and a type of key encryption.

4. The network appliance of claim 1, where the control command is embedded in a communication packet.

5. The network appliance of claim 4, where the communication packet is one of a malformed packet and an Internet protocol (IP) packet.

6. The network appliance of claim 1, where an affirmative determination that the control computing device and the network appliance possess mating key portions includes decrypting the control command using a first key portion stored in the memory.

7. The network appliance of claim 1, where controlling the network appliance includes controlling an operation associated with a computer-activity-recording capability of the network appliance.

8. The network appliance of claim 1, where controlling the network appliance includes managing data on the structured communications network, managing including deleting, modifying, copying, overwriting, and moving data.

9. The network appliance of claim 1, where controlling the network appliance includes controlling one or more devices that are external to the network appliance.

10. The network appliance of claim 9, where the one or more devices that are external to the network appliance include at least one device that controls or manages physical security of a structure.

11. The network appliance of claim 9, where the one or more devices that are external to the network appliance is a printer.

12. The network appliance of claim 1, where the control computing device is a server and the target computing device is a client computing device.

13. The network appliance of claim 12, wherein controlling the network appliance includes initiating two-way communication between the client computing device and the network appliance.

14. A computing system for securely controlling a network appliance, comprising:

a target computing device positioned in a structured communications network and addressable via one or more standard networking protocols that can be employed to achieve addressed communications in the structured communications network;

a control computing device addressable via one or more standard networking protocols that can employed to achieve addressed communications in the structured communications network and positioned in the structured communications network comprising;

a first key portion stored in memory executable by a processor and constructed from a master key, the master key being in a format that does not conform to pre-defined network standards; and

the memory comprising code executable by the processor to send a control command to the target computing device via a communication path electronically connecting the control computing device to the target computing device; and

the network appliance comprising;

an un-addressable communication sub-system positioned in the communication path, the un-addressable communication sub-system being configured to access a data stream traveling through the communication path;

a second key portion stored in memory, constructed from the master key, and mated with the first key portion; and

the memory comprising code executable by a processor to;

determine that the control command is present in the data stream; and

permit the control command to control the network appliance only in response to an affirmative determination that the control computing device and the network appliance possess mating key portions.

15. The computing system of claim 14, where the control command is embedded in a communication packet, the communication packet is one of an Internet protocol (IP) packet and a malformed packet.

16. The computing system of claim 14, where the control computing device further includes memory comprising code executable by the processor to encrypt the control command using the first key portion.

17. The computing device of claim 16, where an affirmative determination that the control computing device and the network appliance possess mating key portions includes decrypting the encrypted control command using the first key portion.

18. The computing system of claim 17, wherein an encryption algorithm implemented via the first key portion and a decryption algorithm implemented via the second key portion are altered at predefined time intervals.

19. A method for securely controlling a network appliance comprising:

at a network appliance un-addressable in a structured communications network and positioned in a communication path electronically connecting a control computing device to a target computing device that are both addressable via one or more standard networking protocols that can employed to achieve addressed communications in the structured communications network, determining that a control command is present in a data stream sent through a communication path; and

permitting the control command to control the network appliance only in response to an affirmative determination that the control computing device and the network appliance possess mating key portions, the mating key portions being constructed from a master key.

20. The method of claim 19, further comprising at the control computing device, prior to the step of determining that the control command is present in the data stream, transmitting the control command through the communication path.

21. The method of claim 20, further comprising prior transmitting the control command through the communication path, deploying the network appliance so that is communication sub-system is positioned in the communication path.

22. The method of claim 19, further comprising, prior to transmitting the control command, generating the master key, configuring the network appliance so that it cannot be addressed using network communication protocols, receiving a first key portion at the network appliance, and receiving a second key portion mated with the first key portion at the control computing device.

23. The method of claim 22, where the master key is generated with any of a variety of formats, including formats that do not conform to pre-defined networking standards.

24. The method of claim 19, wherein the control command is embedded in at least one of an Internet protocol (IP) packet and malformed packet.