EXTERNAL DESKTOP AGENT FOR SECURE NETWORKS

• US 20130024584A1
• Filed: 07/18/2011
• Published: 01/24/2013
• Est. Priority Date: 07/18/2011
• Status: Active Grant

• Current Assignee: RGB Spectrum, Inc.
• Original Assignee: RGB Spectrum, Inc.
• Inventors: Marcus, Robert
• Granted Patent: US 9,026,700 B2
• Time in Patent Office: Days
• US Class Current: 710/63
• CPC Class Codes: G06F 13/14 Handling requests for interconnection or transfer
• CPC Class Codes: G06F 13/385 for adaptation of a particular data processing system to different peripheral devices
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion

Abstract

Methods and apparatus are provided for externally managing control target devices such as computer systems, cameras, recorders, etc., in an effective and secure manner. In particular examples, an external desktop agent is connected to a computer system. Remote desktop agent software need not be installed on the computer system. The external desktop agent receives commands such as keyboard and mouse commands from a control computer over a mechanism such as a bi-directional network. To provide security, the external desktop agent does not directly connect to the computer system over an interface such as universal serial bus (USB) but instead provides a PS/2 interface that connects to the computer system through a standard PS/2 to USB adapter. PS/2 does not allow bi-directional command signaling and does not provide file level access to potentially sensitive computer system data.

Claims

1. A system, comprising:

a control computer;

a plurality of external desktop agents connected to the control computer through a first network, each external desktop agent including a network interface, a signal mapping mechanism, PS/2 signal generator, and a PS/2 interface;

a plurality of PS/2 to universal serial bus (USB) adapters connected to the plurality of external desktop agents;

a plurality of control target devices including a plurality of computer systems connected to the PS/2 to USB adapters, wherein the control computer is operable to manage the plurality of control target devices through the plurality of external desktop agents connected to the plurality of PS/2 USB adapters without bi-directional file access to the plurality of computer systems.

2. The system of claim 1, wherein the signal mapping mechanism takes commands and signals received over the Ethernet interface and converts them into PS/2 commands.

3. The system of claim 1, wherein the plurality of control target devices further comprises a plurality of cameras and recorders.

4. The system of claim 1, wherein the plurality of external desktop agents operate as uni-directional valves allowing only uni-directional signaling.

5. The system of claim 1, wherein the plurality of control target devices are connected to a video output target.

6. The system of claim 1, wherein the plurality of control target devices are connected to a video processor associated with a video wall.

7. The system of claim 1, wherein the plurality of control target devices are connected to a second secure network separate from the first network.

8. The system of claim 1, wherein the control computer is operable to manage the plurality of computer systems without the installation of remote desktop agent software on the plurality of computer systems.

9. The system of claim 1, wherein the plurality of control target devices are connected to a video output target through a video interface.

10. The system of claim 9, wherein the video interface is a Digital Video Interface (DVI).

11. A device, comprising:

a network interface operable to connected to a control computer over a network;

a signal mapping mechanism operable to take commands and signals received over the network interface and convert them into PS/2 commands;

a PS/2 signal generator operable to generate PS/2 signals corresponding to the PS/2 commands; and

a PS/2 interface operable to uni-directionally send signals to a PS/2 to USB adapter connect to a control target device to prevent bi-directional file access to the control target device.

12. The device of claim 11, wherein the control target device is a camera or recorder.

13. The device of claim 11, wherein the control target device is a computer system.

14. The device of claim 11, wherein the control target device is connected to a video output target.

15. The device of claim 11, wherein the control target device is connected to a video processor associated with a video wall.

16. The device of claim 11, wherein the control target device is connected to a second secure network separate from the first network.

17. The device of claim 11, wherein the control computer is operable to manage the control target device without the installation of remote desktop agent software on the control target device.

18. A method, comprising:

receiving commands from a control computer over a control network, the commands received at a network interface;

converting commands into PS/2 commands;

generating PS/2 signals corresponding to the PS/2 commands;

transmitting the PS/2 signals unidirectional to a PS/2 to USB adapter connected to a control target device to prevent bi-directional file access to the control target device.

19. The method of claim 18, wherein the control target device is a camera or recorder.

20. The device of claim 18, wherein the control target device is a computer system.