Mechanism for embedding network based control systems in a local network interface device

• US 5,935,249 A
• Filed: 02/26/1997
• Issued: 08/10/1999
• Est. Priority Date: 02/26/1997
• Status: Expired due to Term

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Stern, Hal L., Papadopoulos, Gregory M.
• Primary Examiner(s): Myers, Paul R.
• Application Number:
  US08/806,327
• Time in Patent Office: 895 Days
• Field of Search: 395/186, 395/187.01, 395/188.01, 395/200.8, 713/200, 713/201, 713/202, 709/250
• US Class Current: 726/21
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2207/7219 Countermeasures against side channel or fault attacks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A secure, trusted network management function embedded within a network interface device is provided. The network interface device connects a host computer to a network and contains a host bus interface, a network interface, and control logic. The network interface device incorporates a secure language processor, non-volatile memory, and a carrier sense circuit. The secure language processor executes a secure language program, and the non-volatile memory stores identification keys for remote devices and objects of value for network applications. If an application program is to be executed or accessed by the host computer, the secure language processor verifies that the object of value allows such execution or access. If a remote network device attempts to control the functionality of the network interface device, the secure language processor verifies that the remote network device has the authority to issue such a command.

Claims

1. A network interface device providing a secure representation of network services between a network and a host computer said network interface device comprising:

a host bus interface circuit coupled to said host computer;

a control logic circuit coupled to said host bus interface;

a network interface circuit coupled to said network; and

a secure interpreter coupled to said network interface circuit and said control logic, said secure interpreter allowing state information from said network to be stored in said secured interpreter, said secure interpreter denying access to said state information by said host computer.

2. The network interface device according to claim 1, wherein said secure interpreter comprises:

a processor unit executing instructions defined by a secure programming language;

a memory coupled to said processor; and

a carrier sense circuit coupled to said network interface circuit, said carrier sense circuit detecting the status of transmission signals on said network.

3. The network interface device according to claim 2, wherein said memory is a non-volatile memory device.

4. The network interface device according to claim 3 wherein said secure interpreter provides a secure network management function that includes implementation by said network interface device of control commands sent to said network interface device from one or more remote devices on said network;

and

said non-volatile memory device contains a data string representing a message source verification mechanism.

5. The network interface device according to claim 3 wherein said secure interpreter provides a secure network management function that includes a proxying of network services available to said host computer from one or more remote devices on said network, said network services comprising access to one or more fee based application programs executable by said host computer;

and

said non-volatile memory device contains a data string representing an object of value utilized by said application program to verify authorization to use said one or more application programs.

6. The network interface device of claim 2 wherein said secure programming language is the Java programming language, and said secure interpreter is implemented within a Java Virtual Machine.

7. The network interface device according to claim 1 wherein said secure interpreter providing said secure network management services even when said network is disconnected from said host computer.

8. An apparatus providing a proxy for network services to a first station connected to a network from a second station connected to a network, said apparatus comprising:

a bus interface circuit coupled between said first station and said network;

a security circuit coupled to said bus interface circuit, said security circuit including a processor, said processor executing instructions defined by a secure programming language;

a memory coupled to said processor, said memory containing parameter information utilized by said network services;

said security circuit allowing said parameter information from said network to be stored in said memory, said security circuit denying access to said parameter information by said first station; and

a carrier sense circuit coupled to said bus interface circuit detecting a disconnection of said first station from said network.

9. The apparatus of claim 8 wherein:

said network service comprises a verification routine executable by said processor; and

said security circuit transmits a first set of commands to said first station if said verification routine returns a first value when executed by said processor, said first set of commands enabling said first station to execute an application program executable by said first station, said verification routine utilizing said parameter information contained in said memory.

10. The apparatus of claim 9 wherein said parameter information includes a counter for storing a counter value and said verification routine comprises an authentication routine for verifying the identity of a user of said first station, said verification routine further comprising a decrement routine for decrementing the value of said counter value.

11. The apparatus of claim 10 wherein said authentication routine further includes a plurality of identification parameters, each of said identification parameters verifying the identity of one of a plurality of users of said first station.

12. The apparatus of claim 9 wherein said security circuit transmits said first set of commands to said first station from said second station if said verification routine returns said first value, and said security circuit transmits a second set of commands to said first station from said second station if said verification routine returns a second value.

13. The apparatus of claim 9 wherein said security circuit transmits said first set of commands to said first station if said verification routine returns said first value and said first station is disconnected from said network.

14. The apparatus of claim 10 wherein said programming language is the Java Programming Language and said verification routine is a Java applet.

15. An apparatus providing remote network access to network interface functions of a first station connected to a network from a second station connected to said network, said apparatus comprising:

a bus interface circuit coupled between said first station and said network;

a processor coupled to said first station, said processor executing instructions defined by a secure programming language; and

a memory coupled to said processor, said memory containing parameter information utilized by said network interface functions said processor allowing said parameter information from said network to be stored in said memory, said processor denying access to said parameter information by said first station.

16. The apparatus of claim 15 further comprising a verification circuit coupled to said processor, said verification circuit verifying access privileges of said second station by comparing a station identification data string contained within an access request message sent by said second station with said parameter information contained in said memory.

17. The apparatus of claim 15 wherein said network interface functions include network bandwidth utilization.

18. The apparatus of claim 17 wherein said apparatus is a Java Virtual Machine and said programming language is the Java Programming Language.

19. A method of providing secure network management functions within a network interface device, said network interface comprising a memory, a processor, and a bus interface circuit, said bus interface circuit coupling said first network station to a network, said network coupled to a second network station, said method comprising the steps of:

storing a first parameter in said memory;

storing a security routine in said memory, said security routine comprising instructions and one or more data objects defined by a secure programming language, said security routine containing a second parameter;

causing said processor to execute said security routine;

transmitting a first set of commands to said first network station if said security routine returns a first value; and

transmitting a second set of commands to said first network station if said security routine returns a second value said processor allowing said data objects from said network to be stored in said memory, said processor denying access to said data objects by said first network station.

20. The method of claim 19 wherein:

said first parameter comprises a data string corresponding to the identity of a user of said first network station, and

one of said one or more data objects comprises a counter;

wherein the step of causing said processor to execute said security routine further comprises the steps of;

verifying the identity of said user by comparing a character string input by said user to said first parameter,

checking a value associated with said counter,

decrementing said counter if said value exceeds a threshold value, and

issuing an authorization command allowing the transmission of said first set of commands if said counter exceeds said threshold value and said character string matches said first parameter.

21. The method of claim 20 wherein said first set of commands causes said first network station to execute an application program executable by said first network station.

22. The method of claim 21 wherein said secure programming language is the Java programming language and said security routine is a Java applet.

23. The method of claim 19 wherein said first parameter comprises a data string corresponding to the address of an authorized network station, and wherein the step of causing said processor to execute said security routine further comprises the steps of:

verifying the authority of a network station requesting access by comparing said first parameter with a character string transmitted by said network station requesting access; and

issuing an authorization command allowing the transmission of said first set of commands if said character string matches said first parameter.

24. The method of claim 20 wherein said first set of commands causes said network interface device to modify usage of said network.

25. The method of claim 24 wherein said secure programming language is the Java programming language and said security routine is a Java applet.