Combined remote access and security system

• US 5,970,149 A
• Filed: 07/15/1997
• Issued: 10/19/1999
• Est. Priority Date: 11/19/1996
• Status: Expired due to Term

• Current Assignee: Johnson R. Brent
• Original Assignee: Johnson R. Brent
• Inventors: Johnson, R. Brent
• Primary Examiner(s): Laufer, Pinchus M.
• Application Number:
  US08/892,982
• Time in Patent Office: 826 Days
• Field of Search: 380/2, 380/21, 380/49, 395/183.22, 395/184.01, 395/185.1, 395/200.54, 395/186, 395/187.01, 395/188.01
• US Class Current: 714/46
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0748 in a remote unit communicating with a single-box computer node experiencing an error/fault remote testing G06F11/2294
• CPC Class Codes: G06F 11/2294 by remote test
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A combined remote access and security system for servicing a secure mainframe central processing unit having a console monitor. A secure dispatch central processing unit for receiving problem reports concerning the mainframe central processing unit is in communication with the console monitor. A field engineer'"'"'s central processing unit is in communication with the dispatch central processing unit. A data encryption key is randomly generated and transmitted from the dispatch central processing unit to both the field engineer'"'"'s central processing unit and the console monitor. The field engineer central processing unit is in communication with the mainframe central processing unit wherein data transmitted from the field engineer'"'"'s central processing unit is encrypted and wherein the encrypted data is decrypted at the mainframe console monitor.

Claims

1. A combined remote access and security system for servicing a secure mainframe central processing unit having a console monitor, which system comprises:

a secure dispatch control central processing unit for receiving problem reports concerning said mainframe central processing unit;

communications means for communicating between said mainframe from said console monitor and said dispatch control central processing unit;

a field engineer central processing unit independent from said secure mainframe central processing unit and said secure dispatch control central processing unit, wherein said secure dispatch control central processing unit is remote from said mainframe central processing unit and wherein said field engineer central processing unit is remote from both said mainframe central processing unit and said dispatch control central processing unit;

communication means for communicating between said field engineer central processing unit and said dispatch control central processing unit;

a data encryption key randomly generated and transmitted from said dispatch control central processing unit on separate paths and in separate transmissions to both said field engineer central processing unit and said mainframe central processing unit; and

communication means between said field engineer central processing unit and said mainframe central processing unit wherein all data transmitted from said field engineer central processing unit is encrypted and wherein said encrypted data received is decrypted at said mainframe central processing unit.

2. A combined remote access and security system as set forth in claim 1 wherein said data encryption key is time limited to expire after a set time period.

3. A combined remote access and security system as set forth in claim 1 wherein said communications means between said mainframe central processing unit and said dispatch central processing unit, between said field engineer central processing unit and said dispatch central processing unit and between said field engineer central processing unit and said mainframe central processing unit is via the Internet network.

4. A combined remote access and security system as set forth in claim 1 wherein said console monitor includes a central processing unit having monitoring and automation capabilities.

5. A combined remote access and security system as set forth in claim 4 including a plurality of mainframe central processing units connected to said console.

6. A combined remote access and security system as set forth in claim 1 wherein said communications means for communicating between said mainframe and said dispatch control central processing unit and said communications means between said field engineer central processing unit and said dispatch control central processing unit are through a communications path with each said central processing unit has a distinct Internet protocol address.

7. A combined remote access and security system as set forth in claim 6 wherein said Internet protocol addresses are stored in a secure name server.

8. A process to remotely access and service a secure mainframe central processing unit having a console monitor, which process comprises:

communicating a problem with said mainframe central processing unit from said console monitor to a remote dispatch control center central processing unit;

randomly generating a data encryption key at said remote dispatch control center processing unit;

transmitting said data encryption key from said remote dispatch control center on separate paths in separate transmission to both said mainframe central processing unit and to a field engineer central processing unit, wherein said field engineer central processing unit is independent and remote from both said mainframe central processing unit and said dispatch control central processing unit; and

communicating between said field engineer central processing unit and said mainframe wherein all data transmitted from said field engineer central processing unit is encrypted and then decrypted at said mainframe central processing unit.

9. A process to remotely access and service a secure mainframe central processing unit as set forth in claim 8 including the additional step of time limiting the data encryption key to expire after a set period of time.

10. A process to remotely access and service a secure mainframe central processing unit as set forth in claim 8 including the additional, initial step of monitoring said console monitor for certain conditions which are identified as problems.

11. A process to remotely access and service a secure mainframe central processing unit as set forth in claim 8 wherein the steps of communicating said problem, transmitting said data encryption key, and communicating between said field engineer central processing unit and said mainframe are done over the Internet network.

12. A process to remotely access and service a mainframe central processing unit as set forth in claim 8 including the additional step of the dispatch control center contacting said field engineer after communicating said problem to said dispatch control center.