Method and apparatus for secure remote wake-up of a computer over a network

• US 6,101,608 A
• Filed: 02/20/1997
• Issued: 08/08/2000
• Est. Priority Date: 02/20/1997
• Status: Expired due to Term

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Compaq Computer Corporation (HP Inc.)
• Inventors: Ben-Nun, Michael, Huppert, Larry, Schmidt, Thomas J., Ben-Michael, Simoni
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): Iqbal, Nadeem
• Application Number:
  US08/804,097
• Time in Patent Office: 1,265 Days
• Field of Search: 395/188.01, 395/182.11, 395/182.13, 395/182.16, 395/182.2, 395/182.21, 395/182.22, 395/182.03, 395/183.06, 395/183.08, 395/183.12 , 395/183.15, 395/183.19, 395/183.2, 395/185.01, 395/187.01, 395/200.11, 714/712, 714/713, 714/733, 714/749, 364/488, 364/489, 364/550, 370/241, 370/252, 370/401, 380/3, 380/4, 380/23, 380/25, 380/49, 713/200, 713/201, 713/202
• US Class Current: 726/2
• CPC Class Codes: H04L 12/12 Arrangements for remote connection or disconnection of substations or of equipment thereof
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: Y02D 30/50 in wire-line communication networks, e.g. low power modes or reduced link rate

Abstract

A method and related apparatus enables one station on a local area network (LAN) 24 to securely wake up another station on the LAN 24 although the stations may be physically remote from each other. A workstation 12, acting as a remote management console, generates a secure wake-up packet 42 intended for a desktop computer 14 on the LAN 24. The desktop computer 14 is operating in a sleep state. The data section of the secure wake-up packet has a particular sequence of data including a synchronization sequence 46, a MAC address sequence 48 and a password sequence 50. The desktop computer 14 has a network interface 64 for detecting and processing secure wake-up packets 70 when that network interface 64 is operating in a remote access control mode. The network interface 64 verifies that MAC address sequence 48 corresponds to the MAC address of the desktop computer 14 and that the password sequence 50 has a predetermined relationship with a password required to wake up the desktop computer 14. The network interface 64 issues a wake-up signal to wake up the desktop computer 14 when a valid secure wake-up packet is processed.

Claims

1. A method for remotely waking up a processor-based system over a network, comprising the steps of:

detecting a packet of data addressed to the system;

determining whether the packet of data has a particular data sequence including a password sequence having a predetermined relationship with a password required to wake up the system; and

providing electrical power to the system to wake up the system in response to determining that the packet of data has the particular data sequence.

2. The method according to claim 1 wherein the step of providing electrical power to the system to wake up the system enables communication between a station coupled to the network and operating system software of the system.

3. The method according to claim 1 wherein the processor-based system is a computer and further comprising the step of executing software to bootstrap the computer in response to providing electrical power to the computer.

4. The method according to claim 1, further comprising the steps of:

generating a new password for waking up the system;

transmitting the new password over the network; and

storing the new password in the system.

5. The method according to claim 4, further comprising the step of encrypting the new password before transmitting the new password.

6. The method according to claim 4, further comprising the step of receiving an acknowledgment from a second system receiving the new password;

and wherein the step of storing the new password operates in response to receiving the acknowledgment.

7. The method according to claim 4, wherein the system is a first system, the step of generating the new password is performed by the first system;

and

the step of transmitting the new password operates to transmit the new password from the first system to a second system coupled to the network.

8. The method according to claim 4, wherein the system is a first system, the step of generating the new password is performed by a second system coupled to the network;

and

the step of transmitting the new password operates to transmit the new password from the second system to the first system.

9. The method according to claim 4, wherein the steps of generating, transmitting and storing of a new password are repeated each time electrical power is supplied to the system to wake up the system.

10. The method according to claim 1, further comprising the steps of:

removing electrical power from all but a portion of the system;

detecting when electrical power is being removed from the all but the portion of the system; and

configuring the portion of the system to operate in a mode capable of detecting packets of data addressed to the system.

11. The method according to claim 1, further comprising the steps of:

maintaining a count of invalid attempts to wake up the system; and

incrementing the count if the packet of data does not include the password sequence having the predetermined relationship with the password required to wake up the system.

12. The method according to claim 11, further comprising the step of:

controlling a frequency rate of invalid attempts to wake up the system.

13. The method according to claim 12, further comprising the step of:

discarding for a period of time subsequent packets of data addressed to the system when the count of invalid attempts exceeds a predetermined limit.

14. A method for remotely waking up a computer over a network, comprising the steps of:

detecting a packet of data addressed to the computer, the computer operating in a sleep state wherein a first portion of the computer is supplied power so that the computer can detect the packet, the first portion of the computer including a device operating in a remote access control mode;

determining whether the packet of data is a wake-up packet having an address sequence corresponding to an address of the computer;

determining, in response to determining the packet of data is a wake-up packet, whether the wake-up packet includes a password sequence having a predetermined relationship with a password required to wake up the computer; and

providing electrical power to a second portion of the computer to wake up the computer if the wake-up packet is determined to have the password sequence.

15. A method for remotely waking up a computer over a network, comprising the steps of:

detecting a packet of data addressed to the computer, the computer operating in a sleep state wherein a first portion of the computer is supplied power so that the computer can detect the packet;

determining whether the packet of data has a particular data sequence including a password sequence having a predetermined relationship with a password required to wake up the computer;

providing electrical power to a second portion of the computer to wake up the computer in response to determining that the packet of data has the particular data sequence;

generating a new password in response to providing electrical power to the second portion of the computer;

transmitting the new password to a station coupled to the network capable of having transmitted the packet of data to the computer; and

storing the new password in the computer.

16. An apparatus for remotely waking up a processor-based system over a network, comprising:

a network interface coupled to the network for detecting a packet of data addressed to the system and determining whether the packet of data has a particular data sequence including a password sequence having a predetermined relationship with a password required to wake up the system; and

means coupled to the network interface for providing electrical power to the system to wake up the system in response to the network interface determining that the packet of data has the particular data sequence.

17. The apparatus according to claim 16 wherein the network interface is capable of selectively operating in a remote access control mode;

and wherein

the network interface detects the packet of data if the network interface is operating in the remote access control mode.

18. The apparatus according to claim 16, further comprising:

a memory coupled to the network interface, the memory storing data representing a security mode in which the network interface is to operate when the system is operating in a sleep state.

19. The apparatus according to claim 18, further comprising:

circuitry detecting when electrical power is being removed from the system; and

means for configuring the network interface according to the mode stored in the memory.

20. The apparatus according to claim 18, wherein the memory is a serial non-volatile memory (NVRAM), the network interface and the NVRAM being supplied electrical power when the system is operating in the sleep state.

21. A computer for connecting to a network, comprising:

a processor;

a disk drive coupled to the processor;

a network interface controller coupled to the processor and connectable to the network, the network interface controller operable to detect a packet of data addressed to the computer and determine whether the packet of data has a particular data sequence including a password sequence having a predetermined relationship with a password required to wake-up the computer; and

power-control circuitry operable to provide power to the computer, including the processor and the disk drive, in response to a signal from the network interface controller upon determination that the packet of data has the particular data sequence.

22. The computer of claim 22, wherein the network interface controller further includes:

a device for storing the password.

23. The computer of claim 22,

wherein the network interface controller is further operable to generate a new password, transmit the new password over the network to a second computer, and store the new password in the device.

24. The computer of claim 23,

wherein the network interface controller generates, transmits and stores the new password each time power is provided to the computer to wake-up the computer.

25. The computer of claim 23,

wherein the network interface controller is further operable to encrypt the new password before transmitting the new password.

26. The computer of claim 22,

wherein the network interface controller is further operable to receive a new password generated by a second computer on the network in response to the particular data sequence.

27. A method of waking up a remote computer attached to a network, comprising the steps of:

forming a packet of data addressed to the computer;

including in said packet a particular data sequence containing a password sequence having a predetermined relationship with a password used to wake-up the computer; and

providing said packet to the computer over the network.

28. The method of claim 27, further comprising the steps of:

generating a new password for waking up the computer;

transmitting the new password over the network; and

storing the new password.

29. The method of claim 28, further comprising the step of:

encrypting the new password before transmitting the new password.

30. The method of claim 28, wherein the step of generating the new password is performed by the computer, and the step of transmitting the new password operates to transmit the new password from the computer to a second computer.

31. The method of claim 28, further comprising the step of:

receiving an acknowledgement from the computer receiving the new password,

wherein the step of storing the new password operates in response to receiving the acknowledgement.