Password protection for high reliability computer systems

• US 6,918,044 B1
• Filed: 10/15/1999
• Issued: 07/12/2005
• Est. Priority Date: 10/15/1999
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Robins, Kristen Marie, Kon, Ronnie B.
• Primary Examiner(s): Barrón, Gilberto
• Assistant Examiner(s): NOBAHAR, ABDULHAKIM
• Application Number:
  US09/419,350
• Time in Patent Office: 2,097 Days
• Field of Search: 713/155, 713/166, 713/183, 713200-202, 713/324, 713/151, 713/169, 714/2, 714/10, 714/11, 714/31, 714/48, 709/208, 709/226
• US Class Current: 726/5
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A high reliability computer system includes a first processing engine (PE), a first memory and a third memory both accessible by the first PE, a second PE, and a second memory and a fourth memory both accessible by the second PE. The first memory contains initialization information for the first PE. The third memory has a location for storing an enable password or a surrogate therefor for the first PE. The second memory contains initialization information for the second PE. The computer system also includes circuitry for switching control of the system from the first PE to the second PE upon detection of a failure of the first PE, and a password passer writing the enable password or a surrogate therefor of the first PE to the fourth memory. Alternatively, a network system includes an authentication, authorization and accounting (AAA) or any other password server having a database for maintaining an enable password for a high reliability computer system. The high reliability computer system includes an interface capable of communicating with the password server over an information bus. The interface obtains the enable password from the password server in response to a request from either one of the first and second PEs.

Claims

1. A high reliability computer system, said system comprising:

a first processing engine (PE);

a first memory accessible by said first PE, containing initialization information for said first PE;

a second PE;

a second memory accessible by said second PE, containing initialization information for said second PE;

a third memory accessible by said first PE, said third memory having a location for storing an enable password for said first PE, the enable password protecting access to a privileged mode and execution of privileged mode commands;

a fourth memory accessible by said second PE;

circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE; and

a password passer writing said enable password of said first PE to the fourth memory accessible by said second PE.

2. A high reliability computer system according to claim 1, wherein said password passer writes said enable password of said first PE to said fourth memory at the initialization of the system.

3. A high reliability computer system according to claim 1, wherein said password passer writes said enable password of said first PE to said fourth memory every time said enable password of said first PE is changed.

4. A high reliability computer system according to claim 1, wherein said password passer writes said enable password of said first PE to said fourth memory in response to a command from said second PE.

5. A high reliability computer system according to claim 1, wherein password passer reads said enable password of said first PE from said first memory and writes said enable password to said fourth memory.

6. A high reliability computer system according to claim 1, wherein said system is a network device.

7. A high reliability computer system according to claim 6, wherein said network device is a router.

8. A high reliability computer system, said system comprising:

a first PE;

a first memory accessible by said first PE, containing initialization information for said first PE;

a second PE;

a second memory accessible by said second PE, containing initialization information for said second PE;

circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE;

a password memory accessible by said first and second PEs, having a location for storing an enable password for the system, the enable password protecting access to a privileged mode and execution of privileged mode commands; and

a password keeper for maintaining said enable password in said password memory for said first and second PEs.

9. A high reliability computer system according to claim 8, wherein said password keeper reads said enable password from said first memory and writes said enable password to said password memory at the initialization of the system.

10. A high reliability computer system according to claim 8, wherein said initialization information for said first PE includes instructions for said password keeper to write said enable password to said password memory.

11. A high reliability computer system according to claim 8, wherein said initialization information for said second PE includes instructions for said password keeper to write said enable password to said password memory.

12. A high reliability computer system according to claim 8, wherein said password keeper writes said enable password to said password memory every time said enable password is changed.

13. A high reliability computer system according to claim 8, wherein said password keeper passes said enable password maintained in said password memory to either one of said first and second PEs in response to a request therefrom.

14. A high reliability computer system according to claim 8, wherein said system is a network device.

15. A high reliability computer system according to claim 14, wherein said network device is a router.

16. A network system for providing password protection for a high reliability computer system, on a data communications network including a password server having a database for maintaining an enable password for said high reliability computer system, said password server being coupled via an information bus to said high reliability computer system, said system comprising:

a first PE;

a first memory accessible by said first PE, containing initialization information for said first PE;

a second PE;

a second memory accessible by said second PE, containing initialization information for said second PE;

circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE; and

an interface capable of communicating with the password server over the information bus, said interface obtaining an enable password from the password server in response to a request from either one of said first and second PEs, the enable password protecting access to a privileged mode and execution of privileged mode commands.

17. A network system according to claim 16, wherein said second PE authenticates incoming users by requesting authentication from said password server.

18. A network system according to claim 16, wherein said first PE obtains said enable password from said password server via said interface at the initialization of the system.

19. A network system according to claim 16, wherein said initialization information for said first PE includes instructions to access and obtain said enable password from said password server.

20. A network system according to claim 16, wherein the high reliability computer system is a network device.

21. A network system according to claim 20, wherein said network device is a router.

28. A method according to claim 17, wherein said writing of said enable password of said first PE to said third memory is performed in response to a command from said second PE.

22. A system for providing password protection for a high reliability computer system on a data communications network including a password server having a database for maintaining an enable password for said high reliability computer system, said password server being coupled via an information bus to said high reliability computer system, said system comprising:

a first PE;

a first memory accessible by said first PE, containing initialization information for said first PE;

a first interface for said first PE, said first interface capable of communicating user authentication requests and responses with the password server over the information bus, said first interface obtaining an enable password from the password server in response to a request from said first PE, the enable password protecting access to a privileged mode and execution of privileged mode commands;

a second PE;

a second memory accessible by said second PE, containing initialization information for said second PE;

a second interface for said second PE, said second interface capable of communicating user authentication requests and responses with the password server over the information bus, said second interface obtaining said enable password from the password server in response to a request from said second PE; and

circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE.

23. A system according to claim 22, wherein the high reliability computer system is a network device.

24. A system according to claim 23, wherein said network device is a router.

25. A method for operating a high reliability computer system, said system including a first PE, a first memory accessible by said first PE, said first memory containing initialization information for said first PE and having a location for storing an enable password for said first PE, a second PE, and a second memory accessible by said second PE, said second memory containing initialization information for said second PE, said method comprising:

writing said enable password of said first PE to a third memory accessible by said second PE, said enable password protecting access to a privileged mode and execution of privileged mode commands; and

automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE.

26. A method according to claim 25, wherein said writing of said enable password of said first PE to said third memory is performed at the initialization of the system.

27. A method according to claim 25, wherein said writing of said enable password of said first PE to said third memory is performed every time said enable password of said first PE is changed.

29. A method according to claim 25, wherein the high reliability computer system is a network device.

30. A method according to claim 29, wherein said network device is a router.

31. A method for operating a high reliability computer system, said system including a first PE, a first memory accessible by said first PE, said first memory containing initialization information for said first PE, a second PE, and a second memory accessible by said second PE, said second memory containing initialization information for said second PE, said method comprising:

providing a password memory accessible by said first and second PEs, having a location for storing an enable password, said enable password protecting access to a privileged mode and execution of privileged mode commands;

maintaining said enable password for said first and second PEs in said password memory; and

automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE.

32. A method according to claim 31, wherein said maintaining includes:

reading said enable password from said first memory and writing said enable password to said password memory at the initialization of the system.

33. A method according to claim 31, wherein said maintaining includes:

writing said enable password to said password memory every time said enable password is changed.

34. A method according to claim 31, wherein said maintaining includes:

writing said enable password to said password memory in response to a command from said first PE.

35. A method according to claim 31, wherein said maintaining includes:

passing said enable password maintained in said password memory to either one of said first and second PEs in response to a request therefrom.

36. A method according to claim 31, wherein the high reliability computer system is a network device.

37. A method according to claim 36, wherein said network device is a router.

38. A method for providing password protection for a high reliability computer system, said system including a first PE, a first memory accessible by said first PE, said first memory containing initialization information for said first PE, a second PE, a second memory accessible by said second PE, said second memory containing initialization information for said second PE, and circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE, said method comprising:

sending an enable password for the high reliability computer system for storage in a database of a server coupled to the high reliability computer system via an information bus, the enable password protecting access to a privileged mode and execution of privileged mode commands;

providing an interface capable of communicating with the password server over the information bus; and

obtaining the enable password from the password server through the interface in response to a request from either one of the first and second PEs.

39. A method according to claim 38, wherein the high reliability computer system is a network device.

40. A method according to claim 39, wherein said network device is a router.

41. A method according to claim 38, further comprising authenticating incoming users by requesting authentication from the password server.

42. A method for providing password protection for a high reliability computer system, said system including a first PE, a first memory accessible by said first PE, said first memory containing initialization information for said first PE, a second PE, a second memory accessible by said second PE, said second memory containing initialization information for said second PE, and circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE, said method comprising:

sending an enable password for the high reliability computer system for storage in a database of a password server coupled to the high reliability computer system via an information bus, the enable password protecting access to a privileged mode and execution of privileged mode commands;

communicating user authentication requests and responses with the password server over the information bus via a first interface and obtaining the enable password from the password server for the first PE, the enable password protecting access to a privileged mode and execution of privileged mode commands; and

communicating user authentication requests and responses with the password server over the information bus via a second interface and obtaining the enable password from the password server for said second PE.

43. A method according to claim 42, wherein the high reliability computer system is a network device.

44. A method according to claim 43, wherein said network device is a router.

45. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform method steps for operating a high reliability computer system, said system including a first PE, a first memory accessible by said first PE, said first memory containing initialization information for said first PE and having a location for storing an enable password for said first PE, a second PE, and a second memory accessible by said second PE, said second memory containing initialization information for said second PE, said method steps comprising:

writing said enable password of said first PE to a third memory accessible by said second PE, said enable password protecting access to a privileged mode and execution of privileged mode commands; and

automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE.

46. A program storage device according to claim 45, wherein said method step of writing said enable password of said first PE to said third memory is performed at the initialization of the system.

47. A program storage device according to claim 45, wherein said method step of writing said enable password of said first PE to said third memory is performed every time said enable password of said first PE is changed.

48. A program storage device according to claim 45, wherein said method step of writing said enable password of said first PE to said third memory is performed in response to a command from said second PE.

49. A program storage device according to claim 45, wherein the high reliability computer system is a network device.

50. A program storage device according to claim 49, wherein said network device is a router.

51. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform method steps for operating a high reliability computer system, said system including a first PE, a first memory accessible by said first PE, said first memory containing initialization information for said first PE, a second PE, and a second memory accessible by said second PE, said second memory containing initialization information for said second PE, said method steps comprising:

providing a password memory accessible by said first and second PEs, having a location for storing an enable password, said enable password protecting access to a privileged mode and execution of privileged mode commands;

maintaining said enable password for said first and second PEs in said password memory; and

automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE.

52. A program storage device according to claims 51, wherein said method step of maintaining includes:

reading said enable password from said first memory and writing said enable password to said password memory at the initialization of the system.

53. A program storage device according to claim 51, wherein said method step of maintaining includes:

writing said enable password to said password memory every time said enable password is changed.

54. A program storage device according to claim 51, wherein said method step of maintaining includes:

writing said enable password to said password memory in response to a command from said first PE.

55. A program storage device according to claim 51, wherein said method step of maintaining includes:

passing said enable password maintained in said password memory to either one of said first and second PEs in response to a request therefrom.

56. A program storage device according to claim 51, wherein the high reliability computer system is a network device.

57. A program storage device according to claim 56, wherein said network device is a router.

58. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform method steps for providing password protection for a high reliability computer system, said system including a first PE, a first memory accessible by said first PE, said first memory containing initialization information for said first PE, a second PE, a second memory accessible by said second PE, said second memory containing initialization information for said second PE, and circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE, said method steps comprising:

sending an enable password for the high reliability computer system for storage in a database of a password server coupled to the high reliability computer system via an information bus, the enable password protecting access to a privileged mode and execution of privileged mode commands on the high reliability computer system;

providing an interface capable of communicating with the password server over the information bus; and

obtaining the enable password from the password server through the interface in response to a request from either one of the first and second PEs.

59. A program storage device according to claim 58, wherein said method steps further comprises authenticating incoming users by requesting authentication from the password server.

60. A program storage device according to claim 58, wherein the high reliability computer system is a network device.

61. A program storage device according to claim 60, wherein said network device is a router.

62. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform method steps for providing password protection for a high reliability computer system, said system including a first PE, a first memory accessible by said first PE, said first memory containing initialization information for said first PE, a second PE, a second memory accessible by said second PE, said second memory containing initialization information for said second PE, and circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE, said method steps comprising:

sending an enable password for the high reliability computer system for storage in a database of an authentication, authorization and accounting (AAA) server coupled to the high reliability computer system via an information bus, the enable password protecting access to a privileged mode and execution of privileged mode commands on the high reliability computer system;

communicating user authentication requests and responses with the AAA server over the information bus via a first interface and obtaining the enable password from the AAA server for the first PE; and

communicating user authentication requests and responses with the AAA server over the information bus via a second interface and obtaining the enable password from the AAA server for the second PE.

63. A program storage device according to claim 62, wherein the high reliability computer system is a network device.

64. A program storage device according to claim 63, wherein said network device is a router.

65. An apparatus for operating a high reliability computer system, said system including a first PE, a first memory accessible by said first PE, said first memory containing initialization information for said first PE and having a location for storing an enable password for said first PE, a second PE, and a second memory accessible by said second PE, said second memory containing initialization information for said second PE, said apparatus comprising:

means for writing said enable password of said first PE to a third memory accessible by said second PE, said enable password protecting access to a privileged mode and execution of privileged mode commands; and

means for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE.

66. An apparatus according to claim 65, wherein the high reliability computer system is a network device.

67. An apparatus according to claim 66, wherein said network device is a router.

68. An apparatus for operating a high reliability computer system, said system including a first PE, a first memory accessible by said first PE, said first memory containing initialization information for said first PE, a second PE, and a second memory accessible by said second PE, said second memory containing initialization information for said second PE, said apparatus comprising:

means for providing said first and second PEs with access to an enable password, the enable password protecting access to a privileged mode and execution of privileged mode commands;

means for maintaining said enable password for said first and second PEs; and

means for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE.

69. An apparatus according to claim 68, wherein the high reliability computer system is a network device.

70. An apparatus according to claim 69, wherein said network device is a router.

71. An apparatus for providing password protection for a high reliability computer system, said system including a first PE, a first memory accessible by said first PE, said first memory containing initialization information for said first PE, a second PE, a second memory accessible by said second PE, said second memory containing initialization information for said second PE, and circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE, said apparatus comprising:

means for sending an enable password for the high reliability computer system for storage in a database of a password server coupled to the high reliability computer system via an information bus, the enable password protecting access to a privileged mode and execution of privileged mode commands on the high reliability computer system; and

means for communicating with the password server over the information bus and obtaining the enable password from the password server in response to a request from either one of the first and second PEs.

72. An apparatus according to claim 71, wherein the high reliability computer system is a network device.

73. An apparatus according to claim 72, wherein said network device is a router.

74. An apparatus for providing password protection for a high reliability computer system, said system including a first PE, a first memory accessible by said first PE, said first memory containing initialization information for said first PE, a second PE, a second memory accessible by said second PE, said second memory containing initialization information for said second PE, and circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE, said apparatus comprising:

means for sending an enable password for the high reliability computer system for storage in a database of a password server coupled to the high reliability computer system via an information bus, the enable password protecting access to a privileged mode and execution of privileged mode commands;

means for communicating user authentication requests and responses with the password server over the information bus via a first interface and obtaining the enable password from the password server for the first PE; and

means for communicating user authentication requests and responses with the password server over the information bus via a second interface and obtaining the enable password from the password server for the second PE.

75. An apparatus according to claim 74, wherein the high reliability computer system is a network device.

76. An apparatus according to claim 75, wherein said network device is a router.

77. A security system for providing password protection for a high reliability network device on a data communications computer network, said security system comprising:

a password server having a database for maintaining an enable password for the high reliability network device, said password server being coupled via an information bus to the high reliability network device; and

the high reliability network device, including;

a first processing engine (PE);

a first memory accessible by said first PE, containing initialization information for said first PE;

a second PE;

a second memory accessible by said second PE, containing initialization information for said second PE;

circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE; and

an interface capable of communicating with said password server over the information bus, said interface obtaining an enable password from said password server in response to a request from either one of said first and second PEs, the enable password protecting access to a privileged mode and execution of privileged mode commands.

78. A security system according to claim 77, wherein said second PE authenticates incoming users by requesting authentication from said password server.

79. A security system according to claim 77, wherein said first PE obtains said enable password from said password server via said interface at the initialization of the system.

80. A security system according to claim 77, wherein said initialization information for said first PE includes instructions to access and obtain said enable password from said password server.

81. A security system for providing password protection for a high reliability network device on a data communications network, said security system comprising:

a password server having a database for maintaining an enable password for the high reliability network device, said password server being coupled via an information bus to said high reliability network device; and

the high reliability network device, including;

a first PE;

a first memory accessible by said first PE, containing initialization information for said first PE;

a first interface for said first PE, said first interface capable of communicating user authentication requests and responses with the password server over the information bus, said first interface obtaining an enable password from the password server in response to a request from said first PE, the enable password protecting access to a privileged mode and execution of privileged mode commands;

a second PE;

a second memory accessible by said second PE, containing initialization information for said second PE;

a second interface for said second PE, said second interface capable of communicating user authentication requests and responses with the password server over the information bus, said second interface obtaining said enable password from the password server in response to a request from said second PE; and

circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE.

82. A high reliability network device, comprising:

a first processing engine (PE);

a first memory accessible by said first PE, containing initialization information for said first PE;

a first consol port coupled to said first PE via a bus, adapted to receive commands from a first consol;

a second PE;

a second memory accessible by said second PE, containing initialization information for said second PE;

a second consol port coupled to said second PE via the bus, adapted to receive commands from a second consol;

a third memory accessible by said first PE, said third memory having a location for storing an enable password for said first PE, the enable password protecting access to a privileged mode and execution of privileged mode commands;

a fourth memory accessible by said second PE;

circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE; and

a password passer writing said enable password of said first PE to the fourth memory accessible by said second PE.

83. A high reliability network device, comprising:

a first PE;

a first memory accessible by said first PE, containing initialization information for said first PE;

a first consol port coupled to said first PE via a bus, adapted to receive commands from a first consol;

a second PE;

a second memory accessible by said second PE, containing initialization information for said second PE;

a second consol port coupled to said second PE via the bus, adapted to receive commands from a second consol;

circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE;

a password memory accessible by said first and second PEs, having a location for storing an enable password for the system, the enable password protecting access to a privileged mode and execution of privileged mode commands; and

a password keeper for maintaining said enable password in said password memory for said first and second PEs.

84. A high reliability network device, comprising:

a first processing engine (PE);

a first memory accessible by said first PE, containing initialization information for said first PE; and

a first consol port coupled to said first PE via a bus, adapted to receive commands from a first consol;

a second PE;

a second memory accessible by said second PE, containing initialization information for said second PE; and

a second consol port coupled to said second PE via the bus, adapted to receive commands from a second consol;

circuitry for automatically switching control of said system from said first PE to said second PE upon detection of a failure of said first PE; and

an interface coupled to said first and second PEs via the bus, said interface being capable of communicating with a password server over an information bus, said interface obtaining an enable password from the password server in response to a request from either one of said first and second PEs, the enable password protecting access to a privileged mode and execution of privileged mode commands.

85. A high reliability network device according to claim 84, wherein said interface comprises:

a first interface dedicated to said first PE; and

a second interface dedicated to said second PE.