Out-of-band remote management station

• US 7,171,467 B2
• Filed: 06/13/2003
• Issued: 01/30/2007
• Est. Priority Date: 06/13/2002
• Status: Active Grant

• Current Assignee: Intellectual Ventures II LLC (Intellectual Ventures LLC)
• Original Assignee: Engedi Technologies, Inc.
• Inventors: Carley, Jeffrey Alan
• Primary Examiner(s): Vaughn, William
• Assistant Examiner(s): BENGZON, GREG C
• Application Number:
  US10/461,820
• Publication Number:
  US 20030233450A1
• Time in Patent Office: 1,327 Days
• Field of Search: 709/223, 709/224, 709/229, 709/225, 709/220, 713/201, 713/182, 713/168, 713/1, 713/155
• US Class Current: 709/224
• CPC Class Codes: H04L 12/10 Current supply arrangements
• CPC Class Codes: H04L 41/0246 Exchanging or transporting network management information using the Internet; Embedding network management web servers in network elements; Web-services-based protocols
• CPC Class Codes: H04L 41/06 Management of faults, events, alarms or notifications
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 41/344 Out-of-band transfers
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/065 related to network devices
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/106 using time related information in packets, e.g. by adding timestamps
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04M 3/2263 Network management
• CPC Class Codes: H04M 3/303 and using PCM multiplexers, e.g. pair gain systems

Abstract

A computer network management system with an embedded processor, an analog communication means and a digital interface for network management provides a system for remotely and securely managing a network. Backup power in the form of an uninterrupted power supply, or other power means as appropriate, allows the modem to provide power outage notification to a remote site. The system further provides authentication and authorization capabilities for security purposes.

Claims

1. A management system for a computer data network, comprising:

a remote network administrator connected to a data network through a plurality of separate, two-way means for connecting the administrator to the data network;

wherein a first means for connecting comprises an analog communication system and an analog connection means, and a second means for connecting comprises a digital communication system and at least one digital communication means;

wherein the analog communication system comprises (a) a remote management station comprising an embedded processor, and (b) a direct connection to the data network;

an external power supply and a separate independent power supply; and

means for sending a status update through the analog connection means if the status of the external power supply changes wherein the independent power supply supplies power to the remote management station if the external power supply for the computer data network has failed.

2. The management system for a computer network described in claim 1 wherein the analog connection means is a modem.

3. The management system for a computer network described in claim 1 wherein the analog connection means is a modem capable of communicating through a network selected from the group consisting of a Public Switched Telephone Network or an Integrated Services Digital Network.

4. The management system for a computer network described in claim 1 wherein the at least one digital communication means is selected from the group consisting of a local area network, a serial interface or a network connection.

5. The management system for a computer network described in claim 1 wherein the at least one digital communication means supports at least one protocol selected from the group consisting of Transmission Control Protocol/Internet Protocol, Simple Network Management Protocol, Telnet, Hypertext Transfer Protocol or Secure Shell.

6. The management system for a computer network described in claim 1 wherein the at least one digital communication means includes a network interface for reporting a status of computer equipment attached to the remote management station to a network management station.

7. The management system for a computer network described in claim 1 wherein the at least one digital communication means includes a network interface which allows for remote configuration of the remote management station.

8. The management system for a computer network described in claim 1 further comprising a means for authenticating a remote administrator through use of the at least one digital communication means.

10. The management system for a computer network described in claim 1 further comprising an internal means for authenticating a remote administrator.

11. The management system for a computer network described in claim 1 further comprising an internal means for authorizing access to the remote management station or the computer data network for a remote administrator.

12. The management system for a computer network described in claim 1 further comprising a means for controlling a remote administrator'"'"'s access to the remote management station or the computer data network.

13. The management system for a computer network described in claim 1 further comprising a means for encrypting communications carried by the analog communication system.

14. The management system for a computer network described in claim 1 further comprising a means for monitoring the status of the at least one digital communication means.

15. The management system for a computer network described in claim 1 further comprising a means for monitoring the status of the at least one digital communication means and a means for sending a status update through the analog connection means if the status changes.

16. The management system for, a computer network described in claim 1 further comprising a means for monitoring the status of the analog connection means.

17. The management system for a computer network described in claim 1 further comprising a means for monitoring the status of the analog connection means and a means for sending a status update through the at least one digital communication means if the status changes.

18. The management system for a computer network described in claim 1 wherein the computer data network has a power supply and further comprising a means for monitoring the power supply of the computer data network.

19. The management system for a computer network described in claim 1 further comprising a means for remotely interrupting power to a device connected to tile remote management station.

20. The management system for a computer network described in claim 1 further comprising a means for monitoring connection attempts made through the analog connection means.

21. The management system for a computer network described in claim 1 further comprising a means for selectively blocking connection attempts made through the analog connection means.

22. The management system for a computer network described in claim 1 further comprising a means for a remote administrator to connect to the management system in an administrative mode through the analog connection means by using a specially configured modem.

9. The management system for a computer network described in claim I further comprising a means fox authorizing access to remote management station or to the computer data network for a remote administrator through use of the at least one digital communication means.

23. A management system for a computer network, comprising:

an embedded processor;

a modem for connecting to an analog communication system;

at least one digital communication means for connecting to the computer network, wherein the at least one digital communication means includes;

a network interface for reporting a status of the computer network to a network management system; and

a network interface which allows for remote configuration of the computer network management system;

a means for authenticating a remote user;

a means for authorizing access to the management system for a remote user;

a means for controlling a remote user'"'"'s access to the computer network management system;

a means for encrypting communications carried by the analog communication system;

a means for monitoring the status of the at least one digital communication means;

a means for sending a status update through the analog connection means if the status of the at least ore digital communication means changes;

a means for monitoring the status of the analog connection means;

a means for sending a status update through the at least one digital communication means if the status of the analog connection means changes;

a means for monitoring a power supply supplying power to the computer network;

an independent power supply;

a means for sending a status update through the analog connection means if the status of the power supply supplying power to the computer network changes wherein the independent power supply supplies power to the computer network management system if the power supply supplying power to the computer network has failed;

a means for remotely interrupting power to a device connected to the computer network;

a means for monitoring connection attempts made through the analog connection means; and

a means for selectively blocking connection attempts made through the analog connection means.

24. A management system for a computer network, comprising:

an embedded processor;

a modem for connecting to an analog communication system capable of communicating through a network selected from the group consisting of a Public Switched Telephone Network or an Integrated Services Digital Network;

at least one digital communication means for connecting to the computer network selected from the group consisting of a local area network, a serial interface or a network connection, wherein the at least one digital communication means supports at least one protocol selected from the group consisting of Transmission Control Protocol/Internet Protocol, Simple Network Management Protocol, Telnet, Hypertext Transfer Protocol or Secure Shell and wherein the at least one digital communication means includes;

a network interface for reporting a status of the computer network management station; and

a network interface which allows for remote configuration of the computer network management system;

a means for authenticating a remote user;

a means for authorizing access to the management system for a remote user;

a means for controlling a remote user'"'"'s access to the management system;

a means for encrypting communications carried by the analog communication system;

a means for monitoring the status of the at least one digital communication means;

a means for sending a status update through the analog connection means if the status of the at least one digital communication means changes;

a means for monitoring the status of the analog connection means;

a means for sending a status update through the at least one digital communication means if the status of the analog connection means changes;

a means for monitoring a power supply supplying power to the computer network;

an independent power supply;

a means for sending a status update through the analog connection means if the status of the power supply supplying power to the computer network changes wherein the independent power supply supplies power to the computer network management system if the power supply supplying power to the computer network has failed;

a means for remotely interrupting power to a device connected to the computer network;

a means for monitoring connection attempts made through the analog connection means; and

a means for selectively blocking connection attempts made through the analog connection means.