Method, system, and article of manufacture for remote management of devices

• US 7,302,568 B2
• Filed: 03/14/2003
• Issued: 11/27/2007
• Est. Priority Date: 03/14/2003
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Forte, John, von Behren, Paul D., Hui, Waikwan
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Nalven; Andrew L
• Application Number:
  US10/388,670
• Publication Number:
  US 20040179683A1
• Time in Patent Office: 1,719 Days
• Field of Search: 713/164
• US Class Current: 713/167
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Provided are a method, system, and article of manufacture. A first process creates a second process. A cipher is generated. The first process is terminated. Access is controlled to the generated cipher.

Claims

1. A method for remotely managing devices, comprising:

creating, by a first process, a second process, the first process and second process generated by an application executing on a client;

generating a cipher at the client by one of the first process or the second process, the generated cipher stored in a temporary file along with information related to accessing the generated cipher;

terminating the first process upon creating the second process; and

controlling access to the generated cipher in the temporary file, the temporary file being deleted upon completion of the application executing on the client;

wherein the second process communicates with other processes via an interprocess communication mechanism using the generated cipher, wherein the interprocess communication mechanism allows the second process to be accessed by other processes based on access information to the generated cipher in the temporary file, the method further including,

selecting a scripting language;

determining a first command in a script written in the scripting language; and

establishing a network session connecting the client and a server with the second process, wherein the first process is created by executing the first command at the client.

2. The method of claim 1, further comprising:

authorizing only processes that are permitted to read the generated cipher to access the second process.

3. The method of claim 1, further comprising:

storing the cipher;

allowing access to the stored cipher to a third process; and

encrypting, with the stored cipher, a message from the third process to the second process.

4. The method of claim 1, wherein the authorization further comprises:

receiving a message at the second process from a third process;

decrypting the received message with the cipher;

determining if the decrypted message is valid;

if the decrypted message is valid, then allowing the third process to access the second process; and

if the decrypted message is invalid, then preventing the third process from accessing the second process.

5. The method of claim 1, wherein the second process further performs:

establishing a network session between the client and the server;

sending a command, via the network session, from the client to the server; and

receiving a response from the server, based on the execution of the command at the server.

6. The method of claim 1, wherein the creation, generation, termination and authorization are performed by an application that sends a series of commands for execution on a remote device, and wherein the cipher is generated by the first process or the second process.

7. An article of manufacture for remotely managing devices, wherein the article of manufacture is capable of causing operations, the operations comprising:

creating, by a first process, a second process, and the second process communicates with other processes via an interprocess communication mechanism, such that the interprocess communication mechanism allows the second process to be accessed by other processes, the first process and second process generated by an application executing on a client;

generating a cipher at the client by one of the first process or the second process, the generated cipher stored in a temporary file along with information related to accessing the generated cipher;

terminating the first process upon creating the second process;

controlling access to the generated cipher in the temporary file;

authorizing only processes that are permitted to read the generated cipher to access the second process, allowing access to the generated cipher to a third process based on the access information, and encrypting with the stored cipher a message from the third process to the second process; and

wherein the authorization further includes,

receiving a message at the second process from third process;

decrypting the received message with the generated cipher;

determining if the decrypted message is valid;

if the decrypted message is valid, then allowing the third process to access the second process; and

if the decrypted message is invalid, then preventing the third process from accessing the second process;

wherein the temporary file storing the generated cipher is deleted upon completion of the application.

8. The article of manufacture of claim 7, wherein the first process and the second process are generated by an application executing on a client, the operations further comprising:

selecting a scripting language;

determining a first command in a script written in the scripting language; and

establishing a network session connecting the client and a server with the second process, wherein the first process is created by executing the first command at the client.

9. The article of manufacture of claim 7, wherein the second process further performs:

establishing a network session between a client and a server;

sending a command, via the network session, from the client to the server; and

receiving a response from the server, based on the execution of the command at the server.

10. The article of manufacture of claim 7, wherein the creation, generation, termination and authorization are performed by an application that sends a series of commands for execution on a remote device, and wherein the cipher is generated by the first process or the second process.