Access to a remote machine from a local machine via smart card

• US 7,823,775 B2
• Filed: 02/28/2007
• Issued: 11/02/2010
• Est. Priority Date: 02/28/2007
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Kannan, Chandrasekar
• Primary Examiner(s): Labaze; Edwyn
• Application Number:
  US11/712,760
• Publication Number:
  US 20080203154A1
• Time in Patent Office: 1,343 Days
• Field of Search: 235/380, 235/492, 235/451, 235/487, 235/382, 705 64- 77
• US Class Current: 235/380
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards

Abstract

A method and apparatus for accessing a remote machine from a local machine via a smart card. In one embodiment, the presence of the smart card coupled to the local machine is detected. A card reader reads the credentials from the smart card and communicates them to a remote access client application of the local machine. The remote access client application transmits the credentials to the remote machine. The remote machine sends a query for login information to the local machine upon valid credentials. The local machine transmits the login information to the remote machine and is granted permission to access the remote machine upon valid login information.

Claims

1. A method for accessing a remote machine from a local machine via a smart card, implemented by the local machine programmed to perform the following, comprising:

detecting the presence of the smart card coupled to the local machine;

decoding the smart card to obtain credentials;

transmitting the credentials to the remote machine over a network via a remote access client application of the local machine to allow a user to remotely access the remote machine from the local machine via the network;

receiving a login information query from the remote machine;

transmitting the login information to the remote machine; and

receiving a grant to access the remote machine upon valid credentials and valid login information.

2. The method of claim 1 wherein said receiving the login information query comprises

receiving the login information query from the remote machine upon valid credentials.

3. The method of claim 1 wherein detecting the presence of the smart card further comprises

reading the smart card with a card reader coupled to the local machine.

4. The method of claim 1 further comprising

securing a communication between the local machine and the remote machine via an encryption means.

5. The method of claim 1 wherein the remote access client application of the local machine communicates with a remote access server application of the remote machine via the network.

6. A method for accessing a remote machine from a local machine via a smart card, implemented by a remote machine programmed to perform the following, comprising:

receiving, from the local machine over a network, credentials of the smart card coupled to the local machine;

verifying the validity of the credentials of the smart card to allow a user to remotely access the remote machine from the local machine via the network;

sending a login information query to the local machine;

receiving the login information from the local machine;

verifying the validity of the login information; and

granting access to the remote machine upon valid credentials and valid login information.

7. The method of claim 6 wherein said sending the login information query comprises

sending the login information query to the local machine upon valid credentials.

8. The method of claim 6 further comprising:

denying access to the remote machine if the credentials are not valid; and

denying access to the remote machine if the login information provided by the remote machine is not valid.

9. The method of claim 6 wherein a card reader coupled to the local machine is to read the smart card to obtain the credentials of the smart card.

10. The method of claim 6 further comprising

securing a communication between the local machine and the remote machine via an encryption means, wherein a remote access client application of the local machine communicates with a remote access server application of the remote machine via a network.

11. An article of manufacture comprising:

a machine-accessible storage medium including data that, when accessed by a machine, cause the machine to perform a method for accessing a remote machine from a local machine via a smart card, the method comprising;

detecting the presence of the smart card coupled to the local machine;

decoding the smart card to obtain credentials;

transmitting the credentials to the remote machine over a network via a remote access client application of the local machine to allow a user to remotely access the remote machine from the local machine via the network;

receiving a login information query from the remote machine;

transmitting the login information to the remote machine; and

receiving a grant to access the remote machine upon valid credentials and valid login information.

12. The article of manufacture of claim 11 wherein said receiving the login information query comprises

receiving the login information query from the remote machine upon valid credentials.

13. The article of manufacture of claim 11 wherein detecting the presence of the smart card further comprises

reading the smart card with a card reader coupled to the local machine.

14. The article of manufacture of claim 11 wherein the method further comprises

securing a communication between the local machine and the remote machine via an encryption means.

15. The article of manufacture of claim 11 wherein the remote access client application of the local machine communicates with a remote access server application of the remote machine via the network.

16. An article of manufacture comprising:

a machine-accessible storage medium including data that, when accessed by a machine, cause the machine to perform a method for accessing a remote machine from a local machine via a smart card, the method comprising;

receiving, from the local machine over a network, credentials of the smart card coupled to the local machine;

verifying the validity of the credentials of the smart card to allow a user to remotely access the remote machine from the local machine via the network;

sending a login information query to the local machine;

receiving the login information from the local machine;

verifying the validity of the login information; and

granting access to the remote machine upon valid credentials and valid login information.

17. The article of manufacture of claim 16 wherein said sending the login information query comprises:

sending the login information query to the local machine upon valid credentials.

18. The article of manufacture of claim 16 wherein the method further comprises:

denying access to the remote machine if the credentials are not valid; and

denying access to the remote machine if the login information provided by the remote machine is not valid.

19. The article of manufacture of claim 16 wherein a card reader coupled to the local machine is to read the smart card to obtain the credentials of the smart card.

20. The article of manufacture of claim 16 wherein the method further comprises

securing a communication between the local machine and the remote machine via an encryption means, wherein a remote access client application of the local machine communicates with a remote access server application of the remote machine via a network.

21. A local machine comprising:

a remote access client module;

a smart card reader module; and

a smart card reader interface coupled to a card reader for receiving a smart card,

wherein the smart card reader module is to read credentials from the smart card, and the remote access client module is to transmit the credentials to a remote machine via a network to allow a user to remotely access the remote machine from the local machine via the network, to receive a login information query from the remote machine, to transmit the login information to the remote machine, and to receive a grant to access the remote machine upon valid credentials and valid login information.

22. The local machine of claim 21 wherein the remote access client module communicates with a remote access server module of the remote machine.

23. The local machine of claim 21 wherein a communication between the remote access client module and the remote machine is secured via an encryption means.

24. A remote machine comprising:

a remote access server module to receive credentials from a smart card coupled to a local machine via a network, to verify the validity of the credentials of the smart card to allow a user to remotely access the remote machine from the local machine via the network, to send a login information query to the local machine, receive the login information from the local machine, verify the validity of the login information, and to grant access to the remote machine upon valid credentials and valid login information.

25. The remote machine of claim 24 wherein the remote access server module communicates with a remote access client module of the local machine.

26. The remote machine of claim 25 wherein a communication between the remote access server module and the local machine is secured via an encryption means.