METHOD OF AUTHORIZING AN OPERATION TO BE PERFORMED ON A TARGETED COMPUTING DEVICE

• US 20150074764A1
• Filed: 09/12/2013
• Published: 03/12/2015
• Est. Priority Date: 09/12/2013
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Stern, Allon Joseph
• Granted Patent: US 9,819,661 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method of authorizing an operation to be performed on a targeted computing device is provided. The method includes generating a request to perform an operation on the targeted computing device, signing the request with a private key of a first private, public key pair, transmitting the request to an authentication server, receiving an authorization response from the authentication server that includes the request and an authorization token, and transmitting the authorization response to the targeted computing device.

Claims

1. A method of authorizing an operation to be performed on a targeted computing device, said method comprising:

generating a request to perform an operation on the targeted computing device;

signing the request with a private key of a first private, public key pair;

transmitting the request to an authentication server;

receiving an authorization response from the authentication server that includes the request and an authorization token; and

transmitting the authorization response to the targeted computing device.

2. The method in accordance with claim 1, wherein generating a request comprises generating the request to include at least one of an identification of the targeted computing device, the operation to be performed on the targeted computing device, a time period in which the operation will be performed, and a geographic location of the targeted computing device.

3. The method in accordance with claim 1, wherein receiving an authorization response comprises receiving the authorization response that includes an authorization token having at least one of a predetermined authorization period, authorization to perform the operation on a predetermined targeted computing device, and authorization to perform predetermined operations on the targeted computing device.

4. The method in accordance with claim 1 further comprising verifying the authorization response with a public key of a second private, public key pair, wherein the authorization response is signed with a private key of the second private, public key pair.

5. The method in accordance with claim 4, wherein transmitting the authorization response comprises transmitting the authorization response upon verification of the authorization response with the public key of the second private, public key pair.

6. The method in accordance with claim 1 further comprising signing the authorization response with the private key of the first private, public key pair.

7. The method in accordance with claim 1, wherein receiving the authorization response comprises determining whether the authorization token authorizes the requested operation.

8. The method in accordance with claim 1, wherein transmitting the request comprises transporting the request to the authentication server via a removable media.

9. A method of authorizing an operation to be performed on a targeted computing device, said method comprising:

receiving a request from a requesting device to perform an operation on the targeted computing device;

verifying the request with a public key of a first private, public key pair, wherein the request is signed by a private key of the first private, public key pair;

forming an authorization response that includes the request and an authorization token; and

transmitting the authorization response to the requesting device.

10. The method in accordance with claim 9 further comprising determining whether to grant the request based on a security policy for the targeted computing device.

11. The method in accordance with claim 10, wherein determining whether to grant the request comprises determining whether parameters for the operation to be performed align with the security policy for the targeted computing device.

12. The method in accordance with claim 9 further comprising creating the authorization token at least one of prior to receiving the request to perform the operation on the targeted computing device and in response to verification of the request to perform the operation on the targeted computing device.

13. The method in accordance with claim 9, wherein forming an authorization response comprises creating the authorization token to have at least one of a predetermined authorization period, authorization to perform the operation on a predetermined targeted computing device, and authorization to perform predetermined operations on the targeted computing device.

14. The method in accordance with claim 9 further comprising signing the authorization response with a private key of a second private, public key pair.

15. The method in accordance with claim 9, wherein transmitting the authorization response comprises transporting the authorization response to the requesting device via a removable media.

16. The method in accordance with claim 9, wherein receiving a request comprises receiving the request that has at least one of an identification of the targeted computing device, the operation to be performed on the targeted computing device, a time period in which the operation will be performed, and a geographic location of the targeted computing device.

17. A method of authorizing an operation to be performed on a targeted computing device, said method comprising:

receiving an authorization response from a requesting device, the authorization response including a request to perform an operation on the targeted computing device and an authorization token;

verifying the authorization response with a public key of a private, public key pair, wherein the authorization response is signed by a private key of the private, public key pair; and

granting authorization to perform the operation upon verification of the authorization response.

18. The method in accordance with claim 17, wherein receiving an authorization response comprises receiving the authorization response including the request that has at least one of an identification of the targeted computing device, the operation to be performed on the targeted computing device, a time period in which the operation will be performed, and a geographic location of the targeted computing device.

19. The method in accordance with claim 17, wherein receiving an authorization response comprises receiving the authorization response including the authorization token that has at least one of a predetermined authorization period, authorization to perform the operation on a predetermined targeted computing device, and authorization to perform predetermined operations on the targeted computing device.

20. The method in accordance with claim 17, wherein verifying the authorization response comprises determining whether parameters for the operation to be performed align with a security policy for the targeted computing device.