Method to Securely Authenticate Management Server Over Un-Encrypted Remote Console Connection

• US 20150371032A1
• Filed: 06/18/2014
• Published: 12/24/2015
• Est. Priority Date: 06/18/2014
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Patel, Rajeshkumar I., Puli, AppaRao, S, Harsha
• Granted Patent: US 10,440,001 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A Virtual network computing (VNC) server receives a client launch request from a VNC client and provides a log-in page for display at the VNC client. The log-in page includes a graphical representation of a keyboard having a plurality of keys. Individual key designations at the keyboard are unique and are generated randomly in response to the client launch request. The VNC server receives pointing device movement coordinates from the VNC client; the movement coordinates indicating selection of individual keys at the keyboard by a user of the VNC client.

Claims

1. A method comprising:

receiving, at a Virtual network computing (VNC) server, a client launch request from a VNC client;

providing a log-in page for display at the VNC client in response to receiving the client launch request, the log-in page including display of a graphical representation of a keyboard having a plurality of keys, wherein individual key designations are unique and generated randomly in response to the client launch request; and

receiving pointer device movement coordinates from the VNC client, the movement coordinates indicating selection of individual keys at the keyboard by a user of the VNC client.

2. The method of claim 1, further comprising:

storing the randomly generated key designations at a memory device associated with the VNC server; and

decoding the pointer device movement coordinates to determine log-in credentials provided by the user based on the stored key designations.

3. The method of claim 1, wherein the VNC server is a process executed at a service processor included at an information handling system.

4. The method of claim 3, wherein the VNC client is associated with a remote management server, the VNC client to establish authorized access at the information handling system.

5. The method of claim 1, further comprising receiving the client launch request over an un-encrypted communication network.

6. The method of claim 1, further comprising receiving the pointer device movement coordinates from the VNC client over an un-encrypted communication network.

7. The method of claim 1, further comprising authenticating log-in credentials associated with the VNC client based on the pointer device movement coordinates received from the VNC client.

8. The method of claim 1, further comprising disabling keyboard stroke detection at a physical keyboard associated an information handling system executing the VNC client.

9. An information handling system comprising:

a network interface device; and

a service processor, the service processor to implement a Virtual network computing (VNC) server, the VNC server to;

receive, using the network interface device, a client launch request from a VNC client;

provide a log-in page for display at the VNC client in response to receiving the client launch request, the log-in page including display of a graphical representation of a keyboard having a plurality of keys, wherein individual key designations are unique and generated randomly in response to the client launch request; and

receive pointer device movement coordinates from the VNC client, the movement coordinates indicating selection of individual keys at the keyboard by a user of the VNC client.

10. The information handling system of claim 9, wherein the VNC server is further to:

store the randomly generated key designations at a memory device associated with the VNC server; and

decode the pointer device movement coordinates to determine log-in credentials provided by the user based on the stored key designations.

11. The information handling system of claim 9, wherein the VNC client is associated with a remote management server, the VNC client to establish authorized access at the information handling system.

12. The information handling system of claim 9, wherein the VNC server is further to receive the client launch request over an un-encrypted communication network.

13. The information handling system of claim 9, wherein the VNC server is further to receive the pointer device movement coordinates from the VNC client over an un-encrypted communication network.

14. The information handling system of claim 9, wherein the VNC server is further to authenticate log-in credentials associated with the VNC client based on the pointer device movement coordinates received from the VNC client.

15. The information handling system of claim 9, wherein the VNC server is further to disable keyboard stroke detection at a physical keyboard associated an information handling system executing the VNC client.

16. A non-transitory storage medium embodying a software program, the software program comprising instructions executable by a processor to implement a Virtual network computing (VNC) server, the VNC server to:

receive a client launch request from a VNC client;

provide a log-in page for display at the VNC client in response to receiving the client launch request, the log-in page including display of a graphical representation of a keyboard having a plurality of keys, wherein individual key designations are unique and generated randomly in response to the client launch request; and

receive pointer device movement coordinates from the VNC client, the movement coordinates indicating selection of individual keys at the keyboard by a user of the VNC client

17. The non-transitory storage medium of claim 16, wherein the VNC server is further to:

store the randomly generated key designations at a memory device associated with the VNC server; and

decode the pointer device movement coordinates to determine log-in credentials provided by the user based on the stored key designations.

18. The non-transitory storage medium of claim 16, wherein the VNC server is a process executed at a service processor included at an information handling system.

19. The non-transitory storage medium of claim 16, wherein the VNC client is associated with a remote management server, the VNC client to establish authorized access at the information handling system.

20. The non-transitory storage medium of claim 16, wherein the VNC server is further to receive the client launch request over an un-encrypted communication network.