System for providing secure access to KVM switch and other server management systems

• US 7,613,927 B2
• Filed: 11/12/2004
• Issued: 11/03/2009
• Est. Priority Date: 11/12/2004
• Status: Active Grant

• Current Assignee: RIIP, Inc.
• Original Assignee: Raritan Americas Incorporated (Legrand SA)
• Inventors: Holovacs, Jayson
• Primary Examiner(s): Moise; Emmanuel L
• Assistant Examiner(s): GERGISO, TECHANE
• Application Number:
  US10/988,185
• Publication Number:
  US 20060107061A1
• Time in Patent Office: 1,817 Days
• Field of Search: 713/182, 726/16, 726/26
• US Class Current: 713/182
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A secure switching system that utilizes radio frequency identification (RFID) technology to allow only authorized users to access a remote management or keyboard, video, mouse (KVM) switching system. The system includes a plurality of user workstations that allow a user to select, monitor, and operate remote devices using a local keyboard, video monitor, and cursor control device. Coupled to or integrated with the system is an RFID transceiver that detects the presence of RFID tags that are within range of communications. A user workstation is only operable if the RFID transceiver detects a valid RFID tag.

Claims

1. A system for providing secure access to a server management system comprising:

a workstation including a video monitor, a keyboard, and a cursor control device for receiving keyboard or cursor control device commands from an authorized workstation user;

a switch for coupling said workstation to one or more remote servers, the workstation taking control of at least one of the remote servers when logged on the system via the received keyboard or cursor control commands; and

a RFID detection circuit coupled to said workstation for detecting RFID signals from a card associated with the authorized workstation user, the RFID signals being indicative of that authorized user'"'"'s accessibility to one or more of said remote servers, and

the system automatically logging a workstation into one of the remote servers when the authorized user'"'"'s card RFID signals are in the vicinity of the detection circuit and are detected by the detection circuit and the authorized workstation user enters keyboard or cursor control device command indicative of the authorized workstation user'"'"'s access and, wherein the system automatically logs a workstation off the remote server-when the authorized workstation user'"'"'s card RFID signals are no longer in the vicinity of the detection circuit despite the presence of keyboard or cursor control device commands

wherein keyboard, mouse and video signals are transmitted to said workstation from at least one of said remote devices when said user has access to said workstation;

wherein the authorized user'"'"'s accessibility is periodically confirmed by detecting signals indicative of the authorized user'"'"'s presence after an initial login;

wherein said RFID signal includes a unique identification number.

2. A system according to claim 1, wherein the RFID detection circuit communicates with a signal generating means capable of generating a signal within a pre-defined vicinity.

3. A system according to claim 2, wherein said vicinity is a pre-defined distance from the detection circuit to the signal generating means.

4. A system according to claim 2, wherein said RFID detection circuit receives said RFID signals from said signal generating means and decodes said signal for user verification.

5. A system according to claim 4, wherein said workstation is inaccessible unless said user verification is confirmed.

6. A system according to claim 1, wherein said switch may be locally or remotely located to said workstation and said remote devices.

7. A system according to claim 1, wherein the at least one remote servers is separated from the workstation by a network selected from the group consisting of the Internet, a local area network (“

LAN”

), a wide area network (“

WAN”

), a wireless network, and a modem connection.

8. A system according to claim 1, wherein the system logs out when an authorized user accessibility is not confirmed by detecting signals indicative of the authorized user'"'"'s presence after an initial login.

9. A system according to claim 1 wherein the system converts the keyboard or cursor control device commands and then emulates such signals and couples them to respective ports on the at least one remote server.

10. A switching system according to claim 1 wherein the workstation communicates using a protocol selected from the group consisting of Universal Serial Bus (“

USB”

), American Standard Code for Information Interchange (“

ASCII”

) and Recommended Standard-232 (“

RS-232”

).

11. A secure, remote device management system comprising:

a remote management unit for coupling one or more user interface devices to one or more remote devices; and

a radio frequency identification (RFID) transceiver coupled to said one or more user interface devices for detecting RFID signals, said signals indicative of an authorized user'"'"'s accessibility to said system,

wherein the one or more user interface devices takes control of the one of more remote devices when logged on the system, the user interface device being logged on the system when RFID signals are detected and the user enters information via the user interface device indicative of the user'"'"'s access, and the authorized user interface device being logged off the system when the authorized user'"'"'s RFID signals are no longer detected within a pre-defined range of the RFID transceiver despite the presence of a user input signal to the user interface device

wherein keyboard, mouse and video signals are transmitted to at least one said user interface device from at least one of said remote devices when said user has access to said at least one said user interface device;

wherein the authorized user'"'"'s accessibility is periodically confirmed by detecting signals indicative of the authorized user'"'"'s presence after an initial login;

wherein said RFID transceiver communicates with an RFID transponder within the pre-defined range; and

wherein said transponder transmits radio frequency signals containing a unique identification number.

12. A system according to claim 11, wherein said transponder transmits said radio frequency signals to an antenna.

13. A system according to claim 12, wherein said antenna communicates with said transceiver.

14. A system according to claim 11, wherein said transceiver receives said radio frequency signals from said transponder and decodes said unique identification number for user verification.

15. A system according to claim 14, wherein said one or more user interface devices is inaccessible unless said user verification from said transponder occurs by said transceiver.

16. A system according to claim 11, wherein said remote management unit may be locally or remotely located to said one or more user interface devices and to said remote device.

17. A system according to claim 11, wherein the system logs out when the authorized user accessibility is not confirmed by detecting signals indicative of the authorized user'"'"'s presence after an initial login.

18. A switching system comprising:

a workstation including a keyboard, a video monitor and a cursor control device;

a switch for coupling said workstation to one or more remote devices;

a radio frequency identification (RFID) transponder; and

a radio frequency identification (RFID) transceiver, wherein said transceiver communicates with said workstation to verify an authorized user,

further wherein the workstation is logged on the system and takes control of the one or more remote devices when the authorized user is verified and the workstation is logged off the system and denied access to the one or more remote devices when the transceiver does not detect the authorized user'"'"'s RFID signals within a pre-defined range of the transponder despite workstation user input signals to the keyboard or cursor control device;

wherein keyboard, mouse and video signals are transmitted to said workstation from at least one of said remote devices when said user has access to said workstation; and

wherein the authorized user'"'"'s accessibility is periodically confirmed by detecting signals from said transponder in response to activation signals from said transceiver after an initial login;

wherein said transceiver sends activation signals;

wherein said transponder receives said activation signals from said transceiver when said transponder and said transceiver are within the pre-defined range;

wherein said transponder transmits radio frequency signals to said transceiver within the same frequency range as said activation signals from said transceiver;

wherein said transceiver receives said radio frequency signals from said transponder; and

wherein said radio frequency signals contain a unique identification number.

19. A system according to claim 18 wherein said user workstation is inaccessible unless said radio frequency signals containing said unique identification number are verified by said transceiver.

20. A system according to claim 18, wherein said transceiver demodulates said radio frequency signals from said transponder to extract said unique identification number.

21. A system according to claim 18, wherein said transponder communicates with said transceiver in said pre-defined range.

22. A system according to claim 18, wherein said pre-defined range is some distance from said transponder to said transceiver.

23. A system according to claim 18, wherein said user workstation is inaccessible if said transponder and said transceiver are outside said pre-defined range.

24. A system according to claim 18, wherein the system logs out when the authorized user'"'"'s accessibility is not confirmed by detecting signals from said transponder in response to activation signals from said transceiver after an initial login.

25. A system according to claim 18 wherein the one or more remote devices are servers, computers or networking equipment.

26. A system according to claim 18 wherein the one or more remote devices are separated from the workstation by a network selected from the group consisting of the Internet, a local area network (“

LAN”

), a wide area network (“

WAN”

), a wireless network, and a modem connection.

27. A system according to claim 18 wherein the system converts the keyboard or cursor control device commands and then emulates such signals and couples them to respective ports on the at least one remote server.