Mechanism to improve authentication for remote management of a computer system
View Patent ↗According to one embodiment, a network is disclosed. The network includes a server computer and a client computer. The client computer accesses an authentication stack during power on self test (POST) that enables authentication of boot code that is to be downloaded from the server computer prior to control being passed to the operating system.
1. A network comprising:
a server computer; and
a client computer, wherein the client computer accesses an authentication stack during a power on self-test (POST) that enables authentication of the remote server for authorization to boot the client computer, the authentication stack including:
a control layer to control authentication;
an interface layer to define function calls;
a support layer to translate the function calls received from the interface layer into proprietary calls; and
a hardware layer having one or more hardware devices.
2. The network of claim 1 wherein the control layer and the interface layer are implemented at the client computer, and the support layer and the hardware layer are implemented at the remote server.
3. The network of claim 1 wherein the control layer comprises:
a user authentication (UA) control applet; and
an application program interface (API) interface layer.
4. The network of claim 3 wherein the control applet finds, interprets and enforces a platform security policy that defines how to handle security related events.
5. The network of claim 4 wherein the security related event is remote local area network (LAN) wakeup event.
6. The network of claim 4 wherein the security related event is resume from suspend event.
7. The network of claim 4 wherein the security related event is an AT attachment 3 (ATA-3) event.
8. The network of claim 1 wherein the interface layer comprises:
a UA API; and
a storage API.
9. The network of claim 8 wherein the UA API defines high-level function calls for user authentication.
10. The network of claim 1 wherein the support layer comprises:
an authentication support component; and
a storage component.
11. The network of claim 10 wherein the support layer is developed by a service provider.
12. The network of claim 11 wherein the support layer translates API calls received from the interface layer into proprietary calls of the service provider.
13. The network of claim 10 wherein the support layer receives API function calls from the UA control applet and returns appropriate information.
14. The network of claim 10 wherein the storage component comprises a storage plug-in.
15. The network of claim 10 wherein the authentication support component comprises:
fingerprint plug-in;
a smart card plug-in;
a universal serial bus (USB) token plug-in; and
a remote boot plug-in.