Secure management access control for computers, embedded and card embodiment
A computer network management system for remotely managing a network device. The system includes a secure management access controller which is in direct communication with the network device. The secure management access controller provides access for remotely and securely managing a network. The secure management access controller further separates management communications from user communications to ensure the security of the management communications. The system further includes network and power monitoring and notification systems. The system further provides authentication and authorization capabilities for security purposes.
1. A remote device management communication system for securely controlling access to management applications and communications to and from said management applications on network devices in a distributed computer network that includes one or more network services, one or more secure management access controllers, and one or more managed network devices, the remote device management system comprising:
at least one secure management access controller connected to one or more data bus of said managed network device for the communication of device management data;
an out-of-band access connection means for connecting said one or more network services or remote users with said secure management access controller for management of said network device; and
at least one virtual management interface connection means for connecting said one or more network services or remote users with said secure management access controller;
wherein said virtual management interface connection means provides logical separation of management data from user data and utilizes user interfaces of said managed network element for connecting said one or more network services or remote users with said secure management access controller.
2. The system of claim 1 wherein the at least one secure management access controller includes a flash chip, non-volatile random access memory and random access memory.
3. The system of claim 1 wherein the at least one secure management access controller is embedded in the network device to be managed.
4. The system of claim 1 wherein the at least one secure management access controller accesses a flash chip, non-volatile random access memory and random access memory embedded in a main processor on the network device.
5. The system of claim 1 wherein the network device includes a card reader and the at least one secure management access controller is embedded in a card capable of being read by the card reader.
6. The system of claim 1 wherein the out-of-band access connection means comprises:
a communication system; and
a secure management access controller interface device.
7. The system of claim 6 wherein the communication system is selected from the group consisting of a Public Switched Telephone Network, a broadband connection and a Virtual Private Network and the interface device is selected from the group consisting of an analog modem, a broadband modem, an Ethernet interface, a cellular interface and a card slot for accepting interface cards.
8. The system of claim 1 wherein the at least one network communication means is selected from the group consisting of a local area network, a serial interface and a network connection.
9. The system of claim 1 wherein the at least one network communication means supports at least one protocol selected from the group consisting of Transmission Control Protocol/Internet Protocol, Simple Network Management Protocol, Telnet, Trivial File Transfer Protocol, File Transfer Protocol, Hypertext Transfer Protocol, Hypertext Transfer Protocol over Secure Socket Layer and Secure Shell.
10. The system of claim 1 wherein user and management communications are transmitted to the at least one secure management access controller and the at least one controller further comprises a virtual management interface for separating the user communications from the management communications.
11. The system of claim 10 wherein the virtual management interface includes a protection means for protecting the management data.
12. The system of claim 10 wherein the virtual management interface includes a secure transmission tunnel to protect management communications and a firewall to protect the at least one management access controller from unauthorized access.
13. The system of claim 1 wherein the at least one the management access controller includes a monitoring means for monitoring the status of at least one computer network component and a network interface for reporting a status of the at least one computer network component to a network management station.
14. The system of claim 1 further comprising:
a network power supply;
a monitoring means for monitoring the status of the network power supply; and
a reporting means for reporting the status of the network power supply.
15. The system of claim 1 further comprising an independent power supply for supplying power to the management access controller.
16. The system of claim 1 further comprising a means for monitoring connection attempts made through the management access controller.