Automatic access to network devices using various authentication schemes
View Patent ↗An access discovery method and system discovers and stores the proper access protocol for each device on a network. The discovery process includes progressively sequencing through state transitions until a successful access protocol sequence is determined, and an access script corresponding to this sequence is stored for subsequent access to the device. Preferably, the protocol-discovery algorithm is modeled as a state table that includes a start state and two possible terminal states: success and failure. A state machine executes the state table until a terminal state is reached; if the terminal state is a failure, the system backtracks to attempt an alternative sequence. The process continues until the success state is reached or until all possible sequences are executed without success. An exemplary state model is provided that has been shown to be effective for modeling network devices from a variety of vendor devices.
1. A system comprising:
an access protocol model that is configured to model a plurality of access protocols, and
an access protocol discovery module that uses the access protocol model to discover an access protocol that allows accessing a device on a network, wherein
the access protocol model is configured to model the plurality of access protocols as a state machine model, and
the state machine model includes a plurality of states, and each access protocol is defined by a sequence of transitions between select states.
2. The system of claim 1 , wherein the access protocol discovery module is configured to store an access script corresponding to the access protocol for accessing the device.
3. The system of claim 2 , including an accessing system that is configured to use the access script for subsequent access to the device.
4. The system of claim 3 , wherein the accessing system is configured to enable the access protocol discovery module when attempting to access an other device on the network.
5. The system of claim 1 , wherein the states include:
a Connect state that serves as an initial state of the sequence,
a Username state wherein an identification of a user is communicated to the device,
a Password state wherein a password of the user is communicated to the device,
an Enable state wherein a command is communicated to the device, requesting that a higher level of access by enabled, and
an Enable Password state wherein a second password of the user is communicated to the device to gain the higher level of access.
6. The system of claim 5 , wherein the states include:
a Success state that identifies a final state of the sequence that defines an access protocol, and
a Failure state that identifies a final state of a sequence that does not define an access protocol.
7. The system of claim 1 , wherein the state machine model includes a plurality of action-response pairs that define the transitions between the states.
8. The system of claim 7 , wherein upon entering at least one state of the plurality of states, the access protocol discovery module is configured to:
execute an action of an action-response pair corresponding to a transition from the state,
receive a device response from the device, and
transition to a next state based on whether the device response corresponds to an expected response of the action-response pair.
9. The system of claim 8 , wherein the expected response corresponds to a plurality of transitions from the state, and the access protocol discovery module is configured to transition to the next state based on a priority associated with each of the plurality of transitions.
10. The system of claim 1 , wherein at least one state includes a plurality of possible transitions, and each transition of the possible transitions includes a parameter that affects an order in which the possible transitions are selected for consideration within the state.
11. The system of claim 10 , wherein the access protocol discovery module is configured to modify the parameter that affects the order in which the possible transitions are selected for consideration based on prior access attempts.
12. A method comprising:
providing, to an access device, an access protocol model that is configured to model a plurality of access protocols, and
attempting, by the access device, to access a device on a network by processing the access protocol model to discover an access protocol that allows accessing the device, wherein
the access protocol model is configured to model the plurality of access protocols as a state machine model, and
the state machine model includes a plurality of states, and each access protocol is defined by a sequence of transitions between select states.
13. The method of claim 12 , including storing an access script corresponding to the access protocol for accessing the device.
14. The method of claim 13 , including accessing the device based on the access script.
15. The method of claim 12 , wherein the states include:
a Connect state that serves as an initial state of the sequence,
a Username state wherein an identification of a user is communicated to the device,
a Password state wherein a password of the user is communicated to the device,
an Enable state wherein a command is communicated to the device, requesting that a higher level of access by enabled, and
an Enable Password state wherein a second password of the user is communicated to the device to gain the higher level of access.
16. The method of claim 15 , wherein the states include:
a Success state that identifies a final state of the sequence that defines an access protocol, and
a Failure state that identifies a final state of a sequence that does not define an access protocol.
17. The method of claim 12 , wherein the state machine model includes a plurality of action-response pairs that define the transitions between the states.
18. The method of claim 17 , including
processing the state machine model by:
entering a state of the plurality of states,
executing an action of an action-response pair corresponding to a transition from the state,
receiving a device response from the device, and
transitioning to a next state based on whether the device response corresponds to an expected response of the action-response pair.
19. The method of claim 18 , wherein the expected response corresponds to a plurality of transitions from the state, and transitioning to the next state is based on a priority associated with each of the plurality of transitions.
20. The method of claim 12 , wherein at least one state includes a plurality of possible transitions, and
each transition of the possible transitions includes a parameter that affects an order in which the possible transitions are selected for consideration within the state.
21. The method of claim 20 , including modifying the parameter that affects the order in which the possible transitions are selected for consideration based on prior access attempts.
22. A computer program stored on a non-transient computer readable medium, which, when executed by a processor, causes the processor to:
receive an access protocol model that is configured to model a plurality of access protocols, and
attempt to access a device on a network by processing the access protocol model to discover an access protocol that allows accessing the device, wherein
the access protocol model is configured to model the plurality of access protocols as a state machine model, and
the state machine model includes a plurality of states, and each access protocol is defined by a sequence of transitions between select states.
23. The computer program of claim 22 , which causes the processor to store an access script corresponding to the access protocol for accessing the device.
24. The computer program of claim 22 , wherein the states include:
a Connect state that serves as an initial state of the sequence,
a Username state wherein an identification of a user is communicated to the device,
a Password state wherein a password of the user is communicated to the device,
an Enable state wherein a command is communicated to the device, requesting that a higher level of access by enabled, and
an Enable Password state wherein a second password of the user is communicated to the device to gain the higher level of access.
25. The computer program of claim 24 , wherein the states include:
a Success state that identifies a final state of the sequence that defines an access protocol, and
a Failure state that identifies a final state of a sequence that does not define an access protocol.
26. The computer program of claim 22 , wherein the state machine model includes a plurality of action-response pairs that define the transitions between the states.
27. The computer program of claim 26 , which causes the processor to process the state machine model by:
entering a state of the plurality of states,
executing an action of an action-response pair corresponding to a transition from the state,
receiving a device response from the device, and
transitioning to a next state based on whether the device response corresponds to an expected response of the action-response pair.
28. The computer program of claim 27 , wherein the expected response corresponds to a plurality of transitions from the state, and transitioning to the next state is based on a priority associated with each of the plurality of transitions.
29. The computer program of claim 22 , wherein at least one state includes a plurality of possible transitions, and each transition of the possible transitions includes a parameter that affects an order in which the possible transitions are selected for consideration within the state.
30. The computer program of claim 29 , which causes the processor to adjust the parameter that affects the order in which the possible transitions are selected, based on prior access attempts.