Method to securely authenticate management server over un-encrypted remote console connection
View Patent ↗A Virtual network computing (VNC) server receives a client launch request from a VNC client and provides a log-in page for display at the VNC client. The log-in page includes a graphical representation of a keyboard having a plurality of keys. Individual key designations at the keyboard are unique and are generated randomly in response to the client launch request. The VNC server receives pointing device movement coordinates from the VNC client; the movement coordinates indicating selection of individual keys at the keyboard by a user of the VNC client.
1. A method comprising:
receiving, at a Virtual network computing (VNC) server, a client launch request from a VNC client;
providing a log-in page for display at the VNC client in response to receiving the client launch request, the log-in page including display of a graphical representation of a keyboard having a plurality of keys, wherein individual key designations are unique and generated randomly in response to the client launch request; and
receiving, at the VNC server, pointer device movement coordinates from the VNC client, the movement coordinates indicating selection of individual keys at the keyboard by a user of the VNC client.
2. The method of claim 1 , further comprising:
storing the randomly generated key designations at a memory device associated with the VNC server; and
decoding the pointer device movement coordinates to determine log-in credentials provided by the user based on the stored key designations.
3. The method of claim 1 , wherein the VNC server is a process executed at a service processor included at an information handling system.
4. The method of claim 3 , wherein the VNC client is associated with a remote management server, the VNC client to establish authorized access at the information handling system.
5. The method of claim 1 , further comprising receiving the client launch request over an un-encrypted communication network.
6. The method of claim 1 , further comprising receiving the pointer device movement coordinates from the VNC client over an un-encrypted communication network.
7. The method of claim 1 , further comprising authenticating log-in credentials associated with the VNC client based on the pointer device movement coordinates received from the VNC client.
8. The method of claim 1 , further comprising disabling keyboard stroke detection at a physical keyboard associated an information handling system executing the VNC client.
9. An information handling system comprising:
a network interface device; and
a service processor, the service processor to implement a Virtual network computing (VNC) server, the VNC server to:
receive, using the network interface device, a client launch request from a VNC client;
provide a log-in page for display at the VNC client in response to receiving the client launch request, the log-in page including display of a graphical representation of a keyboard having a plurality of keys, wherein individual key designations are generated randomly in response to the client launch request so that each key of the keyboard displays a unique key designation value; and
receive pointer device movement coordinates from the VNC client, the movement coordinates indicating selection of individual keys at the keyboard by a user of the VNC client.
10. The information handling system of claim 9 , wherein the VNC server is further to:
store the randomly generated key designations at a memory device associated with the VNC server; and
decode the pointer device movement coordinates to determine log-in credentials provided by the user based on the stored key designations.
11. The information handling system of claim 9 , wherein the VNC client is associated with a remote management server, the VNC client to establish authorized access at the information handling system.
12. The information handling system of claim 9 , wherein the VNC server is further to receive the client launch request over an un-encrypted communication network.
13. The information handling system of claim 9 , wherein the VNC server is further to receive the pointer device movement coordinates from the VNC client over an un-encrypted communication network.
14. The information handling system of claim 9 , wherein the VNC server is further to authenticate log-in credentials associated with the VNC client based on the pointer device movement coordinates received from the VNC client.
15. The information handling system of claim 9 , wherein the VNC server is further to disable keyboard stroke detection at a physical keyboard associated an information handling system executing the VNC client.
16. A non-transitory storage medium embodying a software program, the software program comprising instructions executable by a processor to implement a Virtual network computing (VNC) server, the VNC server to:
receive a client launch request from a VNC client;
provide a log-in page for display at the VNC client in response to receiving the client launch request, the log-in page including display of a graphical representation of a keyboard having a plurality of keys, wherein each key of the keyboard is assigned a corresponding key designation, the key designation assignment generated randomly in response to the client launch request; and
receive pointer device movement coordinates from the VNC client, the movement coordinates indicating selection of individual keys at the keyboard by a user of the VNC client.
17. The non-transitory storage medium of claim 16 , wherein the VNC server is further to:
store the randomly generated key designations at a memory device associated with the VNC server; and
decode the pointer device movement coordinates to determine log-in credentials provided by the user based on the stored key designations.
18. The non-transitory storage medium of claim 16 , wherein the VNC server is a process executed at a service processor included at an information handling system.
19. The non-transitory storage medium of claim 16 , wherein the VNC client is associated with a remote management server, the VNC client to establish authorized access at the information handling system.
20. The non-transitory storage medium of claim 16 , wherein the VNC server is further to receive the client launch request over an un-encrypted communication network.