Secure shell public key audit system
View Patent ↗A system for auditing authorized key files associated with secure shell (SSH) servers is disclosed. In an example, the system may include a purpose-built SSH audit server. The SSH audit server may be configured to receive an authorized key file and a list of users. The SSH audit sever may generate and provide unique registration codes for each of the users in the list. The SSH audit server may associate particular users with particular public keys as each of the users accesses the SSH audit server using a public key and inputs a registration code.
1. An audit server comprising:
one or more communication interfaces to communicate with one or more client devices;
one or more hardware processors; and
computer-readable storage media storing computer-executable instructions, which when executed by the one or more hardware processors, cause the one or more processors to perform operations comprising:
receiving an authorized key file associated with a secure shell (SSH) server, the authorized key file including a plurality of public keys;
receiving contact information associated with each of a plurality of individuals;
generating a plurality of registration codes, each of the plurality of registration codes corresponding to and uniquely identifying a particular individual of the plurality of individuals;
providing each of the plurality of registration codes to the corresponding particular individual of the plurality of individuals;
receiving a request to open a secure communication channel from a client device associated with an individual of the plurality of individuals, the request including information generated based at least in part on a private key associated with the individual;
authenticating the information based at least in part on a particular public key of the plurality of public keys;
opening the secure communication channel;
receiving a particular registration code from the client device;
identifying the individual associated with the particular public key;
identifying one or more registration codes of the plurality of registration codes that were not received; and
automatically removing or disabling, from the authorized key file, one or more public keys of the plurality of public keys that correspond to the one or more registration codes that were not received.
2. The audit server as recited in claim 1 , wherein, before receiving the particular registration code from the client device, the operations further comprise:
opening the secure communication channel; and
requesting input of one of the plurality of registration codes.
3. The audit server as recited in claim 1 , wherein the operations further comprise:
matching the particular registration code to a registration code of the plurality of registration codes; and
determining that the particular registration code is valid.
4. The audit server as recited in claim 1 , wherein the operations further comprise:
failing to match the particular registration code with any of the plurality of registration codes;
determining that the particular registration code is invalid; and
marking the public key corresponding to the particular registration code for further investigation.
5. The audit server as recited in claim 1 , wherein the operations further comprise:
failing to match the particular registration code with any of the plurality of registration codes;
identifying the particular registration code as invalid; and
removing the public key from the authorized key file.
6. The audit server as recited in claim 1 , wherein receiving the particular registration code from the client device comprises receiving an email that includes the particular registration code.
7. A method performed by an audit server comprising one or more processors configured with operating instructions, the method comprising:
receiving a plurality of public keys associated with a secure shell (SSH) server;
generating, by the audit server, a unique registration code, the unique registration code corresponding to and uniquely identifying a particular user;
associating the unique registration code with the user;
providing the unique registration code to a location accessible to a client device of the user;
receiving a request to open a communication channel from the client device, the request including information generated based at least in part on a private key associated with the user;
establishing the communication channel based at least in part on a public key of the plurality of public keys;
receiving, via the communication channel, the unique registration code from the client device;
identifying that the user is associated with the public key;
identifying one or more registration codes of the plurality of registration codes that were not received; and
automatically removing or disabling, one or more public keys of the plurality of public keys that correspond to the one or more registration codes that were not received.
8. The method as recited in claim 7 , further comprising:
generating a second unique registration code;
associating the second unique registration code with a second user;
providing the second unique registration code to a second location accessible to a second client device of the second user;
receiving a second request to open a second communication channel from the second client device;
establishing the second communication channel based at least in part on a second public key;
receiving a second input of the second unique registration code from the second client device; and
associating the second user with the second public key based at least in part on receiving the second unique registration code via the second communication channel.
9. The method as recited in claim 7 , wherein the location is an email account.
10. The method as recited in claim 7 , further comprising providing a login credential to establish the communication channel with the audit server.
11. The method as recited in claim 7 , wherein the communication channel is a secure shell.
12. The method as recited in claim 7 , further comprising:
receiving, prior to generating the unique registration code, an authorized key file associated with a server being audited, the authorized key file including the public key; and
receiving, prior to generating the unique registration code, contact information associated with a plurality of individuals authorized to access the server, the plurality of individuals including the user.
13. A non-transitory computer-readable storage media storing computer-executable instructions, which when executed by one or more processors, cause the one or more processors to:
receiving a plurality of public keys associated with a secure shell (SSH) server;
generate a plurality of registration codes, a particular registration code of the plurality of registration codes associated with and uniquely identifying a user;
associating the particular registration code with the user;
provide the particular registration code to a location accessible to a client device of the user;
receive a request to open a communication channel from the client device, the request including information generated based at least in part on a private key associated with the user;
establish the communication channel based at least in part on a public key of the plurality of public keys;
receive the particular unique registration code over a communication channel that is established based in part on the public key;
identifying that the user is associated with the public key;
identifying one or more registration codes of the plurality of registration codes that were not received; and
automatically removing or disabling, from an authorized key file, one or more public keys of the plurality of public keys that correspond to the one or more registration codes that were not received.
14. The non-transitory computer-readable storage media as recited in claim 13 , wherein the location is at least one of an email account associated with the user or an instant message account associated with the user.
15. The non-transitory computer-readable storage media as recited in claim 13 , wherein the computer-executable instructions, when executed by the one or more processors, further cause the processors to receive, prior to generating the unique registration code, contact information associated with a plurality of individuals authorized to access a server being audited, the plurality of individuals including the user.
16. The non-transitory computer-readable storage media as recited in claim 13 , wherein the computer-executable instructions, when executed by the one or more processors, further cause the processors to receive, prior to generating the plurality of registration codes, an authorized key file associated with a server being audited, the authorized key file including the public key.
17. The non-transitory computer-readable storage media as recited in claim 13 , wherein the computer-readable storage media is a resource associated with a secure shell audit server.
18. The non-transitory computer-readable storage media as recited in claim 13 , wherein the instructions, when executed by the one or more processors, further cause the processors to generate a list of registered public keys, the list of registered public keys including the public key and an indication of the user as an owner of the public key.
19. The non-transitory computer-readable storage media as recited in claim 18 , wherein the instructions, when executed by the one or more processors, further cause the processors to provide the list of registered public keys to an administrator system after a predetermined period of time has elapsed.