Method to improve keyboard, video and mouse (KVM) security on blocking incoming KVM privilege request

1. A system, comprising:

a management device, comprising a processor and a non-volatile memory storing computer executable code, wherein the computer executable code, when executed at the processor, is configured to:

establish a first KVM session in response to a first privilege request;

provide options of KVM authorities;

select one of the options based on a first user instruction received from the first KVM session; and

upon receiving a second privilege request requesting for a second KVM session, perform a first operation based on the selected one of the options;

wherein the options of KVM authorities comprise a deny access option, and when the selected one of the options is the deny access option, the first operation is denying the second privilege request;

wherein the options of KVM authorities comprise a video only option, and when the selected one of the options is the video only option, the first operation is establishing the second KVM session, and the second KVM session allows video redirection but not keyboard and mouse redirection; and

wherein different responses to privilege requests from different users may be automatically defined, such that the video only option may be chosen for users in a same group or requests from a local area network based on IP address, and the deny access option may be chosen for users outside the same group or requests from outside the local area network.

2. The system of claim 1 , wherein the options of KVM authorities comprise a full access option, and when the selected one of the options is the full access option, the first operation is establishing the second KVM session, and the second KVM session allows video, keyboard and mouse redirection.

3. The system of claim 1 , wherein the computer executable code, when executed at the processor, is further configured to: display the options of KVM authorities and receive the first use instruction through a user interface.

4. The system of claim 1 , wherein the computer executable code, when executed at the processor, is further configured to:

in response to receiving the second privilege request, send a warning message corresponding to the selected one of the options.

5. The system of claim 1 , wherein the computer executable code, when executed at the processor, is configured to select one of the options before receiving the second privilege request.

6. The system of claim 1 , wherein the computer executable code, when executed at the processor, is configured to select one of the options after receiving the second privilege request.

7. The system of claim 6 , wherein the computer executable code, when executed at the processor, is further configured to, after performing the first operation and upon receiving a third privilege request requesting for a third KVM session:

select another one of the options based on a second user instruction received from the first KVM session; and

perform a second operation based on the selected another one of the options.

8. The system of claim 1 , wherein the management device is a management controller (BMC).

9. A method for improving keyboard, video and mouse (KVM) security, comprising:

establishing a first KVM session for a management device in response to a first privilege request;

providing options of KVM authorities;

selecting one of the options based on a user instruction received from the first KVM session; and

upon receiving a second privilege request requesting for a second KVM session, performing a first operation based on the selected one of the options;

wherein the options of KVM authorities comprise a deny access option, and when the selected one of the options is the deny access option, the first operation is denying the second privilege request;

wherein the options of KVM authorities comprise a video only option, and when the selected one of the options is the video only option, the first operation is establishing the second KVM session, and the second KVM session allows video redirection but not keyboard and mouse redirection; and

wherein different responses to privilege requests from different users may be automatically defined, such that the video only option may be chosen for users in a same group or requests from a local area network based on IP address, and the deny access option may be chosen for users outside the same group or requests from outside the local area network.

10. The method of claim 9 ,

wherein the options of KVM authorities further comprise a full access option;

and

wherein when the selected one of the options is the full access option, the first operation is establishing the second KVM session, and the second KVM session allows video, keyboard and mouse redirection.

11. The method of claim 9 , wherein the step of selecting one of the options is performed before the step of receiving the second privilege request.

12. The method of claim 9 , wherein the step of selecting one of the options is performed after the step of receiving the second privilege request.

13. The method of claim 12 , further comprising, after performing the first operation and upon receiving a third privilege request requesting for a third KVM session:

selecting another one of the options based on a second user instruction received from the first KVM session; and

performing a second operation based on the selected another one of the options.

14. The method of claim 9 , further comprising: displaying the options of KVM authorities and receiving the first use instruction through a user interface.

15. The method of claim 1 , further comprising:

in response to receiving the second privilege request, sending a warning message corresponding to the selected one of the options.

16. A non-transitory computer readable medium storing computer executable code, wherein the computer executable code, when executed at a processor of a management device, is configured to:

establish a first KVM session in response to a first privilege request;

provide options of KVM authorities;

select one of the options based on a first user instruction received from the first KVM session; and

upon receiving a second privilege request requesting for a second KVM session, perform a first operation based on the selected one of the option;

wherein the options of KVM authorities comprise a deny access option, and when the selected one of the options is the deny access option, the first operation is denying the second privilege request;

wherein the options of KVM authorities comprise a video only option, and when the selected one of the options is the video only option, the first operation is establishing the second KVM session, and the second KVM session allows video redirection but not keyboard and mouse redirection; and

wherein different responses to privilege requests from different users may be automatically defined, such that the video only option may be chosen for users in a same group or requests from a local area network based on IP address, and the deny access option may be chosen for users outside the same group or requests from outside the local area network.

17. The non-transitory computer readable medium of claim 16 ,

wherein the options of KVM authorities further comprise a full access option;

and

wherein when the selected one of the options is the full access option, the first operation is establishing the second KVM session, and the second KVM session allows video, keyboard and mouse redirection.

18. The non-transitory computer readable medium of claim 16 , wherein the computer executable code, when executed at the processor, is further configured to:

in response to receiving the second privilege request, send a warning message corresponding to the selected one of the options.