IP Library Granted Patent US 10,764,287
Granted Patent B2
US 10,764,287 · App. 15/666,944 · Granted Sep 1, 2020

Secure default user account for embedded systems

Inventors: Samvinesh Christopher (Suwanee, GA); Anurag Bhatia (Lilburn, GA); Winston Thangapandian (Suwanee, GA)
Assignee: AMERICAN MEGATRENDS INTERNATIONAL, LLC
H04L63/10H04L61/2015H04L63/08H04L67/306
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,764,287
App. No.
15/666,944
Granted
Sep 1, 2020
Kind
B2
Abstract

In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a service processor. The service processor sends to a DHCP server a request-to-acquire for acquiring an IP address. The service processor then receives a response from the DHCP server. The response includes a first user name. The service processor further configures a user account in association with the first user name on the service processor. The user account allows access to the service processor.

Claims (47)

1. A method of operating a computer system, comprising:

sending, at a service processor of the computer system and to a Dynamic Host Configuration Protocol (DHCP) server, a request-to-acquire for acquiring an Internet Protocol (IP) address;

receiving a response from the DHCP server, the response including a first user name and an IP address assigned to the service processor by the DHCP server;

creating and configuring, at the service processor, a user account in association with the first user name on the service processor, the user account allowing access to the service processor;

receiving a request-to-log-on for logging onto the service processor, the request-to-log-on including user credentials;

determining whether the user credentials include the first user name;

sending the user credentials to an authentication server for authentication in response to a determination that the user credentials include the first user name; and

discarding the request-to-log-on in response to a determination that the user credentials do not include the first user name.

2. The method of claim 1 , wherein the first user name is included in a vendor specific information option of the response.

3. The method of claim 1 , wherein the response further includes an indication to a domain, the method further comprising: selecting the authentication server within the domain.

4. The method of claim 1 , wherein the computer system further includes the DHCP server, the method further comprising:

receiving, at the DHCP server, the request-to-acquire;

preparing the response including the first user name; and

sending the response to the service processor.

5. The method of claim 4 , wherein the request-to-acquire includes a first identifier identifying a vendor class of the service processor, the method further comprising:

determining whether the first identifier contained in the request-to-acquire matches a target identifier of the DHCP server, wherein the first user name is included in the response when the first identifier matches the target identifier.

6. A computer system comprising:

a memory; and

at least one processor coupled to the memory and configured to:

send, at a service processor of the computer system and to a Dynamic Host Configuration Protocol (DHCP) server, a request-to-acquire for acquiring an Internet Protocol (IP) address;

receive a response from the DHCP server, the response including a first user name and an IP address assigned to the service processor by the DHCP server;

create and configure a user account in association with the first user name on the service processor, the user account allowing access to the service processor;

receive a request-to-log-on for logging onto the service processor, the request-to-log-on including user credentials;

determine whether the user credentials include the first user name;

send the user credentials to an authentication server for authentication in response to a determination that the user credentials include the first user name; and

discard the request-to-log-on in response to a determination that the user credentials do not include the first user name.

7. The computer system of claim 6 , wherein the first user name is included in a vendor specific information option of the response.

8. The computer system of claim 6 , wherein the response further includes an indication to a domain, wherein the at least one processor is further configured to select the authentication server within the domain.

9. The computer system of claim 6 , wherein the computer system further includes the DHCP server, wherein the at least one processor is further configured to:

receive, at the DHCP server, the request-to-acquire;

prepare the response including the first user name; and

send the response to the service processor.

10. The computer system of claim 9 , wherein the request-to-acquire includes a first identifier identifying a vendor class of the service processor, wherein the at least one processor is further configured to determine whether the first identifier contained in the request-to-acquire matches a target identifier of the DHCP server, wherein the first user name is included in the response when the first identifier matches the target identifier.

11. A non-transitory computer-readable medium storing computer executable code for operating a computer system, comprising code to:

send, at a service processor of the computer system and to a Dynamic Host Configuration Protocol (DHCP) server, a request-to-acquire for acquiring an Internet Protocol (IP) address;

receive a response from the DHCP server, the response including a first user name and an IP address assigned to the service processor by the DHCP server;

create and configure a user account in association with the first user name on the service processor, the user account allowing access to the service processor;

receive a request-to-log-on for logging onto the service processor, the request-to-log-on including user credentials;

determine whether the user credentials include the first user name;

send the user credentials to an authentication server for authentication in response to a determination that the user credentials include the first user name; and

discard the request-to-log-on in response to a determination that the user credentials do not include the first user name.

12. The non-transitory computer-readable medium of claim 11 , wherein the first user name is included in a vendor specific information option of the response.

13. The non-transitory computer-readable medium of claim 11 , wherein the response further includes an indication to a domain, wherein the code is further configured to select the authentication server within the domain.

14. The non-transitory computer-readable medium of claim 11 , wherein the computer system further includes the DHCP server, wherein the code is further configured to:

receive, at the DHCP server, the request-to-acquire;

prepare the response including the first user name; and

send the response to the service processor.

Assignments (5)
PATENT SECURITY AGREEMENT Recorded Oct 23, 2024
From: AMERICAN MEGATRENDS INTERNATIONAL, LLC
To: BAIN CAPITAL CREDIT, LP, AS ADMINISTRATIVE AGENT AND COLLATERAL AGENT
Reel/Frame 069229/0834 →
RELEASE OF SECURITY INTEREST Recorded Oct 17, 2024
From: MIDCAP FINANCIAL TRUST
To: AMERICAN MEGATRENDS INTERNATIONAL, LLC
Reel/Frame 069205/0795 →
SECURITY INTEREST Recorded May 6, 2019
From: AMERICAN MEGATRENDS INTERNATIONAL, LLC
To: MIDCAP FINANCIAL TRUST, AS COLLATERAL AGENT
Reel/Frame 049087/0266 →
ENTITY CONVERSION Recorded Apr 15, 2019
From: AMERICAN MEGATRENDS, INC.
To: AMERICAN MEGATRENDS INTERNATIONAL, LLC
Reel/Frame 049091/0973 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 2, 2017
From: CHRISTOPHER, SAMVINESH; BHATIA, ANURAG; THANGAPANDIAN, WINSTON
To: AMERICAN MEGATRENDS, INC.
Reel/Frame 043171/0881 →
Continuity (1)
Related Publication 20190044944A1 · Feb 7, 2019