System and method for providing a seamless and secure access to management and monitoring systems

1. A method for a host to provide a seamless and secure access to a management and monitoring system to a mobile device, the method comprising:

subsequent to establishment of a secure short-range wireless network connection with the mobile device, establishing a peer-to-peer wireless network connection including:

receiving and storing, by the host, a secure shell public key from the mobile device;

generating a host fingerprint and randomly identifying a port number for the peer-to-peer wireless network connection;

transmitting a media access control address, the port number, and the host fingerprint to the mobile device through the secure short-range wireless network connection;

disabling network traffic through other ports associated with the peer-to-peer wireless network connection;

receiving an access request from the mobile device on the port number of the peer-to-peer wireless network connection subsequent to the mobile device authenticating the media access control address and the host fingerprint;

determining whether the mobile device is authentic through a secure shell negotiation based on the secure shell public key; and

in response to the determining that the mobile device is authentic, identifying a group owner of the peer-to-peer wireless network connection based on a negotiation with the mobile device; and

subsequent to the establishing the peer-to-peer wireless network connection, communicating packets with the mobile device on the port number of the peer-to-peer wireless network connection, wherein outbound packets are encrypted and inbound packets are decrypted to securely tunnel the packets.

2. The method of claim 1 , further comprising in response to the determining that the mobile device is not authentic, disabling the peer-to-peer wireless network connection.

3. The method of claim 1 , further comprising receiving a peer-to-peer wireless network connection request from the mobile device on the port number through a secure shell tunnel.

4. The method of claim 1 , wherein the disabling the network traffic through the other ports includes generating firewall rules.

5. The method of claim 1 , wherein the peer-to-peer wireless network connection is a secure Wi-Fi Direct network connection.

6. The method of claim 1 , further comprising transmitting security credentials to the mobile device via the secure short-range wireless network connection.

7. The method of claim 1 , further comprising disabling password authentication with the mobile device.

8. The method of claim 1 , further comprising enabling certificate based authentication with the mobile device.

9. An information handling system, comprising:

a wireless management controller including a first wireless network interface and a second wireless network interface, wherein the first wireless network interface is used to establish a secure short-range wireless network connection between a management controller and a mobile device, and wherein the second wireless network interface is used to establish a peer-to-peer wireless network connection between the management controller and the mobile device;

the management controller configured to establish the peer-to-peer wireless network connection which includes to:

authenticate the mobile device through secure shell negotiation;

subsequent to the authentication of the mobile device, the management controller is further configured to:

randomly identify a port number for the peer-to-peer wireless network connection; and

disable network traffic through other ports associated with the peer-to-peer wireless network connection;

transmit a media access control address, the port number, and a host fingerprint to the mobile device through the secure short-range wireless network connection;

receive access request from the mobile device on the port number of the peer-to-peer wireless network connection after the mobile device authenticated the media access control address and the host fingerprint; and

subsequent to the establishment of the peer-to-peer wireless network connection, to communicate packets with the mobile device on the port number of the peer-to-peer wireless network connection, wherein outbound packets are encrypted and inbound packets are decrypted to securely tunnel the packets.

10. The information handling system of claim 9 , wherein the management controller is further configured to receive the access request via a secure shell session.

11. The information handling system of claim 9 , wherein the management controller is further configured to disable the second wireless network interface if the access request is not received from the mobile device within a timeout period.

12. The information handling system of claim 9 , wherein the management controller is further configured to detect that the peer-to-peer wireless network connection is lost subsequent to the mobile device dropping the peer-to-peer wireless network connection.

13. The information handling system of claim 9 , wherein the management controller is further configured to shut down a Wi-Fi Direct radio of the wireless management controller subsequent to a receipt of a notification from the mobile device via the secure short-range wireless network connection to shut down the Wi-Fi Direct radio.

14. A non-transitory computer readable medium storing instructions that when executed cause a processor to:

authenticate a mobile device by verifying a secure shell public key received from the mobile device through a first wireless network connection;

subsequent to the authentication of the mobile device, establish a second wireless network connection with the mobile device that further causes the processor to:

transmit a generated host fingerprint with a media access control address and a randomly identified port to the mobile device through the first wireless network connection;

disable network traffic through ports other than the randomly identified port; and

receive an access request from the mobile device on the randomly identified port of the second wireless network connection; and

subsequent to the establishment the second wireless network connection, to communicate packets to the mobile device on the randomly identified port of the second wireless network connection, wherein outbound packets are encrypted and inbound packets are decrypted to securely tunnel the packets.

15. The non-transitory computer readable medium of claim 14 , further storing instructions, that when executed by the processor, cause the processor to add the secure shell public key to a list of authorized public keys.

16. The non-transitory computer readable medium of claim 14 , wherein the access request is received via a secure shell session.

17. The non-transitory computer readable medium of claim 14 , further storing instructions, that when executed by the processor, cause the processor to drop the second wireless network connection if the processor fails to receive the access request from the mobile device within a timeout period.

18. The non-transitory computer readable medium of claim 14 , further storing instructions, that when executed by the processor cause the processor to send the generated host fingerprint to the mobile device via the second wireless network connection.

19. The non-transitory computer readable medium of claim 14 , further storing instructions, that when executed by the processor, cause the processor to drop the second wireless network connection upon detection that the second wireless network connection is lost.

20. The non-transitory computer readable medium of claim 14 , further storing instructions, that when executed by the processor cause the processor to drop the second wireless network connection upon detection that the mobile device added another device to the second wireless network connection.