IP Library › Granted Patent US 7,559,092
Granted Patent B2
US 7,559,092 · App. 11/839,372 · Granted Jul 7, 2009

Secured KVM switch

Assignee: Dell Products L.P.
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,559,092
App. No.
11/839,372
Filed
Aug 15, 2007
Granted
Jul 7, 2009
Kind
B2
Art Unit
2437
USPC
726/34
Abstract

A method supports secure input/output (I/O) communications between an I/O device and a data processing system via a keyboard, video, and mouse (KVM) switch. An example embodiment includes the operations of establishing a first secure communication channel between the KVM switch and the I/O device and establishing a second secure communication channel between the KVM switch and the data processing system. In addition, I/O data may be received at the KVM switch from the I/O device via the first secure communication channel. In response to receipt of the I/O data from the I/O device, the I/O data may be transmitted from the KVM switch to the data processing system via the second secure communication channel. Embodiments may also include support for non-secure channels between the KVM switch and nonsecured I/O devices, nonsecured data processing systems, or both.

Claims (43)

1. A method for supporting secure communications between an I/O device and a data processing system via a keyboard, video, and mouse (KVM) switch, the method comprising:

the KVM switch establishing a first secure communication channel between the I/O device and an emulated virtual secured data processing system corresponding to the data processing system;

the KVM switch establishing a second secure communication channel between the data processing system and an emulated virtual secured I/O device corresponding to the I/O device; and

facilitating transmission of data between the I/O device and the data processing system via the KVM switch and the first and second secure communication channels.

2. The method of claim 1 , wherein the data processing system comprises a first data processing system, the method further comprising:

establishing a third secure communication channel between the KVM switch and a second data processing system;

receiving a control command to switch from the first data processing system to the second data processing system;

after receiving the control command, receiving subsequent data at the KVM switch from the first I/O device via the first secure communication channel; and

in response to receiving the subsequent data from the first I/O device at the KVM switch via the first secure communication channel, transmitting the subsequent data from the KVM switch to the second data processing system via the third secure communication channel.

3. The method of claim 1 , wherein the data transmitted via the first secure communication channel comprises encrypted data.

4. The method of claim 1 , wherein the data transmitted via the second secure communication channel comprises encrypted I/O.

5. The method of claim 1 , wherein establishing a first secure communication channel between the I/O device and the emulated virtual secured data processing system comprises exchanging persona information between the I/O device and the emulated virtual secured data processing system.

6. The method of claim 1 , wherein establishing a second secure communication channel between the data processing system and the emulated virtual secured I/O device comprises passing a key between the data processing system and the emulated virtual secured I/O device.

7. The method of claim 1 , wherein establishing a first secure communication channel between the I/O device and the emulated virtual secured data processing system comprises passing a key between first I/O device and the emulated virtual secured data processing system.

8. A keyboard, video, and mouse (KVM) switch that supports secure communications between an I/O device and a data processing system, the KVM switch comprising:

a first port operable to communicate with the I/O device;

a second port operable to communicate with the data processing system;

security logic that establishes:

a first secure communication channel between the I/O device and an emulated virtual secured data processing system corresponding to the data processing system;

a second secure communication channel between the data processing system and an emulated virtual secured I/O device corresponding to the I/O device; and

switching logic that facilitates transmission of data between the I/O device and the data processing system via the KVM switch and the first and second secure communication channels.

9. The KVM switch of claim 8 , wherein the KVM switch receives the data via the first or second secure communication channel as encrypted data, or transmits the data via the first or second secure communication channel as encrypted data, or both.

10. The KVM switch of claim 8 , wherein:

the security logic further establishes a third secure communication channel between the KVM switch and a second data processing system in communication with the KVM switch; and

the switching logic, in response to receiving (a) a control command to switch from the data processing system to the second data processing system and (b) subsequent data from the I/O device, transmits the subsequent data to the second data processing system via the third secure communication channel.

11. The KVM switch of claim 8 , wherein the KVM switch establishes the first secure communication channel between the emulated virtual secured data processing system and the I/O device in response to receiving a key from the I/O device.

12. The KVM switch of claim 8 , wherein the KVM switch establishes the second secure communication channel between the emulated virtual secured I/O device and the data processing system in response to receiving a key from the data processing system.

13. The KVM switch of claim 8 , wherein the KVM switch also supports a non-secure channel between the KVM switch and at least one non-secured data processing system or non-secured I/O device.

14. An information handling system that supports secure communications between an I/O device and a data processing system via a keyboard, video, and mouse (KVM) switch, the information handling system comprising:

a data processing system;

an input/output (I/O) device; and

a keyboard, video, and mouse (KVM) switch in communication with the data processing system and the I/O device;

security logic for the KVM switch that establishes:

a first secure communication channel between the I/O device and an emulated virtual secured data processing system corresponding to the data processing system;

a second secure communication channel between the data processing system and an emulated virtual secured I/O device corresponding to the I/O device; and

switching logic for the KVM switch that facilitates transmission of data between the I/O device and the data processing system via the KVM switch and the first and second secure communication channels.

15. The information handling system of claim 14 , wherein the data transmitted via at least one of the first and second secure communication channels comprises encrypted data.

16. The information handling system of claim 14 , wherein the security logic for the KVM switch further establishes a third secure communication channel between the KVM switch and a second data processing system in communication with the KVM switch; and

the switching logic for the KVM switch, in response to receiving (a) a control command to switch from the data processing system to the second data processing system and (b) subsequent data from the I/O device, transmits the subsequent data to the second data processing system via the third secure communication channel.

17. The information handling system of claim 14 , wherein the KVM switch maintains a secure communication channel between the data processing system and the KVM switch despite the I/O device switching to a different data processing system in communication with the KVM switch.

18. The information handling system of claim 14 , wherein the KVM switch also supports a non-secure channel between the KVM switch and at least one non-secured data processing system or non-secured I/O device.

19. The information handling system of claim 14 , wherein the KVM switch establishes the first secure communication channel between the emulated virtual secured data processing system and the I/O device in response to receiving a key from the I/O device.

20. The information handling system of claim 14 , wherein the KVM switch establishes the second secure communication channel between the emulated virtual secured I/O device and the data processing system in response to receiving a key from the data processing system.

Assignments (15)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (045455/0001) Recorded May 20, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC); EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC
Reel/Frame 061753/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (040136/0001) Recorded Apr 26, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC); EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC
Reel/Frame 061324/0001 →
RELEASE OF SECURITY INTEREST Recorded Nov 3, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL, L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; WYSE TECHNOLOGY L.L.C.
Reel/Frame 058216/0001 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
SECURITY AGREEMENT Recorded Mar 21, 2019
From: CREDANT TECHNOLOGIES, INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 049452/0223 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 040134/0001 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 040136/0001 →
RELEASE OF SECURITY INTEREST Recorded Sep 14, 2016
From: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
To: DELL MARKETING L.P.; ASAP SOFTWARE EXPRESS, INC.; APPASSURE SOFTWARE, INC.; COMPELLENT TECHNOLOGIES, INC.; CREDANT TECHNOLOGIES, INC.; DELL INC.; DELL PRODUCTS L.P.; DELL USA L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; PEROT SYSTEMS CORPORATION; SECUREWORKS, INC.; WYSE TECHNOLOGY L.L.C.
Reel/Frame 040040/0001 →
RELEASE OF SECURITY INTEREST Recorded Sep 14, 2016
From: BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
To: DELL MARKETING L.P.; ASAP SOFTWARE EXPRESS, INC.; APPASSURE SOFTWARE, INC.; COMPELLENT TECHNOLOGIES, INC.; CREDANT TECHNOLOGIES, INC.; DELL INC.; DELL PRODUCTS L.P.; DELL USA L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; PEROT SYSTEMS CORPORATION; SECUREWORKS, INC.; WYSE TECHNOLOGY L.L.C.
Reel/Frame 040065/0618 →
RELEASE OF SECURITY INTEREST Recorded Sep 13, 2016
From: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
To: DELL MARKETING L.P.; ASAP SOFTWARE EXPRESS, INC.; APPASSURE SOFTWARE, INC.; COMPELLANT TECHNOLOGIES, INC.; CREDANT TECHNOLOGIES, INC.; DELL INC.; DELL PRODUCTS L.P.; DELL USA L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; PEROT SYSTEMS CORPORATION; SECUREWORKS, INC.; WYSE TECHNOLOGY L.L.C.
Reel/Frame 040065/0216 →
PATENT SECURITY AGREEMENT (ABL) Recorded Jan 2, 2014
From: DELL INC.; APPASSURE SOFTWARE, INC.; ASAP SOFTWARE EXPRESS, INC.; BOOMI, INC.; COMPELLENT TECHNOLOGIES, INC.; CREDANT TECHNOLOGIES, INC.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL USA L.P.; FORCE10 NETWORKS, INC.; GALE TECHNOLOGIES, INC.; PEROT SYSTEMS CORPORATION; SECUREWORKS, INC.; WYSE TECHNOLOGY L.L.C.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 031898/0001 →
PATENT SECURITY AGREEMENT (TERM LOAN) Recorded Jan 2, 2014
From: DELL INC.; APPASSURE SOFTWARE, INC.; ASAP SOFTWARE EXPRESS, INC.; BOOMI, INC.; COMPELLENT TECHNOLOGIES, INC.; CREDANT TECHNOLOGIES, INC.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL USA L.P.; FORCE10 NETWORKS, INC.; GALE TECHNOLOGIES, INC.; PEROT SYSTEMS CORPORATION; SECUREWORKS, INC.; WYSE TECHNOLOGY L.L.C.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 031899/0261 →
PATENT SECURITY AGREEMENT (NOTES) Recorded Jan 2, 2014
From: APPASSURE SOFTWARE, INC.; ASAP SOFTWARE EXPRESS, INC.; BOOMI, INC.; COMPELLENT TECHNOLOGIES, INC.; CREDANT TECHNOLOGIES, INC.; DELL INC.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL USA L.P.; FORCE10 NETWORKS, INC.; GALE TECHNOLOGIES, INC.; PEROT SYSTEMS CORPORATION; SECUREWORKS, INC.; WYSE TECHNOLOGY L.L.C.
To: BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS FIRST LIEN COLLATERAL AGENT
Reel/Frame 031897/0348 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 20, 2007
From: ANSON, DOUGLAS M.; LOWERY, JAMES C.; MOLSBERRY, FRANK H.
To: DELL PRODUCTS L.P.
Reel/Frame 019718/0089 →
Continuity (2)
Continuation 1037919300 · Mar 4, 2003
Related Publication 20070283450A1 · Dec 6, 2007