IP Library › Granted Patent US 8,348,157
Granted Patent B2
US 8,348,157 · App. 13/255,668 · Granted Jan 8, 2013

Dynamic remote peripheral binding

Assignee: Hewlett-Packard Development Company, L.P.
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,348,157
App. No.
13/255,668
Granted
Jan 8, 2013
Kind
B2
Abstract

Disclosed are systems and methods of dynamic remote peripheral binding. In one embodiment, such a system includes a local system ( 102 ) configured to bind a smart card reader ( 110 ) to the local system ( 102 ). The smart card reader ( 110 ) is configured to extract data from a smart card ( 112 ). The system includes a local authentication engine ( 120 ) that prompts the user for user authentication information associated with the smart card ( 112 ). The local authentication engine ( 120 ) authenticates that the user is associated with the smart card ( 112 ), is authorized to access the user credentials and extracts them from the smart card ( 112 ). A remote access client ( 116 ) module establishes a remote session ( 121 ) from the local system ( 102 ) to a remote system ( 104 ). The local system ( 102 ) unbinds the smart card reader ( 110 ) from the local system ( 102 ) and binds the smart card reader ( 110 ) to the remote system ( 104 ).

Claims (54)

1. A method comprising:

binding a smart card reader to a local system, wherein the smart card reader is to extract data from a smart card;

providing a prompt for authentication information associated with the smart card, wherein the smart card comprises credentials stored thereon;

receiving the authentication information;

conducting authentication operations to authorize access to the credentials;

extracting the credentials from the smart card;

establishing a connection with a remote system;

unbinding the smart card reader from the local system such that the smart card reader is no longer available for use by at least a portion of the local system;

binding the smart card reader to the remote system such that the smart card reader is available for use by at least a portion of the remote system; and

establishing a remote session with the remote system.

2. The method of claim 1 , further comprising employing the extracted credentials to conduct authentication operations with the remote system.

3. The method of claim 1 , wherein conducting authentication operations to authorize access to the credentials comprises extracting a user name from an unencrypted portion of the smart card, querying a database for queried authentication information associated with the user name, and authenticating the received authentication information against the queried authentication information.

4. The method of claim 1 , wherein the credentials are stored in an encrypted portion of the smart card.

5. The method of claim 4 , wherein the credentials are at least one of: a security certificate, a private key, password, and pass phrase.

6. The method of claim 1 , further comprising determining a remote system with which to establish a remote session from a plurality of remote systems.

7. The method of claim 1 , further comprising:

detecting a removal of the smart card; and

employing a security measure, wherein the security measure comprises at least one of: suspending the remote session and terminating the remote session.

8. The method of claim 7 , further comprising:

detecting re-insertion of the smart card in the smart card reader; and

providing a prompt for authentication information associated with the smart card.

9. The method of claim 1 , wherein establishing the connection with the remote system comprises established an anonymous connection with the remote system.

10. A non-transitory computer readable storage medium comprising instructions which when executed cause a local system to:

bind a smart card reader to the local system, wherein the smart card reader is to extract data from a smart card;

provide a prompt for authentication information associated with the smart card, wherein the smart card comprises credentials stored thereon;

receive the authentication information;

conduct authentication operations to authorize access to the credentials;

extract the credentials from the smart card;

establish a connection with a remote system;

unbind the smart card reader from the local system such that the smart card reader is no longer available for use by at least a portion of the local system;

bind the smart card reader to the remote system such that the smart card reader is available for use by at least a portion of the remote system; and

establish a remote session with the remote system.

11. The non-transitory computer readable storage medium of claim 10 , wherein the connection is an anonymous connection.

12. A local system comprising:

a smart card reader to receive a smart card, wherein the smart card comprises credentials stored thereon;

at least one processor; and

at least one memory comprising instructions, which when executed by the at least one processor, cause the local system to

bind the smart card reader to the local system, wherein the smart card reader is to extract data from the smart card;

provide a prompt for authentication information associated with the smart card;

receive the authentication information;

conduct authentication operations to authorize access to the credentials;

extract the credentials from the smart card;

establish a connection with a remote system;

unbind the smart card reader from the local system such that the smart card reader is no longer available for use by at least a portion of the local system;

bind the smart card reader to the remote system such that the smart card reader is available for use by at least a portion of the remote system; and

establish a remote session with the remote system.

13. The local system of claim 12 , wherein the at least one memory comprises further instructions, which when executed by the at least one processor, causes the local system to employ the extracted credentials to conduct authentication operations with the remote system.

14. The local system of claim 12 , wherein the credentials are stored in an encrypted portion of the smart card.

15. The local system of claim 14 , wherein the credentials are at least one of: a security certificate, a private key, password, and pass phrase.

16. The local system of claim 12 , wherein the at least one memory comprises further instructions, which when executed by the at least one processor, causes the local system to determine a remote system with which to establish a remote session from a plurality of remote systems.

17. The local system of claim 12 , wherein the at least one memory comprises further instructions, which when executed by the at least one processor, causes the local system to

detect a removal of the smart card; and

employing a security measure, wherein the security measure comprises at least one of: suspending the remote session and terminating the remote session.

18. The local system of claim 12 , wherein the connection is an anonymous connection.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 22, 2012
From: HOCHMUTH, ROLAND M.; KING, JAMES M.; TROUTMAN, ROY LEE
To: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
Reel/Frame 027741/0425 →
Continuity (1)
Related Publication 20110315763A1 · Dec 29, 2011