IP Library › Granted Patent US 10,433,168
Granted Patent B2
US 10,433,168 · App. 14/978,053 · Granted Oct 1, 2019

Method and system for combination wireless and smartcard authorization

Inventor: Yen-Ping Tung (Taoyuan, TW)
Assignee: QUANTA COMPUTER INC.
H04W12/06G06F21/34H04L9/3226H04L9/3234
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,433,168
App. No.
14/978,053
Granted
Oct 1, 2019
Kind
B2
Abstract

A system, method, and non-transitory computer-readable medium for a combination wireless and smartcard login authentication is disclosed. The method discloses validating a smartcard to yield a validation and establishing, based on the validation, a wireless connection with a remote device. The method can further include receiving a smartcard passcode verifying the smartcard passcode to yield a verification, and authorizing, based on the verification and at the server, the remote device access to a baseboard management controller of the server.

Claims (90)

1. A method for a combination wireless and smartcard login authentication, the method comprising:

detecting, by a baseboard management controller (BMC) of a server, a smartcard being inserted into a USB adapter of the server, the BMC being a specialized microcontroller coupled to one or more motherboards of the server, and configured to manage an interface between server hardware and server management software, and enable a system administrator to remotely monitor the server;

in response to the detecting, enabling smartcard authorization on the BMC;

validating, by the BMC, the smartcard to yield a validation;

establishing, by the BMC, a wireless connection with a remote device based on the validation;

in response to the establishing, receiving, by the BMC, a smartcard passcode from the smartcard;

verifying, by the BMC, the smartcard passcode to yield a verification;

in response to the verifying, authorizing, by the BMC, the remote device access to the BMC based on the verification;

generating, at the BMC, a random number;

transferring, from the BMC, the random number to the smartcard; and

receiving, at the BMC, an encrypted random number from the smartcard, wherein the encrypted random number is encrypted by the smartcard based upon the random number.

2. The method of claim 1 , the further comprising:

receiving, at the server, an encrypted passcode, wherein the encrypted passcode is an encrypted random number generated from the random number; and

storing, by the BMC, the encrypted passcode as the smartcard passcode.

3. The method of claim 1 , the verifying further comprising:

transmitting, from the server, the smartcard passcode, wherein the smartcard passcode is encrypted; and

receiving, at the server, a successful verification when the decrypted smartcard passcode is equal to a previously stored random number.

4. The method of claim 1 , further comprising:

receiving, at the server, login credentials for a console session;

authenticating, at the server, the login credentials; and

transmitting, from the server, the smartcard passcode, wherein the smartcard passcode is encrypted.

5. The method of claim 4 , further comprising:

receiving, at a second server, the login credentials for the console session;

authenticating, at the second server, the login credentials; and

receiving, at the second server, the encrypted smartcard passcode.

6. The method of claim 1 , further comprising:

receiving login credentials;

authenticating the login credentials;

transmitting the smartcard passcode; and

enabling smartcard authorization.

7. The method of claim 1 , wherein the USB adapter is connected to the BMC via a USB host of the BMC.

8. A server for a combination wireless and smartcard login authentication, the server comprising:

a processor;

a baseboard management controller (BMC), the BMC being a specialized microcontroller coupled to one or more motherboards of the server, and configured to manage an interface between server hardware and server management software, and enable a system administrator to remotely monitor the server; and

a memory coupled to the processor to store instructions, which when executed by the processor, cause the BMC to perform operations of:

detect, by the BMC, a smartcard being inserted into a USB adapter of the server;

in response to the detecting, enable smartcard authorization on the BMC;

validate, by the BMC, the smartcard to yield a validation;

establish, by the BMC, a wireless connection with a remote device based on the validation;

in response to the establishing, receive, by the BMC, a smartcard passcode;

verify, by the BMC, the smartcard passcode to yield a verification;

in response to the verifying, authorize, by the BMC, the remote device access to the BMC based on the verification;

generate, at the BMC, a random number;

transfer, from the BMC, the random number to the smartcard; and

receive, at the BMC, an encrypted random number from the smartcard, wherein the encrypted random number is encrypted by the smartcard based upon the random number.

9. The server of claim 8 , wherein the memory stores further instructions which when executed by the processor cause the processor to perform further operations of:

receive an encrypted passcode, wherein the encrypted passcode is an encrypted random number generated from the random number; and

store, by the BMC, the encrypted passcode as the encrypted passcode.

10. The server of claim 8 , wherein the memory stores further instructions which when executed by the processor cause the processor to perform further operations of:

transmit the smartcard passcode, wherein the smartcard passcode is encrypted; and

receive a successful verification when the decrypted smartcard passcode is equal to a previously stored random number.

11. The server of claim 8 , wherein the memory stores further instructions which when executed by the processor cause the processor to perform further operations of:

receive login credentials for a console session;

authenticate the login credentials; and

transmit the smartcard passcode, wherein the smartcard passcode is encrypted.

12. The server of claim 11 , wherein the memory stores further instructions which when executed by the processor cause the processor to perform further operations of:

receive, at a second server, the login credentials for the console session;

authenticate, at the second server, the login credentials; and

receive, at the second server, the encrypted smartcard passcode.

13. The server of claim 8 , wherein the memory stores further instructions which when executed by the processor cause the processor to perform further operations of:

receive login credentials;

authenticate the login credentials;

transmit the smartcard passcode; and

enable smartcard authorization.

14. A non-transitory computer-readable medium containing instructions that, when executed by a processor of a server, causes a baseboard management controller (BMC) of the server to perform operations of;

detect, by the BMC, a smartcard being inserted into a USB adapter of the server, the BMC being a specialized microcontroller coupled to one or more motherboards of the server, and configured to manage an interface between server hardware and server management software, and enable a system administrator to remotely monitor the server;

in response to the detecting, enable smartcard authorization on the BMC;

validate, by the BMC, the smartcard to yield a validation;

establish, by the BMC, a wireless connection with a remote device based on the validation;

in response to the establishing, receive, by the BMC, a smartcard passcode;

verify, by the BMC, the smartcard passcode to yield a verification;

in response to the verifying, authorize, by the BMC, the remote device access to the BMC based on the verification;

generate, at the BMC, a random number;

transfer, from the BMC, the random number to the smartcard; and

receive, at the BMC, an encrypted random number from the smartcard, wherein the encrypted random number is encrypted by the smartcard based upon the random number.

15. The non-transitory computer-readable medium of claim 14 , contains further instructions which when executed by the processor cause the processor to perform further operations of:

receive an encrypted passcode, wherein the encrypted passcode is an encrypted random number generated from the random number; and

store, by the BMC, the encrypted passcode as the smartcard passcode.

16. The non-transitory computer-readable medium of claim 14 , contains further instructions which when executed by the processor cause the processor to perform further operations of:

transmit the smartcard passcode, wherein the smartcard passcode is encrypted; and

receive a successful verification when the decrypted smartcard passcode is equal to a previously stored random number.

17. The non-transitory computer-readable medium of claim 14 , contains further instructions which when executed by the processor cause the processor to perform further operations of:

receive login credentials for a console session;

authenticate the login credentials; and

transmit the smartcard passcode, wherein the smartcard passcode is encrypted.

18. The non-transitory computer-readable medium of claim 14 , contains further instructions which when executed by the processor cause the processor to perform further operations of:

receive login credentials;

authenticate the login credentials;

transmit the smartcard passcode; and

enable smartcard authorization.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 22, 2015
From: TUNG, YEN-PING
To: QUANTA COMPUTER INC.
Reel/Frame 037348/0929 →
Continuity (1)
Related Publication 20170180987A1 · Jun 22, 2017
Cited By (1)
US 12,301,706