Secure remote access
View Patent ↗A remote maintenance board (RMB) that interfaces a monitored system with a communications network is either functionally connected to the monitored system or to the communications network, but never to both at the same time, thereby isolating the monitored system from unauthorized access via the communications network.
1. A method comprising:
interdisposing a remote maintenance board between a communications medium and a monitored system, wherein the remote maintenance board communicates with a remote maintenance center through the communication medium, and wherein the monitored system has a first state and a second state;
during the first state, the remote maintenance board receiving a heartbeat signal from the monitored system;
in response to the first state of the monitored system, the remote maintenance board connecting to the monitored system while receiving the heartbeat signal;
also in response to the first state of the monitored system and concurrently with the remote maintenance board connecting to the monitored system, the remote maintenance board disconnecting from the communications medium to prevent the communications medium from communicating with the monitored system;
the remote maintenance board determining that the heartbeat signal is no longer being received;
in response to determining that the heartbeat signal is no longer being received, the remote maintenance board recognizing the second state, where the second state indicates that the monitored system has malfunctioned:
in response to the malfunction of the monitored system, the remote maintenance board communicating with the remote maintenance center by connecting to the communications medium while the heartbeat signal is not being received; and
also in response to the malfunction of the monitored system and concurrently with the remote maintenance board communicating with the remote maintenance center, the remote maintenance board disconnecting from the monitored system to prevent the communications medium from communicating with the monitored system while the heartbeat signal is not being received.
2. The method of claim 1 further comprising:
while connected to the monitored system, the remote maintenance board communicating with the monitored system; and
while connected to the communications medium, the remote maintenance board communicating over the communications medium.
3. The method of claim 2 wherein:
the remote maintenance board communicating with the monitored system comprises:
the remote maintenance board performing maintenance and diagnostics functions on the monitored system; and
the remote maintenance board communicating over the communications medium comprises:
the remote maintenance board communicating with a remote maintenance center to receive maintenance and diagnostics information.
4. The method of claim 1 wherein:
connecting to the monitored system and at a same time disconnecting from the communications medium comprises:
closing a first switch to connect a functional element of the remote maintenance board with the monitored system and at a same time opening a second switch to disconnect the functional element of the remote maintenance board from the communications medium; and
connecting to the communications medium and at a same time disconnecting from the monitored system comprises:
opening the first switch to disconnect the functional element of the remote maintenance board from the monitored system and at a same time closing the second switch to connect the functional element of the remote maintenance board with the communications medium.
5. The method of claim 4 wherein:
closing a first switch and at a same time opening a second switch comprises:
enabling a first transceiver and at a same time disabling a second transceiver; and
opening the first switch and at a same time closing the second switch comprises:
disabling the first transceiver and at a same time enabling the second transceiver.
6. A non-transitory computer-readable storage medium storing instructions which, when executed by the computer, cause the computer to perform the method of one of claims 1 - 5 .
7. An apparatus comprising:
a remote maintenance board for interfacing with a monitored system and with a communications medium, the remote maintenance board comprising:
a memory;
a processor in communication with the memory, the processor is adapted to:
receive a heartbeat signal from the monitored system;
while the heartbeat signal is being received from the monitored system, determine that the monitored system is in a first state;
respond to a first state of the monitored system by connecting to the monitored system and at a same time disconnecting from the communications medium to prevent the communications medium from communicating with the monitored system;
determine that the heartbeat signal is no longer being received;
in response to determining that the heartbeat signal is no longer being received, transition to a second state, where the second state indicates that the monitored system has malfunctioned;
respond to the malfunction of the monitored system by connecting to the communications medium and at a same time disconnecting from the monitored system to prevent the communications medium from communicating with the monitored system, wherein the remote maintenance board communicates with a remote maintenance center through the communications medium while in the second state;
determine that the heartbeat signal is again being received; and
respond to receiving the heartbeat signal again by transitioning back to the first state.
8. The apparatus of claim 7 further comprising:
the monitored system in communication with the remote maintenance board; and
the communications medium in communication with the remote maintenance board.
9. The apparatus of claim 7 wherein the remote maintenance board is adapted to:
communicate with the monitored system while connected to the monitored system; and
communicate over the communications medium while connected to the communications medium.
10. The apparatus of claim 7 wherein the remote maintenance board is adapted to:
perform maintenance and diagnostics functions on the monitored system while connected to the monitored system communicate with a remote maintenance and diagnostics entity while connected to the communications medium.
11. The apparatus of claim 7 wherein the remote maintenance board comprises:
a first switch and a second switch;
a functional element; and
the remote maintenance board is adapted to:
close the first switch to connect the functional element with the monitored system and at a same time to open the second switch to disconnect the functional element from the communications medium; and
open the first switch to disconnect the functional element from the monitored system and at a same time to close the second switch to connect the functional element to the communications medium.
12. The apparatus of claim 11 wherein:
the first and the second switch respectively comprise a first and a second transceiver; and
the remote maintenance board is adapted to enable one of the first and the second transceiver and at a same time to disable another of the first and the second transceiver.
13. The apparatus of claim 11 wherein:
the first and the second switch respectively comprise a first and a second bus switch; and
the remote maintenance board further comprises a communications bus for connecting the functional element to the monitored system through the first bus switch and for connecting the functional element to the communications medium through the second bus switch.