EP0520709A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
A method for providing a security facility for remote systems management
Assignee: Digital Equipment Corp
•
Filing: 1992-06-19
•
Granted: —
•
Expires: 2012-06-19
Abstract
Abstract This invention consists of a method for providing security for distributing management operations among components of a computer network using a network of mutually trusting, mutually authenticating management services to dispatch operations to selected host systems. Mutual authentication and trust are established on every transmission link from a point of submission to a designated management server which invokes a service provider to perform management operations on a selected host.
Inventors
- 👤 Ram Sudama
- 👤 David Michael Griffin
- 👤 Brad C. Johnson
- 👤 Dexter Sealy
- 👤 James Shelhamer
- 👤 Owen Harold Tallman
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-31 00:11
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/41; G06F21/44; G06F21/445; G06F2211/00; G06F2211/009
Claims Analysis
Total Claims: 11
Claim 1
Independent Claim
110 words
A method for providing security for a data processing network having (i) a plurality of management servers connected by transfer links for communicating operations to be performed and a (ii) data base of trusted relations for identifying that a trusted relation exists between communicatively linked management servers, comprising the steps of: retrieving from the database of trusted relations the identity of a trusted management server for receiving the operation to be performed; sending the operation to be performed from one of the management servers to the identified trusted receiving management server; and verifying by the trusted receiving management server the existence of a trusted relation with the sending management server.
Claim 2
Independent Claim
162 words
A method for providing security for a data processing network having at least an originating management server for providing a point of submission for an operation to be performed from a user and a final management server coupled to a host designated to perform the function described in the operation, and a database identifying the host designated to perform the function described in the operation and containing a list of links which form a path from the originating management server to the final management server, comprising the steps of: receiving by the originating management server an operation to be performed; identifying the final management server; identifying a trusted path from the originating management server to the final management server; transferring the operation on the path between the originating management server and the final management server in accord with the relations contained within the database; and verifying by the final management server the existence of a trust relation with the originating management server.
Claim 3
Dependent Claim
147 words
The method of claim 2 wherein each link on the path from the originating management server to the final management server is a trusted link for which a trusted relation exists between each sending and receiving management server further comprising the steps of: retrieving from the database of trusted relations the identity of a trusted management server for receiving the operation to be performed; sending the operation to be performed from one of the management servers to the identified trusted receiving management server; and verifying by the trusted receiving management server the existence of a trust relation with the sending management server, further comprising the step of mutual authentication between the sending management server and the trusted receiving management server, further comprising the step of verifying by the host the authority of a user to submit the operation specifying a function to be performed by the host.
Claim 4
Dependent Claim
38 words
The method of claim 3 further comprising the step of verifying by the host the existence of a trust relation with the final management server, further comprising the step of authenticating by the host the final management server.
Claim 5
Independent Claim
178 words
A method for providing security for a data processing network having at least an originating management server for providing a point of submission for an operation to be performed from a user and a final management server coupled to a host designated to perform the function described in the operation, and a database identifying the host designated to perform the function described in the operation and containing a list of links which form a trusted path from the originating management server to the final management server, comprising the steps of: receiving by the originating management server an operation to be performed; identifying the final management server; identifying a trusted path from the originating management server to the final management server; retrieving by the originating management server the identity of the final management server; transferring the operation on a trusted link between the originating management server and the final management server in accord with the trusted relations contained within the database; and verifying by the final management server the existence of a trust relation with the originating management server.
Claim 6
Dependent Claim
76 words
A method for providing security for a data processing network according to claim 5, including retrieving by a sending intermediate management server the identity of the final management server; transferring the operation on a trusted link between the sending intermediate management server to the final management server in accord with the trusted relations contained within the database; and verifying by the final management server the existence of a trust relation with the sending intermediate management server.
Claim 7
Dependent Claim
96 words
The method of claim 6 wherein said at least one communicatively coupled intermediate management server includes at least two communicatively coupled intermediate management servers, wherein said method further comprises the steps of: retrieving by a sending intermediate management server the identity of a receiving intermediate management server; transferring the operation on a trusted link between the sending intermediate management server and the receiving intermediate management server in accord with the trusted relations contained within the database; and verifying by the receiving intermediate management server the existence of a trust relation with the sending intermediate management server.
Claim 8
Dependent Claim
50 words
The method of claim 6 further comprising the step of mutual authentication between the sending management server and the trusted receiving management server, further comprising the step of verifying by the host the authority of a user to submit the operation specifying a function to be performed by the host.
Claim 9
Dependent Claim
38 words
The method of claim 8 further comprising the step of verifying by the host the existence of a trust relation with the final management server, further comprising the step of authenticating by the host the final management server.
Claim 10
Independent Claim
303 words
A method for providing security for performing a composite operation involving a plurality of hosts on a data processing network having at least an originating management server for providing a point of submission for a composite operation to be performed from a user; a coordinating management server for receiving the composite operation for a first host for performing the function described in the composite operation; a final management server for a second host; and a database identifying the first host designated to perform the function described in the composite operation and the second host for performing the operation sent from the first host and containing a list of links which form paths from the originating management server to the coordinating management server and from the coordinating management server to the final management server, comprising the steps of: receiving by the originating management server a composite management operation to be performed; identifying the coordinating management server; identifying a trusted path from the originating management server to the coordinating management server; transferring the composite operation on the path between the originating management server and the coordinating management server in accord with the relations contained within the database; verifying by the coordinating management server the existence of a trust relation with the originating management server; transferring the composite operation from the coordinating management operation to the first host; submitting by the first host a command to be performed by a second host; identifying the final management server; identifying a second trusted path from the coordinating management server to the final management server; transferring the command on the second path between the coordinating management server and the final management server in accord with the relations contained within the database; and verifying by the final management server the existence of a trust relation with the coordinating management server.
Claim 11
Dependent Claim
118 words
The method of claim 10 wherein the links on the path from the originating management server to the coordinating management server and the path from the coordinating management server to the final management server are trusted links for which a trusted relation exists between each sending and receiving management server on each trusted link further comprising the steps of: retrieving from the database of trusted relations the identity of a trusted management server for receiving the operation to be performed; sending the operation to be performed from one of the management servers to the identified trusted receiving management server; and verifying by the trusted receiving management server the existence of a trust relation with the sending management server.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.