Back to results
US 12,574,281 B2Granted
Secure management of access to host device remote management functionality
AssigneeHewlett-Packard Development Company, L.P.
InventorsDouglas Reynolds, Peter Seiler, Eric John Gressman, Patrick S. Anderson, J. Michael Stahl, Byron A. Alcorn, Gregory Mark Hughes
Life of this patent
Estimating the term…
Abstract
A gateway device includes a host-facing network interface to connect to a network interface of a host device at which remote management functionality of the host device is exposed. The gateway device includes a network-facing network interface to connect to a network. The gateway device includes a processor, and a memory storing program code executable by the processor to securely manage access over the network to the remote management functionality of the host device.
Claims17
A gateway device comprising:
- a processor;
- a host-facing network interface to connect to a network interface of a host device at which remote management functionality of the host device is exposed;
- a network-facing network interface to connect to a network;
- a first network port to expose remote functionality of the host device, wherein the first network port is open at the network interface of the host device and at the host-facing network interface, and wherein the first network port is closed at the network-facing network interface;
- a network switch to drop first incoming network traffic received over the network at the network-facing network interface that is determined by the gateway device to be unrelated to the remote management functionality of the host device and to route second incoming network traffic determined by the gateway device to be related to the remote management functionality of the host device to the processor of the gateway device,
- wherein the processor is to:
- receive the second incoming network traffic, and
- route the second incoming network traffic to the host-facing network interface;
- and
- a memory storing program code executable by the processor to securely manage access over the network to the remote management functionality of the host device,
- wherein the network-facing network interface is to receive a client request from a client device on a second network port over which the remote functionality is not exposed,
- wherein the gateway device is further to:
- determine that the client request received over the network is in a format not understandable by the host device and is related to the remote management functionality of the host device;
- grant the client request;
- in response to granting the client request, generate a host request corresponding to the client request and in a format that is understandable by the host device;
- and
- send, via the host-facing network interface, the host request to the host device to permit the client device access to the remote management functionality of the host device in accordance with the client request.
14 more elements
A non-transitory computer-readable data storage medium storing program code that when executed by a gateway device cause the gateway device to perform processing comprising:
- receiving, via a network-facing network interface of the gateway device, a client request from a client device on a first network port over which remote functionality is not exposed to access remote management functionality of a host device connected to a host-facing network interface of the gateway device;
- exposing, at a second network port, remote functionality of the host device, wherein the second network port is open at a network-facing network interface of the host device and at the host-facing network interface of the gateway device, and wherein the second network port is closed at the network-facing network interface of the gateway device;
- determining, by the gateway device, that the client request received over the network is in a format not understandable by the host device and is related to the remote management functionality of the host device;
- granting the client request;
- in response to granting the client request, generating a host request corresponding to the client request and in a format that is understandable by the host device;
- sending, by the gateway device, via the host-facing network interface, the host request to the host device to permit the client device access to the remote management functionality of the host device in accordance with the client request;
- receiving, by a network switch of the gateway device, incoming network traffic;
- routing, by the network switch, a portion of the incoming network traffic to a processor of the gateway device, wherein the portion of the incoming network traffic is related to the remote management functionality of the host device;
- and
- routing, by the processor, the portion of the incoming network traffic to the host device.
7 more elements
Dependencies are inferred from the claim text.