# US 7,613,927 B2 · System for providing secure access to KVM switch and other server management systems > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,613,927 B2 - Document ID: US7613927B2 - Status: Granted - Kind: B2 - Application number: 10/988,185 - Filed: 2004-11-12 - Published: 2006-05-18 - Granted: 2009-11-03 - Earliest claimed: 2004-11-12 - Assignees: Raritan Americas, Inc. - Inventors: Jayson Holovacs - Web page: https://patentgrep.com/patent/US7613927B2 ## CPC - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - G06F 21/35: communicating wirelessly - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A secure switching system that utilizes radio frequency identification (RFID) technology to allow only authorized users to access a remote management or keyboard, video, mouse (KVM) switching system. The system includes a plurality of user workstations that allow a user to select, monitor, and operate remote devices using a local keyboard, video monitor, and cursor control device. Coupled to or integrated with the system is an RFID transceiver that detects the presence of RFID tags that are within range of communications. A user workstation is only operable if the RFID transceiver detects a valid RFID tag. ## Claims ### Claim 1 A system for providing secure access to a server management system comprising: a workstation including a video monitor, a keyboard, and a cursor control device for receiving keyboard or cursor control device commands from an authorized workstation user; a switch for coupling said workstation to one or more remote servers, the workstation taking control of at least one of the remote servers when logged on the system via the received keyboard or cursor control commands; and a RFID detection circuit coupled to said workstation for detecting RFID signals from a card associated with the authorized workstation user, the RFID signals being indicative of that authorized user's accessibility to one or more of said remote servers, and the system automatically logging a workstation into one of the remote servers when the authorized user's card RFID signals are in the vicinity of the detection circuit and are detected by the detection circuit and the authorized workstation user enters keyboard or cursor control device command indicative of the authorized workstation user's access and, wherein the system automatically logs a workstation off the remote server-when the authorized workstation user's card RFID signals are no longer in the vicinity of the detection circuit despite the presence of keyboard or cursor control device commands wherein keyboard, mouse and video signals are transmitted to said workstation from at least one of said remote devices when said user has access to said workstation; wherein the authorized user's accessibility is periodically confirmed by detecting signals indicative of the authorized user's presence after an initial login; wherein said RFID signal includes a unique identification number. ### Claim 2 (depends on 1) A system according to claim 1, wherein the RFID detection circuit communicates with a signal generating means capable of generating a signal within a pre-defined vicinity. ### Claim 3 (depends on 2) A system according to claim 2, wherein said vicinity is a pre-defined distance from the detection circuit to the signal generating means. ### Claim 4 (depends on 2) A system according to claim 2, wherein said RFID detection circuit receives said RFID signals from said signal generating means and decodes said signal for user verification. ### Claim 5 (depends on 4) A system according to claim 4, wherein said workstation is inaccessible unless said user verification is confirmed. ### Claim 6 (depends on 1) A system according to claim 1, wherein said switch may be locally or remotely located to said workstation and said remote devices. ### Claim 7 (depends on 1) A system according to claim 1, wherein the at least one remote servers is separated from the workstation by a network selected from the group consisting of the Internet, a local area network (“LAN”), a wide area network (“WAN”), a wireless network, and a modem connection. ### Claim 8 (depends on 1) A system according to claim 1, wherein the system logs out when an authorized user accessibility is not confirmed by detecting signals indicative of the authorized user's presence after an initial login. ### Claim 9 (depends on 1) A system according to claim 1 wherein the system converts the keyboard or cursor control device commands and then emulates such signals and couples them to respective ports on the at least one remote server. ### Claim 10 (depends on 1) A switching system according to claim 1 wherein the workstation communicates using a protocol selected from the group consisting of Universal Serial Bus (“USB”), American Standard Code for Information Interchange (“ASCII”) and Recommended Standard-232 (“RS-232”). ### Claim 11 A secure, remote device management system comprising: a remote management unit for coupling one or more user interface devices to one or more remote devices; and a radio frequency identification (RFID) transceiver coupled to said one or more user interface devices for detecting RFID signals, said signals indicative of an authorized user's accessibility to said system, wherein the one or more user interface devices takes control of the one of more remote devices when logged on the system, the user interface device being logged on the system when RFID signals are detected and the user enters information via the user interface device indicative of the user's access, and the authorized user interface device being logged off the system when the authorized user's RFID signals are no longer detected within a pre-defined range of the RFID transceiver despite the presence of a user input signal to the user interface device wherein keyboard, mouse and video signals are transmitted to at least one said user interface device from at least one of said remote devices when said user has access to said at least one said user interface device; wherein the authorized user's accessibility is periodically confirmed by detecting signals indicative of the authorized user's presence after an initial login; wherein said RFID transceiver communicates with an RFID transponder within the pre-defined range; and wherein said transponder transmits radio frequency signals containing a unique identification number. ### Claim 12 (depends on 11) A system according to claim 11, wherein said transponder transmits said radio frequency signals to an antenna. ### Claim 13 (depends on 12) A system according to claim 12, wherein said antenna communicates with said transceiver. ### Claim 14 (depends on 11) A system according to claim 11, wherein said transceiver receives said radio frequency signals from said transponder and decodes said unique identification number for user verification. ### Claim 15 (depends on 14) A system according to claim 14, wherein said one or more user interface devices is inaccessible unless said user verification from said transponder occurs by said transceiver. ### Claim 16 (depends on 11) A system according to claim 11, wherein said remote management unit may be locally or remotely located to said one or more user interface devices and to said remote device. ### Claim 17 (depends on 11) A system according to claim 11, wherein the system logs out when the authorized user accessibility is not confirmed by detecting signals indicative of the authorized user's presence after an initial login. ### Claim 18 A switching system comprising: a workstation including a keyboard, a video monitor and a cursor control device; a switch for coupling said workstation to one or more remote devices; a radio frequency identification (RFID) transponder; and a radio frequency identification (RFID) transceiver, wherein said transceiver communicates with said workstation to verify an authorized user, further wherein the workstation is logged on the system and takes control of the one or more remote devices when the authorized user is verified and the workstation is logged off the system and denied access to the one or more remote devices when the transceiver does not detect the authorized user's RFID signals within a pre-defined range of the transponder despite workstation user input signals to the keyboard or cursor control device; wherein keyboard, mouse and video signals are transmitted to said workstation from at least one of said remote devices when said user has access to said workstation; and wherein the authorized user's accessibility is periodically confirmed by detecting signals from said transponder in response to activation signals from said transceiver after an initial login; wherein said transceiver sends activation signals; wherein said transponder receives said activation signals from said transceiver when said transponder and said transceiver are within the pre-defined range; wherein said transponder transmits radio frequency signals to said transceiver within the same frequency range as said activation signals from said transceiver; wherein said transceiver receives said radio frequency signals from said transponder; and wherein said radio frequency signals contain a unique identification number. ### Claim 19 (depends on 18) A system according to claim 18 wherein said user workstation is inaccessible unless said radio frequency signals containing said unique identification number are verified by said transceiver. ### Claim 20 (depends on 18) A system according to claim 18, wherein said transceiver demodulates said radio frequency signals from said transponder to extract said unique identification number. ### Claim 21 (depends on 18) A system according to claim 18, wherein said transponder communicates with said transceiver in said pre-defined range. ### Claim 22 (depends on 18) A system according to claim 18, wherein said pre-defined range is some distance from said transponder to said transceiver. ### Claim 23 (depends on 18) A system according to claim 18, wherein said user workstation is inaccessible if said transponder and said transceiver are outside said pre-defined range. ### Claim 24 (depends on 18) A system according to claim 18, wherein the system logs out when the authorized user's accessibility is not confirmed by detecting signals from said transponder in response to activation signals from said transceiver after an initial login. ### Claim 25 (depends on 18) A system according to claim 18 wherein the one or more remote devices are servers, computers or networking equipment. ### Claim 26 (depends on 18) A system according to claim 18 wherein the one or more remote devices are separated from the workstation by a network selected from the group consisting of the Internet, a local area network (“LAN”), a wide area network (“WAN”), a wireless network, and a modem connection. ### Claim 27 (depends on 18) A system according to claim 18 wherein the system converts the keyboard or cursor control device commands and then emulates such signals and couples them to respective ports on the at least one remote server.