# US 8,474,016 B2 · Secure management access control for computers, embedded and card embodiment > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,474,016 B2 - Document ID: US8474016B2 - Status: Granted - Kind: B2 - Application number: 11/946,976 - Filed: 2007-11-29 - Published: 2008-03-20 - Granted: 2013-06-25 - Earliest claimed: 2002-06-13 - Assignees: Infinite Bay Telecom Limited Liability Company - Applicants: Jeffrey Alan Carley - Inventors: Jeffrey Alan Carley - Web page: https://patentgrep.com/patent/US8474016B2 ## CPC - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F 21/71: to assure secure computing or processing of information - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A computer network management apparatus and method for remotely managing a networked device. The apparatus and method includes a management processor which is in direct communication with the networked device. The apparatus and method provides access for remotely and securely managing a networked device. The apparatus and method further separates management communications from user communications to ensure the security of the management communications. The apparatus and method further includes network and power monitoring and notification systems. The apparatus and method further provides authentication and authorization capabilities for security purposes. ## Claims ### Claim 1 An apparatus, comprising: a processor configured to control one or more functions of a network device having a network interface, wherein the network device is configured to receive data requests and an encrypted form of management requests via the network interface, wherein the management requests are from a remote administrator; a first bus; and a bus controller coupled to the processor via the first bus, wherein the bus controller is also coupled to a second bus of the network device that is distinct from the first bus, wherein the bus controller is configured to receive the encrypted form of the management requests from the second bus, and to convey the encrypted form of the management requests to the processor via the first bus; wherein the processor is configured to decrypt the encrypted form of the management requests, wherein the network device includes a processor configured to facilitate operation of the network device, and wherein the processor of the apparatus is distinct from the processor included in the network device. ### Claim 2 (depends on 1) The apparatus of claim 1, wherein the apparatus is configured to provide a command line interface to the remote administrator, and wherein the apparatus is configured to receive one or more commands to control the one or more functions of the network device. ### Claim 3 (depends on 1) The apparatus of claim 1, wherein the bus controller is a peripheral component interconnect (PCI) controller. ### Claim 4 (depends on 1) The apparatus of claim 1, wherein the apparatus is configured to receive power via a first power circuit, wherein the network device is configured to receive power via a second power circuit, and wherein the apparatus is configured to cycle the power received by the network device via the second power circuit. ### Claim 5 (depends on 4) The apparatus of claim 4, wherein the apparatus is configured to: determine whether the network device is receiving power via the second power circuit; and provide an indication, to the remote administrator, when the network device is not receiving power via the second power circuit. ### Claim 6 (depends on 1) The apparatus of claim 1, wherein the processor is configured to establish a first virtual private network connection with the remote administrator, and wherein the processor is configured to receive the management requests via the first established connection. ### Claim 7 (depends on 6) The apparatus of claim 6, wherein the processor is configured to establish a second virtual private network connection with an access control server configured to authenticate the remote administrator, and wherein the processor is configured to receive, via the second established connection, an indication of whether the remote administrator is authorized to administer the network device. ### Claim 8 (depends on 1) The apparatus of claim 1, wherein the apparatus is configured to implement a firewall that restricts traffic received from the second bus. ### Claim 9 (depends on 1) The apparatus of claim 1, wherein the apparatus is a component within the network device. ### Claim 10 (depends on 1) The apparatus of claim 1, wherein the apparatus is a card configured to be inserted into the network device via a card interface. ### Claim 11 (depends on 1) The apparatus of claim 1, wherein the network device is a network router that includes a plurality of network interfaces, and wherein the processor is dedicated to controlling one or more functions of the network router. ### Claim 12 A method, comprising: receiving, by a bus controller of a management device, an encrypted form of management requests via a first bus of a network device having a network interface, wherein the network device received the encrypted form of the management requests and data requests via the network interface, wherein the management requests are from a remote administrator; conveying the encrypted form of management requests from the bus controller to a processor of management device via a second bus of the management device, wherein the network device includes a processor configured to facilitate operation of the network device, and wherein the processor of the management device is distinct from the processor included in the network device; decrypting, by the processor, the encrypted form of the management requests; and controlling, by the processor, one or more functions of the network device according to the management requests. ### Claim 13 (depends on 12) The method of claim 12, wherein the one or more functions are associated with a domain name service protocol. ### Claim 14 (depends on 12) The method of claim 12, wherein the one or more functions are associated with a network time protocol. ### Claim 15 (depends on 12) The method of claim 12, wherein the one or more functions are associated with a network management protocol. ### Claim 16 (depends on 12) The method of claim 12, further comprising: establishing, by the management device, a virtual private network connection with an access control server configured to authenticate the remote administrator. ### Claim 17 (depends on 12) The method of claim 12, further comprising: receiving, by the management device, additional management requests from the remote administrator via a network interface of the management device, and wherein the additional management requests are not received via the first bus of the network device. ### Claim 18 (depends on 17) The method of claim 17, wherein the network interface of the management device is a telephone-line interface. ### Claim 19 (depends on 12) The method of claim 12, further comprising: receiving, by the management device, power via a first power circuit separate from a second power circuit of the network device; and cycling, by the management device, power from the second power circuit to reset the network device. ### Claim 20 (depends on 12) The method of claim 12, wherein the management device is a card including the processor and the bus controller, wherein the card is configured to be inserted into the network device via a card interface. ### Claim 21 (depends on 12) The method of claim 12, wherein the network device is a network router that includes a plurality of network interfaces, and wherein the processor is dedicated to controlling one or more functions of the network router.