Secure login information

Patent metadata

Field	Value
Publication number	US-10749858-B2
Application number	US-201515744515-A
Country	US
Kind code	B2
Filing date	Sep 4, 2015
Priority date	Sep 4, 2015
Publication date	Aug 18, 2020
Grant date	Aug 18, 2020

Abstract

An example device includes a processor coupled to a network and a memory coupled to the processor. The memory includes computer code for causing the processor to establish a secure connection between a manageability application and an interconnect device, the interconnect device being in communication with a newly connected networked device; and securely communicate, from the manageability application to the interconnect device, temporary login information for the networked device.

First claim

What is claimed is:

1. A first device comprising:
a processor; and
a non-transitory storage medium comprising computer code executable on the processor to:
establish a secure connection between a manageability application in the first device and an interconnect device;
discover, based on accessing information from the interconnect device, a networked device that is newly connected, wherein the manageability application in the first device is to communicate with the networked device through the interconnect device;
securely communicate, from the manageability application to the interconnect device, temporary login information for the networked device;
responsive to a login at the networked device based on the temporary login information being successful, replace the temporary login information with new login information for subsequent use in logging into the networked device; and
manage, by the manageability application, the networked device.

2. The first device of claim 1 , wherein the computer code is executable on the processor to:
establish a second secure connection between the manageability application and the networked device using the temporary login information; and
replace the temporary login information with the new login information over the second secure connection.

3. The first device of claim 1 , wherein the computer code is executable on the processor to securely connect to the interconnect device by logging into the interconnect device to authenticate the manageability application in the first device prior to communicating the temporary login information.

4. The first device of claim 3 , wherein the computer code is executable on the processor to receive an acknowledgement message from the interconnect device, the acknowledgement message indicating that the networked device has received the temporary login information from the interconnect device.

5. The first device of claim 1 , wherein the temporary login information comprises a username and a password.

6. The first device of claim 1 , wherein the computer code is executable on the processor to:
send, to the networked device, a secure message to replace the temporary login information with the new login information.

7. The first device of claim 1 , wherein the temporary login information comprises a network address to be used by a management processor of the networked device, and wherein the computer code is executable on the processor to:
log into the management processor using the temporary login information based on sending a message to the network address.

8. A method comprising:
discovering, by an administration device based on accessing information at an interconnect device, a newly connected device in a network, the newly connected device being newly connected to the interconnect device;
securely communicating, by the administration device with the interconnect device over the network, initial login information for the newly connected device;
waiting a delay period subsequent to the communicating, and after the delay period, establishing, by the administration device, a secure connection with the newly connected device over the network using the initial login information;
responsive to a login at the newly connected device based on the initial login information being successful, changing the initial login information, via the secure connection, to new login information for subsequent use by the administration device in logging into the newly connected device; and
managing, by the administration device, the newly connected device.

9. The method of claim 8 , wherein the securely communicating comprises encrypting the initial login information using a shared secret key or a trusted certificate to establish a trust between the administration device and the newly connected device using the interconnect device as a proxy.

10. The method of claim 8 , further comprising securely connecting to the interconnect device by logging the administration device into the interconnect device to authenticate a manageability application of the administration device prior to communicating the initial login information.

11. The method of claim 8 , wherein the delay period is to allow the newly connected device to retrieve the initial login information from the interconnect device prior to the administration device establishing the secure connection with the newly connected device.

12. The method of claim 11 , further comprising receiving, by the administration device, an acknowledgement message from the interconnect device, the acknowledgement message indicating that the newly connected device has received the initial login information from the interconnect device.

13. The method of claim 8 , wherein the initial login information comprises a username and a password.

14. The method of claim 8 , comprising:
sending, by the administration device to the newly connected device, a secure message to change the initial login information to the new login information.

15. The method of claim 8 , wherein the initial login information comprises an Internet Protocol (IP) address to be used by a management processor of the newly connected device, and wherein the method comprises:
logging, by the administration device, into the management processor using the initial login information based on sending a message to the IP address.

16. A non-transitory computer-readable medium comprising instructions that upon execution cause a first device to:
discover, based on accessing information at an interconnect device, a networked device that is newly connected to the interconnect device;
securely communicate, to the interconnect device using a manageability application in the first device, initial login information for the networked device;
establish a secure connection between the manageability application and the networked device using the initial login information;
responsive to a login at the networked device based on the initial login information being successful, replace the initial login information with new login information for subsequent use by the first device in logging into the networked device; and
manage, using the manageability application, the networked device.

17. The non-transitory computer-readable medium of claim 16 , wherein the instructions upon execution cause the first device to securely connect to the interconnect device by logging the first device into the interconnect device to authenticate the manageability application of the first device prior to communicating the initial login information.

18. The non-transitory computer-readable medium of claim 16 , wherein the instructions upon execution cause the first device to wait a delay period prior to establishing the secure connection with the networked device.

19. The non-transitory computer-readable medium of claim 18 , wherein the instructions upon execution cause the first device to receive an acknowledgement message from the interconnect device, the acknowledgement message indicating that the networked device has received the initial login information from the interconnect device.

20. The non-transitory computer-readable medium of claim 16 , wherein the initial login information comprises a network address to be used by a management processor of the networked device, and wherein the instructions upon execution cause the first device to:
log into the management processor using the initial login information based on sending a message to the network address.

Assignees

• Hewlett Packard Entpr Dev Lp

Inventors

• Goodrum Alan
• Shivanna Suhas
• Koenen David
• SCHOELLER Patrick

Classifications

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L67/141

  Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) · CPC title

• H04L63/0823 Primary

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title