TWI414997B - Kvm remote management system providing customized certificate, signature and methoe thereof - Google Patents

Abstract

Disclosed is a KVM remote management system providing customized certificate, signature and method thereof to allow a first computer and a second computer to control at least one accessed computer via a network. The KVM remote system includes a remote control apparatus and a first user terminal program. The remote control apparatus is coupled with the accessed computers. The first user terminal program is loaded on a first computer to provide a user interface. Through the user interface, the first user can combine certificate with a second user terminal program downloaded fro the remote control apparatus or create a signature to accomplish a third user terminal program. The third user terminal program is transmitted to the remote control apparatus via a network and stored. Accordingly, the third user terminal program can be utilized by a second user to manipulate the remote control apparatus.

Description

Remote control system and method for providing user customized credential and signature

The present invention relates to a remote control system, and more particularly to a remote control system and method for providing a user customized credential and signature.

Please refer to Figure 1, which is an explanatory diagram of a simple process in which a general web page requires a user to use a voucher or a signature. A signature is a code embedded in a software that is used by the user to determine security or a tool that indicates the identity of the software publisher. A voucher is generally a certificate issued by a trusted third party (eg, VeriSign) against the issuer's signature to prove that the signature is true and that the software has not been tampered with after the signature. At the same time, when the user accesses the webpage provided by the web server, if the webpage presentation needs to have more control over the user's computer, the signature or the credential needs to be confirmed. The signature or the voucher is also one of the means by which the user allows the web server to perform further control on the user's computer. For example: Microsoft's Active X client program or Sun Microsystems' Java client program. Active X controls are small programs used on the Internet, sometimes called "add-ons." By allowing animations, ActiveX controls can enhance the user's browsing experience, or they can assist users with things like installing "security updates" in "Microsoft Update". Some websites require users to install ActiveX controls before they can view or perform certain tasks on them. When browsing such sites, Microsoft Internet Explorer will first ask the user if they want to install ActiveX controls. Unfortunately, ActiveX controls are similar to any other program and they can be abused. It may cause the computer to malfunction, collect the user's browsing habits and personal information without consent, or provide content that the user does not want, such as a quick advertisement. At the same time, ActiveX controls may allow certain bad websites to use them for malicious purposes.

As shown in FIG. 1, the computer 10 is controlled by the user, and the webpage data is stored in a web server 20, and the two are connected through the network 30. When the user wants to browse the webpage, first, step 1: the user controls the computer 10 to access the web server 20 through the network 30. Then, when the user accesses the server 20 such as the Active X client program or the Java client program, for security reasons or the server needs to obtain further control over the computer 10, step 2: the operating system of the computer 10. Or the web browser will remind the user of the computer 10 that, as shown in Fig. 2, a voucher or signature is required to perform the next access action. Step 3: The user needs to confirm, download and install the voucher. Step 4: Perform an access or operation.

In the remote network-based KVM system, the remote control device provides a user-side program for controlling the computer to use the computer to install the user-side program. The road accesses and controls the controlled computer in the form of a web page. However, these client programs may include Microsoft's Active X client program or Sun's Java client program. Similarly, since the original user terminal program is written by the manufacturer of the remote control system and preloaded in the remote control device for use by the computer used by the user, the certificate is also It is owned by the remote control system manufacturer. When the client program needs to confirm the certificate or signature, the user will see the warning dialog box as shown in Figure 2, and the required confirmation certificate or signature is also owned by the manufacturer of the remote control system. In terms of it, it may cause some doubts about its use. If the user wants to use his or her own voucher and even sign the user-side program with his or her own voucher, he must have information engineering technology and related knowledge. The program is not simple. At present, there is a network-based multi-computer switch. It is also not allowed in the remote management system of the architecture.

One of the main objects of the present invention is to provide a remote control system in which a user of the remote control system can use its own credentials and use the credentials to sign the user program of the remote control system in a simple and secure manner. .

It is still another object of the present invention to provide a method for a user to customize a client-side program credential and signature in a remote control system.

According to the present invention, the remote control system is for causing the first computer and the second computer to control at least one controlled computer via the network. The remote control system of the present invention comprises a remote control device and a first user program. The remote control device is coupled to the at least one controlled computer. The first user program is disposed on the first computer, and the first user program provides a user interface for the user to perform a voucher combination on the second user program downloaded from the remote control device or The third user program is obtained by signing, and the first user program uploads the third user program to the remote control device via the network. The uploaded third user program can be downloaded by the second user of the first computer or the second computer to operate the remote control device.

The present invention also provides a method for a user to use a certificate and a customized signature in a remote control system. The method of the present invention includes the following steps: executing the first user program on a first computer, Providing a user interface; selecting a credential through the user interface; downloading a second user program from the remote control device to the first computer; binding the credential to the second user program or utilizing The voucher, the second user end program is customized to obtain a third user end program; and the third user end program is uploaded to the remote control device for storage for subsequent use.

Please refer to FIG. 3, which is an explanatory diagram of the remote control system of the present invention. The remote control system of the present invention includes a remote control device 100 and a first user program. The remote control device 100 is connected to the first computer 202 and the second computer 204 via the network 300. The remote control device 100 can include a network interface device 400 and a KVM switch 500 (the KVM switch 500 does not have a network interface), and connects the controlled computers 501 to 504 through the KVM switch 500 to make the first computer. 202 and/or the second computer 204 can control and manage the plurality of controlled computers 501-504 via the network 300 and the remote control device 100. The hardware architecture of the network interface device 400 can be implemented by the CN6000 or CN8000 provided by Acer Automation Technology Co., Ltd. Alternatively, in another embodiment, the remote control device 100 is a KVM-over-IP with a network interface, and the first computer 202 or the second computer 204 can pass through the network 300. And the remote control device 100 controls the controlled computers 501 to 504. Alternatively, the remote control device 100 is directly connected to one of the controlled computers 501-504 (for example, 501), so that the first computer 202 or the second computer 204 can be controlled via the network 300 and the remote control device 100. The controlled computer 501 is managed. The hardware architecture of the remote control device 100 can be implemented by KN9108, KN9116, KN2108, KN2116, KN4132, KH1508i or KH1516i provided by Acer Automation Technology Co., Ltd.

The first user terminal program is downloaded from the remote control device 100 or a server (not shown) by the user using the first computer 202. The first client program can include a Java client program or an Active X client program. The user can start the first user program by using the browser, and control the controlled computers 501~504 through the first user program. The first user program also enables the first computer 202 to communicate with the remote control device 100 or the network interface device 400.

Please refer to Figures 3 to 6 together. Figure 4 is a flow diagram of a method of providing a user with a customized certificate in a remote control system. The user using the first computer 202 already has a certificate owned by his company or individual and has been stored in the first computer 202 or other storage device (e.g., a network drive). According to an embodiment of the present invention, the user first downloads and executes the first user terminal program. As shown in FIG. 6, when downloading the first user terminal program, the web browser pops up a warning dialog window ( Security Warning), this warning dialog window is mainly to remind users to pay attention to the publisher of this program, and ask the user to choose whether to continue to install this program (optional to install / refuse to install / ask every time), the program is released at this time Still the manufacturer of the remote control device 100 for this purpose. The first user program provides a user interface. For the user, the user interface can be similar to a file manager (Start/My Computer/Explore) of the Microsoft operating system. One of them is selected as the source of the voucher. The user only needs to select the above-mentioned own certificate stored in the first computer 202 through the user interface, and then the user of the present invention can download one from the remote control device 100 or the network interface device 400. The second client program is to the first computer 202.

The second client program may be identical to the first client program because the first user program is being used by the operating system of the first computer 202 and cannot be signed. The user can combine the above-mentioned own certificate (certificate) with the second client program to obtain a third client program. Then, the third user program can be uploaded to the remote control device 100 or the network interface device 400 for use in the next download. Alternatively, the third user program can be uploaded to the server for downloading the first user program, and then the second user can download the third user program from the server, and the second user can thereby The server performs login to the remote control device 100 or the network interface device 400. When the first user or the second user downloads the third user program, the web browser may still pop up a warning warning window (Security Warning), which mainly reminds the user to pay attention to the release of the program. And ask the user to choose whether to continue to install this program (optional to install / refuse to install / ask every time), but at this time the program publisher has been changed to this first user.

The method of the present invention has the property of executing in the background. In the foregoing process, through the user interface of the present invention, the user does not need to have relevant information engineering knowledge and technology, so that the remote control system can use its own certificate. (certificate) complete the signing process. Moreover, when another user (second user) of the second computer 204 is used to use the browser to control the controlled computers 501 to 504, the third device provided by the network interface device 400 is activated. The user terminal program, that is, the user terminal program that has its own certificate, so that the second user can safely allow the third user program to execute on the second computer 204. The detailed steps of the process of the customized method of the present invention are as follows: Step 210, the first computer 202 executes the first user program to provide a user interface; and in step 220, the first computer is selected through the user interface. The certificate is provided; in step 230, the second user program is downloaded from the network interface device 400 to the first computer 202; in step 240, the certificate is combined with the second user program to obtain the third use. Step 250, uploading the third user program to the network interface device 400; step 260, restarting the network interface device 400, the first user program can be replaced by the third user program; Step 270, after which the network interface device 400 of the present invention is available for another user to download and execute a third user program with a certificate at the first computer 202 or the second computer 204.

In step 230, the source of the second user program is not limited to the network interface device 400, and may be downloaded from the manufacturer's webpage through the network. Moreover, in step 260, restarting the network interface device 400 is one of the actual modes of operation and is not an operation necessary for the method of the present invention. As with the installation of new software programs in a personal computer, it is possible to determine whether a restart is required by the method of customizing the certificate of the present invention in the remote control system. Moreover, the action of replacing the first user terminal program with the second user end program may not be performed, and the first user terminal program is still retained as the preset value of the network interface device 400. Before the third user program has not been uploaded to the network interface device 400, the network interface device 400 provides the first user program or the second user program for the user to download, when the third user program has been uploaded. After the network interface device 400, the network interface device 400 provides a third user program for the user to download.

For example, the first client program, the second client program, and the third client program may include a Java client program or an Active X client program. If the first client program includes the Java client program, the second client program downloaded from the network interface device 400 may be an Active X client program, and vice versa.

Please refer to Figure 3, Figure 4, and Figure 5 together. Figure 5 is a flow chart of the method for authorizing the remote control system signature of the present invention. The user using the first computer 202 already has a certificate owned by his company or individual and has been stored in the first computer 202. According to the present invention, the user can not only use the certificate to authenticate the first user program, but also use the above-mentioned own certificate to sign the second user program to obtain a first Three user-side programs. This signature process uses the signature software or tools provided by Microsoft, but the user does not need to participate excessively. Similarly, the method of the present invention has the property of background execution, that is, through the user interface of the present invention, the user can customize the signature of the remote control system without having relevant information engineering knowledge and technology. The steps of the customized signature method of the present invention are described in detail as follows: Step 310, the first computer 202 executes a first user program to provide a user interface; Step 320, selects a credential through the user interface; 330, downloading the second user terminal program from the network interface device 400 to the first computer 202; step 340, using the credentials, customizing the signature of the second user terminal program to obtain a third user terminal program; Step 350, the third user program is uploaded to the network interface device 400; in step 360, the network interface device 400 is restarted, the first user program can be replaced by the third user program; and step 370, The first computer 202 or a second computer 204 downloads and executes a third user program with a signature. When the second user of the second computer 204 is used, or the user of the first computer wants to use the browser to control the controlled computers 501 to 504, the network interface device 400 is activated. The three-user program, that is, the user-side program that has its own signature. Since this self-signed signature is provided by the user and is not provided by the manufacturer of the remote control system, the user will feel more comfortable using it. In the preferred embodiment of the present invention, the signing process of step 340 can be achieved by the signature tool Signtool or Keytool (for Java) provided by Microsoft Corporation. These signature tools can digitally sign the file and verify the file. Signing and time stamping the file, but it can also be done with any other suitable signing tool. The first user program described above executes the signature tool in the background to complete the signature, so the user does not need to participate excessively.

As also mentioned above, in step 360, restarting the network interface device 400 is one of the actual modes of operation, and is not an essential action. As with the installation of new software programs in a personal computer, it is possible to determine whether a restart is required by the method of customizing the signature of the present invention in the remote control system. Moreover, the first user terminal program may be retained as the preset value of the network interface device 400 without performing the foregoing replacement operation. The first client program, the second client program, and the third client program can both be a Java client program or an Active X client program. If the first client program is a Java client program, the second user program downloaded from the network interface device 400 may be an Active X client program, and vice versa.

While the invention has been described above in terms of preferred embodiments, it is not intended to limit the invention. Various changes and modifications may be made without departing from the spirit and scope of the invention. Therefore, the scope of the invention is defined by the scope of the appended claims.

10. . . computer

20. . . Web server

30. . . network

100. . . Remote control system

202. . . First computer

204. . . Second computer

300. . . network

400. . . Network interface device

500. . . KVM switch

501, 502, 503, 504. . . Controlled computer

Figure 1 is an illustration of a general web page requiring the user to use a voucher or signature.

Figure 2 is a computer operating system that will remind the user to confirm whether or not to accept the voucher dialog box.

Figure 3 is a diagram showing the system relationship of the remote control system of the present invention.

Figure 4 is a flow diagram of a method of providing a user with a customized certificate in a remote control system.

Figure 5 is a flow chart of the method for authorizing the remote control system signature of the present invention.

Figure 6 shows that when downloading the client program, the web browser will pop up a warning dialog window.

Claims (29)

A method for providing a first user to use a certificate in a remote control system, the remote control system having a remote control device and a first user program, the method comprising at least: a computer executing the first user program to provide a user interface; selecting a credential via the user interface; downloading a second user program from the remote control device to the first computer; And combining the second user program to obtain a third user program; and uploading the third user program to the remote control device. The method of claim 1, wherein the voucher is provided by the first user. The method of claim 1, after the step of downloading the second client program, further comprising the step of digitally signing the second client program by using the credential. The method of claim 3, in the step of uploading the third user program, uploading the third user program having the digital signature to customize the remote control device signature. The method of claim 4, after the step of uploading the third user program, further comprising restarting the remote control device for a second computer to download the third use having the signature The steps of the program. The method of claim 5, wherein the first user program is replaced by the third user program after the remote control device is restarted. The method of claim 1, after the step of uploading the third user program, further comprising restarting the remote control device for a second computer to download the third use having the certificate The steps of the program. The method of claim 1, wherein the remote control device is a network type KVM switch (Over-IP KVM). The method of claim 1, wherein the step of binding the voucher to the second client program is to digitally sign the second client program with a signature tool. The method of claim 1, wherein the first client program comprises a Java client program or an Active X client program. The method of claim 1, wherein the second client program comprises a Java client program or an Active X client program. The method of claim 1, wherein the third client program comprises a Java client program or an Active X client program. The method of claim 1, wherein the certificate is a web server certificate. A method for customizing a signature of a remote control system, the remote control system having a remote control device and a first user program, the method comprising: executing the first user program on a first computer Selecting a credential through a user interface provided by the first user program; downloading a second user program from the remote control device to the first computer; using the credential, the second user End program signature, obtaining a third user program; and uploading the third user program to the remote control device. The method of claim 14, after the step of uploading the third user program, the method further includes restarting the remote control device for downloading the third user program by a second computer. step. The method of claim 15, wherein the first user program is replaced by the third user program after the remote control device is restarted. The method of claim 14, wherein the first client program comprises a Java client program or an Active X client program. The method of claim 14, wherein the second client program comprises a Java client program or an Active X client program. The method of claim 14, wherein the third client program comprises a Java client program or an Active X client program. The method of claim 14, wherein the customized voucher is a web server certificate. The method of claim 14, wherein the remote control device is a network-based multi-computer switch (Over-IP KVM). A remote control system includes: a remote control device configured to couple a first computer and a second computer to at least one controlled computer via a network; a first user program executed on the first In a computer, the first user program provides a user interface, so that a first user signs a second user program to obtain a third user program, and the first user terminal The program uploads the third user program to the remote control device via the network for storage. The remote control system of claim 22, wherein the first user program signs the second user program with a certificate provided by the first user. The remote control system of claim 22, wherein the second user terminal program is provided by the remote control device. The remote control system of claim 22, wherein the remote control device comprises a network interface device and a KVM switch. The remote control system of claim 22, wherein the third user program is available for downloading by a second user of the second computer, so that the second computer can manipulate the remote control Device. The remote control system of claim 22, wherein the first client program comprises a Java client program or an Active X client program. The remote control system of claim 22, wherein the second client program comprises a Java client program or an Active X client program. The remote control system of claim 22, wherein the third client program comprises a Java client program or an Active X client program.