Patent ID: 7421735
Filing Date: 2008-09-02
Classification: H04L,H04W

Abstract:
1. A system, for securing communication between a wireless input device (WID) and a proxy server for wirelessly administering at least one managed computer via said proxy server, said proxy server being trusted by said at least one managed computer, said proxy server having access to an encrypted service database for storing information respecting said WID and information respecting at least one user of said WID, said wireless device being constructed and adapted to create and transmit an encoded message, said message including at least one command for at least one managed computer, wherein said at least one command corresponds to and is distinct form one or more operating system (OS) commands for said at least one managed computer, said proxy server constructed and adapted to receive and decode said message, to authenticate said wireless device and to authorize said commands, and to send said one or more OS commands from said proxy server to at least one managed computer, the system comprising: a WID identifier for said WID, said WID identifier being stored in an encrypted form on said WID and said WID identifier being stored unencrypted in said service database, a WID password for said WID, said WID password being stored in an encrypted form on said WID and in said service database, a secret key pre-shared between said WID and said proxy server, a site key for encrypting said service database and for decrypting said WID password stored in an encrypted form in said service database, a communications key algorithm using both said WID identifier and said WID password, for generating a communications key, a first message for the purpose of said WID requesting a connection to said proxy server, said first message comprising a first message part and a second message part, said first message part including said WID identifier encrypted with said secret key, and said second message part including at least one encoded command for said at least one managed computer and parameters for said at least one command, wherein said command corresponds to and is distinct form one or more OS commands for said at least one managed computer, said second message part encrypted with said communications key, a session key for encrypting messages after a session is established, at least one token for validating messages within a session, and a second message for the purpose of said proxy server providing to said WID said token and said session key, said second message encrypted with said communications key, where upon the receipt of said token and said session key said WID is enabled to provide at least one further message to said proxy server by returning said token within said message to said proxy server.