Trusted system network

摘要

A method, system, and computer-readable storage media for granting a device access to a managed group are disclosed. Identification information may be exchanged between a management device in the managed group and a managed device through a secure first channel. If the identification information is verified by the management device, the managed device may be granted access to the managed group through the secure first channel. If access is granted, the managed device may access the managed group through a secure communication session on a network. If the identification information is not verified, the management device may send a cryptographic key to the managed device through the secure first channel. The cryptographic key may be used to create an encrypted communication session between the managed device and management device over the network.

主权项

1. A computer-implemented method to grant a managed device access to a managed group while safeguarding against network sniffing, the computer-implemented method comprising:
exchanging identification information between a management device in the managed group and the managed device through a secure channel comprising a bus operatively connecting only the managed group, wherein the identification information includes at least one of an Internet Protocol (IP) address of the managed device and a universally unique identifier (UUID) of the managed device; upon successfully verifying the identification information by the management device, granting, through the secure channel and not over an unverified network, the managed device access to the managed group, wherein the unverified network comprises a network not verified to safeguard against network sniffing; and upon unsuccessfully verifying the identification information by the management device, exchanging, between the managed device and the management device over the unverified network and through an encrypted communication session established based on a cryptographic key, certificate information in order to grant the managed device access to the managed group; wherein the managed group is not permitted to communicate with any device to which access to the managed group is not granted, wherein once the managed device is granted access, the managed group is accessible to the managed device through a secure communication session on the unverified network, wherein the secure communication session has a greater bandwidth than the secure channel.