FR2811095A1 - Server with removable memory chip card allowing access control, from client terminal, to the server configuration parameters, in which server code is compared with client code only when they match is client allowed access to server - Google Patents

Abstract

The server processing unit is programmed to carry out a supplementary read operation of a second code (CODE 2), in the first stage, and to carry out an identification operation after establishing a connection with a client terminal. The identification operation compares the read second code with an identification code held by the user of the client terminal and to abandon the connection with the client terminal if the two codes do not correspond. Data server having a processing unit (3) which includes a first communication port (4), designed to be connected to a telecommunication network (2), which is programmed to exchange data with at least a client terminal (Pi) connected to the network. The server has a memory for configuration parameters for particularizing the operation of the server. The processing unit has a second communication port (5) physically separated from the first. The server includes at least a first device (6) connected to the port (5) which allows the processing unit to read data from a memory chip card (7) which can be removed from the device (6). The server has a non volatile rewritable memory. The processing unit is programmed, when data is received on the first port for a connection request, to carry out the following stages: (a) check the presence of the memory support (7) in the first read device (5) and if present read at least a first code (CODE 1) recorded in the chip card; compare the read code with a prerecorded code in the processing unit; if the codes correspond, establish a connection with the client terminal (Pi) which transmitted the connection request and access authorization for this client terminal to all or part of the server configuration parameters; if the codes do not correspond refuse the connection with the client terminal (Pi) which transmitted the connection request

Description

COMPUTER SERVER WITH REMOVABLE MEMORY SUPPORT

  ALLOWING ACCESS CONTROL, FROM A CUSTOMER POST,

  TO THE SERVER CONFIGURATION PARAMETERS, AND

  POSSIBLY A BACKUP OF THESE PARAMETERS

CONFIGURATION

  The present invention relates to the field of computer servers allowing the exchange of data via a telecommunication network with one with one or more client stations, and more particularly relates to the control of access, by a client station, to the configuration parameters of '' a computer server, as well as saving the configuration parameters of a server, in order to

  easy restoration of this configuration.

  In the present text, the term "server" generally designates any computer equipment which makes it possible to centralize and distribute information over a telecommunications network intended for one or more client stations connected to the server. A server generally comprises a processing unit, comprising in RAM at least (basic configuration) operating software also called operating system, allowing it to control the various local resources of the equipment (interface network, data storage units, keyboard, display screen, etc.), and manage the connection and communication with a client workstation, according to a predefined protocol. In addition to this basic configuration, the processing unit of a server comprises one or more application software, which allow the server to offer one or more specific services. Non-exhaustively, examples of servers falling within the scope of the invention may be cited, authentication servers, data servers, mail servers,

  "web" servers, gateway servers, ...

  The term "client workstation" generally designates any IT equipment which can exchange data with a server, via a telecommunications network, according to a communication protocol.

predefined communication.

  The term "telecommunications network" generally designates any means of communication allowing the remote exchange of data between a server and a client station; it can be a local area network (LAN) such as a company's intranet, a long distance network (WAN) such as for example the Internet, or even a set

  of different types of interconnected networks.

  In order to function, any server must be initially configured, this initial configuration can also be modified later. The configuration of a server is usually constituted by a set of parameters, which can be modified, and which allow the operation of the server to be particularized. To this end, the server processing unit includes one or more configuration functions, which allow one or more administrators of the

  server, modify the configuration parameters.

  Today, the trend is to offer turnkey servers that allow you to easily modify the configuration parameters of a server, by offering configuration functions.

  accessible to non-specialist users.

  Also, to facilitate the use of these configuration functions of a server, it is customary today to make them accessible via one or more client workstations connected to the server, and

  acting as a remote configuration station.

  To secure communication between a client configuration station and a server, it is usual to encrypt the data exchanged on the network. Also, a client configuration station is only authorized to access the configuration functions of the server configuration after the server has recognized one or more passwords issued by the client configuration station (for example password past

  identifying the configuration station, password identifying the user).

  These precautions are insufficient, however, and can be easily bypassed by a fraudster who wants to gain unauthorized access to the server configuration functions. It is enough for this fraudster to have access to one of the client workstations on the network and to load a "sniffer" software, having the function of permanently listening to the data circulating on the network, and to divert the password or passwords which are sent over the network by a client configuration station, by passing themselves over to this station for the server, without interfering with the communication between the configuration station and the server. It is then enough to reuse the intercepted passwords, to be able to communicate with the server without real authorization, and to access

  fraudulently to the configuration functions of this server.

  The main purpose of the invention is to propose a simple solution which makes it possible to reliably secure access to the configuration functions of a server by a client configuration station, and

  in particular to prevent the aforementioned fraud.

  To this end the invention relates to a computer server which in known manner comprises a processing unit comprising a first communication port intended to be connected to a telecommunications network, which processing unit is programmed to exchange data by this first communication port with at least one client workstation connected to the network, and has configuration parameters in memory allowing the user to customize the

server operation.

  Characteristically and essentially according to the invention, the processing unit comprises a second communication port physically separate from the first communication port; the server comprises at least a first device which is connected to this second communication port, and which allows the processing unit at least to read data on a medium, removable with respect to the first device, and comprising a non-volatile memory and rewritable; The processing unit is programmed to, in the event of reception on the first communication port of a connection request sent by a client station, carry out the following steps: (a) checking the presence of a memory medium in the first reading device, and in the affirmative reading of at least a first code (CODE 1) recorded in the memory of this medium, (b) comparison of this code read with a code prerecorded in the processing unit, ( c) if the codes correspond, establishment of the connection with the client station that issued the connection request and access authorization for this client station to all or part of the server configuration parameters. (d) and in the contrary refusal of the connection with the client station

  having issued the connection request.

  Another problem with computer servers is the accidental loss of all or part of the server configuration, linked to a hardware failure, a disaster, a handling error, etc. The invention thus also aims to propose a solution to this second problem, by proposing two variant embodiments enabling the configuration of a computer server to be saved,

  for the subsequent restoration of this configuration.

  In a first alternative embodiment, the above-mentioned first device also allows the processing unit to have write access to the memory of a medium present in the first device, and the processing unit is also programmed to , at the end of a session for modifying one or more configuration parameters, automatically make a backup, in the memory of the medium present in the first device, of at least the parameters of

  configuration that have been changed.

  In a second variant embodiment, the server comprises a second device which allows the processing unit to read or write data on a medium, removable with respect to the device, and comprising a non-volatile and rewritable memory; The processing unit is also programmed to, at the end of a session for modifying one or more configuration parameters: (1) automatically make a backup, in the memory of the medium present in the second device, at the less configuration parameters that have been modified, (2) automatically calculate a signature characteristic of the configuration parameters contained in memory on the medium present in the second device, and (3) save this signature in the memory of the present medium

in the first device.

  Other characteristics and advantages of the invention will appear

  more clearly on reading the description below of a variant

  preferred embodiment, which description is given by way of example

  nonlimiting and with reference to the appended drawings in which: - Figure 1 is a block diagram of a client / server architecture, the server being produced in accordance with a preferred embodiment of the invention, and comprising two local reading devices / writing on removable memory media, - Figure 2 is a flowchart of the main steps implemented by a first program which is specific to the server of the invention, and which allows level 1 control, prior to the establishment of the connection with a client workstation (Pi), - and Figure 3 is a flowchart of the main steps implemented by a second program which is specific to the server of the invention, and which allows control of higher levels 2 and 3, after

  establishment of the connection with the client station (Pi).

  FIG. 1 shows a client / server architecture, implementing a specific computer server 1 of the invention, which is usually connected to a plurality of client stations (Po, Pi, P2, etc.), by a telecommunications network 2. The nature of the network is of no importance in the context of the invention; it can be a local area network (LAN) or a long distance network (WAN). The communication protocol for exchanging data via this network between a client station Pi and the server 1 is also of no importance for the invention.

  In the following description, and without limitation of the invention,

  network 2 is a TCP / IP type network, and communication between a client station (Pi) and server 1 is based on a protocol

HTTP communication.

  The server 1 usually comprises a programmable processing unit 3 which is connected to the network 2 by a communication port 4 (network port). The management of the connection and the communication with a client station (Pi) is ensured by a program A stored in random access memory of the processing unit 3, and hereinafter called program

"connection".

  Also, the processing unit 3 usually comprises in random access memory a plurality of configuration parameters which can be modified by one of the client stations (PI). More particularly, the processing unit comprises a plurality of programs (or functions) B usually allowing the modification of one or more parameters (a parameter file being associated with each configuration program), one access level being additionally associated with each configuration program. Examples of configuration parameters for one or more applications: * authentication application: each user of networked resources must be identified in order to assign the rights corresponding to their profile. Some configuration parameters relating to this application are as follows: surname, first name, computer account identity, password, resource group number to which

he is associated.

  * messaging application: in addition to the parameters relating to the authentication application, each user has a mailbox identified by an address. This address is made up of a prefix (generally derived from the composition of the first and last name of the person) and a suffix (the name of the company's domain). The address is therefore in the form prefix @ suffix. In addition, it is possible to associate aliases with this address to allow you to receive e-mails under a different identity. The additional configuration parameters of the messaging application are the address

  (prefix and suffix) and one or more aliases.

  According to a first characteristic of the invention, the processing unit 3 comprises a communication port 5 to which a read / write device 6 is connected, which is capable of receiving a removable memory medium 7. A medium 7 comprises at least one rewritable and non-volatile memory, in which three codes (CODE 1, CODE2, CODE3) have been saved in specific memory zones, accessible in reading by the processing unit 3. In a preferred embodiment, the memory medium 7 will be smart card type, with low memory capacity. It may be a passive type memory medium comprising only memory, or an active type medium, equipped with a microprocessor, advantageously allowing local processing and control of the information exchanged with the reading device / write 5, which allows for example to provide local data encryption on the support 7. The device 6 allows the processing unit 3 at least to read access to the three codes saved in the memory of a support 7 present in the device 5. Also, in the alternative embodiment illustrated in FIG. 1, the device 6 allows the processing unit 3 to write access to the memory of a support 7 present in the device 6, with a view to saving a signature in a specific memory area, calculated by the processing unit at the end of the configuration session, as will appear more

clearly later.

  It is essential for the invention that the communication port 5 is physically separated from the communication port 4 (network port), so that the data exchanged between the processing unit 3 and the read / write device 6, does not do not transit on network 2, and do not

  cannot be intercepted by a fraudster connected to the network 2.

  The type of communication port 5 is of no importance for the invention; it can be an RS232 type serial port, an IEEE parallel port, a USB port, a 12C port, a bus, a proprietary interface, or generally any interface allowing the exchange of data in reading and preferably in writing between the processing unit 5 and a

  memory medium 7 present in the device 6.

  According to a second characteristic of the invention, the processing unit 3 comprises a communication port 8 to which a read / write device 9 is connected, which is capable of receiving a removable memory medium 10. All of the above considerations on the device 6, on the communication port 5 and on the memory medium 7 also apply to the read / write device 9, to the communication port 8 and to the memory medium 10, with the difference that the memory medium 10 is necessarily accessible by writing by the processing unit 3. In addition, the memory of the removable medium 10 is intended to contain the configuration parameters of the server which are automatically saved by the processing unit 3 at the end of the configuration session, as will appear more clearly later. In practice, it is therefore necessary to have a larger memory capacity than that necessary for the memory of the medium 7. The memory capacities of the smart cards being to date too low, we will use as memory medium 10, for example and so no

  limitative of the invention, a pcmia card, or a flash card.

  Control of access to server parametrake programs (or functions) B A particular software variant for the implementation of access control to server parametrization programs (or functions) B, via a Pi client workstation , will now be detailed with reference to the flowcharts of Figures 2 and 3. In this alternative embodiment, this access control is carried out on three levels. The first access level is controlled by a specific program C loaded into the RAM of the processing unit 3, and hereinafter referred to as the "control" program. The level 2 and 3 controls are provided by the "connection" program A and by the setting programs B. Level 1 controls / figure 2 Each memory user (network administrator) authorized to change the configuration parameters of server 1 is assigned a memory medium 7, a memory medium 10 being shared by several users, and generally always placed in the read / write device 9. For a given server 1, all the supports 7 allocated to different users have in memory the same first authorization code (CODE1), this first code also being loaded in RAM of the processing unit 3 of the server 1, during the initial installation phase of the server. The other two codes (CODE2 and CODE3) will be specific for a given user. In particular, the third code (CODE3) makes it possible to code the level of access of the user to the parameters of configuration of the server, a user being able according to the case to have read and / or write access to a number more or less

  important configuration settings.

  To access configuration programs B, for which he has authorization (CODE3), the user (or a third party when the connection stations are geographically very far from the server 1, network 3 being a network of type WAN) begins with insert, in the read / write device 6, the memory medium 7 which has been allocated to it, the memory medium 10 already being in place in the read / write device 9. Then the user requests a connection request to the server, via one of the client workstations, which results in the client station sending an HTTP request over network 2 to

  the processing unit 3 of the server 1.

  At the level of the processing unit 3, the “control” program C is a system routine which remains pending on the network port 4, and which is responsible for taking into account the HTTP requests sent by a client station Pi on the network 3. This "control" program is activated when an HTTP request requests it to initiate a dialogue with the Pi client machine.

  having made the request on the network 2.

  Step 201: Once activated, the “control” program verifies via its communication port 5 that a medium is present in the read / write device 6. If this is not the case, the control program refuses to establish the connection with the client station, and informs the client station of this

refusal (step 207).

  Step 202: If the presence of a memory medium 7 has been detected, the "control" program has read access, via its communication port 5 and the device 6, to the three areas of the memory of this medium containing the three codes d 'authorization (CODE 1, CODE2, and CODE3) and

  saving in memory of the processing unit 3 these three codes.

  Step 203: the “control” program automatically compares the first code read (CODE1) on the support 7, with the code prerecorded in the memory of the processing unit during the installation phase. When these two codes correspond (it can act from an equality relationship or any other predefined relationship between the two codes), the "control" program goes to step 204, and if not refuses the connection

(step 207).

  Step 204: The "control" program gives the authorization to access the higher levels of control (levels 2 and 3) and activates the connection program "by passing the other two codes as parameters

(CODE2 and CODE3).

  Step 205: In the background, the "control" program checks the

  presence of the support 7 in the read / write device 6.

  Step 206: When the presence of a support 7 is no longer detected (removal of the support 7), the "control" program removes the authorization to access the upper control levels (levels 2 and 3), and disconnects the "connection" program, the latter automatically terminating the connection with the Pi set, in case it

would still be active.

  Level 2 and 3 controls / figure 3 Once activated, the "connection" program performs the steps described

  below with reference to Figure 3.

  Step 301: the "connection" program establishes the connection with the Pi client station. The connection procedure, which depends on the protocol used, is

  usual and therefore will not be detailed.

  Step 302: the "connection" program sends to the Pi 2 o connected client station a request to enter an authorization code. This entry operation can be manual (keyboard), or automatic (for example reading a code which is recorded on a third memory medium inserted in a reader locally equipping the station

Pi client).

  Step 303: the code entered manually or automatically at the client station Pi is sent via the network 2 to the processing unit 3 of the server 1, and is retrieved by the "connection" program. The latter compares this code with the second code (CODE 2). If the codes do not match, the "connection" program abandons the connection, which has been established (step 308). If the codes match, the "connection" program authorizes the opening of a configuration session (step 304) for the user of the Pi client workstation, with as

  parameter of this session the third code (CODE3).

  Step 304: configuration session Once the configuration session is open, the user can access all the configuration programs (or functions) B, which are associated with an access level corresponding to the third code (CODE3). During this transfer, the user by means of the configuration functions usually made available to him, modifies the configuration of the server 1, by modifying certain configuration parameters to which the third code (CODE3) gives him access. Once the user has completed his modifications, he validates for the unit of

  processing 3 of the server 1 the end of the configuration session.

  Step 305: Once the "connection" program is informed via the network 2 of the end of the configuration session, it saves the network configuration parameters on the removable medium 10 present in the read / write device 9, as well as the date and time of the backup. Depending on the case, all of the server configuration parameters may be saved on the medium 10, or only the parameters which have been modified during

the configuration session.

  Step 306: the “connection” program calculates a signature which is characteristic of the state of the configuration saved on the medium, and saves this signature on the removable medium 7 present in the read / write device 6. This signature is for example calculated from the number of data (number of bytes) saved in the memory medium 10 in step 305, as well as the date and time of saving. Saving the configuration performed on the removable medium advantageously makes it possible to easily restore the last configuration of the server 1, in the event of a failure. This restoration can be carried out on the same server 1 if it can again be made operational, or on another similar server in the opposite case, knowing that the memory media 7 and 10 are removable. During a restoration of the configuration, the processing unit 3 of the server is programmed to read the signature saved on the medium 7, and to check the consistency between this signature and the configuration saved on the medium 10. Only a user having the two removable media 7 and 10 is able to restore the server configuration. Once the verification has been carried out, the processing unit 3 automatically downloads all the parameters of

  configuration stored on the memory medium 10.

  The variant embodiment which has just been described with reference to FIGS. 1 to 3 is characterized by the use of two separate removable memory media 7 and 10. This characteristic is however not limitative of the invention. Indeed, in another alternative embodiment, it is possible to use only one and the same support

  removable memory fulfilling the functions of the supports 7 and 10.

Claims (7)

  51. Computer server (1) comprising a processing unit (3) which comprises a first communication port (4) intended to be connected to a telecommunications network (2), which is programmed to exchange data by this first communication port communication with at least one client station (Pi) connected to the network, and which includes configuration parameters in memory allowing the operation of the server to be specified, characterized in that the processing unit (3) comprises a second communication port ( 5) physically separate from the first communication port (4), in that the server comprises at least a first device (5) which is connected to this second communication port (5), and which allows the processing unit ( 3) at least to read data on a support (7), removable with respect to the first device, and comprising a non-volatile and rewritable memory, and in that the processing unit (3) is programmed for, in c ace of reception on the first communication port (4) of a connection request, carry out the following steps: (a) checking the presence of a memory medium (7) in the first reading device (5), and in the affirmative reading of at least a first code (CODE 1) recorded in the memory of this medium, (b) comparison of this code read with a code prerecorded in the processing unit, (c) if the codes correspond , establishment of the connection with the client station (Pi) having issued the connection request and access authorization for this client station to all or part of the parameters of server configuration.   (d) and in the contrary refusal of the connection with the client station (Pi)   having issued the connection request.   2. Server according to claim 1 characterized in that the processing unit is programmed to perform in step (a) an additional operation of reading a second code (CODE 2) stored in the memory of the support (7) , and to carry out an identification operation after establishing a connection with a client station, which identification operation consists in comparing the second code read with an identification code entered by the user of the client station, and in abandoning the connection with the client computer if these two codes do not match.   3. Server according to claim 1 or 2 characterized in that each configuration function is characterized by an access level, in that the processing unit is programmed to perform in step (a) an additional reading operation a third code (CODE 3) saved in the memory of the support (7), and to authorize the client station to access only the configuration parameters, the   access level corresponds to the third code read.   4. Server according to one of claims 1 to 3 characterized in that the   first device (6) also allows the processing unit (3) to have write access to the memory of a medium (7) present in the first device, and in that the processing unit (3 ) is also programmed for, at the end of a session for modifying one or more configuration parameters (configuration session), automatically performing a backup, in the memory of the medium (7) present in the first device, at least parameters   that have been changed.   5. Server according to one of claim there 3 characterized in that the first device (6) also allows the processing unit (3) to have write access to the memory of a support (7) present in the device, in that it comprises a second device (9) which allows the processing unit (3) to read or write data on a support (10), removable relative to the device (9), and comprising a non-volatile and rewritable memory, and in that the processing unit (3) is also programmed for, at the end of a session for modifying one or more configuration parameters ( configuration session): (1) automatically save, in the memory of the support (10) present in the second device (9), at least configuration parameters which have been modified, (2) automatically calculate a signature characteristic of the configuration parameters contained in memory on the support (10) p resent in the second device, and (3) save this signature in the memory of the support (7) present in the first device (6).   6. Server according to claim 5 characterized in that the signature is calculated from the date and time of backup and the number of data saved in the memory medium (10) present in the second device (9).   7. Server according to one of claims 1 to 6 characterized in that the   memory medium (7) is of the smart card type.