Controlled access communication between a baseboard management controller and PCI endpoints

A method comprising:

• at an endpoint device in communication with a bus controller over an internal bus:
• receiving from the bus controller a discovery message requesting a computational value based on the discovery message, wherein the discovery message includes a preconfigured identifier associated with the bus controller;
• authenticating the bus controller based on an operational command received from the bus controller and on the preconfigured identification code, wherein authenticating includes determining whether an identifier associated with the operational command is the same as the preconfigured identifier associated with the bus controller registered as the owner of the internal bus, and when it is determined that the identifier associated with the operational command is the same as the preconfigured identifier associated with the bus controller, classifying the operational command as being authenticated;
• if the bus controller is successfully authenticated, sending to the bus controller, a response message to the discovery message, the response message including the computational value based on the discovery message, wherein the computational value is generated using a predefined algorithm;
• and
• if the bus controller is not successfully authenticated, discarding the discovery message.

A non-transitory computer readable storage media storing executable instructions that are operable in a computing device, to perform operations to:

• send a discovery message to an endpoint device requesting a computational value based on the discovery message, wherein the computational value is generated by the endpoint device using a predefined algorithm and the discovery message includes a preconfigured identification code associated with a bus controller;
• receive, from the endpoint device, a response to the discovery message, wherein the response includes the computational value based on the discovery message when the endpoint device successfully authenticates the bus controller based on the preconfigured identification code;
• authenticate the endpoint device based on the computational value by:
• determining whether the computational value based on the discovery message and generated by the endpoint device using the predefined algorithm equals a computational value based on the discovery message and generated by the bus controller using the predefined algorithm;
• and
• classifying the endpoint device as being authenticated when the computational value generated by the endpoint device using the predefined algorithm is the same as the computational value generated by the bus controller using the predefined algorithm;
• if the endpoint device is successfully authenticated, send an acknowledgment message to the endpoint device and register the endpoint device as being owned by the bus controller;
• and
• if the endpoint device is not successfully authenticated, send a failure message to the endpoint device and log the endpoint device as being unmanageable by the bus controller.