Techniques of encrypting BMC and bios firmware and data in flash memory
AssigneeAmerican Megatrends International, LLC
InventorsSamvinesh Christopher, Anurag Bhatia, Winston Thangapandian
Life of this patent
Estimating the term…
Abstract
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is a BMC. The BMC receives data to be written to a storage. The BMC encrypts the data using a stream encrypt engine to generate encrypted data. The BMC writes the encrypted data to the storage. The BMC receives encrypted data read from the storage. The BMC decrypts the encrypted data using a stream decrypt engine to generate decrypted data. The BMC provides the decrypted data to a component of the BMC.
Claims14
A method of operation of a baseboard management controller (BMC), the method comprising:
- routing data to be written from a first hardware component of the BMC or a host of the BMC to a storage through a hardware data encrypt/decrypt component positioned in-line between the first hardware component and the storage, wherein the hardware data encrypt/decrypt component is separate from and external to the first hardware component;
- encrypting the data using a stream encrypt engine of the hardware data encrypt/decrypt component to generate encrypted data;
- writing the encrypted data to the storage;
- routing encrypted data read from the storage to the first hardware component through the hardware data encrypt/decrypt component;
- and
- decrypting the encrypted data using a stream decrypt engine of the hardware data encrypt/decrypt component to generate decrypted data.
A baseboard management controller (BMC) comprising:
- a hardware data encrypt/decrypt component positioned in-line between a first hardware component and a storage, wherein the hardware data encrypt/decrypt component is separate from and external to the first hardware component, the hardware data encrypt/decrypt component comprising:
- a stream encrypt engine configured to encrypt data to be written to the storage;
- and
- a stream decrypt engine configured to decrypt encrypted data read from the storage;
- a memory;
- and
- a processing unit coupled to the memory and configured to:
- route data to be written from the first hardware component to the storage through the hardware data encrypt/decrypt component including providing the data to the stream encrypt engine for encryption, wherein the stream encrypt engine provides the encrypted data to the storage;
- and
- route encrypted data read from the storage to the first hardware component through the hardware data encrypt/decrypt component including providing the encrypted data to the stream decrypt engine for decryption.
Dependencies are inferred from the claim text.