Systems and methods for securely provisioning the geographic location of physical infrastructure elements in cloud computing environments

A method for provisioning physical geographic location of a physical infrastructure device associated with a hypervisor host, the method comprising:

• invoking one or more attestation service component(s) to issue a unique geo acquisition code that is only valid for a predefined time;
• sending a request for initial geo location data including the acquisition code to a geographic data acquisition component;
• processing the initial geo location data from the geographic data acquisition component in response to the request, the initial geo location data comprising location, date, time data, and the acquisition code, and being signed by a key of the geo data acquisition component;
• performing validation, via the attestation service component(s), of the initial geo location data to provide the verified geo location data upon successful validation;
• writing, via the attestation service component(s), the verified geo location data into the hypervisor host.

A method for provisioning physical geographic location of a physical infrastructure device associated with a hypervisor host, the method comprising:

• invoking one or more attestation service component(s) to issue a unique geo acquisition code that is only valid for a predefined time;
• performing processing regarding utilization of the unique geo acquisition code and secure signature from the attestation service component(s) to obtain initial geo location data from a geographic data acquisition component;
• transmitting the initial geo location data and the signature to the attestation service component(s);
• performing validation, via the attestation service component(s), of the initial geo location data to provide the verified geo location data upon successful validation;
• writing, via the attestation service component(s), the verified geo location data into the hypervisor host.

A system comprising:

• at least one hypervisor host with one or more physical infrastructure devices;
• and
• one or more processing devices and/or computer readable media containing computer readable instructions executable by one or more processors to provision the hypervisor host with actual geographic location information of a physical infrastructure device, the instructions executable for:
• performing processing to obtain initial geo location data of the device, including:
• invoking one or more attestation service component(s) to issue a unique geo acquisition code that is only valid for a predefined time;
• sending a request for the initial geo location data including the acquisition code to a geographic data acquisition component;
• and
• receiving the initial geo location data from the geographic data acquisition component in response to the request, the initial geo location data comprising location, date, time data, and the acquisition code, and being signed by a key of the geo data acquisition component;
• determining verified geo location data of the device by performing validation, via the attestation service component(s), of the initial geo location data to provide the verified geo location data upon successful validation;
• writing, via the attestation service component(s), the verified geo location data into a Hardware Security Module of the hypervisor host.

One or more computer readable media containing computer readable instructions executable by one or more processors to provision a hypervisor host with actual geographic location information of a physical infrastructure device associated with the hypervisor host, the instructions executable for:

• performing processing to obtain initial geo location data of the device, including:
• invoking one or more attestation service component(s) to issue a unique geo acquisition code that is only valid for a predefined time;
• sending a request for the initial geo location data including the acquisition code to a geographic data acquisition component;
• and
• receiving the initial geo location data from the geographic data acquisition component in response to the request, the initial geo location data comprising latitude, longitude, date, time data, and the acquisition code, and being signed by a key of the geo data acquisition component;
• determining verified geo location data of the device by performing validation, via the attestation service component(s), of the initial geo location data to provide the verified geo location data upon successful validation;
• and
• writing, via the attestation service component(s), the verified geo location data into a Hardware Security Module of the hypervisor host.