US 2019/0318131 A1Published application

Methods and system for high volume provisioning programmable logic devices with common and unique data portions

AssigneeAkamai Technologies, Inc.

InventorMarin S. Lulic

Life of this patent

Estimating the term…

Loading patent…

Abstract

Among other things, this document describes systems, devices, and methods for responding to the detection of tampering with a remotely deployed computer, such as a server in a network data center. In one embodiment, the computer can be equipped with various tamper detection mechanisms, such as proximity sensors or circuitry triggered when the server's case is opened and/or internal components are moved or altered. Tamper detection can invoke an automated trust revocation mechanism. When tampering is detected, the computer hardware can automatically prevents access to, and/or use of, a previously stored authentication key. Consequently, the computer cannot authenticate to a remote entity, such as a network operations center and/or another computer in a distributing computing system. In some embodiments, the computer remains operable so that administrators can communicate with the server and/or extract information therefrom, although the computer will be treated as entrusted.

Claims19

Dependent claims

A method for configuring each of a plurality of programmable logic devices with a configuration comprising a common set of data and a unique set of data, where the unique set of data is small relative to the overall size of the configuration, the method comprising:

with one or more provisioning servers:
receiving a configuration file comprising a first set of data and a second set of data, the first set of data being designated as a common set of data;
for a first programmable logic device:
generating a first copy of the configuration file, and modifying the second set of data to include a first authentication key that will be unique to a first programmable logic device, while retaining the common set of data;
storing the first copy of the configuration file into a database for subsequent transmission to a first memory device associated with the first programmable logic device;
for a second programmable logic device:
generating a second copy of the configuration file, and modifying the second set of data to include a second authentication key that will be unique to a second programmable logic device, while retaining the common set of data;
storing the second copy of the configuration file into the database for subsequent transmission to a second memory device associated with the second programmable logic device.

5 more elements

A system for configuring each of a plurality of programmable logic devices with a configuration comprising a common set of data and a unique set of data, where the unique set of data is small relative to the overall size of the configuration, the system comprising:

one or more provisioning servers that include circuitry providing one or more processors and one or more memory devices storing computer program instructions for operating the provisioning server to:
A. at a first time during a provisioning process:
receive, from a programmable logic device design tool, a configuration file comprising a first set of data and a second set of data, the first set of data being designated as a common set of data;
for a first programmable logic device:
generating a first copy of the configuration file, and modifying the second set of data to include a first authentication key unique to a first programmable logic device, while retaining the common set of data;
storing the first copy of the configuration file into a database in association with the first authentication key;
for a second programmable logic device:
generating a second copy of the configuration file, and modifying the second set of data to include a second authentication key unique to a second programmable logic device, while retaining the common set of data;
storing the second copy of the configuration file into the database in association with the second authentication key;
B. at a second time during the provisioning process, after the first time;
the database transmitting the first copy of the configuration file for use in configuring a first programmable logic device;
the database transmitting the second copy of the configuration file for use in configuring a second programmable logic device.

9 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/955,530Filed 17 Apr 2018
Published: 17 Oct 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification15 codes

G06F 21/76
To assure secure computing or processing of information: in application-specific integrated circuits [ASIC] or field-programmable devices, e.g.…
G06F 21/57
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: certifying or…
G06F 21/74
To assure secure computing or processing of information: operating in dual or compartmented mode, i.e. at least one secure mode
G06F 21/79
To assure secure storage of data: in semiconductor storage media, e.g. directly-addressable memories

Family

Application15/954,865Continuation · filed 17 Apr 2018
Application15/955,530Continuation
US 2019/0318133 A1Published application
US 2019/0318131 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key