Distribution of blueprints in edge systems
AssigneeDell Products L.P.
InventorsMAXIM BALIN, ELIYAHU ROSENES
Life of this patent
Estimating the term…
Abstract
Methods and systems for managing operation of edge devices are disclosed. The operation of the edge devices may be managed using blueprints. A blueprint may indicate a workflow for modifying operation of an edge device, and components to be used in the workflow. A security framework may be used to secure the distribution and use of the blueprints by edge systems. The security framework may include various checks to confirm that a blueprint is trustworthy and approved for use with edge systems. The checks may be performed prior to use of the blueprints.
Claims20
A method for managing operation of endpoint devices of a deployment, the method comprising:
- obtaining, by an endpoint device of the endpoint devices, a blueprint token that indicates that the endpoint device is to implement a blueprint;
- in response to obtaining the blueprint token and by the endpoint device:
- making a first determination regarding whether a blueprint specified by the blueprint token is trusted;
- in a first instance of the first determination where the blueprint is trusted:
- making a second determination regarding whether the blueprint is authorized for use by the endpoint device;
- in a first instance of the second determination where the blueprint is authorized for use by the endpoint device:
- making a third determination regarding whether integrity of the blueprint can be verified;
- in a first instance of the third determination where the integrity of the blueprint can be verified:
- implementing a portion of objects specified by the blueprint that can be verified, the objects being implemented in an order specified by the blueprint, and implementation of the portion of the objects conforming the operation of the endpoint device to the blueprint;
- and providing computer implemented services using at least the portion of objects.
A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for managing operation of endpoint devices of a deployment, the operations comprising:
- obtaining, by an endpoint device of the endpoint devices, a blueprint token that indicates that the endpoint device is to implement a blueprint;
- in response to obtaining the blueprint token and by the endpoint device:
- making a first determination regarding whether a blueprint specified by the blueprint token is trusted;
- in a first instance of the first determination where the blueprint is trusted:
- making a second determination regarding whether the blueprint is authorized for use by the endpoint device;
- in a first instance of the second determination where the blueprint is authorized for use by the endpoint device:
- making a third determination regarding whether integrity of the blueprint can be verified;
- in a first instance of the third determination where the integrity of the blueprint can be verified:
- implementing a portion of objects specified by the blueprint that can be verified, the objects being implemented in an order specified by the blueprint, and implementation of the portion of the objects conforming the operation of the endpoint device to the blueprint;
- and providing computer implemented services using at least the portion of objects.
An endpoint device, comprising:
- a processor;
- and
- a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations for managing operation of the endpoint device as a member of a deployment, the operations comprising:
- obtaining a blueprint token that indicates that the endpoint device is to implement a blueprint;
- in response to obtaining the blueprint token:
- making a first determination regarding whether a blueprint specified by the blueprint token is trusted;
- in a first instance of the first determination where the blueprint is trusted:
- making a second determination regarding whether the blueprint is authorized for use by the endpoint device;
- in a first instance of the second determination where the blueprint is authorized for use by the endpoint device:
- making a third determination regarding whether integrity of the blueprint can be verified;
- in a first instance of the third determination where the integrity of the blueprint can be verified:
- implementing a portion of objects specified by the blueprint that can be verified, the objects being implemented in an order specified by the blueprint, and implementation of the portion of the objects conforming the operation of the endpoint device to the blueprint;
- and providing computer implemented services using at least the portion of objects.
Dependencies are inferred from the claim text.