Back to results
US 7,444,667 B2Granted
Method and apparatus for trusted blade device computing
AssigneeIntel Corporation
InventorsMallik Bulusu, Vincent J. Zimmer
Life of this patent
Estimating the term…
Abstract
A method and system are disclosed for performing trusted computing for blade devices, such as blade servers or other blade devices. The computing domain for the blade devices is managed by a chassis management logic module. Methods for performing blade capability authorization and optional blade authentication are provided. A method for performing blade device boot processing is also provided.
Claims19
A system comprising:
- a blade device;
- and
- chassis management logic, the chassis management logic to determine whether one or more capabilities associated with the blade device match a capability policy;
- the chassis management logic further to isolate the blade device from a computing domain responsive to determining that the blade device capabilities do not match the capability policy;
- and
- a central repository, couple to the chassis management logic, to hold a plurality of public key values, each of the public key values corresponding to one of a plurality of blade devices.
3 more elements
A method comprising:
- determining if one or more capabilities associated with a blade device match a capability policy;
- if the blade device capabilities do not match the capability policy, isolating the blade device from a computing domain;
- and
- maintaining in a central repository a plurality of public key values, each of the public key values corresponding to one of a plurality of blade devices.
1 more element
A method comprising:
- determining if one or more capabilities associated with a blade device match a capability policy;
- if the blade device capabilities do not match the capability policy, isolating the blade device from a computing domain;
- challenging the blade device to provide a response;
- and
- if the blade device does not provide the response, isolating the blade device from the computing domain;
- wherein the challenging further comprises:
- encrypting a challenge value using a public key value;
- and
- providing the encrypted challenge value to the blade device.
6 more elements
An article comprising:
- a machine-readable storage medium having a plurality of machine accessible instructions, which if executed by a machine, cause the machine to perform operations comprising:
- registering one or more capabilities with a central repository;
- determining if one or more capabilities associated with a blade device match a capability policy;
- if the blade device capabilities do not match the capability policy, isolating the blade device from a computing domain;
- and
- maintaining in a central repository a plurality of public key values, each of the public key values corresponding to one of a plurality of blade devices.
3 more elements
An article comprising:
- a plurality of machine accessible instructions, which if executed by a machine, cause the machine to perform operations comprising:
- registering one or more capabilities with a central repository;
- determining if one or more capabilities associated with a blade device match a capability policy;
- and
- if the blade device capabilities do not match the capability policy, isolating the blade device from a computing domain;
- challenging the blade device to provide a response;
- and
- if the blade device does not provide the response, isolating the blade device from the computing domain
- wherein challenging further comprises instructions that, when executed, cause the machine to:
- encrypt a challenge value using a public key value;
- and
- provide the encrypted challenge value to the blade device.
9 more elements
Dependencies are inferred from the claim text.