Seamless data migration
AssigneeIntel Corporation
InventorsVincent J. Zimmer, Michael A. Rothman
Life of this patent
Estimating the term…
Abstract
Provided are techniques for migrating data. Contents are sealed to one or more registers. In response to determining that secure backup is enabled, platform metrics are stored in a private store. An out-of-band request is received. A response to the out-of-band request is provided using the stored platform metrics. Other embodiments are described and claimed.
Claims16
A method capable of migrating data, comprising:
- sealing, using a computer including a processor, contents of a data store to one or more registers, wherein the contents are encrypted;
- in response to determining that secure backup is enabled, storing the platform metrics from the one more registers in a private store;
- receiving an out-of-band request for the contents of the data store;
- and
- responding to the out-of-band request by:
- in response to the out-of-band request being an out-of-band restore request to replace the contents of the data store with new, encrypted contents that have been received from a remote agent,
- sealing the new, encrypted contents using the stored platform metrics;
- and
- storing the new, encrypted contents.
A system for migrating data, comprising:
- a data store storing contents;
- one or more registers;
- a private store;
- a motherboard;
- and
- an out-of-band management agent;
- wherein the out of band management agent is operable to:
- seal the contents of the data store to the one or more registers, wherein the contents are encrypted;
- in response to determining that secure backup is enabled, store the platform metrics from the one more registers in the private store;
- receive an out-of-band request for the contents of the data store;
- and
- respond to the out-of-band request by:
- in response to the out-of-band request being an out-of-band restore request to replace the contents of the data store with new, encrypted contents that have been received from a remote agent,
- sealing the new, encrypted contents using the stored platform metrics;
- and
- storing the new, encrypted contents.
An article of manufacture for migrating data, wherein the article of manufacture comprises a computer readable medium storing instructions, and wherein the article of manufacture is operable to:
- seal contents of a data store to one or more registers wherein the contents are encrypted;
- in response to determining that secure backup is enabled, store the platform metrics from the one more registers in a private store;
- receive an out-of-band request for the contents of the data store;
- respond to the out-of-band request by:
- in response to the out-of-band request being an out-of-band restore request to replace the contents of the data store with new, encrypted contents that have been received from a remote agent,
- sealing the new, encrypted contents using the stored platform metrics;
- and
- storing the new, encrypted contents.
A system for migrating data, comprising:
- a data store storing contents;
- a root of trust agent including one or more registers;
- an out-of-band management agent coupled to the root of trust agent;
- and
- a private store coupled to the out-of-band management agent;
- wherein the out of band management agent is operable to:
- seal the contents of the data store to the one or more registers, wherein the contents are encrypted by the root of trust agent;
- in response to determining that secure backup is enabled, store the platform metrics from the one more registers in the private store;
- receive an out-of-band request for the contents of the data store;
- respond to the out-of-band request by:
- in response to the out-of-band request being an out-of-band restore request to replace the contents of the data store with new, encrypted contents that have been received from a remote agent,
- sealing the new, encrypted contents using the stored platform metrics;
- and
- storing the new, encrypted contents.
Dependencies are inferred from the claim text.