Method and apparatus for secure scan of data storage device from remote server

One or more non-transitory, machine-readable media comprising a plurality of instructions that, in response to being executed, result in a computing device:

• receiving a block read request from a remote server using an out-of-band (OOB) processor of the computing device, the OOB processor being capable of communicating with the remote server irrespective of whether an in-band processor of the computing device is executing an operating system;
• sending a storage command to a data storage device of the computing device using the in-band processor of the computing device, in response to receiving the block read request;
• receiving data retrieved from the data storage device and authentication metadata generated by the data storage device, in response to the storage command, the authentication metadata being generated as a function of the data retrieved;
• and
• transmitting the data and the authentication metadata to the remote server using the OOB processor.

A computing device comprising:

• an in-band processor configured to execute an operating system and at least one host driver;
• communication circuitry configured to communicate with a remote server;
• and
• an out-of-band (OOB) processor capable of communicating with the remote server using the communication circuitry irrespective of the state of the operating system, the OOB processor configured to:
• receive a block read request from the remote server;
• instruct the at least one host driver to send a storage command to a data storage device of the computing device;
• receive data retrieved from the data storage device and authentication metadata generated (i) by the data storage device and (ii) as a function of the data retrieved;
• and
• transmit the data and the authentication metadata to the remote server.

A computing device comprising:

• an in-band processor configured to execute an operating system and at least one driver, the in-band processor executing the driver in a secure container that is separate from the operating system;
• communication circuitry configured to communicate with a remote server;
• and
• an out-of-band (OOB) processor capable of communicating with the remote server using the communication circuitry irrespective of the state of the operating system, the OOB processor configured to:
• receive a block read request from the remote server;
• instruct the at least one driver executing in the secure container to send a storage command to a data storage device of the computing device;
• receive data retrieved from the data storage device via the at least one driver executing in the secure container;
• and
• transmit the data to the remote server.