Method and apparatus for secured embedded device communication
AssigneeIntel Corporation
InventorsJasmeet Chhabra, Ranjit Narjala, Amol Kulkarni, Michael Berger
Life of this patent
Estimating the term…
Abstract
In a computing device that includes a host operating system and a management engine separate from the host operating system, if the primary operating system is not operating, a management engine may obtain from a credential server via a first network connection logon information for a secured network and the management engine connects to the secure network through a secured connection using the logon information. If the operating system is operating the operating system provides the logon information to the management engine. Certificate verification may be performed by a remote server on behalf of the management engine. Other embodiments are disclosed and claimed.
Claims21
A method comprising:
- in a computing device comprising a host operating system and an embedded environment management engine separate from the host operating system, the embedded environment management engine including a memory device to store data for the management engine:
- detecting by the management engine a secured network for which authentication credentials are required to access the secured network;
- determining that the host operating system is not operating;
- determining whether a second network connection different from the secured network upon is available;
- obtaining the authentication credentials from a credential server via the second network upon determining that the second network is available;
- obtaining the authentication credentials from the credential server via an out-of-band link upon determining that the second network is not available;
- and
- the management engine connecting to the secured network using the obtained authentication credentials and communicate over the secured network from the management engine independently of the host operating system.
A device comprising:
- a processor executing:
- a host operating system to operate user applications;
- an embedded environment management engine separate from the host operating system, the embedded environment management engine including a memory device to store data for the management engine, the management engine to,
- detect a secured network for which authentication credentials are required to access the secured network;
- determine that the host operating system is not operating;
- determine whether a second network connection different from the secured network upon is available;
- obtain the authentication credentials from a credential server via the second network upon determining that the second network is available;
- obtain the authentication credentials from the credential server via an out-of-band link upon determining that the second network is not available;
- and
- the management engine to connect to the secured network using the obtained authentication credentials and communicate over the secured network from the management engine independently of the host operating system.
An article of manufacture comprising a computer readable storage medium having instructions stored thereon, which when executed, cause a computing device having a host operating system and an embedded environment management engine separate from the host operating system, the embedded environment management engine including a memory device to store data for the management engine, to perform operations including:
- detecting by the management engine a secured network for which authentication credentials are required to access the secured network;
- determining that the host operating system is not operating;
- determining whether a second network connection different from the secured network upon is available;
- obtaining the authentication credentials from a credential server via the second network upon determining that the second network is available;
- obtaining the authentication credentials from the credential server via an out-of-band link upon determining that the second network is not available;
- and
- the management engine connecting to the secured network using the obtained authentication credentials and communicate over the secured network from the management engine independently of the host operating system.
Dependencies are inferred from the claim text.