SYSTEM AND METHOD FOR DETECTING ROGUE DEVICES ON A DEVICE MANAGEMENT BUS

    公开(公告)号:US20200137079A1

    公开(公告)日:2020-04-30

    申请号:US16170494

    申请日:2018-10-25

    Abstract: Embodiments provide methods and systems for detecting rogue endpoints on a device management bus. A communications controller configured as a bus owner initiates discovery of managed devices coupled to the bus and generate a unique identifier for each managed device. The communications controller transmits a bus configuration message to the managed devices, including the respective unique identifiers. The managed devices are configured as bus endpoints based on the bus configuration message. The managed devices also capture the bus address of the communications controller from the received bus configuration message. Messages received by a managed device are authenticated as originating from the communications controller if the messages include the unique identifier provided to that managed device. The messages may be further authenticated by comparing the bus address of the message sender against the captured bus address of the communications controller.

    Software filtering of redundant sideband device management bus communications

    公开(公告)号:US10606784B1

    公开(公告)日:2020-03-31

    申请号:US16170413

    申请日:2018-10-25

    Abstract: Sideband device management bus messages are filtered using software operations in order to minimize dropped messages and to maintain the bus in an operable state. Redundant sideband device management buses are utilized in order to provide fail-over transmission of messages in scenarios where one of the buses becomes inoperable. Multi-packet messages are transmitted to managed devices via the sideband bus connections. If an inoperable state is detected in a sideband bus connection during transmission of a multi-packet message, the portion of the multi-packet message not received by the managed device is transmitted via a redundant sideband bus connection with the managed device. Software filtering of bus transactions utilizes a circular DMA buffer for storing all incoming transactions. Transactions of interest are copied to buffers associated with specific endpoints for processing.

    Systems and methods for revoking and replacing signing keys

    公开(公告)号:US10003463B2

    公开(公告)日:2018-06-19

    申请号:US14885082

    申请日:2015-10-16

    CPC classification number: H04L9/0891

    Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a processor, an information handling resource communicatively coupled to the processor, and a management controller communicatively coupled to the processor and the information handling resource and configured to provide out-of-band management of the information handling system. The management controller may further configured to receive a message indicating that an existing private key associated with the information handling resource is compromised, the message including a replacement public key for replacing an existing public key associated with the information handling resource and associated with the existing private key and responsive to the message, cause the existing public key associated with the information handling resource to be replaced with the replacement public key.

    System and method for detecting rogue devices on a device management bus

    公开(公告)号:US10862900B2

    公开(公告)日:2020-12-08

    申请号:US16170494

    申请日:2018-10-25

    Abstract: Embodiments provide methods and systems for detecting rogue endpoints on a device management bus. A communications controller configured as a bus owner initiates discovery of managed devices coupled to the bus and generate a unique identifier for each managed device. The communications controller transmits a bus configuration message to the managed devices, including the respective unique identifiers. The managed devices are configured as bus endpoints based on the bus configuration message. The managed devices also capture the bus address of the communications controller from the received bus configuration message. Messages received by a managed device are authenticated as originating from the communications controller if the messages include the unique identifier provided to that managed device. The messages may be further authenticated by comparing the bus address of the message sender against the captured bus address of the communications controller.

    SYSTEMS AND METHODS FOR REVOKING AND REPLACING SIGNING KEYS

    公开(公告)号:US20170111171A1

    公开(公告)日:2017-04-20

    申请号:US14885082

    申请日:2015-10-16

    CPC classification number: H04L9/0891

    Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a processor, an information handling resource communicatively coupled to the processor, and a management controller communicatively coupled to the processor and the information handling resource and configured to provide out-of-band management of the information handling system. The management controller may further configured to receive a message indicating that an existing private key associated with the information handling resource is compromised, the message including a replacement public key for replacing an existing public key associated with the information handling resource and associated with the existing private key and responsive to the message, cause the existing public key associated with the information handling resource to be replaced with the replacement public key.

Patent Agency Ranking