System and method for securing computing management functions
View Patent ↗In a computing management system authentication procedures are secured by protecting keys and/or processes used during the authentication procedures. In some embodiments the system cryptographically protects any keys used to mutually authenticate a management console and client. In some embodiments the system cryptographically protects execution of one or more of the algorithms used to mutually authenticate a management console and client.
1. A computing device, comprising:
a network interface configured to communicate with an external communication path;
a secure processor configured to operate in accordance with a Trusted Platform Module (TPM) standard; and
a client management component configured to operate in accordance with an Alert Standard Format (ASF),
wherein said secure processor is configured to perform client management functions associated with said client management component to authenticate communications, passed via said network interface, between the computing device and a management console,
wherein parameters for said client management functions are stored in an ASF blob data structure,
wherein said secure processor is configured to manage an ASF blob parent key that is used to encrypt at least a portion of said ASF blob data structure in a manner compatible with said TPM standard.
2. The computing device of claim 1 , wherein communications from said management console comprise a request to the computing device to perform an action.
3. The computing device of claim 1 , wherein said client management component comprises means to send a status message, via said network interface, to said management console.
4. The computing device of claim 1 , wherein said secure processor operates within a security boundary.
5. The computing device of 1 wherein said client management functions comprise a hashing function.
6. The computing device of 1 wherein said client management functions comprise one or more of: generating a key; encrypting said key; decrypting said key; and maintaining said key in a key hierarchy.
7. The computing device of claim 1 , wherein said secure processor comprises means for managing said ASF blob parent key and means for managing keys unrelated to said ASF blob data structure.
8. The computing device of claim 1 , comprising a network controller that comprises:
said network interface;
said secure processor; and
said client management component.
9. The computer device of claim 8 , wherein said network controller comprises a power management component comprising means for providing auxiliary power to said secure processor and said client management component in an operating system (OS)-absent state.
10. A method of generating a shared secret in a computing device, the method comprising the steps of:
a) creating and encrypting a key in a secure processor configured to operate in accordance with a Trusted Platform Module (TPM) standard;
b) commencing a network session;
c) issuing a command from a client management component, configured to operate in accordance with an Alert Standard Format (ASF), to the secure processor to obtain the shared secret;
d) at the secure processor, loading and decrypting the encrypted key, and using the decrypted key to decrypt an ASF blob data structure that stores parameters for client management functions;
e) using one or more parameters stored in the ASF blob data structure to perform a hash operation to generate the shared secret; and
f) returning the shared secret from the secure processor to the client management component.
11. The method of claim 10 , wherein said step a) further comprises creating a context for the key.
12. The method of claim 11 , wherein said creating of the key and said creating of said key context are performed using TPM compatible commands.
13. The method of claim 10 , wherein said network session is commenced between the client management component and a management console.
14. The method of claim 10 , wherein the key is an ASF key.
15. The method of claim 10 , further comprising the step of:
g) configuring the secure processor to support operations of the client management component, performed before step a).
16. The method of claim 15 , wherein said step g) comprises at least one of:
i) loading code into the secure processor for executing ASF commands; and
ii) loading code into the secure processor for executing ASF algorithms.
17. The method of claim 16 , wherein at least one of said steps i) and ii) is performed securely.
18. The method of claim 10 , further comprising the step of:
g) removing the key, performed after said step e).
19. The method of claim 18 , wherein said step g) comprises at least one of:
i) discarding the key; or
ii) re-encrypting the key and saving the re-encrypted key.
20. The computing device of claim 1 , wherein said parameters include at least a hash key and a seed.