Secure communication of information over a wireless link
View Patent ↗Secure communication of information over a wireless link with apparatus including a blade management module and a plurality of blade servers, the blade servers connected for data communications with the blade management module through at least one wired link, the blade servers also connected for data communications with the blade management module through at least one wireless link, including sharing an encryption key between the blade management module and one or more of the blade servers only through the at least one wired link connecting the blade management module to the one or more blade servers; encrypting information by the blade management module with the encryption key; transmitting the encrypted information by the blade management module to the one or more blade servers through the at least one wireless link; and decrypting the encrypted information by the blade server with the encryption key.
1. A method of secure communication of information over a wireless link,
the method carried out in apparatus that includes a blade management module and a plurality of blade servers, the blade servers connected for data communications with the blade management module through at least one wired link, the blade servers also connected for data communications with the blade management module through at least one wireless link,
the method comprising:
generating a separate encryption key by each of the plurality of blade servers;
generating a new encryption key by the blade management module periodically;
sharing the separate encryption key between the blade management module and the plurality of blade servers only through the at least one wired link connecting the blade management module to the blade servers, including transmitting, by each blade server that generated the separate encryption key, the separate encryption key generated by the blade server to the blade management module only through the at least one wired link connecting the blade management module to the blade server; and
periodically transmitting the new encryption key from the blade management module to the plurality of blade servers only through the at least one wired link connecting the blade management module to the plurality of blade servers;
encrypting information by the blade management module with the separate encryption key, including encrypting the information separately with each separate encryption key;
transmitting the encrypted information by the blade management module to the one or more blade servers through the at least one wireless link, including transmitting to each blade server encrypted information encrypted with the separate encryption key generated by the blade server to which the encrypted information is transmitted; and
transmitting the encrypted information to the plurality of blade servers only after each of the blade servers acknowledges receipt of the new encryption key; and
authorizing by the blade management module through the wireline connections between the blade management module and the blade servers only a subset of the blade servers in possession of the new encryption key to use the new encryption key to decrypt the encrypted information; and
decrypting the encrypted information with the new encryption key by each blade server in the subset of the blade servers.
2. The method of claim 1 wherein:
periodically transmitting the new encryption key further comprises sharing the new encryption key with all the blade servers in the apparatus only through the at least one wired link connecting the blade management module to the blade servers; and
transmitting the encrypted information further comprises broadcasting the same encrypted information to all the blade servers in the apparatus.
3. An apparatus for secure communication of information over a wireless link, the apparatus comprising:
a blade management module and a plurality of blade servers, the blade servers connected for data communications with the blade management module through at least one wired link, the blade servers also connected for data communications with the blade management module through at least one wireless link; and
a computer processor and a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions which when executed upon the computer processor cause the apparatus to function by:
generating a separate encryption key by each of the plurality of blade servers;
generating a new encryption key by the blade management module periodically;
sharing the separate encryption key between the blade management module and the plurality of blade servers only through the at least one wired link connecting the blade management module to the blade servers, including transmitting, by each blade server that generated the separate encryption key, the separate encryption key generated by the blade server to the blade management module only through the at least one wired link connecting the blade management module to the blade server; and
periodically transmitting the new encryption key from the blade management module to the plurality of blade servers only through the at least one wired link connecting the blade management module to the plurality of blade servers;
encrypting information by the blade management module with the separate encryption key, including encrypting the information separately with each separate encryption key;
transmitting the encrypted information by the blade management module to the one or more blade servers through the at least one wireless link, including transmitting to each blade server encrypted information encrypted with the separate encryption key generated by the blade server to which the encrypted information is transmitted; and
transmitting the encrypted information to the plurality of blade servers only after each of the blade servers acknowledges receipt of the new encryption key; and
authorizing by the blade management module through the wireline connections between the blade management module and the blade servers only a subset of the blade servers in possession of the new encryption key to use the new encryption key to decrypt the encrypted information; and
decrypting the encrypted information with the new encryption key by each blade server in the subset of the blade servers.
4. The apparatus of claim 3 wherein:
periodically transmitting the new encryption key further comprises sharing the new encryption key with all the blade servers in the apparatus only through the at least one wired link connecting the blade management module to the blade servers; and
transmitting the encrypted information further comprises broadcasting the same encrypted information to all the blade servers in the apparatus.
5. A computer program product for secure communication of information over a wireless link, the computer program product comprising computer program instructions for operation of apparatus including a computer processor, a blade management module and a plurality of blade servers, the blade servers connected for data communications with the blade management module through at least one wired link, the blade servers also connected for data communications with the blade management module through at least one wireless link, the computer program product disposed upon a non-signal machine-readable storage medium, the computer program product comprising computer program instructions which when executed upon the computer processor cause the apparatus to function by:
generating a separate encryption key by each of the plurality of blade servers;
generating a new encryption key by the blade management module periodically;
sharing the separate encryption key between the blade management module and the plurality of blade servers only through the at least one wired link connecting the blade management module to the blade servers, including transmitting, by each blade server that generated the separate encryption key, the separate encryption key generated by the blade server to the blade management module only through the at least one wired link connecting the blade management module to the blade server; and
periodically transmitting the new encryption key from the blade management module to the plurality of blade servers only through the at least one wired link connecting the blade management module to the plurality of blade servers;
encrypting information by the blade management module with the separate encryption key, including encrypting the information separately with each separate encryption key;
transmitting the encrypted information by the blade management module to the one or more blade servers through the at least one wireless link, including transmitting to each blade server encrypted information encrypted with the separate encryption key generated by the blade server to which the encrypted information is transmitted; and
transmitting the encrypted information to the plurality of blade servers only after each of the blade servers acknowledges receipt of the new encryption key; and
authorizing by the blade management module through the wireline connections between the blade management module and the blade servers only a subset of the blade servers in possession of the new encryption key to use the new encryption key to decrypt the encrypted information; and
decrypting the encrypted information with the new encryption key by each blade server in the subset of the blade servers.
6. The computer program product of claim 5 wherein:
periodically transmitting the new encryption key further comprises sharing the new encryption key with all the blade servers in the apparatus only through the at least one wired link connecting the blade management module to the blade servers; and
transmitting the encrypted information further comprises broadcasting the same encrypted information to all the blade servers in the apparatus.