IP Library Granted Patent US 9,766,900
Granted Patent B2
US 9,766,900 · App. 14/251,811 · Granted Sep 19, 2017

Booting a multi-node computer system from a primary node dynamically selected based on security setting criteria

Inventors: Raghuswamyreddy Gundam (Austin, TX); Shiva R. Dasari (Austin, TX)
Assignee: Lenovo Enterprise Solutions (Singapore) Pte. Ltd.
G06F9/441G06F9/4405G06F21/575G06F21/629G06F21/6218G06F21/72H04L41/0803
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,766,900
App. No.
14/251,811
Granted
Sep 19, 2017
Kind
B2
Abstract

A method includes identifying, from among nodes within a multi-node system, a node that has a security setting satisfying a security setting criteria, booting the multi-node system with the identified node as the primary node, and operating the multi-node system using the security setting of the identified node. Accordingly, the method may provide dynamic selection of a primary node based upon the security setting criteria and the security settings of the nodes within the multi-node system. Optionally, the security setting of each node is stored in a trusted platform module. In non-limiting examples, the security setting criteria may be the highest security setting among all nodes within the multi-node system or a predetermined minimum security setting, such as a trusted execution technology setting.

Claims (40)

1. A method, comprising:

identifying, from among nodes within a multi-node system, a node that has a security setting satisfying a security setting criteria, wherein the security setting criteria includes a predetermined minimum security setting selected from the group consisting of a setting that enables trusted execution technology, a trusted execution technology setting, and a setting that authenticates the node and an operating system of the node;

booting the multi-node system with the identified node as a primary node, wherein each node of the multi-node system boots using the basic input output system of the primary node; and

operating the multi-node system using the security setting of the identified node.

2. The method of claim 1 , wherein the multi-node system includes more than two nodes.

3. The method of claim 2 , wherein the more than two nodes are fully meshed.

4. The method of claim 1 , wherein the security setting of the identified node is stored in a trusted platform module.

5. The method of claim 1 , wherein each node within the multi-node system stores a security setting in a trusted platform module within the node.

6. The method of claim 1 , wherein each node within the multi-node system stores a security setting in non-volatile memory directly accessible to a trusted platform module within the node.

7. The method of claim 1 , wherein the security setting criteria is the highest security setting among all nodes within the multi-node system.

8. The method of claim 1 , further comprising:

establishing a default primary node; and

booting the multi-node system with the default primary node in response to none of the nodes having a security setting satisfying the security setting criteria.

9. The method of claim 8 , wherein establishing a default primary node includes receiving user input identifying the default primary node.

10. A method, comprising:

identifying, from among nodes within a multi-node system, a node that has a security setting satisfying a security setting criteria;

setting a field-programmable gate array in each compute node to point to the basic input output system of the compute node identified as the primary node;

booting the multi-node system with the identified node as a primary node, wherein each node of the multi-node system boots using the basic input output system of the primary node; and

operating the multi-node system using the security setting of the identified node.

11. The method of claim 10 , wherein each field-programmable gate array is set by an integrated management module within the same compute node as the field-programmable gate array.

12. The method of claim 11 , wherein each compute node has an integrated management module, and wherein each of the integrated management modules in the multi-node system coordinate control of the field-programmable gate arrays to point to one of the compute nodes as the primary node.

13. A method, comprising:

identifying, from among nodes within a multi-node system, a node that has a security setting satisfying a security setting criteria, including sequentially designating the nodes as the primary node until reaching a node that has a security setting satisfying the securing setting criteria;

booting the multi-node system with the identified node as a primary node, wherein each node of the multi-node system boots using the basic input output system of the primary node; and

operating the multi-node system using the security setting of the identified node.

14. The method of claim 13 , further comprising:

establishing a default primary node; and

booting the multi-node system with the default primary node in response to none of the nodes having a security setting satisfying the security setting criteria.

15. A computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform a method comprising:

identifying, from among nodes within a multi-node system, a node that has a security setting satisfying a security setting criteria;

setting a field-programmable gate array in each compute node to point to the basic input output system of the compute node identified as the primary node;

booting the multi-node system with the identified node as a primary node, wherein each node of the multi-node system boots using the basic input output system of the primary node; and

operating the multi-node system using the security setting of the identified node.

16. The computer program product of claim 15 , wherein the multi-node system includes more than two nodes.

17. The computer program product of claim 15 , wherein the security setting of the identified node is stored in a trusted platform module.

18. The computer program product of claim 15 , wherein each node within the multi-node system stores a security setting in a trusted platform module within the node.

19. The computer program product of claim 15 , wherein the security setting criteria includes a predetermined minimum security setting.

20. The computer program product of claim 15 , the method further comprising:

establishing a default primary node; and

booting the multi-node system with the default primary node in response to none of the nodes having a security setting satisfying the security setting criteria.

Assignments (4)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 10, 2025
From: LENOVO GLOBAL TECHNOLOGIES INTERNATIONAL LIMITED
To: LENOVO GLOBAL TECHNOLOGIES SWITZERLAND INTERNATIONAL GMBH
Reel/Frame 069869/0614 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 6, 2019
From: LENOVO ENTERPRISE SOLUTIONS (SINGAPORE) PTE LTD.
To: LENOVO GLOBAL TECHNOLOGIES INTERNATIONAL LTD
Reel/Frame 050304/0861 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 10, 2014
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: LENOVO ENTERPRISE SOLUTIONS (SINGAPORE) PTE. LTD.
Reel/Frame 034194/0353 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 14, 2014
From: GUNDAM, RAGHUSWAMYREDDY; DASARI, SHIVA R.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 032667/0093 →
Continuity (2)
Continuation 14249653 · Apr 10, 2014
Related Publication 20150294116A1 · Oct 15, 2015