System and method for establishing perpetual trust among platform domains
View Patent ↗A method may include generating a first shared secret for a present boot session of the information handling system and determining if a second shared secret existed for a prior boot session of the information handling system. If the second shared secret existed for the prior boot session, the method may include encrypting the first shared secret with the second shared secret and communicating the first shared secret encrypted by the second shared secret from a first information handling resource to a second information handling resource. If the second shared secret did not exist for the prior boot session, the method may include communicating the first shared secret unencrypted from the first information handling resource to the second information handling resource. The method may additionally include securely communicating between the first information handling resource and the second information handling resource using the first shared secret for encryption and decryption.
1. An information handling system comprising:
a processor;
a service processor;
a basic input/output system (BIOS);
a non-transitory memory accessible to the processor;
a first information handling resource to:
generate a first shared secret for a present boot session of the information handling system;
determine if a second shared secret existed for a prior boot session of the information handling system;
when the second shared secret existed for the prior boot session, communicate the first shared secret encrypted by the second shared secret;
when the second shared secret did not exist for the prior boot session, communicate the first shared secret unencrypted; and
securely communicate during the present boot session using the first shared secret for encryption and decryption of communications; and
a second information handling resource configured to:
receive the first shared secret;
when the second shared secret existed for the prior boot session, decrypt the first shared secret with the second shared secret; and
securely communicate during the present boot session using the first shared secret for encryption and decryption of communications,
wherein the first information handling resource and the second information handling resource are selected from: the basic input/output system (BIOS) and the service processor.
2. The information handling system of claim 1 , wherein the first information handling resource comprises the basic input/output system (BIOS) and the second information handling resource comprises the service processor.
3. The information handling system of claim 1 , wherein the first information handling resource comprises the service processor and the second information handling resource comprises the basic input/output system (BIOS).
4. The information handling system of claim 1 , further comprising:
a key manager, the key manager comprising instructions executable by the processor for causing the processor to manage access by applications executing on the processor to at least one of the first information handling resource and the second information handling resource
at least one of the first information handling resource and the second information handling resource to communicate the first shared secret to the key manager; and
wherein the key manager authenticates to a key manager server for authorization to access the first shared secret.
5. The information handling system of claim 4 , wherein the key manager communicates the first shared secret to the key manager server.
6. The information handling system of claim 4 , wherein the key manager requests the first shared secret from the key manager server.
7. The information handling system of claim 1 , wherein the first shared secret and the second shared secret each respectively include a key selected from: a symmetric key and a public/private key pair.
8. A method comprising:
generating a first shared secret for a boot session of an information handling system;
determining if a second shared secret existed for a prior boot session of the information handling system;
when the second shared secret existed for the prior boot session:
encrypting the first shared secret with the second shared secret; and
communicating the first shared secret encrypted by the second shared secret from a first information handling resource to a second information handling resource;
when the second shared secret did not exist for the prior boot session, communicating the first shared secret unencrypted from the first information handling resource to the second information handling resource;
at the second information handling resource:
receiving the first shared secret; and
when the second shared secret existed for the prior boot session:
decrypting the first shared secret with the second shared secret; and
securely communicating between the first information handling resource and the second information handling resource using the first shared secret for encryption and decryption of communications,
wherein the first information handling resource and the second information handling resource are included in the information handling system and are selected from: a basic input/output system (BIOS) and a service processor.
9. The method of claim 8 , wherein the first information handling resource comprises the basic input/output system (BIOS) and the second information handling resource comprises the service processor.
10. The method of claim 8 , wherein the first information handling resource comprises the service processor and the second information handling resource comprises the basic input/output system (BIOS).
11. The method of claim 8 , further comprising:
communicating the first shared secret to a key manager, the key manager instructions executable by a processor included in the information handling system for causing the processor to manage access by applications executing on the processor to at least one of the first information handling resource and the second information handling resource; and
communicating, by the key manager, the first shared secret to an application authenticating to the key manager, wherein the application communicates with at least one of the first information handling resource and the second information handling resource using the first shared secret for encryption and decryption of communications.
12. The method of claim 11 , wherein the application is an operating system executing on the processor.
13. The method of claim 11 , wherein the key manager authenticates to a key manager server for authorization to access the first shared secret.
14. The method of claim 13 , wherein the key manager communicates the first shared secret to the key manager server.
15. The method of claim 13 , wherein the key manager requests the first shared secret from the key manager server.
16. The method of claim 8 , wherein the first shared secret and the second shared secret each respectively include a key selected from: a symmetric key and a public/private key pair.
17. Non-transitory computer readable memory media accessible to a first processor, the memory media storing instructions executable by the first processor to:
generate a first shared secret for a boot session of an information handling system;
determine if a second shared secret existed for a prior boot session of the information handling system;
when the second shared secret existed for the prior boot session:
encrypt the first shared secret with the second shared secret; and
communicate the first shared secret encrypted by the second shared secret to a basic input/output system (BIOS);
when the second shared secret did not exist for the prior boot session, communicate the first shared secret unencrypted to the BIOS; and
securely communicate with the BIOS using the first shared secret for encryption and decryption of communications,
wherein the first processor and the BIOS are included in the information handling system.
18. The memory media of claim 17 , wherein the first processor is a service processor included in the information handling system.
19. The memory media of claim 17 , further comprising instructions to:
communicate the first shared secret to a key manager, wherein the key manager comprises instructions executable by a second processor to manage access by applications executing on the second processor to at least one of the first processor and the BIOS, wherein the key manager communicates the first shared secret to an application authenticating to the key manager, wherein the application communicates with at least one of the first processor and the BIOS using the first shared secret for encryption and decryption of communications,
wherein the application is an operating system executing on the second processor.
20. The memory media of claim 19 , wherein the key manager authenticates to a key manager server for authorization to access the first shared secret.
21. The memory media of claim 19 , wherein the key manager communicates the first shared secret to the key manager server.
22. The memory media of claim 19 , wherein the key manager requests the first shared secret from the key manager server.