Information handling system secure RF wireless communication management with out-of-band encryption information handshake
View Patent ↗A server information handling system baseboard management controller (BMC) includes an NFC transceiver that communicates NFC signals through an NFC antenna structure. The BMC selectively configures the NFC antenna structure to isolate portions of conductive material for use as an antenna in non-NFC communications, such as wireless local area network communications (WLAN) at 2.4 or 5 GHz or wireless personal area network (WPAN) communications at 2.4 or 60 GHz. In one embodiment, WLAN and WPAN communications are encrypted with a key provided through NFC or other types of wireless communication, such as visible, infrared or ultraviolet light signals.
1. A server information handling system comprising:
a chassis;
a processor disposed in the chassis and operable to execute instructions that process information;
memory disposed in the chassis and interfaced with the processor, the memory operable to store the instructions and information;
a management controller disposed in the chassis and operable to manage operation of the processor;
a wireless communication module disposed in the chassis and interfaced with the management controller, the wireless communication module operable to communicate wireless signals directly with an external information handling system through wireless medium having a wireless protocol; and
a security module disposed in the management controller and operable to encrypt information sent by the wireless signals using a key, the security module sending the key to the external information handling system through a second medium different from the first medium;
a near field communication (NFC) module disposed in the chassis and interfaced with the management controller, the NFC module operable to communicate with NFC signals to the external information handling system;
an antenna structure disposed in the chassis and having a conductive wire disposed in a coil to support NFC communications; and
an antenna controller interfaced with the antenna structure and the security module, the antenna controller operable to selectively configure the antenna structure to support NFC communications and to have an isolated portion to support the wireless medium communications using the wireless protocol;
wherein the security module sends the key to the external information handling system through NFC communications; and
wherein the security module disables configuration to support wireless medium communications except to external information handling systems that receive the key by NFC communications.
2. The server information handling system of claim 1 further comprising:
an optical device operable to present the key with illumination; and
an optical sensor disposed in the external information handling system and operable to detect the illumination to determine the key.
3. The system of claim 2 wherein the illumination comprises ultraviolet light.
4. The system of claim 2 wherein the illumination comprises infrared light.
5. The system of claim 2 wherein the illumination comprises plural individual diagnostic LEDs.
6. The system of claim 2 wherein the illumination comprises a control panel display that presents a textual code.
7. The system of claim 2 wherein the illumination comprises a bar code read by a camera of the external information handling system.
8. The system of claim 1 wherein the wireless medium comprises substantially 2.45 GHz radio signals.
9. A method for secure wireless communication of server management information from a portable information handling system to a server information handling system management controller, the method comprising:
configuring an antenna structure coupled to the management controller to communicate by a first wireless communication medium;
sending a key from the management controller to the portable information handling system by the first wireless communication medium, the first wireless communication medium made directly between the server information handling system and the portable information handling system;
applying the key at the management controller and portable information to encrypt information;
re-configuring the antenna structure to communicate by the second wireless communication medium in response to communication of the key by the first wireless communication medium; and
in response to sending the key, sending the encrypted server management information by a second wireless communication medium, the second wireless communication medium made directly between the server information handling system and the portable information handling system;
wherein configuring an antenna structure coupled to the management controller to communicate by the first wireless communication medium further comprises configuring a coil of conductive material to carry a current that generates a near field communication (NFC) signal with the key; and
wherein re-configuring the antenna structure to communicate by the second wireless communication medium in response to communication of the key by the first wireless communication medium further comprises isolating at least a portion of the coil to define a wireless personal area network (WPAN) antenna that generates WPAN signal with the management information.
10. The method of claim 9 wherein the at least a portion of the coil defines a 60 GHz antenna to generate a 60 GHz signal.
11. The method of claim 9 wherein the first wireless medium comprises an optical signal presented by an optical illuminator interfaced with the management controller, the optical signal detected by an optical sensor of the portable information handling system.
12. The method of claim 11 wherein the optical signal comprises a flashing optical frequency of greater than that distinguishable by the human eye.
13. The method of claim 11 wherein the optical signal comprises a bar code presented at a diagnostics display proximate the management controller.
14. A server baseboard management controller (BMC) comprising:
a management controller operable to manage operation of a server information handling system;
a security module operable to generate keys for encrypting wireless communications associated with the management controller;
a wireless communication module interfaced with the security module and operable to communicate by first and second wireless signals;
an antenna structure having a conductive coil formed in a loop to generate NFC signals as the first wireless signal; and
an antenna controller operable to selectively isolate a portion of the conductive coil to form a WPAN antenna, the antenna controller precluding configuration of the conductive wire into the WPAN antenna unless a key is provided by an NFC communication within a predetermined time of a WPAN communication;
wherein the security module coordinates communication with an external information handling system by sending a key through the first wireless signal directly to the external information handling system and communicating management information encrypted with the key through the second wireless signal directly to the external information handling system.
15. The server BMC of claim 14 wherein each of plural sets of management information sent through the second wireless signal is encrypted by a different randomly-generated key sent through the first wireless signal.