IP Library Granted Patent US 11,424,997
Granted Patent B2
US 11,424,997 · App. 16/709,214 · Granted Aug 23, 2022

Secured network management domain access system

Inventors: Zoheb Khan (Austin, TX); Sudhir Vittal Shetty (Cedar Park, TX); Joseph LaSalle White (San Jose, CA); Balaji Rajagopalan (Sunnyvale, CA); Venkata Bala Koteswararao Donepudi (Round Rock, TX); Pawan Kumar Singal (Milpitas, CA)
Assignee: Dell Products L.P.
H04L41/28H04L12/4641H04L41/046H04L63/0815
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,424,997
App. No.
16/709,214
Granted
Aug 23, 2022
Kind
B2
Abstract

A secured network management domain access system includes a chassis housing a master I/O module that is configured to provide a network management domain, and a management module coupled to the master I/O module. The management module includes an enclosure controller coupled to the master I/O module via a first communication channel, and that retrieves master I/O module secured access information from the master I/O module via the first communication channel. The management module also includes a management service coupled to the enclosure controller via a second communication channel and to the master I/O module via a third communication channel, and that retrieves the master I/O module secured access information from the enclosure controller via the second communication channel, and performs validation operations with the master I/O module via the third communication channel such that the management service may securely access the network management domain via the master I/O module.

Claims (50)

1. A secured network management domain access system, comprising:

a Multi-Chassis Management (MCM) group that includes a first chassis and a second chassis that are each part of a system management domain that is managed by one of a first computing system provided in the first chassis and a second computing system provided in the second chassis, wherein the first chassis houses:

at least one first Input/Output (I/O) module that is configured to provide a single network management domain for the MCM group with at least one second I/O module housed in the second chassis, wherein the at least one first I/O module includes a master I/O module; and

a first management module that is coupled to each of the at least one first I/O module, wherein the first management module includes:

a first enclosure controller that is coupled to each of the at least one first I/O module via a first communication channel, wherein the first enclosure controller is configured to:

retrieve master I/O module secured access information from the master I/O module via the first communication channel; and

a first management service that is coupled to the first enclosure controller via a second communication channel and to each of the at least one first I/O module via a third communication channel, wherein the first management service is configured to:

retrieve the master I/O module secured access information from the first enclosure controller via the second communication channel;

perform, using the master I/O module secured access information, first validation operations with the master I/O module via the third communication channel such that the first management service may securely access the single network management domain via the master I/O module; and

transmit the master I/O module secured access information to a second management service housed in the second chassis, wherein the master I/O module is configured to perform second validation operations with the second management service using the master I/O module secured access information such that the second management service may securely access the single network management domain via the master I/O module.

2. The system of claim 1 , wherein the first communication channel is provided via a secure hardware bus communication channel.

3. The system of claim 1 , wherein the second communication channel is provided via an Open Authorization (OAuth)-based secured communication channel.

4. The system of claim 1 , wherein the third communication channel is provided via a management Virtual Local Area Network (VLAN).

5. The system of claim 1 , wherein the master I/O module is configured to:

broadcast an announcement that includes master I/O module metadata, and wherein the first management service is configured to:

receive the announcement; and

request, using the master I/O module metadata, the master I/O module secured access information from the enclosure controller.

6. The system of claim 1 , wherein one of the at least one second I/O module housed in the second chassis is configured to transition to operate as the master I/O module in place of the at least one first I/O module.

7. An Information Handling System (IHS), comprising:

a processing system; and

a memory system that is coupled to the processing system and that includes instructions that, when executed by the processing system, cause the processing system to provide a first management module that includes:

a first enclosure controller that is coupled via a first communication channel to each of at least one first I/O module that is included in a first chassis and that is configured to provide a single network management domain for a Multi-Chassis Management (MCM) group with at least one second I/O module housed in a second chassis that is included with the first chassis in the MCM group and that is part of a system management domain with the first chassis, wherein the system management domain is managed by one of a first computing system provided in the first chassis and a second computing system provided in the second chassis, and wherein the first enclosure controller is configured to:

retrieve master I/O module secured access information via the first communication channel from a master I/O module that is included in the at least one first I/O module; and

a first management service that is coupled to the first enclosure controller via a second communication channel and to each of the at least one first I/O module via a third communication channel, wherein the first management service is configured to:

retrieve the master I/O module secured access information from the first enclosure controller via the second communication channel;

perform, using the master I/O module secured access information, first validation operations with the master I/O module via the third communication channel such that the first management service may securely access the single network management domain via the master I/O module; and

transmit the master I/O module secured access information to a second management service housed in the second chassis, wherein the master I/O module is configured to perform second validation operations with the second management service using the master I/O module secured access information such that the second management service may securely access the single network management domain via the master I/O module.

8. The IHS of claim 7 , wherein the first communication channel is provided via a secure hardware bus communication channel.

9. The IHS of claim 7 , wherein the second communication channel is provided via an Open Authorization (OAuth)-based secured communication channel.

10. The IHS of claim 7 , wherein the third communication channel is provided via a management Virtual Local Area Network (VLAN).

11. The IHS of claim 7 , wherein the first management service is configured to:

receive an announcement that was broadcast by the master I/O module and that includes master I/O module metadata; and

request, using the master I/O module metadata, the master I/O module secured access information from the enclosure controller.

12. The IHS of claim 7 , further comprising:

the first chassis that houses the first management module.

13. The IHS of claim 7 , wherein one of the at least one second I/O module housed in the second chassis is configured to transition to operate as the master I/O module in place of the at least one first I/O module.

14. A method for providing secure access to a network management domain, comprising:

retrieving, by a first enclosure controller via a first communication channel from a master I/O module that is included in at least one first I/O module that is included in a first chassis and that is configured to provide a single network management domain for a Multi-Chassis Management (MCM) group with at least one second I/O module housed in a second chassis that is included with the first chassis in the MCM group and that is part of a system management domain with the first chassis, master I/O module secured access information, wherein the system management domain is managed by one of a first computing system provided in the first chassis and a second computing system provided in the second chassis;

retrieving, by a first management service that is coupled to the first enclosure controller via a second communication channel and to each of the at least one first I/O module via a third communication channel, the master I/O module secured access information from the first enclosure controller via the second communication channel;

performing, by the first management service using the master I/O module secured access information, first validation operations with the master I/O module via the third communication channel such that the first management service may securely access the single network management domain via the master I/O module; and

transmitting, by the first management service, the master I/O module secured access information to a second management service housed in the second chassis, wherein the master I/O module is configured to perform second validation operations with the second management service using the master I/O module secured access information such that the second management service may securely access the single network management domain via the master I/O module.

15. The method of claim 14 , wherein the first communication channel is provided via a secure hardware bus communication channel.

16. The method of claim 14 , wherein the second communication channel is provided via an Open Authorization (OAuth)-based secured communication channel.

17. The method of claim 14 , wherein the third communication channel is provided via a management Virtual Local Area Network (VLAN).

18. The method of claim 14 , further comprising:

receiving, by the first management service, an announcement that was broadcast by the master I/O module and that includes master I/O module metadata; and

requesting, by the first management service using the master I/O module metadata, the master I/O module secured access information from the enclosure controller.

19. The method of claim 14 , wherein the first management service and the enclosure controller are housed in the first chassis.

20. The method of claim 14 , further comprising:

transitioning, by one of the at least one second I/O module housed in the second chassis, to operate as the master I/O module in place of the at least one first I/O module.

Assignments (9)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053311/0169) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
Reel/Frame 060438/0742 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (052216/0758) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
Reel/Frame 060438/0680 →
RELEASE OF SECURITY INTEREST AF REEL 052243 FRAME 0773 Recorded Nov 2, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
Reel/Frame 058001/0152 →
SECURITY INTEREST Recorded Jun 5, 2020
From: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
Reel/Frame 053311/0169 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
SECURITY AGREEMENT Recorded Mar 26, 2020
From: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
Reel/Frame 052243/0773 →
PATENT SECURITY AGREEMENT (NOTES) Recorded Mar 24, 2020
From: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
Reel/Frame 052216/0758 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 11, 2019
From: KHAN, ZOHEB; SHETTY, SUDHIR VITTAL; WHITE, JOSEPH LASALLE; RAJAGOPALAN, BALAJI; DONEPUDI, VENKATA BALA KOTESWARARAO; SINGAL, PAWAN KUMAR
To: DELL PRODUCTS L.P.
Reel/Frame 051243/0075 →