Secure reuse of cloud at customer hardware
Techniques in this disclosure include polling statuses of one or more assets with one or more messages signed by a device private key. The statuses can be polled by a computing device. The techniques can include receiving one or more replies from the one or more assets. A reply can be signed with an asset private key and the reply can contain an asset status. The computing device can validate the one or more replies using one or more asset public keys. The computing device can add the statuses from the validated replies to a status log.
1. A computer-implemented method, comprising:
polling, by a computing device, statuses of one or more assets with one or more messages signed by a device private key, the one or more assets being polled including a physical security controller for monitoring access to a physical security perimeter, and the one or more assets being located within the physical security perimeter;
receiving, by the computing device, one or more replies from the one or more assets, a reply of the one or more replies being signed with an asset private key and the reply containing a status of an asset;
validating, by the computing device, the one or more replies using one or more asset public keys; and
adding, by the computing device, one or more statuses from the validated replies to a status log.
2. The method of claim 1 , wherein the computing device and the one or more assets communicate using a private network.
3. The method of claim 1 , wherein a message, of the one or more messages, contains a first nonce and a reply to the message, of the one or more replies, contains a second nonce.
4. The method of claim 3 , wherein the first nonce and second nonce comprise at least one of a random number, a pseudo-random number, or a timestamp.
5. The method of claim 1 , wherein adding the one or more statuses further comprises:
signing, by the computing device, the one or more statuses using the device private key.
6. The method of claim 1 , wherein the status is added to the status log if the reply is received within a threshold amount of time of the polling.
7. A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising one or more instructions that, when executed by one or more processors of a computing device, cause the computing device to perform operations comprising:
polling statuses of one or more assets with one or more messages signed by a device private key, the one or more assets being polled including a physical security controller for monitoring access to a physical security perimeter, and the one or more assets being located within the physical security perimeter;
receiving one or more replies from the one or more assets, a reply of the one or more replies being signed with an asset private key and the reply containing a status of an asset;
validating the one or more replies using one or more asset public keys; and
adding one or more statuses from the validated replies to a status log.
8. The medium of claim 7 , wherein the computing device and the one or more assets communicate using a private network.
9. The medium of claim 7 , wherein a message, of the one or more messages, contains a first nonce and a reply to the message, of the one or more replies, contains a second nonce.
10. The medium of claim 9 , wherein the first nonce and second nonce comprise at least one of a random number, a pseudo-random number, or a timestamp.
11. The medium of claim 7 , wherein adding the one or more statuses further comprises:
signing the one or more statuses using the device private key.
12. The medium of claim 7 , wherein the status is added to the status log if the reply is received within a threshold amount of time of the polling.
13. A computing device comprising:
a storage device;
a speaker; and
one or more processors executing configured to execute program instructions stored in the storage device and being configured to at least:
poll statuses of one or more assets with one or more messages signed by a device private key, the one or more assets being polled including a physical security controller for monitoring access to a physical security perimeter, and the one or more assets being located within the physical security perimeter;
receive one or more replies from the one or more assets, a reply of the one or more replies being signed with an asset private key and the reply containing a status of an asset;
validate the one or more replies using one or more asset public keys; and
add one or more statuses from the validated replies to a status log.
14. The device of claim 13 , wherein a message, of the one or more messages, contains a first nonce and a reply to the message, of the one or more replies, contains a second nonce.
15. The device of claim 14 , wherein the first nonce and second nonce comprise at least one of a random number, a pseudo-random number, or a timestamp.
16. The device of claim 13 , wherein the one or more processors are configured to:
sign the one or more statuses using the device private key.
17. The device of claim 13 , wherein the status is added to the status log if the reply is received within a threshold amount of time of the polling.