Transmitting a service report from an air-gapped computing system
A method includes a node detecting that a service event has occurred within the node, wherein the node is located within an air-gapped computing system that includes a plurality of nodes, and wherein there is no wired communication connection between any device within the air-gapped computing system and any device outside the air-gapped computing system. The method further includes a wireless transceiver located within the air-gapped computing system transmitting a service report in a short-range wireless communication signal that extends beyond the air-gapped computing system, wherein the service report identifies the service event detected by the node. Still further, the method includes a relay device located outside the air-gapped computing system receiving the short-range wireless communication signal that includes the service report, and the relay device forwarding the service report to a destination node located outside the air-gapped computing system.
1 . A method, comprising:
a node detecting that a service event has occurred within the node, wherein the node is located within an air-gapped computing system that includes a plurality of nodes, wherein each of the plurality of nodes includes their own wireless transceiver for communicating with a relay device located outside the air-gapped computing system, and wherein there is no wired communication connection between any device within the air-gapped computing system and any device outside the air-gapped computing system;
a first wireless transceiver located within the air-gapped computing system transmitting a service report in a short-range wireless communication signal that extends beyond the air-gapped computing system, wherein the service report identifies the service event detected by the node;
the relay device located outside the air-gapped computing system receiving the short-range wireless communication signal that includes the service report; and
the relay device forwarding the service report to a destination node located outside the air-gapped computing system.
2 . The method of claim 1 , wherein the relay device is a computing device that is connected to a second wireless transceiver and hosts a forwarding application that causes the relay device to forward the service report to the destination node at a network location that is outside the range of the short-range wireless communication signal.
3 . The method of claim 1 , further comprising:
encrypting the service report prior to transmitting the service report, wherein the service report is encrypted with a predetermined public encryption key that is paired with a private encryption key known only by the destination node;
the destination node receiving the service report from the relay device; and
the destination node using the private encryption key to decrypt the service report.
4 . The method of claim 3 , wherein the service report is encrypted by the node detecting the service event.
5 . The method of claim 4 , wherein the destination node is selected from a system management node that monitors operation of the plurality of nodes located within the air-gapped computing system and/or a service database operated by a manufacturer of the node that detected the service event, the method further comprising:
the node encrypting the service report using a first predetermined public encryption key that is paired with a first private encryption key that is only known by the service database to form a first encrypted service report; and
the node encrypting the first encrypted service report using a second predetermined public encryption key that is paired with a second private encryption key that is only known by the system management node to form a second encrypted service report, wherein the first wireless transceiver transmits the second encrypted service report in the short-range wireless communication signal that extends beyond the air-gapped computing system.
6 . The method of claim 5 , further comprising:
the system management node receiving the second encrypted service report;
the system management node decrypting the second encrypted service report using the second private encryption key to obtain the first encrypted service report; and
the system management node forwarding the first encrypted service report to the service database.
7 . The method of claim 4 , wherein the destination node is selected from a system management node that monitors operation of the plurality of nodes located within the air-gapped computing system and/or a service database operated by a manufacturer of the node that detected the service event, the method further comprising:
the node determining whether the service report is to be sent to the system management node or the service database;
the node, in response to determining that the service report is to be sent to the service database, encrypting the service report using a first predetermined public encryption key that is paired with a first private encryption key that is only known by the service database to form a first encrypted service report that is transmitted by the first wireless transceiver; and
the node, in response to determining that the service report is to be sent to the system management node, encrypting the service report using a second predetermined public encryption key that is paired with a second private encryption key that is only known by the system management node to form a second encrypted service report that is transmitted by the first wireless transceiver.
8 . The method of claim 1 , wherein the destination node is a system management node that monitors operation of the plurality of nodes located within the air-gapped computing system.
9 . The method of claim 1 , wherein the destination node is a service database operated by a manufacturer of the node that detected the service event.
10 . The method of claim 1 , wherein the short-range wireless communication is selected from Bluetooth wireless communication and/or Wi-Fi wireless communication.
11 . The method of claim 1 , wherein the first wireless transceiver is a component of the node detecting the service event.
12 . The method of claim 11 , wherein the node is selected from a server, data storage device, and network switch.
13 . The method of claim 11 , wherein the node is a server including a baseboard management controller, and wherein the baseboard management controller instructs the first wireless transceiver to transmit the service report.
14 . A method, comprising:
a node detecting that a service event has occurred within the node, wherein the node is located within an air-gapped computing system that includes a plurality of nodes, and wherein there is no wired communication connection between any device within the air-gapped computing system and any device outside the air-gapped computing system;
a first wireless transceiver located within the air-gapped computing system transmitting a service report in a short-range wireless communication signal that extends beyond the air-gapped computing system, wherein the service report identifies the service event detected by the node;
a relay device located outside the air-gapped computing system receiving the short-range wireless communication signal that includes the service report;
the relay device forwarding the service report to a system management node located outside the air-gapped computing system, wherein the system management node monitors operation of the plurality of nodes located within the air-gapped computing system;
the system management node identifying an instruction for remediating the service event;
the relay device using a second wireless transceiver located outside of the air-gapped computing system to transmit the instruction from the system management node in a second short-range wireless communication signal that extends into the air-gapped computing system;
a data aggregator located within the air-gapped computing system using the first wireless transceiver to receive the second short-range wireless communication signal that includes the instruction; and
the data aggregator forwarding the instruction to the node located within the air-gapped computing system.
15 . The method of claim 14 , further comprising:
encrypting the instruction prior to transmitting the instruction, wherein the instruction is encrypted with a predetermined public encryption key that is paired with a private encryption key known only by the data aggregator and/or the node within the air-gapped computing system.
16 . The method of claim 14 , wherein the data aggregator is connected to receive service reports from any of the plurality of nodes in the air-gapped computing system and use the first wireless transceiver to transmit the service reports in short-range wireless communication signals to be received by the relay device.
17 . The method of claim 16 , wherein none of the plurality of nodes include a wireless transceiver.
18 . A method, comprising:
a node detecting that a service event has occurred within the node, wherein the node is located within an air-gapped computing system that includes a plurality of nodes, and wherein there is no wired communication connection between any device within the air-gapped computing system and any device outside the air-gapped computing system;
a first wireless transceiver located within the air-gapped computing system transmitting a service report in a short-range wireless communication signal that extends beyond the air-gapped computing system, wherein the service report identifies the service event detected by the node;
a relay device located outside the air-gapped computing system receiving the short-range wireless communication signal that includes the service report; and
the relay device forwarding the service report to a destination node located outside the air-gapped computing system, wherein the first wireless transceiver is controlled by a data aggregator device within the air-gapped computing system, wherein the data aggregator device receives the service report from the node detecting the service event over a private network within the air-gapped computing system and uses the first wireless transceiver to transmit the service report.
19 . The method of claim 18 , wherein the data aggregator is connected to receive service reports from any of the plurality of nodes in the air-gapped computing system and use the first wireless transceiver to transmit the service reports in short-range wireless communication signals to be received by the relay device.
20 . The method of claim 19 , wherein none of the plurality of nodes include a wireless transceiver.