Granted Patent B2

US 12,284,167 · App. 17/580,910 · Granted Apr 22, 2025

Inventors: Mukund Khatri (Austin, TX); Sanjeev S. Dambal (Austin, TX); Chandrashekar Nelogal (Round Rock, TX)

Assignee: Dell Products L.P.

H04L63/061H04L63/162H04L63/20

Abstract

Claims (95)

1. A method for managing a storage system, the method comprising:

in response to a boot up of a hardware resource manager, obtaining a key purge policy associated with a security key from storage of the hardware resource manager,

wherein the hardware resource manager is a baseboard management controller (BMC),

wherein the key purge policy comprises a condition for deleting the security key, and

wherein the condition is based on whether a network change when accessing a key management service (KMS) is detected;

in response to the boot up, initiating access to the KMS;

obtaining, based on the access, a message from the KMS, wherein the message includes the security key and network information,

wherein the network information comprises link layer discover protocol (LLDP) parameters,

wherein the LLDP parameters comprises: an identifier of a port from which the security key is obtained and an identifier of a computing device corresponding to the KMS;

in response to obtaining the message:

using the security key to access a secured storage device of the storage system;

performing a network analysis on the network information to identify a network change;

making a determination, based on the network change and the key purge policy, that the security key is to be deleted;

based on the determination, deleting the security key;

after deleting the security key:

performing a KMS access polling, wherein performing the KMS access polling comprises:

waiting a polling interval before attempting a KMS connection;

making a second determination that the KMS connection is not established; and

based on the second determination, updating a failure timer of the key purge policy.

2. The method of claim 1 , wherein performing the network analysis comprises:

making a second determination that a network connection is not available;

making a third determination that the LLDP parameters are different from expected values of the key purge policy; and

based on the second and third determinations, detecting the network change.

3. The method of claim 1 , wherein the KMS access polling further comprising:

waiting a second polling interval before reattempting the KMS connection;

making a third determination that the KMS connection is not established; and

based on the third determination:

making a fourth determination that the failure timer has expired; and

based on the fourth determination, deleting the security key.

4. The method of claim 1 , wherein the polling interval is based on whether a previous most recent attempt to access the KMS was successful.

5. A system for managing a storage system, comprising:

a hardware processor; and

a key management service (KMS);

the storage system comprising:

a plurality of storage devices; and

a hardware resource manager and the hardware processor programmed to:

in response to a boot up of the hardware resource manager, obtaining a key purge policy associated with a security key from storage of the hardware resource manager,

wherein the key purge policy comprises a condition for deleting the security key, and

wherein the condition is based on whether a network change when accessing the KMS is detected;

in response to the boot up, initiate access to the KMS;

obtaining, based on the access, a message from the KMS, wherein the message includes the security key and network information,

wherein the network information comprises link layer discover protocol (LLDP) parameters,

wherein the LLDP parameters comprises: an identifier of a port from which the security key is obtained and an identifier of a computing device corresponding to the KMS;

in response to obtaining the message:

use the security key to access a secured storage device of the plurality of storage devices;

perform a network analysis on the network information to identify a network change;

make a determination, based on the network change and the key purge policy, that the security key is to be deleted;

based on the determination, delete the security key; and

after deleting the security key, perform a KMS access polling,

wherein performing the KMS access polling comprises:

waiting a polling interval before attempting a KMS connection;

making a second determination that the KMS connection is not established; and

based on the second determination, updating a failure timer of the key purge policy,

wherein the hardware resource manager is a baseboard management controller (BMC).

6. The system of claim 5 , wherein performing the network analysis comprises:

making a second determination that a network connection is not available;

making a third determination that the LLDP parameters are different from expected values of the key purge policy; and

based on the second and third determinations, detecting the network change.

7. The system of claim 5 , wherein the KMS access polling further comprising:

waiting a second polling interval before reattempting the KMS connection;

making a third determination that the KMS connection is not established; and

based on the third determination:

making a fourth determination that the failure timer has expired; and

based on the fourth determination, deleting the security key.

8. The system of claim 7 , wherein the polling interval is based on whether a previous most recent attempt to access the KMS was successful.

9. A non-transitory computer readable medium comprising computer readable program code, which when executed by a computer processor enables the computer processor to perform a method, the method comprising:

in response to a boot up of a hardware resource manager of a storage system, obtaining a key purge policy associated with a security key from storage of the hardware resource manager,

wherein the hardware resource manager is a baseboard management controller (BMC),

wherein the key purge policy comprises a condition for deleting the security key, and

wherein the condition is based on whether a network change when accessing a key management service (KMS) is detected;

in response to the boot up, initiating access to the KMS;

obtaining, based on the access, a message from the KMS, wherein the message includes the security key and network information,

wherein the network information comprises link layer discover protocol (LLDP) parameters,

wherein the LLDP parameters comprises: an identifier of a port from which the security key is obtained and an identifier of a computing device corresponding to the KMS;

in response to obtaining the message:

using the security key to access a secured hardware storage device of the storage system;

performing a network analysis on the network information to identify a network change;

making a determination, based on the network change and the key purge policy, that the security key is to be deleted;

based on the determination, deleting the security key;

after deleting the security key:

performing a KMS access polling, wherein performing the KMS access polling comprises:

waiting a polling interval before attempting a KMS connection;

making a second determination that the KMS connection is not established; and

based on the second determination, updating a failure timer of the key purge policy.

10. The non-transitory computer readable medium of claim 9 , wherein performing the network analysis comprises:

making a second determination that a network connection is not available;

making a third determination that the LLDP parameters are different from expected values of the key purge policy; and

based on the second and third determinations, detecting the network change.

11. The non-transitory computer readable medium of claim 9 , wherein the KMS access polling further comprising:

waiting a second polling interval before reattempting the KMS connection;

making a third determination that the KMS connection is not established; and

based on the third determination:

making a fourth determination that the failure timer has expired; and

based on the fourth determination, deleting the security key.

12. The non-transitory computer readable medium of claim 9 , wherein the polling interval is based on whether a previous most recent attempt to access the KMS was successful.

Assignments (1)

Continuity (1)

References Cited (12)