Mutual authentication in edge computing
An information handling system may include at least one processor and a memory. The information handling system may be configured to receive, from a second information handling system, a physical identifier, a biological identifier, and a timestamp; determine a public key and a private key for the second information handling system based on the physical identifier, the biological identifier, and the timestamp; generate a random message; encrypt the random message with the public key for the second information handling system; transmit the encrypted random message to the second information handling system; and in response to a determination that the second information handling system has successfully decrypted the random message, authenticate the second information handling system.
1. An information handling system comprising:
at least one processor; and
a memory;
wherein the information handling system is configured to:
receive, from a second information handling system, a physical identifier, a biological identifier, and a timestamp;
calculate a public key and a private key for the second information handling system by applying a cryptographic function to the physical identifier, the biological identifier, and the timestamp;
generate a random message;
encrypt the random message with the public key for the second information handling system, wherein the random message is encrypted according to a particular encryption algorithm that is selected from a group of encryption algorithms based at least in part on the timestamp;
transmit the encrypted random message to the second information handling system; and
in response to a determination that the second information handling system has successfully decrypted the random message, authenticate the second information handling system.
2. The information handling system of claim 1 , wherein the information handling system is a hyper-converged infrastructure (HCI) system.
3. The information handling system of claim 2 , wherein the second information handling system is an edge node of the HCI system.
4. The information handling system of claim 1 , wherein the biological identifier is a fingerprint.
5. The information handling system of claim 1 , wherein the physical identifier is a device identifier of the second information handling system.
6. The information handling system of claim 1 , wherein determining that the second information handling system has successfully decrypted the random message comprises receiving, from the second information handling system, the random message encrypted with a public key for the information handling system.
7. A method comprising:
an information handling system receiving, from a second information handling system, a physical identifier, a biological identifier, and a timestamp;
the information handling system calculating a public key and a private key for the second information handling system by applying a cryptographic function to the physical identifier, the biological identifier, and the timestamp;
the information handling system generating a random message;
the information handling system encrypting the random message with the public key for the second information handling system, wherein the random message is encrypted according to a particular encryption algorithm that is selected from a group of encryption algorithms based at least in part on the timestamp;
the information handling system transmitting the encrypted random message to the second information handling system; and
in response to a determination that the second information handling system has successfully decrypted the random message, the information handling system authenticating the second information handling system.
8. The method of claim 7 , wherein the information handling system is a hyper-converged infrastructure (HCI) system.
9. The method of claim 8 , wherein the second information handling system is an edge node of the HCI system.
10. The method of claim 7 , wherein the biological identifier is a fingerprint.
11. The method of claim 7 , wherein the physical identifier is a device identifier of the second information handling system.
12. The method of claim 7 , wherein determining that the second information handling system has successfully decrypted the random message comprises receiving, from the second information handling system, the random message encrypted with a public key for the information handling system.
13. An article of manufacture comprising a non-transitory, computer-readable medium having computer-executable instructions thereon that are executable by a processor of an information handling system for:
receiving, from a second information handling system, a physical identifier, a biological identifier, and a timestamp;
calculating a public key and a private key for the second information handling system by applying a cryptographic function to the physical identifier, the biological identifier, and the timestamp;
generating a random message;
encrypting the random message with the public key for the second information handling system, wherein the random message is encrypted according to a particular encryption algorithm that is selected from a group of encryption algorithms based at least in part on the timestamp;
transmitting the encrypted random message to the second information handling system; and
in response to a determination that the second information handling system has successfully decrypted the random message, authenticating the second information handling system.
14. The article of claim 13 , wherein the information handling system is a hyper-converged infrastructure (HCI) system.
15. The article of claim 14 , wherein the second information handling system is an edge node of the HCI system.
16. The article of claim 13 , wherein the biological identifier is a fingerprint.
17. The article of claim 13 , wherein the physical identifier is a device identifier of the second information handling system.
18. The article of claim 13 , wherein determining that the second information handling system has successfully decrypted the random message comprises receiving, from the second information handling system, the random message encrypted with a public key for the information handling system.