System and method for speed dialing information handling system configuration changes

• US 10,135,840 B2
• Filed: 07/15/2016
• Issued: 11/20/2018
• Est. Priority Date: 07/15/2016
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Jesurajan Marystella, Anto DolphinJose, Jose, Cyril, Savage, Marshal F.
• Primary Examiner(s): Poltorak, Piotr
• Application Number:
  US15/211,320
• Publication Number:
  US 20180020007A1
• Time in Patent Office: 858 Days
• Field of Search: None
• CPC Class Codes: G06F 9/4416 Network booting; Remote initial program loading [RIPL]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Methods and systems for receiving speed dial configuration changes may involve receiving a packet, determining whether the packet is associated with a valid command, determining whether a username in a header of the packet is a valid user, validating a signature using a public key, decrypting encrypted data using a first factor key, and executing the valid command associated with the decrypted data. The packet includes the header, encrypted data, and the signature, and is sent without a one-to-many management console and without prior group configuration. The validation of the signature may be based on the determination that the packet is associated with a valid command and that the username in the header of the packet is a valid user.

Claims

1. A method for receiving speed dial configuration changes, comprising:

receiving a packet sent to a group without a one-to-many management console and without prior configuration of the group, wherein the packet includes a header, encrypted data, and a signature;

determining whether the packet is associated with a valid command;

determining whether a username in the header of the packet is a valid user;

validating the signature of the packet using a public key based on the determination that the packet is associated with a valid command and that the username in the header of the packet is a valid user;

decrypting the encrypted data from the packet using a first factor symmetric key wherein the first factor symmetric key was derived using the username and a password; and

executing the valid command associated with the decrypted data.

2. The method of claim 1, wherein the valid command includes at least one of:

a power-down command;

a power-up command;

a firmware update command;

a PXE boot command;

a power capacity command;

a power supply command; and

a fan speed command.

3. The method of claim 1, wherein determining whether the packet is associated with a valid command further comprises comparing a command identifier in the header of the packet to a whitelist of commands.

4. The method of claim 1, wherein the valid command includes a command identifier and command data extracted from the decrypted data.

5. The method of claim 1, further comprising:

verifying a checksum in the decrypted data; and

verifying a length value in the decrypted data by comparing a length of the decrypted data to the length value.

6. An information handling system, comprising:

a processor subsystem comprising a primary hardware processor having access to a first memory;

a management controller comprising a secondary hardware processor having access to a second memory, the second memory including an embedded storage partition and the second memory storing instructions executable by the secondary hardware processor to;

receive a packet sent to a group without a one-to-many management console and without prior configuration of the group, wherein the packet includes a header, encrypted data, and a signature;

determine whether the packet is associated with a valid command;

determine whether a username in the header of the packet is a valid user;

validate the signature of the packet using a public key based on the determination that the packet is associated with a valid command and that the username in the header of the packet is a valid user;

decrypt the encrypted data from the packet using a first factor symmetric key wherein the first factor symmetric key was derived using the username and a password; and

execute the valid command associated with the decrypted data.

7. The information handling system of claim 6, wherein the valid command includes at least one of:

a power-down command;

a power-up command;

a firmware update command;

a PXE boot command;

a power capacity command;

a power supply command; and

a fan speed command.

8. The information handling system of claim 6, wherein the instructions to determine whether the packet is associated with a valid command further comprises instructions to compare a command identifier in the header of the packet to a whitelist of commands.

9. The information handling system of claim 6, wherein the valid command includes a command identifier and command data extracted from the decrypted data.

10. The information handling system of claim 6, further comprising instructions executable by the secondary hardware processor to:

verify a checksum in the decrypted data; and

verify a length value in the decrypted data by comparing a length of the decrypted data to the length value.

11. The information handling system of claim 6, further comprising instructions executable by the secondary hardware processor to determine whether the packet targets a device in the information handling system based on a device identifier in the decrypted data and execution of the valid command further comprising execution of the valid command for the targeted device based on the determination that the decrypted data targets a device.

12. A management controller for an information handling system having a primary hardware processor and a primary memory, the management controller comprising:

a secondary hardware processor having access to a second memory, the second memory including an embedded storage partition and the second memory storing instructions executable by the secondary hardware processor to;

receive a packet sent to a group without a one-to-many management console and without prior configuration of the group, wherein the packet includes a header, encrypted data, and a signature;

determine whether the packet is associated with a valid command;

determine whether a username in the header of the packet is a valid user;

validate the signature of the packet using a public key based on the determination that the packet is associated with a valid command and that the username in the header of the packet is a valid user;

decrypt the encrypted data from the packet using a first factor symmetric key wherein the first factor symmetric key was derived using the username and a password; and

execute the valid command associated with the decrypted data.

13. The management controller of claim 12, wherein the valid speed dial command includes at least one of:

a power-down command;

a power-up command;

a firmware update command;

a PXE boot command;

a power capacity command;

a power supply command; and

a fan speed command.

14. The management controller of claim 12, wherein the instructions to determine whether the packet is associated with a valid command further comprises instructions to compare a command identifier in the header of the packet to a whitelist of commands.

15. The management controller of claim 12, wherein the valid command includes a command identifier and command data extracted from the decrypted data.

16. The management controller of claim 12, further comprising instructions executable by the secondary hardware processor to:

verify a checksum in the decrypted data; and

verify a length value in the decrypted data by comparing a length of the decrypted data to the length value.

17. The management controller of claim 12, further comprising instructions executable by the secondary hardware processor to determine whether the packet targets a device of the information handling system based on a device identifier in the decrypted data and execution of the valid command further comprising execution of the valid command for the targeted device based on the determination that the decrypted data targets a device.