Method and system for interlocking a server to a server system and a computer system utilizing the same

• US 20040257998A1
• Filed: 06/19/2003
• Published: 12/23/2004
• Est. Priority Date: 06/19/2003
• Status: Active Grant

• Current Assignee: Lenovo International Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Chu, Simon C., Dayan, Richard A.
• Granted Patent: US 8,843,604 B2
• Time in Patent Office: Days
• US Class Current: 370/252
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks

Abstract

A method and system for interlocking a plurality of servers to a server system is disclosed. In a first aspect, the method comprises assigning an identifier to each of the plurality of servers, wherein the identifier associates each of the plurality of servers to the server system, thereby defining a plurality of interlocked servers. In a second aspect, a computer system comprises a plurality of servers, a management module coupled to each of the plurality of servers, and an interlock mechanism coupled to the management module, wherein the interlock mechanism assigns to each of the plurality of servers an identifier that associates each of the plurality of servers to the server system, thereby defining a plurality of interlocked servers.

Claims

1. A method for interlocking a plurality of servers to a server system comprising the steps of:

a) assigning an identifier to each of the plurality of servers, wherein the identifier associates each of the plurality of servers to the server system, thereby defining a plurality of interlocked servers.

2. The method of claim 1, wherein each of the plurality of interlocked servers includes non-volatile storage.

3. The method of claim 2 further comprising:

b) storing the identifier in each interlocked server'"'"'s non-volatile storage.

4. The method of claim 3, wherein the assigning step (a) further comprises:

(a1) generating the identifier; and

(a2) storing the identifier in a table.

5. The method of claim 4 further comprising the step of:

(c) detecting a server that is not interlocked to the server system by examining the server'"'"'s non-volatile storage, wherein a non-interlocked server is not authorized to run in the server system.

6. The method of claim 5, wherein the detecting step (c) comprising:

(c1) concluding the server is not interlocked if the non-volatile storage does not include an identifier;

else

(c2) determining whether an existing identifier is valid if an identifier is found in the non-volatile storage; and

(c3) concluding that the server is not interlocked if the existing identifier is invalid.

7. The method of claim 6, wherein the determining step (c2) comprising:

(c2i) comparing the existing identifier to the identifier stored in the table; and

(c2ii) concluding the existing identifier is invalid if the existing identifier does not match the stored identifier.

8. The method of claim 7, wherein the storing step (b) comprising:

(b1) encrypting the identifier with a private key for each interlocked server; and

(b2) storing the encrypted identifier in each interlocked server'"'"'s non-volatile storage.

9. The method of claim 8, wherein the determining step (c2) comprising:

(c2iii) decrypting the existing identifier with a public key for the server.

10. The method of claim 5 further comprising:

d) protecting the server system from the non-interlocked server.

11. The method of claim 10, wherein the protecting step (d) comprising:

(d1) isolating the server from the plurality of interlocked servers; and

(d2) notifying a system administrator that the server is not interlocked to the server system.

12. The method of claim 11, wherein the isolating step (d1) comprising:

(d1i) holding the server in a power-off state.

13. The method of claim 11, wherein the isolating step (d1) comprising:

(d1i) powering-down the server system.

14. The method of claim 5, wherein the detecting step (c) is performed during a power-up sequence for the server system.

15. The method of claim 5, wherein the detecting step (c) is performed if the server system senses that a new server has been placed into the system.

16. The method of claim 4 further comprising the step of:

(c) adding a server to the plurality of interlocked servers.

17. The method of claim 16, wherein the adding step (c) comprising:

(c1) providing a slot number into which the server will be placed;

(c2) assigning the identifier to the server and storing the identifier in the server'"'"'s non-volatile storage; and

(c3) updating the table to include the server in the plurality of interlocked servers.

18. The method of claim 4 further comprising:

(c) removing a server from the plurality of interlocked servers.

19. The method of claim 18, wherein the removing step (c) comprising:

(c1) providing the slot number from which the server will be removed;

(c2) erasing the identifier from the server'"'"'s non-volatile storage; and

(c3) updating the table to exclude the server from the plurality of interlocked servers.

20. The method of claim 4 further comprising:

(c) sensing a removal of one of the plurality of interlocked servers;

(d) marking the identifier in the table corresponding to the removed server; and

(e) protecting the server system.

21. The method of claim 20, wherein the protecting step (e) further comprising:

(e1) notifying a system administrator that the server has been removed; and

(e2) isolating the removed server from the plurality of interlocked servers if the removed server is reinserted into the system.

22. The method of claim 21, wherein the isolating step (e2) further comprising:

(e2i) comparing the removed server'"'"'s identifier with the identifier stored in the table when the system senses that the removed server has been reinserted into the system; and

(e2ii) holding the removed server in a power-off state if the identifier stored in the table is marked.

23. A computer readable medium containing program instructions for interlocking a plurality of servers to a server system the instructions for:

a) assigning an identifier to each of the plurality of servers, wherein the identifier associates each of the plurality of servers to the server system, thereby defining a plurality of interlocked servers.

24. The computer readable medium of claim 23, wherein each of the plurality of interlocked servers includes non-volatile storage.

25. The computer readable medium of claim 24 further comprising:

b) storing the identifier in each interlocked server'"'"'s non-volatile storage.

26. The computer readable medium of claim 25, wherein the assigning instruction (a) further comprising:

(a1) generating the identifier; and

(a2) storing the identifier in a table.

27. The computer readable medium of claim 26 further comprising the instruction for:

c) detecting a server that is not interlocked to the server system by examining the server'"'"'s non-volatile storage, wherein a non-interlocked server is not authorized to run in the server system.

28. The computer readable medium of claim 27, wherein the detecting instruction (c) comprising:

(c1) concluding the server is not interlocked if the non-volatile storage does not include an identifier;

else

(c2) determining whether an existing identifier is valid if an identifier is found in the non-volatile storage; and

(c3) concluding that the server is not interlocked if the existing identifier is invalid.

29. The computer readable medium of claim 28, wherein the determining instruction (c2) comprising:

(c2i) comparing the existing identifier to the identifier stored in the table; and

(c2ii) concluding the existing identifier is invalid if the existing identifier does not match the stored identifier.

30. The computer readable medium of claim 29, wherein the storing instruction (b) comprising:

(b1) encrypting the identifier with a private key for each interlocked server; and

(b2) storing the encrypted identifier in each interlocked server'"'"'s non-volatile storage.

31. The computer readable medium of claim 30, wherein the determining instruction (c2) comprising:

(c2iii) decrypting the existing identifier with a public key for the server.

32. The computer readable medium of claim 27 further comprising:

d) protecting the server system from the non-interlocked server.

33. The computer readable medium of claim 32, wherein the protecting instruction (d) comprising:

(d1) isolating the server from the plurality of interlocked servers; and

(d2) notifying a system administrator that the server is not interlocked to the server system.

34. The computer readable medium of claim 33, wherein the isolating instruction (d1) comprising:

(d1i) holding the server in a power-off state.

35. The computer readable medium of claim 33, wherein the isolating instruction (d1) comprising:

(d1i) powering-down the server system.

36. The computer readable medium of claim 27, wherein the detecting instruction (c) is performed during a power-up sequence for the server system.

37. The computer readable medium of claim 27, wherein the detecting instruction (c) is performed if the server system senses that a new server has been placed into the system.

38. The computer readable medium of claim 26 further comprising instruction for:

(c) adding a server to the plurality of interlocked servers.

39. The computer readable medium of claim 38, wherein the adding instruction (c) comprising:

(c1) providing a slot number into which the server will be placed;

(c2) assigning the identifier to the server and storing the identifier in the server'"'"'s non-volatile storage; and

(c3) updating the table to include the server in the plurality of interlocked servers.

40. The computer readable medium of claim 26 further comprising instruction for:

(c) removing a server from the plurality of interlocked servers.

41. The computer readable medium of claim 40, wherein the removing instruction (c) comprising:

(c1) providing the slot number from which the server will be removed;

(c2) erasing the identifier from the server'"'"'s non-volatile storage; and

(c3) updating the table to exclude the server from the plurality of interlocked servers.

42. The computer readable medium of claim 26 further comprising:

(c) sensing a removal of one of the plurality of interlocked servers;

(d) marking the identifier in the table corresponding to the removed server; and

(e) protecting the server system.

43. The computer readable medium of claim 42, wherein the protecting instruction (e) further comprising:

(e1) notifying a system administrator that the server has been removed; and

(e2) isolating the removed server from the plurality of interlocked servers if the removed server is reinserted into the system.

44. The computer readable medium of claim 43, wherein the isolating step (e2) further comprising:

(e2i) comparing the removed server'"'"'s identifier with the identifier stored in the table when the system senses that the removed server has been reinserted into the system; and

(e2ii) holding the removed server in a power-off state if the identifier stored in the table is marked.

45. A system for interlocking a plurality of servers to a server system comprising:

an interlock mechanism for assigning an identifier to each of the plurality of servers, wherein the identifier associates each of the plurality of servers to the server system, thereby defining a plurality of interlocked servers.

46. The system of claim 45, wherein each of the plurality of interlocked servers includes non-volatile storage.

47. The system of claim 46, wherein each of the plurality of interlocked servers comprising:

means for storing the identifier in each interlocked server'"'"'s non-volatile storage.

48. The system of claim 47, wherein the interlock mechanism further comprising a utility for generating the identifier and a table for storing information related to each of the interlocked servers and their respective identifiers.

49. The system of claim 48 wherein the interlock mechanism further comprising:

means for detecting a server that is not interlocked to the server system, wherein a non-interlocked server is not authorized to run in the server system.

50. The system of claim 49, wherein the means for detecting comprising means for examining the server'"'"'s non-volatile storage and means for determining whether an existing identifier is valid if an identifier is found in the non-volatile storage, wherein the server is not interlocked if the existing identifier is invalid.

51. The system of claim 50, wherein the interlock mechanism further comprising:

means for protecting the server system from the non-interlocked server.

52. The system of claim 49, wherein the utility further comprising means for adding a server to the plurality of interlocked servers.

53. The system of claim 49, wherein the utility further comprising means for removing a server from the plurality of interlocked servers.

54. A computer server system comprising:

a plurality of servers;

a management module coupled to the plurality of servers; and

an interlock mechanism coupled to the management module, wherein the interlock mechanism assigns to each of the plurality of servers an identifier that associates each of the plurality of servers to the server system, thereby defining a plurality of interlocked servers.

55. The server system of claim 54, wherein each server comprising:

means for storing the identifier in each server'"'"'s non-volatile storage.

56. The server system of claim 54, wherein the interlock mechanism comprises a table, wherein the table stores information related to each of the interlocked servers and their associated identifiers.

57. The server system of claim 54, wherein the interlock mechanism further comprises means for detecting a server that is not interlocked to the server system.

58. The server system of claim 57, wherein the means for detecting comprising means for examining the server'"'"'s non-volatile storage and means for determining whether an existing identifier is valid if an identifier is found in the non-volatile storage, wherein the server is not interlocked if the existing identifier is invalid.

59. The server system of claim 57, wherein the interlock mechanism further comprises means for protecting the server system from the non-interlocked server.

60. The server system of claim 54, wherein the interlock mechanism further comprising a utility for adding a server to the plurality of interlocked servers.

61. The server system of claim 54, wherein the interlock mechanism further comprising a utility for removing a server from the plurality of interlocked servers.

62. The server system of claim 54, wherein the identifier is a nonce based on a serial number for the management module.

63. The server system of claim 62, wherein each server comprising:

means for encrypting the nonce; and

means for storing the encrypted nonce in each server'"'"'s non-volatile storage.

64. The server system of claim 63, wherein the interlock mechanism further comprising means for examining the server'"'"'s non-volatile storage and means for decrypting the encrypted nonce so that the interlock mechanism can determine whether the identifier is valid.