Architecture and system for secure host management

• US 20070011676A1
• Filed: 06/30/2005
• Published: 01/11/2007
• Est. Priority Date: 06/30/2005
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Sahita, Ravi, Blumenthal, Uri
• Application Number:
  US11/170,925
• Publication Number:
  US 20070011676A1
• Time in Patent Office: Days
• US Class Current: 718/100
• CPC Class Codes: G06F 11/263 Generation of test inputs, e.g. test vectors, patterns or sequences ; with adaptation of the tested hardware for testability with external testers

Abstract

According to some embodiments, a resource data record associated with diagnostic code to manage a manageable resource is exposed, and the resource data record is discovered. The diagnostic code is loaded into a management platform based on the resource data record. The diagnostic code may be loaded from a location in host memory indicated by the resource data record. An the integrity check value may be received from the location in host memory, and an integrity check may be performed on the loaded diagnostic code based on the integrity check value.

Claims

1. A medium storing program code comprising:

code to provide a device driver, the device driver comprising a resource data record and instrumentation code for exposing managed resource data associated with the device driver; and

diagnostic code to access the managed resource data exposed by the instrumentation code and to perform a diagnostic function based on the accessed managed resource data,

wherein the resource data record indicates a memory location of the diagnostic code.

2. A medium according to claim 1, the device driver further comprising a second resource data record indicating a second memory location of the managed resource data.

3. A medium according to claim 1, the code further comprising:

an integrity check value to verify the integrity of the diagnostic code.

4. A medium according to claim 3, the code further comprising:

an integrity check value to verify the authenticity of the diagnostic code.

5. A medium according to claim 1, the code further comprising:

an integrity check value to verify the authenticity of the diagnostic code.

6. A medium according to claim 1, wherein the device driver is to be executed by a managed host, and

wherein the diagnostic code is to be loaded executed by a management platform.

7. A medium according to claim 6, wherein the management platform is to discover the resource data record, and to load the diagnostic code based on the memory location.

8. A medium according to claim 7, wherein the management platform is to verify the loaded diagnostic code.

9. A method comprising:

exposing a resource data record associated with diagnostic code, the diagnostic code to manage a manageable resource;

discovering the resource data record; and

loading the diagnostic code into a management platform based on the resource data record.

10. A method according to claim 9, further comprising:

exposing a second resource data record associated with managed resource data of the manageable resource, the second resource data record indicating a memory location of the managed resource data;

discovering the second resource data record;

accessing the managed resource data based on the second resource data record; and

process the managed resource data using the diagnostic code.

11. A method according to claim 9, the resource data record indicating a location of the diagnostic code in host memory, and

wherein the diagnostic code is loaded from the location.

12. A method according to claim 9, the resource data record indicating a location of the diagnostic code and an integrity check value in host memory.

13. A method according to claim 12, further comprising:

retrieving the integrity check value from the location in host memory; and

performing an integrity check on the loaded diagnostic code based on the integrity check value.

14. A method according to claim 12, further comprising:

retrieving the integrity check value from the location in host memory; and

authenticating the loaded diagnostic code based on the integrity check value.

15. A management platform comprising:

a memory storing executable program code; and

an execution unit operable in conjunction with the program code to;

discover resource data record associated with diagnostic code, the diagnostic code to manage a manageable resource;

load the diagnostic code based on the resource data record; and

manage the manageable resource based on the diagnostic code.

16. A management platform according to claim 15, the execution unit further operable in conjunction with the program code to:

discover a second resource data record associated with managed resource data of the manageable resource, the second resource data record indicating a memory location of the managed resource data;

access the managed resource data based on the second resource data record; and

process the managed resource data using the diagnostic code.

17. A management platform according to claim 15, the resource data record indicating a location of the diagnostic code in host memory, and

wherein the diagnostic code is loaded from the location.

18. A management platform according to claim 15, the resource data record indicating a location of the diagnostic code and an integrity check value in host memory.

19. A management platform according to claim 18, the execution unit further operable in conjunction with the program code to:

retrieve the integrity check value from the location in host memory; and

perform an integrity check on the loaded diagnostic code based on the integrity check value.

20. A management platform according to claim 18, the execution unit further operable in conjunction with the program code to:

retrieve the integrity check value from the location in host memory; and

authenticate the loaded diagnostic code based on the integrity check value.

21. A system comprising:

a processor;

a double data rate memory coupled to the processor;

a memory storing executable program code; and

a service processor operable in conjunction with the program code to;

discover resource data record associated with diagnostic code, the diagnostic code to manage a manageable resource;

load the diagnostic code based on the resource data record; and

manage the manageable resource based on the diagnostic code.

22. A system according to claim 21, the service processor further operable in conjunction with the program code to:

discover a second resource data record associated with managed resource data of the manageable resource, the second resource data record indicating a memory location of the managed resource data;

access the managed resource data based on the second resource data record; and

process the managed resource data using the diagnostic code.

23. A system according to claim 21, the resource data record indicating a location of the diagnostic code in host memory, and wherein the diagnostic code is loaded from the location.

24. A system according to claim 21, the resource data record indicating a location of the diagnostic code and an integrity check value in host memory.

25. A system according to claim 24, the execution unit further operable in conjunction with the program code to:

retrieve the integrity check value from the location in host memory; and

perform an integrity check on the loaded diagnostic code based on the integrity check value.