System And Method For Providing A System Management Command

• US 20110066839A1
• Filed: 05/16/2008
• Published: 03/17/2011
• Est. Priority Date: 05/16/2008
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Ali, Valiuddin Y., Wang, Lan, Mondshine, James L.
• Granted Patent: US 9,143,328 B2
• Time in Patent Office: Days
• US Class Current: 713/2
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 9/4401 Bootstrapping security arrangements therefor G06F21/57
• CPC Class Codes: G06F 9/4408 Boot device selection
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Exemplary embodiments of the present invention disclosed herein relate to a method of providing a system management command. The method comprises receiving from an authorized requestor information identifying the electronic device and a request to issue a system management command to the electronic device. The method additionally comprises providing, in response to the request, a system management command, information identifying a source of the command as a trusted source and the information identifying the electronic device. Also disclosed are an electronic device and a computer system according to the invention.

Claims

1. A method of providing a system management command, the method comprising:

receiving from an authorized requestor information identifying the electronic device and a request to issue a system management command to the electronic device; and

providing, in response to the request, a system management command, information identifying a source of the command as a trusted source and the information identifying the electronic device.

2. The method recited in claim 1, wherein the system management command comprises a request to reset a security-restricted component of the electronic device.

3. The method recited in claim 2, wherein the at least one security-restricted component comprises a system board.

4. The method recited in claim 1, wherein the system management command comprises a request to perform a system boot without password authentication.

5. The method recited in claim 1, wherein the system management command comprises a request to flash a region of a system basic input-output system (BIOS).

6. The method recited in claim 1, comprising delivering the system management command, the information identifying the source of the command and the information identifying the electronic device to the electronic device.

7. The method recited in claim 1, comprising delivering the system management command, the information identifying the source of the command and the information identifying the electronic device to the authorized requestor.

8. The method recited in claim 1, comprising executing the system management command based on an evaluation of the information identifying the source of the command and the information identifying the electronic device.

9. The method recited in claim 1, wherein the information identifying the source of the command as a trusted source comprises a private encryption key.

10. An electronic device, comprising:

a component that is adapted to accept a security credential; and

a system management command processor that is adapted to perform a system management command on the component that would otherwise require the security credential upon receipt of the system management command, information identifying a source of the system management command as a trusted source and information identifying the electronic device, the system management command being provided in response to a request from an authorized requestor.

11. The electronic device recited in claim 10, wherein the system management command comprises a request to reset the component.

12. The electronic device recited in claim 11, wherein the component comprises a system board.

13. The electronic device recited in claim 10, wherein the system management command comprises a request to perform a system boot without password authentication.

14. The electronic device recited in claim 10, wherein the system management command comprises a request to flash a region of a system basic input-output system (BIOS).

15. The electronic device recited in claim 10, wherein the system management command, the information identifying the source of the command and the information identifying the electronic device are received by the electronic device from the trusted source.

16. The electronic device recited in claim 10, wherein the system management command, the information identifying the source of the command and the information identifying the electronic device are received by the electronic device from the authorized requestor.

17. The electronic device recited in claim 10, wherein the information identifying the source of the command as a trusted source comprises a private encryption key.

18. A computer system, comprising:

a security component that is adapted to accept a security credential; and

a system basic input-output system (BIOS) that is adapted to perform a system management command that would otherwise require providing the security credential on the security component upon receipt of a system management command, information identifying a source of the system management command as a trusted source and information identifying the computer system, the system management command being provided in response to a request from an authorized requestor.

19. The computer system recited in claim 18, wherein the system management command, the information identifying the source of the system management command and the information identifying the electronic device are received by the computer system from the trusted source.

20. The computer system recited in claim 18, wherein the system management command, the information identifying the source of the system management command and the information identifying the electronic device are received by the computer system from the authorized requestor.