Entropy Generation for a Distributed Computing System

• US 20150277856A1
• Filed: 04/01/2014
• Published: 10/01/2015
• Est. Priority Date: 04/01/2014
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Nebula, Inc.
• Inventors: Payne, Bryan, Garrett, Matthew
• Granted Patent: US 9,507,566 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 7/58 Random or pseudo-random number generators
• CPC Class Codes: G06F 7/588 Random number generators, i.e. based on natural stochastic processes

Abstract

In one embodiment, a method generates first entropy using a true random number generator in a management computer configured to manage a main computer in a computing device. The main computer controls a set of physical nodes including a set of services running in a set of virtual machines. The method then provides the first entropy to the main computer and the first entropy is combined with second entropy generated by the main computer to generate third entropy. The third entropy is provided to the set of physical nodes where the set of virtual machines access the third entropy via a hypervisor.

Claims

1. A method comprising:

generating, by a computing device, first entropy using a hardware random number generator in a management computer configured to manage a main computer in the computing device, wherein the main computer controls a set of physical nodes including a set of services running in a set of virtual machines;

providing, by the computing device, the first entropy to the main computer;

combining, by the computing device, the first entropy with second entropy generated by the main computer to generate third entropy; and

providing, by the computing device, the third entropy to the set of physical nodes, wherein the set of virtual machines access the third entropy via a hypervisor.

2. The method of claim 1, further comprising generating the second entropy in the main computer via a pseudo random number generator.

3. The method of claim 2, wherein combining comprises combining the second entropy with the first entropy, wherein the first entropy and the second entropy are available as the third entropy for use by the set of virtual machines.

4. The method of claim 1, wherein a hypervisor in each of the set of physical nodes exposes the third entropy in a virtual device emulating an entropy generator.

5. The method of claim 4, wherein the set of virtual machines are configured to retrieve a portion of the third entropy from the virtual device.

6. The method of claim 1, wherein the management computer communicates the first entropy through a first communication network to the main computer.

7. The method of claim 6, wherein the main computer communicates the third entropy via a second communication network to the set of physical nodes.

8. The method of claim 1, wherein the set of services running in the set of virtual machines use the third entropy to operate.

9. The method of claim 1, wherein the management computer and the main computer are included in a controller node configured to control the set of physical nodes.

10. An apparatus comprising:

one or more computer processors; and

a non-transitory computer-readable storage medium comprising instructions, that when executed, control the one or more computer processors to be configured for;

generating first entropy using a true random number generator in a management computer configured to manage a main computer, wherein the main computer controls a set of physical nodes including a set of services running in a set of virtual machines;

providing the first entropy to the main computer;

combining the first entropy with second entropy generated by the main computer to generate third entropy; and

providing the third entropy to the set of physical nodes, wherein the set of virtual machines access the third entropy via a hypervisor.

11. The apparatus of claim 10, further configured for generating the second entropy in the main computer via a pseudo random number generator.

12. The apparatus of claim 11, wherein combining comprises combining the second entropy with the first entropy, wherein the first entropy and the second entropy is available as the third entropy for use by the set of virtual machines.

13. The apparatus of claim 10, wherein a hypervisor in each of the set of physical nodes exposes the third entropy in a virtual device emulating an entropy generator.

14. The apparatus of claim 13, wherein the set of virtual machines are configured to retrieve a portion of the third entropy from the virtual device.

15. The apparatus of claim 10, wherein the management computer communicates the first entropy through a first communication network to the main computer.

16. The apparatus of claim 15, wherein the main computer communicates the third entropy via a second communication network to the set of physical nodes.

17. The apparatus of claim 10, wherein the set of services running in the set of virtual machines use the third entropy to operate.

18. The apparatus of claim 10, wherein the management computer and the main computer are included in a controller node configured to control the set of physical nodes.

19. A non-transitory computer-readable storage medium containing instructions, that when executed, control a computer system to be configured for:

generating first entropy using a true random number generator in a management computer configured to manage a main computer, wherein the main computer controls a set of physical nodes including a set of services running in a set of virtual machines;

providing the first entropy to the main computer;

combining the first entropy with second entropy generated by the main computer to generate third entropy; and

providing the third entropy to the set of physical nodes, wherein the set of virtual machines access the third entropy via a hypervisor.

20. The non-transitory computer-readable storage medium of claim 19, further configured for generating the second entropy in the main computer via a pseudo random number generator.