COMPUTING DEVICE CONFIGURATION AND MANAGEMENT USING A SECURE DECENTRALIZED TRANSACTION LEDGER

• US 20160261690A1
• Filed: 06/25/2015
• Published: 09/08/2016
• Est. Priority Date: 03/02/2015
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Ford, Daniel A.
• Granted Patent: US 9,967,334 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 12/1854 with non-centralised forwarding system, e.g. chaincast
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0813 characterised by the conditions triggering a change of settings
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/1044 Group management mechanisms management of multicast group membership H04L12/185; reconfiguring of node membership in a computing system to eliminate errors G06F11/1425
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04W 12/08 Access security

Abstract

Aspects of the present invention provide systems and methods that facilitate the communicating of messages to a vastly scalable number of devices, independent of a centralized resource. In embodiments, a computing device, or a number of devices, may receive from a managing entity one or more messages via a block chain that is maintained by a plurality of decentralized nodes in a peer-to-peer network. In embodiments, the device or devices execute the instructions identified in the message, and if appropriate, return results.

Claims

1. A computer-implemented method for a computing device participating to be managed by a provider entity, the method comprising:

submitting, to one or more nodes of a distributed peer-to-peer network that maintains a block chain, a broadcast message requesting an identifier of a provider entity that can provide configuration data for the computing device, the broadcast message for inclusion in the block chain, the block chain comprising a cryptographically linked sets of data blocks;

obtaining at least part of the block chain;

examining one or more of the data blocks of the block chain for a response message; and

responsive to identifying the response message, executing one or more instructions in the response message that configures the computing device for future execution of one or more commands issued by the provider entity.

2. The computer-implemented method of claim 1 further comprising:

verifying whether the response message was sent by an authorized entity before executing the one or more instructions in the response message;

responsive to the provider entity not being an authorized entity, not executing the one or more instructions in the response message; and

responsive to the provider entity being an authorized entity, executing the one or more instructions in the response message.

3. The computer-implemented method of claim 1 further comprising:

submitting, to one or more nodes of the distributed peer-to-peer network that maintains a block chain, a “

request for update”

message requesting update data for the computing device from the provider entity, the “

request for update”

message for inclusion in the block chain;

obtaining at least part of an updated block chain;

examining one or more of the data blocks of the updated block for an update response message issued by the provider entity; and

responsive to identifying the update response message, executing one or more instructions in the update response message.

4. The computer-implemented method of claim 3 further comprising:

responsive to not identifying an update response message in an updated block chain within a specified interval, submitting, to one or more nodes of the distributed peer-to-peer network that maintains a block chain, an update broadcast message requesting an identifier of a provider entity that can provide updated data for the computing device, the update broadcast message for inclusion in the block chain.

5. The computer-implemented method of claim 1 wherein the step of executing one or more instructions in the response message that configures the computing device for future execution of one or more commands issued by the provider entity comprises:

initiating an auto-configuration process on the computing device;

downloading code from one or more sources; and

completing code installation and configuration processes of the computing device.

6. The computer-implemented method of claim 1 further comprising:

executing one or more commands issued by the provider entity.

7. The computer-implemented method of claim 6 wherein the step of executing one or more commands issued by the third-party entity comprises:

obtaining at least part of an updated block chain;

examining one or more of the data blocks of the updated block for a command message issued by the provider entity;

responsive to identifying the command message, executing one or more instructions in the command message issued by the third-party entity.

8. The computer-implemented method of claim 7 further comprises:

submitting, to one or more nodes of a distributed peer-to-peer network that maintains the block chain, a completion message comprising completion data for the provider entity, the completion message for inclusion in the block chain.

9. The computer-implemented method of claim 8 further the completion data comprising a reference to a set of results data.

10. An information handling device comprising:

one or more processors;

one or more memory components communicatively coupled to the processor;

one or more network interfaces, communicatively coupled to the processor, that provides access to one or more networks; and

an instructions subsystem comprising;

a block chain communication proxy, communicatively coupled to the network interface, that interfaces with one or more decentralized nodes of a peer-to-peer network, the peer-to-peer network comprising a plurality of nodes that maintain a cryptographically secure and public block chain comprising a cryptographically linked sets of data blocks;

a message receiving component that identifies a message in the block chain directed to the information handling device and that extracts the message;

an authentication component, communicatively coupled to the message receiving component, that receives at least part of the message from the message receiving component and authenticates that the message originated from an authorized entity from which the information handling device should take instruction; and

an execution component, communicatively coupled to the message receiving module, that executes one or more instructions in the message for the benefit of the authorized entity.

11. The information handling device of claim 10 wherein one or more instructions in the message for the benefit of the authorized entity comprises instructions for configuring the information handling device according to instructions of the authorized entity.

12. The information handling device of claim 11 wherein the execution component performs the step of configuring the information handling device according to instructions of the authorized entity by performing the steps comprises:

initiating a configuration process on the information handling device;

downloading code from one or more sources; and

completing code installation and configuration processes of the information handling device.

13. The information handling device of claim 12 wherein the one or more sources comprise at least one of:

one or more data blocks in the block chain;

a third-party site; and

a site of the authorized entity.

14. The information handling device of claim 10 wherein one or more instructions in the message for the benefit of the authorized entity comprises a command message to execute one or more instructions issued by the authorized entity.

15. The information handling device of claim 14 wherein the command message is received from the authorized entity via a data block in the block chain.

16. The information handling device of claim 14 wherein the block chain communication proxy submits to one or more nodes of the distributed peer-to-peer network a completion message identifying completion data for the authorized entity, the completion message for inclusion in the block chain.

17. A computer-implemented method for managing one or more computing devices, the method comprising:

publishing, from a provider computing system to one or more nodes of a distributed peer-to-peer network that maintains a block chain, a command message directing one or more computing devices to execute one or more instructions identified in the command message, the block chain comprising a cryptographically linked sets of data blocks;

obtaining at least part of the block chain;

examining one or more of the data blocks of the block chain for a results message from at least one of the one or more computing devices, the results message comprising identifying results data related to execution of the one or more instructions identified in the command message; and

responsive to identifying the response message, obtaining results data identified in the results message.

18. The computer-implemented method of claim 17 wherein the one or more instructions identified in the command message comprises one or more instructions to obtain code from at least one of:

one or more data blocks in the block chain;

a third-party site; and

a site maintained by an entity that owns or manages the provider computing system.

19. The computer-implemented method of claim 17 further comprising:

receiving from a computing device, via a data block in the block chain, a broadcast message requesting configuration data for the computing device; and

publishing, to one or more nodes of a distributed peer-to-peer network that maintains the block chain, a configuration message providing one or more instructions for configuring the computing device to be managed by the providing computing system.

20. The computer-implemented method of claim 17 further comprising:

receiving from a computing device, via a data block in the block chain, a “

request for update”

message requesting updated configuration data for the computing device; and

publishing, to one or more nodes of a distributed peer-to-peer network that maintains the block chain, an update configuration message providing one or more instructions for updating the configuration of the computing device that is managed by the providing computing system.