Remote management device key administration using network adapters

• US 7,330,972 B2
• Filed: 09/26/2003
• Issued: 02/12/2008
• Est. Priority Date: 09/26/2003
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Kupermann, Eli, Diamant, Nimrod, Baruch, Gil, Malamud, Ariel, Vlodavsky, Zvi
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): Reza; Mohammad W.
• Application Number:
  US10/673,084
• Publication Number:
  US 20050071638A1
• Time in Patent Office: 1,600 Days
• Field of Search: 713169-177, 380/44
• US Class Current: 713/171
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

According to some embodiments, network adapters may be used in remote management device key administration.

Claims

1. A method, comprising:

powering up a client device and initializing a initialization process;

determining a clear-text key during the initialization process;

providing the clear-text key to a first network adapter, wherein the first network adapter is to encrypt the clear-text key and store the encrypted key;

receiving at a client device the encrypted key from the first network adaptor, the key being associated with a remote management device, wherein the client device comprises the first network adapter and a second network adapter, and wherein the client device is to communicate with the remote management device via the first network adapter;

storing an indication at the client device that the key is currently stored at the first network adapter and not at the second network adapter;

storing the key at the second network adapter; and

storing an indication at the client device that the key is currently stored at the second network adapter and not the first network adapter.

2. The method of claim 1, wherein the key is stored in a non-volatile storage unit at the second network adapter.

3. The method of claim 1, wherein an encrypted version of the key is received from the first network adaptor and stored at the second network adapter.

4. The method of claim 1, further comprising prior to said receiving:

determining that the second network adapter is to communicate with the remote management device.

5. The method of claim 4, wherein the determination of the second network adapter is based on a determination that the first network adapter is no longer able to communicate with the remote management device.

6. The method of claim 1, wherein the received key is stored in a volatile memory unit at the client device, and said storing further comprises:

retrieving the key from the volatile memory unit; and

storing the key at a second network adapter.

7. The method of claim 1, further comprising prior to said receiving:

selecting the first network adapter from a group of available network adapters, wherein the client device comprises the group of available network adapters.

8. The method of claim 7, wherein an available network adapter on a motherboard is selected before a network adapter that is not on the motherboard.

9. The method of claim 1, wherein the key is to be used to authenticate an alert standard format message from the remote management device.

10. The method of claim 1, further comprising:

losing a connection between the first network adapter and the remote management device prior to storing the key at the second network adapter.

11. An apparatus, comprising:

a storage medium having stored thereon instructions that when executed by a machine result in the following;

powering up a client device and initializing a initialization process;

determining a clear-text key during the initialization process;

providing the clear-text key to a first network adapter, wherein the first network adapter is to encrypt the clear-text key and store the encrypted key;

receiving at a client device the encrypted key from the first network adaptor, the key being associated with a remote management device, wherein the client device comprises the first network adapter and a second network adapter, and wherein the client device is to communicate with the remote management device via the first network adapter;

storing an indication at the client device that the key is currently stored at the first network adapter and not at the second network adapter;

losing a connection between the first network adapter and the remote management device;

storing the key at the second network adapter; and

storing an indication at the client device that the key is currently stored at the second network adapter and not the first network adapter.

12. The apparatus of claim 11, wherein an encrypted version of the key is received from the first network adaptor and stored at the second network adapter.

13. The apparatus of claim 11, wherein execution of the instructions further results in, prior to said receiving:

determining that the second network adapter is to communicate with the remote management device.

14. The apparatus of claim 13, wherein the determination of the second network adapter is based on a determination that the first network adapter is no longer able to communicate with the remote management device.

15. The apparatus of claim 11, wherein the received key is stored in a volatile memory unit at the client device, and said storing further comprises:

retrieving the key from the volatile memory unit, and

storing the key at a second network adapter.

16. The apparatus of claim 11, wherein execution of the instructions further results in, prior to said receiving:

selecting the first network adapter from a group of available network adapters, wherein the client device comprises the group of available network adapters.

17. The apparatus of claim 16, wherein an available network adapter on a motherboard is selected before a network adapter that is not on the motherboard.

18. The apparatus of claim 11, wherein the key is to be used to authenticate an alert standard format message from the remote management device.