System and method for the provision of secure network boot services

• US 8,260,891 B2
• Filed: 10/30/2007
• Issued: 09/04/2012
• Est. Priority Date: 10/30/2007
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Abels, Timothy E., Odulinksi, Bogdan
• Primary Examiner(s): Dalencourt, Yves
• Application Number:
  US11/927,897
• Publication Number:
  US 20090113029A1
• Time in Patent Office: 1,771 Days
• Field of Search: 709/208, 709220-222, 713/1, 714/752
• US Class Current: 709/222
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A system and method for providing a network boot is provided in which the entire length of the communications link between the client computer and the boot server is secure. Because the communications link between the client and the boot server is secure, an identifier for that uniquely identifies the client can be passed to the boot server, and the boot server is operable to serve a boot image to the client computer on the basis of the uniquely identified client computer.

Claims

1. A method for remotely booting a computing system, comprising:

providing a boot server;

providing a boot image stored in memory that is coupled to the boot server;

providing a computing system;

determining if the computing system includes a bootable drive;

configuring the computing system for connection to the boot server if the computing system does not include a bootable drive and if the computing system is not configured for connection to the boot server;

coupling the computing system to the boot server through a secure communications link;

if the boot image matches hardware and software requirements of the computing system, serving at the boot server the boot image to the computing system, wherein the boot image is provided by the boot server on the basis of a unique client identifier for the computing system that is transmitted on the secure communications link between the computing system and the boot server, wherein the boot image is unique to the computing system;

if the boot image does not match the hardware and software requirements of the computing system, constructing at the boot server a new boot image that matches the hardware and software requirements of the computing system, serving the new boot image to the computing system over the secure communications link, and storing the new boot image on the memory that is coupled to the boot server, wherein the new boot image is unique to the computing system; and

booting the computing system from the boot image provided by the boot server.

2. The method for remotely booting a computing system of claim 1, wherein the secure communications link is an Internet-based communications link.

3. The method for remotely booting a computing system of claim 2, wherein the secure communications link incorporates the HTTP/S communications protocol.

4. The method for remotely booting a computing system of claim 2, wherein the secure communications link incorporates the IP Security communications protocol.

5. The method for remotely booting a computing system of claim 1, wherein the unique client identifier for the computing system is the IP address of the computing system.

6. The method for remotely booting a computing system of claim 1, wherein the unique client identifier for the computing system is DNS information associated with the computing system.

7. The method for remotely booting a computing system of claim 1, wherein the unique client identifier for the computing system is UUID information associated with the computing system.

8. The method for remotely booting a computing system of claim 1, wherein the unique client identifier for the computing system is SMBIOS parameters associated with the computing system.

9. A network for the provision of remote boot images to a computing system comprising:

a computing system;

a boot server, wherein the boot server is coupled to the computing system through a secure communications link; and

a boot image database coupled to the boot server;

wherein the computing system is operable to determine if the computing system includes a bootable drive and to pass to the boot server a unique client identifier that uniquely identifies the computing system to the boot server if the computing system does not include a bootable drive;

wherein the boot server is operable to select an existing boot image on the basis of the unique client identifier from the computing system, wherein the selected existing boot image is unique to the computing system and matches hardware and software requirements of the computing system;

wherein the boot server is operable to construct a new boot image that matches hardware and software requirements of the computing system if an existing boot image does not match the hardware and software requirements of the computing system, wherein the new boot image is unique to the computing system;

wherein the boot server is operable to serve the existing boot image to the computing system if the existing boot image matches the hardware and software requirements of the computing system;

wherein the boot server is operable to serve the new boot image to the computing system if the boot server constructs the new boot image; and

wherein the boot server is operable to store the new boot image in the boot image database if the boot server serves the new boot image to the computing system.

10. The network of claim 9, wherein the secure communications link is Internet-based.

11. The network of claim 10, wherein the secure communications link incorporates the HTTP/S communications protocol.

12. The network of claim 10, wherein the secure communications link incorporates the IP Security communications protocol.

13. The network of claim 9, wherein the unique client identifier for the computing system is the IP address of the computing system.

14. The network of claim 9, wherein the unique client identifier for the computing system is DNS information associated with the computing system.

15. A method for providing boot images to a remote client from a boot server, comprising:

receiving from the remote client over a secure communications link a request for a boot image and a unique client identifier that uniquely identifies the remote client if the remote client does not include a bootable device;

if an existing boot image in a database associated with the boot server meets hardware and software requirements of the uniquely identified remote client, selecting the existing boot image and serving the existing boot image to the uniquely identified remote client over the secure communications link, wherein the selected boot image is unique to the uniquely identified remote client; and

if an existing boot image in the database associated with the boot server does not meet the hardware and software requirements of the uniquely identified remote client, constructing at the boot server a new boot image, serving the new boot image to the uniquely identified remote client over the secure communications link, and storing the new boot image in the database associated with the boot server, wherein the new boot image is unique to the uniquely identified remote client.

16. The method for providing boot images to a remote client from a boot server of claim 15, wherein the secure communications link is an Internet-based communications link.

17. The method for providing boot images to a remote client from a boot server of claim 16, wherein the secure communications link incorporates the HTTP/S communications protocol.

18. The method for providing boot images to a remote client from a boot server of claim 16, wherein the secure communications link incorporates the IP Security communications protocol.

19. The method for providing boot images to a remote client from a boot server of claim 16, wherein the unique client identifier received from the remote client is DNS information associated with the remote client.

20. The method for providing boot images to a remote client from a boot server of claim 16, wherein the unique client identifier received from the remote client is the IP address of the remote client.