Method for interlocking a server to a server system and a computer system utilizing the same

• US 8,843,604 B2
• Filed: 06/19/2003
• Issued: 09/23/2014
• Est. Priority Date: 06/19/2003
• Status: Active Grant

• Current Assignee: Lenovo International Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Chu, Simon C., Dayan, Richard A.
• Primary Examiner(s): BIAGINI, CHRISTOPHER D
• Application Number:
  US10/465,043
• Publication Number:
  US 20040257998A1
• Time in Patent Office: 4,114 Days
• Field of Search: 709/225, 709/223, 726 2- 4, 726/16, 726/17
• US Class Current: 709/223
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks

Abstract

A method for interlocking a plurality of servers to a server system is disclosed. The method comprises assigning an identifier to each of the plurality of servers, wherein the identifier associates each of the plurality of servers to the server system, thereby defining a plurality of interlocked servers.

Claims

1. A method for interlocking a plurality of servers to a server system comprising:

a) assigning an identifier to each of the plurality of servers, wherein the identifier uniquely identifies the server system and associates each of the plurality of servers to the server system; and

, at a time after the assignment of the identifier, autonomously checking a number of servers installed in the server system to ensure that each of the number of installed servers is interlocked to the server system and to protect the server system from an unauthorized server.

2. The method of claim 1, wherein each of the plurality of interlocked servers includes non-volatile storage.

3. The method of claim 2 further comprising:

b) storing the identifier in each interlocked server'"'"'s non-volatile storage.

4. The method of claim 3, wherein the assigning step (a) further comprises:

(a1) generating the identifier; and

(a2) storing the identifier in a table.

5. The method of claim 4 further comprising:

(c) adding a server to the plurality of interlocked servers.

6. The method of claim 5, wherein the adding step (c) further comprises:

(c1) providing a slot number into which the server will be placed;

(c2) assigning the identifier to the server and storing the identifier in the Server'"'"'s non-volatile storage; and

(c3) updating the table to include the server in the plurality of interlocked Servers.

7. The method of claim 4 further comprising:

(c) removing a server from the plurality of interlocked servers.

8. The method of claim 7, wherein the removing step (c) further comprises:

(c1) providing the slot number from which the server will be removed;

(c2) erasing the identifier from the server'"'"'s non-volatile storage; and

(c3) updating the table to exclude the server from the plurality of interlocked servers.

9. The method of claim 4 further comprising:

(c) sensing a removal of one of the plurality of interlocked servers;

(d) marking the identifier in the table corresponding to the removed server; and

(e) protecting the server system.

10. The method of claim 9, wherein the protecting step (e) further comprises:

(e1) notifying a system administrator that the server has been removed; and

(e2) isolating the removed server from the plurality of interlocked servers if the removed server is reinserted into the system.

11. The method of claim 10, wherein the isolating step (e2) further comprises:

(e2i) comparing the removed server'"'"'s identifier with the identifier stored in the table when the system senses that the removed server has been reinserted into the system; and

(e2ii) holding the removed server in a power-off state if the identifier stored in the table is marked.

12. The method of claim 4 further comprising:

(c) detecting a server that is not interlocked to the server system by examining the server'"'"'s non-volatile storage, wherein a non-interlocked server is not authorized to run in the server system.

13. The method of claim 12, wherein the detecting step (c) further comprises:

(c1) concluding the server is not interlocked if the non-volatile storage does not include an identifier, else

(c2) determining whether an existing identifier is valid if an identifier is found in the non-volatile storage; and

(c3) concluding that the server is not interlocked if the existing identifier is invalid.

14. The method of claim 13, wherein the determining step (c2) further comprises:

(c2i) comparing the existing identifier to the identifier stored in the table; and

(c2ii) concluding the existing identifier is invalid if the existing identifier does not match the stored identifier.

15. The method of claim 14, wherein the storing step (b) further comprises:

(b1) encrypting the identifier with a private key for each interlocked server; and

(b2) storing the encrypted identifier in each interlocked server'"'"'s non-volatile storage.

16. The method of claim 15, wherein the determining step (c2) further comprises:

(c2iii) decrypting the existing identifier with a public key for the server.

17. The method of claim 12 further comprising:

d) protecting the server system from the non-interlocked server.

18. The method of claim 17, wherein the protecting step (d) further comprises:

(d1) isolating the server from the plurality of interlocked servers; and

(d2) notifying a system administrator that the server is not interlocked to the server system.

19. The method of claim 18, wherein the isolating step (d1) further comprises:

(d1i) holding the server in a power-off state.

20. The method of claim 18, wherein the isolating step (d1) further comprises:

(d1i) powering-down the server system.

21. The method of claim 12, wherein the detecting step (c) is performed during a power-up sequence for the server system.

22. The method of claim 12, wherein the detecting step (c) is performed if the server system senses that a new server has been placed into the system.

23. A computer readable recordable medium containing program instructions for interlocking a plurality of servers to a server system the instructions for:

a) assigning an identifier to each of the plurality of servers, wherein the identifier uniquely identifies the server system and associates each of the plurality of servers to the server system; and

, at a time after the assignment of the identifier, autonomously checking a number of servers installed in the server system to ensure that each of the number of installed server is interlocked to the server system and to protect the server system from an unauthorized server.

24. The computer readable medium of claim 23, wherein

each of the plurality of interlocked servers includes non-volatile storage.

25. The computer readable medium of claim 24 further comprising:

b) storing the identifier in each interlocked server'"'"'s non-volatile storage.

26. The computer readable medium of claim 25, wherein the assigning instruction (a) further comprises:

(a1) generating the identifier; and

(a2) storing the identifier in a table.

27. The computer readable medium of claim 26 further comprising instruction for:

(c) adding a server to the plurality of interlocked servers.

28. The computer readable medium of claim 27, wherein the adding instruction (c) further comprises:

(c1) providing a slot number into which the server will be placed;

(c2) assigning the identifier to the server and storing the identifier in the server'"'"'s non-volatile storage; and

(c3) updating the table to include the server in the plurality of interlocked servers.

29. The computer readable medium of claim 26 further comprising instruction for:

(c) removing a server from the plurality of interlocked servers.

30. The computer readable medium of claim 29, wherein the removing instruction (c) further comprises:

(c1) providing the slot number from which the server will be removed;

(c2) erasing the identifier from the server'"'"'s non-volatile storage; and

(c3) updating the table to exclude the server from the plurality of interlocked servers.

31. The computer readable medium of claim 26 further comprises:

(c) sensing a removal of one of the plurality of interlocked servers;

(d) marking the identifier in the table corresponding to the removed server; and

(e) protecting the server system.

32. The computer readable medium of claim 31, wherein the protecting instruction (e) further comprises:

(e1) notifying a system administrator that the server has been removed; and

(e2) isolating the removed server from the plurality of interlocked servers if the removed server is reinserted into the system.

33. The computer readable medium of claim 32, wherein the isolating step (e2) further comprises:

(e2i) comparing the removed server'"'"'s identifier with the identifier stored in the table when the system senses that the removed server has been reinserted into the system; and

(e2ii) holding the removed server in a power-off state if the identifier stored in the table is marked.

34. The computer readable medium of claim 26 further comprising the instruction for:

c) detecting a server that is not interlocked to the server system by examining the server'"'"'s non-volatile storage, wherein a non-interlocked server is not authorized to run in the server system.

35. The computer readable medium of claim 34, wherein the detecting instruction (c) further comprises:

(c1) concluding the server is not interlocked if the non-volatile storage does not include an identifier;

else

(c2) determining whether an existing identifier is valid if an identifier is found in the non-volatile storage; and

(c3) concluding that the server is not interlocked if the existing identifier is invalid.

36. The computer readable medium of claim 35, wherein the determining instruction (c2) further comprises:

(c2i) comparing the existing identifier to the identifier stored in the table; and

(c2ii) concluding the existing identifier is invalid if the existing identifier does not match the stored identifier.

37. The computer readable medium of claim 36, wherein the storing instruction (b) further comprises:

(b1) encrypting the identifier with a private key for each interlocked server; and

(b2) storing the encrypted identifier in each interlocked server'"'"'s non-volatile storage.

38. The computer readable medium of claim 37, wherein the determining instruction (c2) further comprises:

(c2iii) decrypting the existing identifier with a public key for the server.

39. The computer readable medium of claim 34 further comprises:

d) protecting the server system from the non-interlocked server.

40. The computer readable medium of claim 39, wherein the protecting instruction (d) further comprises:

(d1) isolating the server from the plurality of interlocked servers; and

(d2) notifying a system administrator that the server is not interlocked to the server system.

41. The computer readable medium of claim 40, wherein the isolating instruction (d1) further comprises:

(d1i) holding the server in a power-off state.

42. The computer readable medium of claim 40, wherein the isolating instruction (d1) further comprises:

(d1i) powering-down the server system.

43. The computer readable medium of claim 34, wherein the detecting instruction (c) is performed during a power-up sequence for the server system.

44. The computer readable medium of claim 34, wherein the detecting instruction (c) is performed if the server system senses that a new server has been placed into the system.

45. A system for interlocking a plurality of servers to a server system comprising:

an interlock mechanism for assigning an identifier to each of the plurality of servers, wherein the identifier uniquely identifies the server system and associates each of the plurality of servers to the server system, wherein a number of servers installed in the server system are autonomously checked to ensure that each of the number of installed servers is interlocked to the server system and to protect the server system from an unauthorized server, the interlock mechanism comprising a module of automated computing machinery, the automated computing machinery comprising an aggregation of computer hardware and software.

46. The system of claim 45, wherein each of the plurality of interlocked servers includes non-volatile storage.

47. The system of claim 46, wherein each of the plurality of interlocked servers comprises:

means for storing the identifier in each interlocked server'"'"'s non-volatile storage.

48. The system of claim 47, wherein the interlock mechanism further comprises a utility for generating the identifier and a table for storing information related to each of the interlocked servers and their respective identifiers.

49. The system of claim 48 wherein the interlock mechanism further comprises:

means for detecting a server that is not interlocked to the server system, wherein a non-interlocked server is not authorized to run in the server system.

50. The system of claim 49, wherein the means for detecting further comprises means for examining the server'"'"'s non-volatile storage and means for determining whether an existing identifier is valid if an identifier is found in the non-volatile storage, wherein the server is not interlocked if the existing identifier is invalid.

51. The system of claim 50, wherein the interlock mechanism further comprises:

means for protecting the server system from the non-interlocked server.

52. The system of claim 49, wherein the utility further comprises means for adding a server to the plurality of interlocked servers.

53. The system of claim 49, wherein the utility further comprises means for removing a server from the plurality of interlocked servers.

54. A computer server system comprising:

a plurality of servers;

a management module coupled to the plurality of servers; and

an interlock mechanism coupled to the management module, wherein the interlock mechanism assigns to each of the plurality of servers an identifier that uniquely identifies the server system and associates each of the plurality of servers to the server system, wherein a number of servers installed in the server system are, at a time after the assignment of the identifier, autonomously checked to ensure that each of the number of installed servers is interlocked to the server system and to protect the server system from an unauthorized server.

55. The server system of claim 54 wherein each server comprises:

means for storing the identifier in each server'"'"'s non-volatile storage.

56. The server system of claim 54, wherein the interlock mechanism comprises a table, wherein the table stores information related to each of the interlocked servers and their associated identifiers.

57. The server system of claim 54, wherein the interlock mechanism further comprises means for detecting a server that is not interlocked to the server system.

58. The server system of claim 57, wherein the means for detecting further comprises means for examining the server'"'"'s non-volatile storage and means for determining whether an existing identifier is valid if an identifier is found in the non-volatile storage, wherein the server is not interlocked if the existing identifier is invalid.

59. The server system of claim 57, wherein the interlock mechanism further comprises means for protecting the server system from the non-interlocked server.

60. The server system of claim 54, wherein the interlock mechanism further comprises a utility for adding a server to the plurality of interlocked servers.

61. The server system of claim 54, wherein the interlock mechanism further comprises a utility for removing a server from the plurality of interlocked servers.

62. The server system of claim 54, wherein the identifier is a nonce based on a serial number for the management module.

63. The server system of claim 62, wherein each server comprises:

means for encrypting the nonce; and

means for storing the encrypted nonce in each server'"'"'s non-volatile storage.

64. The server system of claim 63, wherein the interlock mechanism further comprises means for examining the server'"'"'s non-volatile storage and means for decrypting the encrypted nonce so that the interlock mechanism can determine whether the identifier is valid.