Encrypted extended system event log

Patent metadata

Field	Value
Publication number	US-10489601-B2
Application number	US-201715617508-A
Country	US
Kind code	B2
Filing date	Jun 8, 2017
Priority date	Jun 8, 2017
Publication date	Nov 26, 2019
Grant date	Nov 26, 2019

Abstract

In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a BMC. The BMC stores an extended SEL record entry in a data repository. The extended SEL record entry including a locator to a data collection stored external to the data repository. The BMC further retrieves the data collection based on the locator in response to receiving a request-to-retrieve-an-SEL-record.

First claim

What is claimed is:

1. A method of operating a baseboard management controller (BMC), comprising:
receiving a message through a communication interface of the BMC, the message containing a request-to-add-data including event data associated with an event, the event data including a data collection;
storing the data collection at a location in a file space on a storage device of the BMC;
determining a locator to indicate the location;
generating an extended system event log (SEL) record entry describing the event and including the locator;
storing the SEL record entry in a data repository external to the file space on the storage device; and
retrieving the data collection based on the locator in response to receiving a request-to-retrieve-an-SEL-record.

2. The method of claim 1 , further comprising:
encrypting the data collection prior to the storing, wherein the encrypted data collection is stored in a file in the file space.

3. The method of claim 1 , wherein the generating the extended SEL record entry comprises:
generating a record identification (ID) for the extended SEL record entry; and
including the record ID in the extended SEL record entry;
the method further comprising:
sending a response of the request-to-add-data, the response of the request-to-add-data including the record ID.

4. The method of claim 3 , wherein the request-to-retrieve-an-SEL-record includes the record ID, the method further comprising:
retrieving the extended SEL record entry from the data repository based on the record ID; and
extracting the locator from the extended SEL record entry.

5. The method of claim 4 , further comprising:
receiving the request-to-retrieve-an-SEL-record; and
sending a first response of the request-to-retrieve-an-SEL-record, the first response including at least a part the data collection.

6. The method of claim 5 , further comprising:
determining that the data collection is greater than a predetermined size, wherein the data collection is stored in a buffer;
selecting a first part of the data collection stored in the buffer, wherein the at least a part the data collection included in the first response is the first part; and
determining a size of a part of the data collection that has not been sent in any response, wherein the first response further includes an indication of the size.

7. The method of claim 6 , further comprising:
receiving a second request-to-retrieve-an-SEL-record including the record ID;
selecting a second part of the data collection that has not been sent in any response; and
sending a second response of the second request-to-retrieve-an-SEL-record, the second response including the second part the data collection.

8. The method of claim 1 , further comprising:
receiving a first request-to-add-data including a first part of the data collection and an indicator indicating that another part of the data collection is to be sent in another request-to-add-data; and
storing the first part of the data collection in a buffer.

9. The method of claim 8 , further comprising:
receiving a second request-to-add-data including a second part of the data collection; and
storing the second part of the data collection in a buffer.

10. The method of claim 9 , wherein the second request-to-add-data further includes an indicator indicating that there is no subsequent request-to-add-data including another part of the data collection, the method further comprising:
detecting the indicator;
combining parts of the data collection stored in the buffer to form a complete data collection; and
reading the complete data collection from the buffer.

11. An apparatus, the apparatus being a baseboard management controller (BMC), comprising:
a memory; and
at least one microprocessor coupled to the memory and configured to:
receive a message through a communication interface of the BMC, the message containing a request-to-add-data including event data associated with an event, the event data including a data collection;
store the data collection at a location in a file space on a storage device of the BMC;
determine a locator to indicate the location,
generate an extended system event log (SEL) record entry describing the event and including the locator;
store the SEL record entry in a data repository external to the file space on the storage device, and
retrieve the data collection based on the locator in response to receiving a request-to-retrieve-an-SEL-record.

12. The apparatus of claim 11 , wherein the at least one processor is further configured to:
encrypte the data collection prior to the storing, wherein the encrypted data collection is stored in a file in the file space.

13. The apparatus of claim 12 , wherein to generate the extended SEL record entry, the at least one processor is further configured to:
generate a record identification (ID) for the extended SEL record entry; and
include the record ID in the extended SEL record entry;
wherein the at least one processor is further configured to:
send a response of the request-to-add-data, the response of the request-to-add-data including the record ID.

14. The apparatus of claim 13 , wherein the request-to-retrieve-an-SEL-record includes the record ID, wherein the at least one processor is further configured to:
retrieve the extended SEL record entry from the data repository based on the record ID; and
extract the locator from the extended SEL record entry.

15. The apparatus of claim 14 , wherein the at least one processor is further configured to:
receive the request-to-retrieve-an-SEL-record; and
send a first response of the request-to-retrieve-an-SEL-record, the first response including at least a part the data collection.

16. The apparatus of claim 15 , wherein the at least one processor is further configured to:
determine that the data collection is greater than a predetermined size, wherein the data collection is stored in a buffer;
select a first part of the data collection stored in the buffer, wherein the at least a part the data collection included in the first response is the first part; and
determine a size of a part of the data collection that has not been sent in any response, wherein the first response further includes an indication of the size.

17. The apparatus of claim 16 , wherein the at least one processor is further configured to:
receive a second request-to-retrieve-an-SEL-record include the record ID;
select a second part of the data collection that has not been sent in any response; and
send a second response of the second request-to-retrieve-an-SEL-record, the second response including the second part the data collection.

18. The apparatus of claim 12 , wherein the at least one processor is further configured to:
receive a first request-to-add-data including a first part of the data collection and an indicator indicating that another part of the data collection is to be sent in another request-to-add-data; and
store the first part of the data collection in a buffer.

Assignees

• American Megatrends Int Llc

Inventors

• Swaminathan Viswanathan
• Wise David
• Christopher Samvinesh
• Alagarsamy Maheswari
• Thomas Satheesh

Classifications

• G06F2221/2107

  File encryption · CPC title

• G06F21/552

  involving long-term monitoring or reporting · CPC title

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• G06F21/602 Primary

  Providing cryptographic facilities or services · CPC title