Onboarding and accounting of devices into an HPC fabric

Patent metadata

Field	Value
Publication number	US-11050751-B2
Application number	US-201916459082-A
Country	US
Kind code	B2
Filing date	Jul 1, 2019
Priority date	Dec 28, 2016
Publication date	Jun 29, 2021
Grant date	Jun 29, 2021

Abstract

A method to onboard a subordinate node to a high performance computing system that includes a fabric switch network that includes a fabric switch principal and a group of subordinate nodes, wherein the fabric switch principal is configured to route messages between subordinate nodes of the group comprising: receiving a fabric switch principal address message, at an onboarding subordinate node, over an external network; providing an identification message, by the onboarding subordinate node, over the fabric switch network; receiving the identification message, at the fabric switch principal, over the fabric switch network; providing the permission message, by the fabric switch principal, over the fabric switch network; and receiving, a permission message, at the onboarding subordinate node, over the fabric switch network.

First claim

The invention claimed is:

1. An apparatus comprising:
processing circuitry of a principal fabric switch in a fabric switch network of a high performance computing system; and
memory including instructions that, when the principal fabric switch is in operation, configure the processing circuitry to:
route messages between subordinate nodes of a group of subordinate nodes over the fabric switch network via a principal onboarding and accounting OAB logic block and an I/O circuit coupled to communicate messages over an external network;
send a fabric switch principal address message to a subordinate node in the group of subordinate nodes via the messaging routing;
receive an identification message from a subordinate OAB logic block on the subordinate node that is operative during onboarding of the subordinate node; and
transmit a permission message to the subordinate node.

2. The apparatus of claim 1 , wherein the identification message provides an indication of a manufacturing source of the subordinate node.

3. The apparatus of claim 1 , wherein the principal OAB logic block is further operative during onboarding of the subordinate node to verify an identity of the subordinate node based upon the received identification message.

4. The apparatus of claim 1 , wherein the principal OAB logic block is further operative during onboarding of the subordinate node to:
verify an identity of the subordinate node based upon the received identification message, and
provide the permission message in response to a positive verification of an identity of the at least one subordinate node.

5. The apparatus of claim 1 , wherein the subordinate OAB logic block is further operative during onboarding of the subordinate node to receive an accounting identifier from the fabric switch principal; and
wherein the principal OAB logic block is further operative during onboarding of the subordinate node to:
assign the account identifier to the subordinate node; and
send the accounting identifier to the subordinate node.

6. The apparatus of claim 5 , wherein the principal OAB logic block is further operative during onboarding of the subordinate node to encrypt a message that includes the accounting identifier; and
wherein the subordinate OAB logic block is further operative during onboarding of the subordinate node to receive the accounting identifier within the encrypted message.

7. The apparatus of claim 5 , wherein the subordinate OAB logic block is operative during normal operation of the subordinate node to include the accounting identifier with messages sent to other subordinate nodes within the group of subordinate nodes.

8. The apparatus of claim 7 , wherein the principal OAB logic block is operative during normal operation to verify that a message received from the subordinate node contains the assigned accounting identifier before routing the message to another subordinate node of the group.

9. A method comprising:
routing, by a master fabric witch in a fabric switch network of a high performance computing, messages between subordinate nodes of a group of subordinate nodes over the fabric switch network via a principal onboarding and accounting OAB logic block and an I/O circuit coupled to communicate messages over an external network;
sending a fabric switch principal address message to a subordinate node in the group of subordinate nodes via the messaging routing;
receiving an identification message from a subordinate OAB logic block on the subordinate node that is operative during onboarding of the subordinate node; and
transmitting a permission message to the subordinate node.

10. The method of claim 9 , wherein the identification message provides an indication of a manufacturing source of the subordinate node.

11. The method of claim 9 , comprising verifying, via the principal OAB logic block during onboarding of the subordinate node, an identity of the subordinate node based upon the received identification message.

12. The method of claim 9 , comprising, via the principal OAB logic block during onboarding of the subordinate node:
verifying an identity of the subordinate node based upon the received identification message, and
providing the permission message in response to a positive verification of an identity of the at least one subordinate node.

13. The method of claim 9 , comprising:
receiving, via the subordinate OAB logic block during onboarding of the subordinate node, an accounting identifier from the fabric switch principal;
assigning, via the principal OAB logic block during onboarding of the subordinate node, the account identifier to the subordinate node; and
sending, via the principal OAB logic block during onboarding of the subordinate node, the accounting identifier to the subordinate node.

14. The method of claim 13 , comprising:
encrypting, via the principal OAB logic block during onboarding of the subordinate node, a message that includes the accounting identifier; and
receiving, via the subordinate OAB logic block during onboarding of the subordinate node, the accounting identifier within the encrypted message.

15. The method of claim 13 , comprising including, via the subordinate OAB logic block during normal operation of the subordinate node, the accounting identifier with messages sent to other subordinate nodes within the group of subordinate nodes.

16. The method of claim 15 , comprising verifying, via the principal OAB logic block during normal operation, that a message received from the subordinate node contains the assigned accounting identifier before routing the message to another subordinate node of the group.

17. At least one non-transitory machine-readable medium including instructions, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:
routing, by a master fabric switch in a fabric switch network of a high performance computing, messages between subordinate nodes of a group of subordinate nodes over a fabric switch network via a principal onboarding and accounting OAB logic block and an I/O circuit coupled to communicate messages over an external network;
sending a fabric switch principal address message to a subordinate node in the group of subordinate nodes via the messaging routing;
receiving an identification message from a subordinate OAB logic block on the subordinate node that is operative during onboarding of the subordinate node; and
transmitting a permission message to the subordinate node.

18. The at least one non-transitory machine-readable medium of claim 17 , wherein the identification message provides an indication of a manufacturing source of the subordinate node.

19. The at least one non-transitory machine-readable medium of claim 17 , wherein the operations comprise verifying, via the principal OAB logic block during onboarding of the subordinate node, an identity of the subordinate node based upon the received identification message.

20. The at least one non-transitory machine-readable medium of claim 17 , wherein the operations comprise, via the principal OAB logic block during onboarding of the subordinate node:
verifying an identity of the subordinate node based upon the received identification message, and
providing the permission message in response to a positive verification of an identity of the at least one subordinate node.

21. The at least one non-transitory machine-readable medium of claim 17 , wherein the operations comprise:
receiving, via the subordina

Assignees

• Intel Corp

Inventors

• Smith Ned M
• Huntley Barry E
• Hunt Simon

Classifications

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title