Secure onboarding of external compute fabric in an edge horizontal platform

Patent metadata

Field	Value
Publication number	US-12244710-B2
Application number	US-202217730629-A
Country	US
Kind code	B2
Filing date	Apr 27, 2022
Priority date	Apr 27, 2022
Publication date	Mar 4, 2025
Grant date	Mar 4, 2025

Abstract

An edge processing system includes first and second information handling systems. The first information handling system orchestrates the edge processing system, and creates a first key pair including a first private key and a first public key. The second information handling system receives fabric agent code that includes the first public key, a second key pair including a second private key and a second public key, and an address of the first information handling system. The second information handling system executes the fabric agent code to provide an access request to the address. The access request is encoded with the first public key. The first information handling system authenticates the access request with the first private key, and provides external compute fabric code to the second information handling system in response to authenticating the access request. The second information handling system instantiates the external compute fabric code to manage end points of the edge processing system.

First claim

What is claimed is:

1. An edge processing system, comprising:
a first information handling system including:
a first processor;
a first memory storing instructions that, when executed by the first processor, cause the first processor to perform first operations comprising:
orchestrating the edge processing system; and
creating a first key pair including a first private key and a first public key;

a second information handling system including:
a second processor; and
a second memory storing instructions that, when executed by the second processor, cause the second processor to perform second operations comprising:
receiving a fabric agent code, the first public key, a second key pair including a second private key and a second public key, and an address of the first information handling system; and
executing the fabric agent code to provide an access request to the address;

wherein the first operations further comprise:
authenticating the access request with the first private key, and
providing external compute fabric code to the second information handling system in response to the access request being authenticated;

wherein the second operations further comprise:
instantiating the external compute fabric code to manage end points of the edge processing system; and

wherein secure bidirectional communications based on the first and second key pairs are established between the first and second information handling systems.

2. The edge processing system of claim 1 , wherein the access request includes the second public key.

3. The edge processing system of claim 2 , wherein providing the external compute fabric code comprises encoding the external compute fabric code with the second public key.

4. The edge processing system of claim 3 , wherein prior to instantiating the external compute fabric code, the second operations further comprise authenticating the external compute fabric code with the second private key.

5. The edge processing system of claim 1 , further comprising:
a third processor; and
a third memory storing instructions that, when executed by the third processor, cause the third processor to function as a cloud control plane and to perform third operations comprising providing the fabric agent code to the second information handling system.

6. The edge processing system of claim 5 , wherein prior to the cloud control plane providing the fabric agent code to the second information handling system, the second operations further comprise:
receiving a fabric agent script from the cloud control plane, and
executing the fabric agent script, wherein the fabric agent script establishes a secure connection between the second information handling system and the cloud control plane.

7. The edge processing system of claim 6 , wherein the fabric agent code is provided to the second information handling system on the secure connection.

8. The edge processing system of claim 5 , wherein the third operations further comprise receiving the address and the first public key.

9. The edge processing system of claim 8 , wherein the third operations further comprise creating the second key pair.

10. The edge processing system of claim 9 , wherein the third operations further comprise adding the first public key and the second key pair to the fabric agent code.

11. A method, comprising:
creating, on a first information handling system of an edge processing system, a first key pair including a first private key and a first public key, the first information handling system configured to orchestrate the edge processing system;
receiving, by a second information handling system of the edge processing system, fabric agent code, the first public key, a second key pair including a second private key and a second public key, and an address of the first information handling system;
executing the fabric agent code to provide an access request to the address;
authenticating the access request with the first private key;
providing external compute fabric code to the second information handling system in response to the access request being authenticated;
instantiating the external compute fabric code to manage end points of the edge processing system; and
establishing secure bidirectional communications based on the first and second key pairs between the first and second information handling systems.

12. The method of claim 11 , wherein the access request includes the second public key.

13. The method of claim 12 , wherein providing the external compute fabric code comprises encoding the external compute fabric with the second public key.

14. The method of claim 13 , wherein prior to instantiating the external compute fabric code, the method further comprises authenticating the external compute fabric code with the second private key.

15. The method of claim 11 , further comprising providing, by a cloud control plane of the edge processing system, the fabric agent code to the second information handling system.

16. The method of claim 15 , wherein, prior to providing the fabric agent code to the second information handling system, the method further comprises:
receiving a fabric agent script from the cloud control plane; and
executing the fabric agent script, wherein the fabric agent script establishes a secure connection between the second information handling system and the cloud control plane.

17. The method of claim 16 , wherein the fabric agent code is provided to the second information handling system on the secure connection.

18. The method of claim 15 , further comprising:
receiving, by the cloud control plane, the address and the first public key.

19. The method of claim 18 , further comprising:
creating the second key pair; and
adding the first public key and the second key pair to the fabric agent code.

20. An edge processing system, comprising:
a first information handling system including:
a first processor; and
a first memory storing instructions that, when executed by the first processor, cause the first processor to function as a first and to perform first operations comprising:
managing the edge processing system, and
creating a first key pair including a first private key and a first public key;

a second information handling system including:
a first processor; and
a second memory storing instructions that, when executed by the second processor, cause the second processor to perform operations comprising:
receiving a fabric agent code, the first public key, a second key pair including a second private key and a second public key, and an address of the first information handling system, and
executing the fabric agent code to provide an access request to the address;

a cloud control plane including:
a third processor;
a third memory storing instructions that, when executed by the third processor, cause the third processor to perform third operations comprising providing the fabric agent code to the second information handling system;
wherein:
the first operations further comprise:
authenticating the access request with the first private key, and
providing external compute fabric code to the second information handling system in response to the access request being authenticated;
the second operations further comprise:
instantiating the external compute fabric code to manage end points of the edge processing system;
the access request includes the second public key;
in providing the external compute fabric code comprises encoding the exter

Assignees

• Dell Products Lp

Inventors

• Sharma Anurag
• Cummins Daniel
• Zoller Iv Linwood

Classifications

• H04L63/061 Primary

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/0894

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title

• H04L63/0442

  wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30) · CPC title

• H04L9/14 Primary

  using a plurality of keys or algorithms · CPC title