Secure remote support for edge computing platform

Patent metadata

Field	Value
Publication number	US-12470366-B2
Application number	US-202217877547-A
Country	US
Kind code	B2
Filing date	Jul 29, 2022
Priority date	Jul 29, 2022
Publication date	Nov 11, 2025
Grant date	Nov 11, 2025

Abstract

A disclosed method for providing a non-credentialed user (NCU) with secure access to a remote endpoint of an edge computing platform, generates a support voucher for the NCU wherein the support voucher comprises a temporary ownership voucher including one or more digital signatures establishing a chain of trust from a root of trust to the NCU. The method provides a private key associated with the support voucher to the NCU. Responsive to detecting the NCU, using the private key to log into an edge platform resource and determining that the support voucher is recognized by the edge platform resource, the NCU is authenticated and the support voucher is validated to establish the NCU as a designated owner of the remote endpoint. Responsive to establishing the NCU as a designated owner, the NCU may access the edge platform resource and from there access the platform endpoint.

First claim

What is claimed is:

1 . A method for providing a non-credentialed user (NCU) with secure access to a remote endpoint of an edge computing platform, where the method includes:
generating a support voucher for the NCU wherein the support voucher comprises a temporary ownership voucher including one or more digital signatures establishing a chain of trust from a root of trust to the NCU; providing a private key associated with the support voucher to the NCU; responsive to detecting the NCU using the private key to log into an edge platform resource and determining that the support voucher is recognized by the edge platform resource, authenticating the NCU and validating the support voucher to establish the NCU as a designated owner of the remote endpoint; and responsive to establishing the NCU as a designated owner, granting the NCU access to the edge platform resource and wherein the edge platform resource includes a tool to access the platform endpoint.

2 . The method of claim 1 , wherein the edge platform resource is an edge orchestrator (EO).

3 . The method of claim 2 , wherein the EO is a registered owner of the remote endpoint.

4 . The method of claim 2 , wherein the EO is a higher level EO than a registered owner of the remote endpoint.

5 . The method of claim 1 , wherein the remote endpoint comprises an edge compute endpoint.

6 . The method of claim 1 , wherein the remote endpoint comprises an external compute fabric.

7 . An information handling system, comprising:
a central processing unit (CPU); a computer readable memory including processor executable instructions that, when executed by the CPU, cause the information handling system to perform operations for providing a non-credentialed user (NCU) with secure access to a remote endpoint of an edge computing platform, where the operations include: generating a support voucher for the NCU wherein the support voucher comprises a temporary ownership voucher including one or more digital signatures establishing a chain of trust from a root of trust to the NCU; providing a private key associated with the support voucher to the NCU; responsive to detecting the NCU, using the private key to log into an edge platform resource and determining that the support voucher is recognized by the edge platform resource, authenticating the NCU, and validating the support voucher to establish the NCU as a designated owner of the remote endpoint; and responsive to establishing the NCU as a designated owner, granting the NCU access to the edge platform resource and wherein the edge platform resource includes a tool to access the platform endpoint.

8 . The information handling system of claim 7 , wherein the edge platform resource is an edge orchestrator (EO).

9 . The information handling system of claim 8 , wherein the EO is a registered owner of the remote endpoint.

10 . The information handling system of claim 8 , wherein the EO is a higher level EO than a registered owner of the remote endpoint.

11 . The information handling system of claim 7 , wherein the remote endpoint comprises an edge compute endpoint.

12 . The information handling system of claim 7 , wherein the remote endpoint comprises an external compute fabric.

13 . A non-transitory computer readable medium including processor executable instructions that, when executed by a processor of an information handling system, cause the information handling system to perform operations for providing a non-credentialed user (NCU) with secure access to a remote endpoint of an edge computing platform, where the operations include:
generating a support voucher for the NCU wherein the support voucher comprises a temporary ownership voucher including one or more digital signatures establishing a chain of trust from a root of trust to the NCU; providing a private key associated with the support voucher to the NCU; responsive to detecting the NCU, using the private key to log into an edge platform resource and determining that the support voucher is recognized by the edge platform resource, authenticating the NCU, and validating the support voucher to establish the NCU as a designated owner of the remote endpoint; and responsive to establishing the NCU as a designated owner, granting the NCU access to the edge platform resource and wherein the edge platform resource includes a tool to access the platform endpoint.

14 . The non-transitory computer readable medium of claim 13 , wherein the edge platform resource is an edge orchestrator (EO).

15 . The non-transitory computer readable medium of claim 14 , wherein the EO is a registered owner of the remote endpoint.

16 . The non-transitory computer readable medium of claim 14 , wherein the EO is a higher level EO than a registered owner of the remote endpoint.

17 . The non-transitory computer readable medium of claim 13 , wherein the remote endpoint comprises an edge compute endpoint.

18 . The non-transitory computer readable medium of claim 13 , wherein the remote endpoint comprises an external compute fabric.

Assignees

• Dell Products Lp

Inventors

• Sharma Anurag
• Cummins Daniel E
• Brown Michael Emery

Classifications

• H04L9/085

  Secret sharing or secret splitting, e.g. threshold schemes · CPC title

• H04L9/3247 Primary

  involving digital signatures · CPC title

• H04L9/3265

  using certificate chains, trees or paths; Hierarchical trust model · CPC title

• H04L9/0825 Primary

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title