System and method for speed dialing information handling system configuration changes

Patent metadata

Field	Value
Publication number	US-2018020007-A1
Application number	US-201615211320-A
Country	US
Kind code	A1
Filing date	Jul 15, 2016
Priority date	Jul 15, 2016
Publication date	Jan 18, 2018
Grant date	—

Abstract

Methods and systems for receiving speed dial configuration changes may involve receiving a packet, determining whether the packet is associated with a valid command, determining whether a username in a header of the packet is a valid user, validating a signature using a public key, decrypting encrypted data using a first factor key, and executing the valid command associated with the decrypted data. The packet includes the header, encrypted data, and the signature, and is sent without a one-to-many management console and without prior group configuration. The validation of the signature may be based on the determination that the packet is associated with a valid command and that the username in the header of the packet is a valid user.

First claim

What is claimed is:

1 . A method for receiving speed dial configuration changes, comprising:
receiving a packet sent without a one-to-many management console and without prior group configuration, wherein the packet includes a header, encrypted data, and a signature; determining whether the packet is associated with a valid command; determining whether a username in the header of the packet is a valid user; validating the signature of the packet using a public key based on the determination that the packet is associated with a valid command and that the username in the header of the packet is a valid user; decrypting the encrypted data from the packet using a first factor key; and executing the valid command associated with the decrypted data.

2 . The method of claim 1 , wherein the first factor key was derived using the username and a password.

3 . The method of claim 1 , wherein the valid command includes at least one of:
a power-down command; a power-up command; a firmware update command; a PXE boot command; a power capacity command; a power supply command; and a fan speed command.

4 . The method of claim 1 , wherein determining whether the packet is associated with a valid command further comprises comparing a command identifier in the header of the packet to a whitelist of commands.

5 . The method of claim 1 , wherein the valid command includes a command identifier and command data extracted from the decrypted data.

6 . The method of claim 1 , further comprising:
verifying a checksum in the decrypted data; and verifying a length value in the decrypted data by comparing a length of the decrypted data to the length value.

7 . An information handling system, comprising:
a processor subsystem having access to a first memory; a management controller comprising a secondary processor having access to a second memory, the second memory including an embedded storage partition and the second memory storing instructions executable by the secondary processor to:
receive a packet sent without a one-to-many management console and without prior group configuration, wherein the packet includes a header, encrypted data, and a signature;
determine whether the packet is associated with a valid command;
determine whether a username in the header of the packet is a valid user;
validate the signature of the packet using a public key based on the determination that the packet is associated with a valid command and that the username in the header of the packet is a valid user;
decrypt the encrypted data from the packet using a first factor key; and
execute the valid command associated with the decrypted data.

8 . The information handling system of claim 7 , wherein the first factor key was derived using the username and a password.

9 . The information handling system of claim 7 , wherein the valid command includes at least one of:
a power-down command; a power-up command; a firmware update command; a PXE boot command; a power capacity command; a power supply command; and a fan speed command.

10 . The information handling system of claim 7 , wherein the instructions to determine whether the packet is associated with a valid command further comprises instructions to compare a command identifier in the header of the packet to a whitelist of commands.

11 . The information handling system of claim 7 , wherein the valid command includes a command identifier and command data extracted from the decrypted data.

12 . The information handling system of claim 7 , further comprising instructions executable by the secondary processor to:
verify a checksum in the decrypted data; and verify a length value in the decrypted data by comparing a length of the decrypted data to the length value.

13 . The information handling system of claim 7 , further comprising instructions executable by the secondary processor to determine whether the packet targets a device in the information handling system based on a device identifier in the decrypted data and execution of the valid command further comprising execution of the valid command for the targeted device based on the determination that the decrypted data targets a device.

14 . A management controller for an information handling system having a primary processor and a primary memory, the management controller comprising:
a secondary processor having access to a second memory, the second memory including an embedded storage partition and the second memory storing instructions executable by the secondary processor to:
receive a packet sent without a one-to-many management console and without prior group configuration, wherein the packet includes a header, encrypted data, and a signature;
determine whether the packet is associated with a valid command;
determine whether a username in the header of the packet is a valid user;
validate the signature of the packet using a public key based on the determination that the packet is associated with a valid command and that the username in the header of the packet is a valid user;
decrypt the encrypted data from the packet using a first factor key; and
execute the valid command associated with the decrypted data.

15 . The management controller of claim 14 , wherein the first factor key was derived using the username and a password.

16 . The management controller of claim 14 , wherein the valid speed dial command includes at least one of:
a power-down command; a power-up command; a firmware update command; a PXE boot command; a power capacity command; a power supply command; and a fan speed command.

17 . The management controller of claim 14 , wherein the instructions to determine whether the packet is associated with a valid command further comprises instructions to compare a command identifier in the header of the packet to a whitelist of commands

18 . The management controller of claim 14 , wherein the valid command includes a command identifier and command data extracted from the decrypted data.

19 . The management controller of claim 14 , further comprising instructions executable by the secondary processor to:
verify a checksum in the decrypted data; and verify a length value in the decrypted data by comparing a length of the decrypted data to the length value.

20 . The management controller of claim 14 , further comprising instructions executable by the secondary processor to determine whether the packet targets a device of the information handling system based on a device identifier in the decrypted data and execution of the valid command further comprising execution of the valid command for the targeted device based on the determination that the decrypted data targets a device.

Assignees

• Dell Products Lp

Inventors

• Jesurajan Marystella Anto DolphinJose
• Jose Cyril
• Savage Marshal F

Classifications

• H04L63/123 Primary

  received data contents, e.g. message integrity · CPC title

• H04L9/0863

  involving passwords or one-time passwords (network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067) · CPC title

• G06F9/4416

  Network booting; Remote initial program loading [RIPL] · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/0866

  involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics · CPC title