Hardware security module access management in a cloud computing environment

Patent metadata

Field	Value
Publication number	US-9836308-B2
Application number	US-201414574728-A
Country	US
Kind code	B2
Filing date	Dec 18, 2014
Priority date	Sep 30, 2014
Publication date	Dec 5, 2017
Grant date	Dec 5, 2017

Abstract

Trusted firmware on a host server is used for managing access to a hardware security module (HSM) connected to the host server. The HSM stores confidential information associated with an operating system. As part of access management, the firmware detects a boot device identifier associated with a boot device configured to boot the operating system on the host server. The firmware then receives a second boot device identifier from the HSM. The boot device identifier and the second boot device identifier are then compared by the firmware. Based on the comparison, the firmware determines that the boot device identifier matches with the second boot device identifier. Based on this determination, the firmware grants the operating system access to the HSM.

First claim

What is claimed is:

1. A method for managing access to a hardware security module (HSM) connected to a host server, the HSM having confidential information associated with an operating system stored thereon, the method comprising:
detecting a boot device identifier associated with a boot device configured to boot the operating system on the host server;
receiving a second boot device identifier from the HSM;
comparing the boot device identifier to the second boot device identifier;
determining, based on the comparing, that the boot device identifier matches with the second boot device identifier; and
granting, subsequent to the determining, the operating system access to the HSM.

2. The method of claim 1 , wherein the comparing is performed by a device selected from the group consisting of firmware running on the host server and a hypervisor.

3. The method of claim 1 , further comprising:
detecting a third boot device identifier associated with a second boot device configured to boot a second operating system on the host server;
comparing the second boot device identifier to the third boot device identifier;
determining, based on the comparing the second boot device identifier to the third boot device identifier, that the second boot device identifier does not match with the third boot device identifier; and
denying, subsequent to the determining that the second boot device identifier does not match with the third boot device identifier, the second operating system access to the HSM.

4. The method of claim 3 , further comprising:
receiving a fourth boot device identifier from a second HSM connected to the host server, the second HSM having second confidential information associated with the second operating system stored thereon;
comparing the third boot device identifier to the fourth boot device identifier;
determining, based on the comparing the third boot device identifier to the fourth boot device identifier, that the third boot device identifier matches with the fourth boot device identifier; and
granting, subsequent to the determining that the third boot device identifier matches with the fourth boot device identifier, the second operating system access to the second HSM.

5. The method of claim 4 , wherein the HSM and the second HSM are contained on a single card as partitioned portions.

6. The method of claim 1 , further comprising:
storing the confidential information combined with the second boot device identifier on the HSM via a secure protocol.

7. The method of claim 1 , wherein the second boot device identifier is in the form of a hash value of data stored on the boot device.

8. The method of claim 1 , wherein the HSM comprises an adapter card with a crypto co-processor.

9. The method of claim 1 , wherein the operating system is a guest operating system.

10. The method of claim 1 , wherein the operating system is an instance of a guest operating system running on the host server, the method further comprising:
booting, prior to the detecting, the guest operating system on the host server using the boot device.

11. The method of claim 1 , wherein the second boot device identifier is a copy of the boot device identifier.

Assignees

• IBM

Inventors

• Boenisch Volker M M
• Buendgen Reinhard
• Geisert Franziska
• Lang Jakob C
• Lattermann Mareike
• Nunez Mencias Angel

Classifications

• G06F21/572

  Secure firmware programming, e.g. of basic input output system [BIOS] · CPC title

• G06F2009/45587

  Isolation or security of virtual machine instances · CPC title

• G06F21/575

  Secure boot · CPC title

• G06F9/4408 Primary

  Boot device selection · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title