BMC-Managed DPU Storage Encryption for Secure Wipe
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data processing units (DPUs) face challenges in securing persistent data due to reliance on the correct functioning of their operating systems for secure wipes, which can be interrupted and expose sensitive data to malicious actors.
Innovation Solution
Implementing a system where a baseboard management controller (BMC) generates and manages an encrypted access key for DPU storage, ensuring secure access and wiping by locking access with the key, which is only persisted at the BMC, independent of the DPU's operating system functionality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the DPU OS is used to execute secure wipe, then the DPU can maintain persistent state, but the security of DPU data is compromised because it relies on the DPU OS functioning correctly
Solution Approach 1:
The patent introduces a baseboard management controller (BMC) as an intermediary between the DPU and the secure wipe process. The BMC generates and manages encrypted access keys for DPU storage, independent of the DPU OS. This mediator allows secure wipe execution by controlling access to persistent storage through cryptographic keys rather than relying on OS-level operations, thereby resolving the contradiction between maintaining persistent state and ensuring security without OS dependency
Solution Approach 2:
The patent extracts the security management functionality from the DPU OS and places it in the BMC. By separating the key generation and management functions from the DPU OS, the system eliminates the dependency on OS integrity for secure wipe operations. The BMC independently manages encrypted access keys, allowing secure wipe to be executed by simply deleting these keys without requiring any OS participation or integrity checks
2Productivity
If the DPU OS is used for secure wipe, then data can be erased, but the process can be interrupted by power removal or physical DPU removal, exposing sensitive data
Solution Approach 1:
The patent implements preliminary action by pre-encrypting all DPU persistent storage with access keys managed by the BMC before any data processing occurs. This way, when a secure wipe is needed, the system only needs to delete the access keys from the BMC rather than performing time-consuming data erasure operations. The encryption is established in advance, making the actual wipe operation instantaneous and immune to interruption, thereby resolving the contradiction between fast wipe execution and guaranteed completion
Solution Approach 2:
The BMC acts as an intermediary that holds the master access keys for DPU storage. When power is removed or the DPU is physically removed, the BMC retains control over the encryption keys. This intermediary ensures that even if the DPU is accessed directly, the data remains protected because the BMC can revoke access by deleting keys, making the wipe process both fast and guaranteed complete regardless of physical interruptions
3Reliability
If encrypted access keys are persisted at the BMC, then DPU data security is improved, but the system complexity increases
Solution Approach 1:
The patent leverages the existing BMC's multi-functionality by having it serve both its traditional system management roles and the new function of generating and managing encrypted access keys for DPU storage. Rather than introducing a completely new security management system, the solution integrates key management into the already-present BMC infrastructure, thereby improving DPU data security while minimizing the increase in overall system complexity
Solution Approach 2:
The BMC performs self-service by autonomously generating, managing, and revoking access keys for DPU storage without requiring external key management infrastructure. The BMC independently handles the entire cryptographic key lifecycle, eliminating the need for additional centralized key management systems or complex inter-component communication protocols, thus achieving enhanced security with minimal added complexity
Data Source
AI summary
Systems and methods are described for secure management of a data processing unit (“DPU”). In an example, a baseboard management controller (“BMC”) can provision a DPU. Provisioning can include configuring a local storage device for DPU storage and locking access to the DPU storage with an encrypted access key. To boot the DPU, the BMC can initiate DPU firmware on the DPU. The DPU firmware can retrieve the access key from the BMC and unlock the DPU storage with the access key. The DPU firmware can be configured to then delete the access key. Once the DPU storage is unlocked, the DPU firmware can load an operating system of the DPU. The BMC can be the only entity that retains the access key. To perform a secure wipe, instructions can be provided to the BMC to delete the access key, which renders the DPU storage and all data therein inaccessible.