Proxy Application Tunneling IOCTL Commands for BMC Configuration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computing device configuration and update options are specific to different types and do not utilize the full capabilities of the Baseboard Management Controller (BMC), requiring offline access and physical credentials, which can be inconvenient and insecure, especially when users lack access to the physical server or have difficulty locating credentials.
Innovation Solution
A proxy application executes at the OS level, connecting to the IOCTL interface driver to tunnel application protocol requests, allowing configuration and updates without network connection and administrator privileges, eliminating the need for physical credentials by using the BMC's capabilities to configure the device based on user input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple configuration-specific applications are used to configure and update the computing device, then specific configuration tasks can be performed, but the full capabilities of the BMC are not utilized and multiple applications increase system complexity
Solution Approach 1:
The patent implements a universal configuration application that can perform multiple configuration tasks through a single interface. This application communicates with the BMC via IOCTL commands, enabling it to handle various configuration and update operations that previously required separate specialized applications, thereby utilizing the full BMC capabilities while reducing the number of applications needed
Solution Approach 2:
The patent combines multiple configuration-specific applications into a single unified application. By merging the functionality of multiple specialized applications into one application that interfaces with the BMC through IOCTL commands, the system reduces complexity while maintaining the ability to perform diverse configuration tasks
2Ease of operation
If offline BMC configuration is required, then the computing device can be configured when powered off, but user access requires physical presence and printed credentials on the chassis
Solution Approach 1:
The patent introduces an intermediary layer in the form of a proxy application that runs within the host operating system. This proxy application mediates between the user and the BMC, allowing secure remote access to BMC configuration capabilities without requiring users to physically access the device or use printed credentials on the chassis
Solution Approach 2:
The patent replaces the mechanical/physical credential system (printed credentials on chassis requiring physical access) with a software-based authentication mechanism. The proxy application uses operating system-level security and authentication protocols to provide secure access, eliminating the need for physical credentials and improving both accessibility and security
3Reliability
If configuration applications require administrator privileges, then secure operations can be performed, but users need elevated permissions that may not be available in all contexts
Solution Approach 1:
The patent implements a self-service mechanism where the proxy application automatically handles privilege escalation and authentication with the BMC. Instead of requiring users to manually obtain administrator privileges, the application uses the IOCTL interface and proxy mechanisms to securely access BMC capabilities through the operating system's permission structures, making secure operations accessible without direct user intervention for privilege elevation
Data Source
AI summary
A method disclosed herein relates to a proxy application that connects to an input/output controller (IOCTL) interface driver. The IOCTL interface driver transfers IOCTL commands to a baseboard management controller (BMC). The proxy application receives, through the IOCTL interface driver, an application protocol request over an IOCTL command from the BMC. The application protocol request includes a computing devices configuration, a computing devices configuration option, and user interface data. The proxy application also receives an update to the computing devices current configuration based on the computing devices configuration option. The proxy application generates a new application protocol request over the IOCTL command based on the update to the computing devices current configuration. The proxy application transmits, through the IOCTL interface driver, the new application protocol request over the IOCTL command to the BMC.