Secured Storage Region Access via Management Controller Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The availability and trustworthiness of data stored on a storage device hosted by hardware resources in a data processing system are compromised when the hardware resources are compromised or in a reduced functionality state, negatively impacting the quality of computer-implemented services.
Innovation Solution
A management controller establishes a secured management region of the storage device cooperatively with the storage device, using a secured storage policy to ensure secure data access via a side band channel, even when the hardware resources are compromised.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If data is stored on a storage device hosted by hardware resources, then storage capacity and accessibility are improved, but data availability and trustworthiness deteriorate when the hardware resources are compromised
Solution Approach 1:
The storage device is divided into a secured management region and other regions. The secured management region is established cooperatively between the management controller and the storage device, creating a segregated secure area that isolates critical data from potential compromises in the rest of the system.
Solution Approach 2:
A management controller is introduced as an intermediary component that operates independently from the hardware resources. The management controller establishes and manages the secured management region, providing a trusted interface between the system administrator and the storage device without relying on the potentially compromised hardware resources.
2Reliability
If a secured management region is established cooperatively between management controller and storage device, then data security and trustworthiness are improved, but system complexity increases
Solution Approach 1:
The secured management region is established cooperatively, meaning both the management controller and storage device participate in creating and maintaining the secure region. This self-organizing approach reduces the need for external complex security infrastructure while still achieving high security standards.
Data Source
AI summary
Methods and systems for managing operation of a data processing system are disclosed. To manage the data processing system, a management controller of the data processing system may establish, cooperatively with a storage device hosted by hardware resources of the data processing system, a secured management region of the storage device and security data for accessing data on the secured management region. The secured management region may be established based on a secured storage policy that may be obtained by the management controller from a management system via an out-of-band communication channel. The management controller may obtain data from the secured management region for use in updating operation of the data processing system.