Automated Server Deployment via Cloud-Verified Credentials

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for deploying new servers in data centers are insecure, costly due to custom ordering, and error-prone due to manual processes, lacking automation and secure trust establishment.

Innovation Solution

Establishing a secure trust between a new server and a server deployment module using a cloud-based service and secure protocol, automating the deployment process by discovering the new server, obtaining an encrypted signed data blob, and verifying credentials to eliminate manual intervention.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual server deployment methods are used with default passwords, then deployment simplicity is maintained, but security is compromised

Engineering Contradiction:

ImprovesecurityVSAvoiddeployment simplicity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary actions by automatically generating unique passwords and configuration data during server manufacturing, storing them in secure storage on the server. This eliminates the need for manual password configuration while maintaining security, as the server is pre-prepared with secure credentials before deployment.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The server autonomously retrieves its own credentials from secure storage and configures itself during the boot process without requiring manual intervention. The server independently establishes secure connections and registers with management systems, eliminating the trade-off between automation and security.

Inventive Principle:

Principle #25Self-service

2Manufacturing precision

If custom ordering processes are implemented for server configuration, then configuration accuracy is improved, but deployment time and cost increase

Engineering Contradiction:

Improveconfiguration accuracyVSAvoiddeployment time

Core Design Contradiction:

Manufacturing precisionVSLoss of time

Solution Approach 1:

The system performs preliminary configuration actions during manufacturing by embedding unique identifiers and credentials directly into the server's secure storage. This preliminary configuration ensures accuracy while enabling rapid deployment, as no custom ordering or manual configuration is needed during installation.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system uses a universal automated deployment process that works for all servers through standardized secure storage and credential retrieval mechanisms. This eliminates the need for custom ordering processes while maintaining configuration accuracy through consistent automated procedures.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Productivity

If manual password configuration is used, then deployment flexibility is maintained, but error rates increase

Engineering Contradiction:

Improvedeployment automationVSAvoiderror rate

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The server automatically retrieves credentials from its own secure storage and configures itself during boot, eliminating manual password configuration. This self-service approach ensures accuracy by preventing human errors in password entry while maintaining deployment flexibility through automated processes.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The system implements verification mechanisms where the server validates its credentials and configuration during the automated deployment process. This feedback loop ensures error-free deployment by detecting and correcting configuration issues before they propagate.

Inventive Principle:

Principle #23Feedback

4Productivity

If automated deployment is implemented, then productivity is improved, but security risks increase due to credential management

Engineering Contradiction:

Improvedeployment automationVSAvoidsecurity

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The system performs preliminary security setup during manufacturing by generating and storing credentials in secure hardware storage before the server is deployed. This preliminary action enables automated deployment while maintaining security, as the credentials are already securely prepared and protected.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system introduces a secure credential management intermediary that mediates between automated deployment processes and security requirements. The secure storage acts as an intermediary layer that protects credentials while enabling automated retrieval and configuration, resolving the conflict between automation and security.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11218463B2Trust establishment to deploy servers in data centers

Publication Date: 2022.01.04 HEWLETT PACKARD ENTERPRISE DEV LP

AI summary

In one example, a system is disclosed, which may include a network device, a new server connected to the network device, and a management server communicatively connected to a cloud-based service and the network device. The management server may include a server deployment engine to discover the new server in the system using the network device; obtain an encrypted data blob associated with the new server from the cloud-based service; establish a trust, via a secure protocol, with the new server using the encrypted data blob; and deploy the new server in the system upon establishing the trust with the new server.