JP2024546424A - クラウドインフラストラクチャシステム内のコンピューティングノードの認可のためのエッジアテステーション - Google Patents

クラウドインフラストラクチャシステム内のコンピューティングノードの認可のためのエッジアテステーション Download PDF

Info

Publication number
JP2024546424A
JP2024546424A JP2024527433A JP2024527433A JP2024546424A JP 2024546424 A JP2024546424 A JP 2024546424A JP 2024527433 A JP2024527433 A JP 2024527433A JP 2024527433 A JP2024527433 A JP 2024527433A JP 2024546424 A JP2024546424 A JP 2024546424A
Authority
JP
Japan
Prior art keywords
host node
authentication data
received
data
endorsement key
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
JP2024527433A
Other languages
English (en)
Japanese (ja)
Other versions
JP2024546424A5 (https=
Inventor
ペイン，ブライアン・スペンサー
Original Assignee
オラクル・インターナショナル・コーポレイション
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by オラクル・インターナショナル・コーポレイション filed Critical オラクル・インターナショナル・コーポレイション
Publication of JP2024546424A publication Critical patent/JP2024546424A/ja
Publication of JP2024546424A5 publication Critical patent/JP2024546424A5/ja
Pending legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0272—Virtual private networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/102—Entity profiles
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/4401—Bootstrapping
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/4401—Bootstrapping
    • G06F9/4416—Network booting; Remote initial program loading [RIPL]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computing Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Power Engineering (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)
  • Stored Programmes (AREA)
JP2024527433A 2021-11-10 2022-10-05 クラウドインフラストラクチャシステム内のコンピューティングノードの認可のためのエッジアテステーション Pending JP2024546424A (ja)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US17/523,789 2021-11-10
US17/523,789 US11863561B2 (en) 2021-11-10 2021-11-10 Edge attestation for authorization of a computing node in a cloud infrastructure system
PCT/US2022/077605 WO2023086712A1 (en) 2021-11-10 2022-10-05 Edge attestation for authorization of a computing node in a cloud infrastructure system

Publications (2)

Publication Number Publication Date
JP2024546424A true JP2024546424A (ja) 2024-12-24
JP2024546424A5 JP2024546424A5 (https=) 2025-08-28

Family

ID=84329493

Family Applications (1)

Application Number Title Priority Date Filing Date
JP2024527433A Pending JP2024546424A (ja) 2021-11-10 2022-10-05 クラウドインフラストラクチャシステム内のコンピューティングノードの認可のためのエッジアテステーション

Country Status (5)

Country Link
US (1) US11863561B2 (https=)
EP (1) EP4430803B1 (https=)
JP (1) JP2024546424A (https=)
CN (1) CN118414806B (https=)
WO (1) WO2023086712A1 (https=)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2023104305A1 (en) * 2021-12-08 2023-06-15 Telefonaktiebolaget Lm Ericsson (Publ) Single to multiple device resource negotiation
US11917083B2 (en) * 2021-12-15 2024-02-27 VMware LLC Automated methods and systems for performing host attestation using a smart network interface controller

Family Cites Families (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4677588A (en) * 1983-11-14 1987-06-30 International Business Machines Corp. Network interconnection without integration
JPS6373388A (ja) * 1986-09-16 1988-04-02 Fujitsu Ltd 複数サ−ビス用ｉｃカ−ドの領域獲得方式
US6263446B1 (en) * 1997-12-23 2001-07-17 Arcot Systems, Inc. Method and apparatus for secure distribution of authentication credentials to roaming users
FI105753B (fi) * 1997-12-31 2000-09-29 Ssh Comm Security Oy Pakettien autentisointimenetelmä verkko-osoitemuutosten ja protokollamuunnosten läsnäollessa
US6823454B1 (en) * 1999-11-08 2004-11-23 International Business Machines Corporation Using device certificates to authenticate servers before automatic address assignment
US7200863B2 (en) * 2000-05-16 2007-04-03 Hoshiko Llc System and method for serving content over a wide area network
US20020194483A1 (en) * 2001-02-25 2002-12-19 Storymail, Inc. System and method for authorization of access to a resource
WO2002014991A2 (en) * 2000-08-11 2002-02-21 Incanta, Inc. Resource distribution in network environment
EP1283464A1 (en) * 2001-08-06 2003-02-12 Hewlett-Packard Company A boot process for a computer, a boot ROM and a computer having a boot ROM
US20030097553A1 (en) * 2001-09-29 2003-05-22 Frye James F. PXE server appliance
US7210169B2 (en) 2002-08-20 2007-04-24 Intel Corporation Originator authentication using platform attestation
US7340508B1 (en) * 2002-09-18 2008-03-04 Open Invention Network, Llc Exposing process flows and choreography controllers as web services
US20040053602A1 (en) * 2002-09-18 2004-03-18 Wurzburg Francis L. Low-cost interoperable wireless multi-application and messaging service
US7519834B1 (en) * 2003-01-24 2009-04-14 Nortel Networks Limited Scalable method and apparatus for transforming packets to enable secure communication between two stations
KR101254209B1 (ko) * 2004-03-22 2013-04-23 삼성전자주식회사 디바이스와 휴대용 저장장치간에 권리 객체를 이동,복사하는 방법 및 장치
JP3897041B2 (ja) * 2004-11-18 2007-03-22 コニカミノルタビジネステクノロジーズ株式会社 画像形成システムおよび画像形成装置
US20060212407A1 (en) * 2005-03-17 2006-09-21 Lyon Dennis B User authentication and secure transaction system
US7788484B2 (en) * 2005-11-30 2010-08-31 Microsoft Corporation Using hierarchical identity based cryptography for authenticating outbound mail
WO2008004525A1 (en) * 2006-07-03 2008-01-10 Panasonic Corporation Information processing device, information recording device, information processing system, program update method, program, and integrated circuit
US8613103B2 (en) * 2006-07-07 2013-12-17 Sandisk Technologies Inc. Content control method using versatile control structure
GB2458157B (en) * 2008-03-07 2012-04-25 Hewlett Packard Development Co Virtual machine liveness check
US9342835B2 (en) * 2009-10-09 2016-05-17 Visa U.S.A Systems and methods to deliver targeted advertisements to audience
US8910278B2 (en) * 2010-05-18 2014-12-09 Cloudnexa Managing services in a cloud computing environment
US9699158B2 (en) * 2011-09-22 2017-07-04 Russell S. Goodwin Network user identification and authentication
US8800024B2 (en) * 2011-10-17 2014-08-05 Mcafee, Inc. System and method for host-initiated firewall discovery in a network environment
US9130970B2 (en) * 2012-11-26 2015-09-08 Go Daddy Operating Company, LLC Systems for accelerating content delivery via DNS overriding
US9866391B1 (en) * 2013-01-30 2018-01-09 Amazon Technologies, Inc. Permissions based communication
US9860064B2 (en) * 2016-03-07 2018-01-02 Citrix Systems, Inc. Encrypted password transport across untrusted cloud network
US10963570B2 (en) 2018-12-11 2021-03-30 Verizon Media Inc. Secure boot of remote servers
CN110162992B (zh) * 2019-05-31 2022-06-28 联想(北京)有限公司 数据处理方法、数据处理装置和计算机系统
US11533316B2 (en) * 2019-06-27 2022-12-20 Intel Corporation Information-centric network namespace policy-based content delivery
US11748133B2 (en) 2020-04-23 2023-09-05 Netapp, Inc. Methods and systems for booting virtual machines in the cloud

Also Published As

Publication number Publication date
CN118414806A (zh) 2024-07-30
CN118414806B (zh) 2025-04-25
US20230144341A1 (en) 2023-05-11
EP4430803B1 (en) 2026-03-04
WO2023086712A1 (en) 2023-05-19
US11863561B2 (en) 2024-01-02
EP4430803A1 (en) 2024-09-18

Similar Documents

Publication Publication Date Title
US12238166B2 (en) Providing managed services in a cloud environment
US11108884B1 (en) Routing of web requests to on-premise network in a multi-tenant environment
JP7806055B2 (ja) 計算インスタンスの局面を修正するための技術
US20240372710A1 (en) Quorum-based authorization
US12260261B2 (en) Remote cloud function invocation service
US12526160B2 (en) KMS dedicated HSM design (claiming ownership)
US20240296230A1 (en) Secure Boot Partition For Cloud Compute Nodes
US20250030680A1 (en) Compartment level binding for workload identity
EP4430803B1 (en) Edge attestation for authorization of a computing node in a cloud infrastructure system
US20250330467A1 (en) Techniques for managing requests in a multi-tenant environment
JP2024536240A (ja) ドメイン内のエンティティのための複合認可
US12210400B2 (en) Techniques for performing fault tolerance validation for a data center
US20250190278A1 (en) Remote cloud function invocation service
US12388876B2 (en) Process security capability requirements identification
US20240346129A1 (en) Authorization brokering

Legal Events

Date Code Title Description
A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20250819

A621 Written request for application examination

Free format text: JAPANESE INTERMEDIATE CODE: A621

Effective date: 20250819