ROLE-BASED COMPONENT ACCESS CONTROL

Component access control includes: receiving, by an access control module, permissions specifying authorization of physical access to one or more secured components of a computing system by one or more requestors; receiving, by the access control module from a requestor, a request to physically access one of the secured components of the computing system; determining, by the access control module based on the permissions, whether the requestor is authorized to physically access the secured component; and responsive to determining that the requestor is authorized to physically access the secured component, granting the requestor physical access to the secured component while prohibiting the requestor from physically accessing other secured components of the computing system.

BACKGROUND

Field of the Disclosure

The field of the disclosure is data processing, or, more specifically, methods, apparatus, and products for component access control.

Description of Related Art

Modern computing systems include many different system components. When a computing system requires service of one or more of these components, service personnel must access these components within the computing system. During such services, components other than those being serviced are often accessible to service personnel and, as such, are vulnerable to potential undesirable actions by the service personnel.

SUMMARY

Methods, apparatus, and products for component access control according to various embodiments are disclosed in this specification. Such component access control may include: receiving, by an access control module, permissions specifying authorization of physical access to one or more secured components of a computing system by one or more requestors; receiving, by the access control module from a requestor, a request to physically access one of the secured components of the computing system; determining, by the access control module based on the permissions, whether the requestor is authorized to physically access the secured component; and responsive to determining that the requestor is authorized to physically access the secured component, granting the requestor physical access to the secured component while prohibiting the requestor from physically accessing other secured components of the computing system.

DETAILED DESCRIPTION

Exemplary methods, apparatus, and products for component access control in accordance with the present disclosure are described with reference to the accompanying drawings, beginning withFIG.1.FIG.1sets forth an example line drawing of a rack mounted system configured for component access control in accordance with embodiments of the present disclosure. The example system ofFIG.1includes a rack102, such as a standard 19 inch rack for mounting multiple electronic equipment modules.

The example rack102ofFIG.1includes a number of computing systems100, a biometric scanner110, a power supply114, a switch116, and a management module118. The computing systems100include software and hardware capable of computing functions, and may be embodied as a server, workstation, storage array, and the like. The biometric scanner110may be implemented as hardware used to capture a biometric signature (such as a finger print, vocal pattern, retinal scan and the like) for verification of identity. The biometric scanner may also operate as a locking mechanism that approves or denies access to one or more components of the computing systems100by matching the biometric signature against authorized signatures stored in a database. The power supply114converts mains AC power to low-voltage regulated DC power for the internal components of the rack102. The switch116may be a network switch that connects components within the rack102to a computer network. The management module118provides system-management functions and is used for configuring and managing the installed components of the rack102.

Each of the computing systems100in the example ofFIG.1includes a number of components. Examples of components106a-cmay include CPUs, fans, DIMM slots, a power supply, and the like.

Computing system100ais depicted in further detail as an example of one of the computing systems100. The example computing system100aofFIG.1includes a number of components106a-106c, a service processor104, a central processing unit (‘CPU’)120, and main computer memory in the form of RAM (‘Random Access Memory’)108. Stored in RAM108is an agent112and the service processor104is executing an access control module105.

The computing system (100a) is configured for component access control in accordance with embodiments of the present disclosure. The term ‘access control’ refers to controlling whether a user is authorized to access a component and the type of access the user is authorized (e.g., a duration of access). Access control at the component level allows only authorized users access to a subset of (one or more) components within a computing system while prohibiting those users access to other components of the computing system. That is, access control at the component level provides fine grained security of components within computing systems. Examples of users that may be allowed access to a component within the computing system100aare service personnel, system administrators, and the like.

Each of the components of the computing system100amay be secured in a variety of manners. The term ‘secured’ here may refer to physical or virtual (software-based) access as the context requires. For example, hardware components within the computing system100amay be physically secured by a cover or lid that locks in place, and physically separated from other components within the computing system100aby physical partitions. In another example, software or firmware components may be secured from access by logical locks or passwords.

Access to each of the secured components of the computing system may be allowed through the use of a lock that requires a key, passcode, biometric signature, or the like. For example, a requestor, such as a user, may request access to a component of a computing system by scanning their fingerprint, or other biometric signature, at a biometric scanner, such as the biometric scanner110ofFIG.1. The lock or biometric scanner may unlock the cover or lid securing the component for which access is requested, based on a determination of whether the requestor is authorized to physically access the secured component.

A computing system configured according to embodiments of the present disclosure for access control at the component level may include a lock or biometric scanner for each respective component included within the computing system. In such a computing system, the locks or biometric scanners may be positioned local to each respective component of the computing system, grouped together in an array that is positioned local to the computing system, or located remotely from the computing system entirely. A computing system configured for access control at the component level may include only a single lock or biometric scanner for the computing system. In such a computing system, the request for access may be made through the use of the single biometric scanner, and access may be granted only to the components for which the requestor is authorized, while the other components will remain secured.

Access control may also be applied to a rack102as shown inFIG.1at the computing system level, where each of the computing systems100is secured from access. In such an example, the requestor may request access, through utilizing a biometric scanner110local to the rack102, to a particular computing system within the rack, and may only access the computing system for which the requestor is authorized.

The example service processor104of the computing system100amay execute a module of computing program instructions comprising an access control module105according to embodiments of the present disclosure. That is, the service processor may implement an access control module105. The example access control module105may be configured to receive permissions specifying authorization of physical access to one or more secured components of a computing system by one or more requestors. The access control module105may receive such permissions from a system-wide management module (not shown inFIG.1) that provides an interface for system administrators or other users to manage various aspects of computing systems100as well as computing systems of other racks in, for example, a data center. Such permissions may specify both role based and time based controls over which components are authorized for access.

Role based controls, for example, may specify which components within the computing system a requestor is allowed to access based on the role or type of requestor, such as an administrator, a type of service personnel, and the like. In such an example, the permissions may specify that an administrator-level requestor has access to many components, while a requestor, whose role is a technical service personnel, is allowed access only to the component to be serviced. In another example of role based controls, permissions may specify which components within the computing system a requestor is allowed to access based on a type of service required in the computing system. In such an example, the permissions may specify that a requestor whose role is service personnel to carry out a particular service on the computing system is allowed access only to the components required for the service. The permissions for each requestor may be in the form of a temporary account created for use by the service personnel upon determining a service to be carried out and may be deleted after the service is completed.

Time based controls may specify a time window for which a requestor is allowed access to one or more components, such as a length of time in which access is allowed, a start and end time during a specified date, and the like. The time window for which a requestor is allowed access may be based on the type of service required, the role or type of requestor that is requesting access, and the like. For example, while system administrators may be allowed access to any component and at any point during the day, service personnel carrying out a service on a computing system's CPU may only be allowed access to the CPU, and only for a specified length of time. In such an example, the specified length of time may be determined based on an expected time of service, an admin selected time, a time selected for optimization of the computing system, and the like. In an example embodiment of the present disclosure, the permissions could specify two different requestors that each are authorized access to different components within the same computing system with overlapping time windows.

The example access control module105of the services processor104ofFIG.2may receive, from a requestor, a request to physically access one of the secured components of the computing system100a. The access control module105may then determine, based on the received permissions described above, whether the requestor is authorized to physically access the secured component. Responsive to determining that the requestor is authorized to physically access the secured component, the access control module105of the service processor104may then grant the requestor physical access to the secured component while prohibiting the requestor from physically accessing other secured components of the computing system. Prohibiting the requestor from physically accessing other secured components of the computing system may be carried out by only unlocking the component for which the requestor requested access to and is authorized to access, and keeping the remaining components locked and therefore inaccessible to the requestor.

The service processor104may track all access actions and service actions in a log, which may be stored local to the service processor, local to the computing system, or remote from the computing system. Such a log may compare expected events versus performed events. Readers of skill in the art will recognize that such a log will aid in auditing of the computing system.

The service processor104may issue alerts when unauthorized access or events occurs, and lock some or all system components once an unauthorized access event occurs. For example, the service processor may temporarily block or remove all permissions for some or all components of a computing system when an unauthorized access or event occurs, such as for a specified time, until an admin or other approved account restores the system permissions, or the like. The service processor104may also generate temporary credentials to access a physical or logical component, exposes a section on a web interface for credentials management and actions customization, expose a secure API, to automate credentials generation, and communicate with BIOS/UEFI (Basic Input/Output Service or Unified Extensible Firmware Interface) to coordinate the authorization of certain actions.

Component access control in accordance with the present disclosure is generally implemented with computing systems, such as computing systems100shown inFIG.1. For further explanation, therefore,FIG.2sets forth a block diagram of an example computing system200configured for component access control according to embodiments of the present disclosure. The computing system200ofFIG.2includes a service processor202, multiple fans204, drive bays206, one or more CPUs212, multiple DIMM (dual in-line memory module) slots218, a power supply214, an M.2 slot216, and RAM108. The computing system200may include other components than those shown inFIG.2, such as SSDs (solid state drives), network ports, NVMe (Non-Volatile Memory Express) connectors, and the like.

The computing system200ofFIG.2also includes partitions220configured for physically separating each of the multiple components included within the computing system200. The computing system200ofFIG.2also includes a component cover220positioned over each component within the computing system. For example, each component within the computing system200may be individually physically secured by partitions220and a component cover220. The component cover220may be opened or removed to provide access to its respective component or components positioned beneath the component cover220.

The computing system200ofFIG.2also includes a biometric scanner210positioned at each component within the computing system. A biometric scanner210may be positioned on top of, or local to, each component cover220of the computing system, such that a requestor may only access a component through its respective component cover220via utilization of a respective biometric scanner210.

For further explanation,FIG.3sets forth a flow chart illustrating an exemplary method of component access control according to embodiments of the present disclosure. The method ofFIG.3includes receiving300, by an access control module105, permissions302specifying authorization of physical access to one or more secured components of a computing system by one or more requestors. Receiving300permissions302specifying authorization of physical access to one or more secured components of a computing system by one or more requestors may be carried out by receiving, by the access control module, the permission from a system-wide management module. The permissions302may specify a recognized user or personnel via a password, biometric signature, or the like, and may further specify corresponding components for which the user is authorized to access. The permissions302may specify a time window for which the authorization is permitted, such as a length of time in which access is allowed, a start and end time during a specified date, and the like. The received permissions302may be stored locally in a database within memory of the service processor, in memory local to the computing system, or remote from the computing system.

The method ofFIG.3also includes receiving304, by the access control module105from a requestor, a request306to physically access one of the secured components of the computing system. Receiving304a request306to physically access one of the secured components of the computing system may be carried out by the access control module receiving the request from a requestor. The request may be in the form of a password, a key or key card, a biometric signature, and the like. Examples of a requestor may include a user or a service person, an administrator, or the like. The request may be a request to access one or more components of the computing system at once.

The method ofFIG.3also includes determining308, by the access control module105based on the permissions302, whether the requestor is authorized to physically access the secured component. Determining308whether the requestor is authorized to physically access the secured component may be carried out by the service processor or access control module and based on the received permissions and the received request. For example, the received request may be compared with the previously received permissions in order to determine whether the requestor is authorized to physically access the secured component.

The method ofFIG.3also includes, responsive to determining308that the requestor is authorized to physically access the secured component, granting312the requestor physical access to the secured component while prohibiting the requestor from physically accessing other secured components of the computing system. Granting312the requestor physical access to the secured component while prohibiting the requestor from physically accessing other secured components of the computing system may be carried out by unlocking or opening a component cover securing the component.

For further explanation,FIG.4sets forth a flow chart illustrating a further exemplary method of component access control according to embodiments of the present disclosure. The method ofFIG.4is similar to the method ofFIG.3in that the method ofFIG.4also includes; receiving300, by an access control module105, permissions302specifying authorization of physical access to one or more secured components of a computing system by one or more requestors; receiving304, by the access control module105from a requestor, a request306to physically access one of the secured components of the computing system; determining308, by the access control module105based on the permissions302, whether the requestor is authorized to physically access the secured component; and responsive to determining308that the requestor is authorized to physically access the secured component, granting312the requestor physical access to the secured component while prohibiting the requestor from physically accessing other secured components of the computing system.

The method ofFIG.4differs from the method ofFIG.3, however, in that the method ofFIG.4also includes receiving400, by the access control module105from a requestor, a biometric signature402of the requestor. Receiving400a biometric signature402of the requestor may be carried out by the access control module receiving the biometric signature402from the requestor along with the request. Examples of a biometric signature may include a fingerprint, a scan of an iris, a voice signature, an image of a face of the requestor for facial recognition, and the like. The biometric signature402may be received400via a biometric scanner210such as those described inFIG.2. The biometric signature402may be received at a location local to the component for which access is being requested, at a location local to the computing system, or remote from the computing system.

The method ofFIG.4may also include determining308, by the access control module105based on the permissions302and the biometric signature402, whether the requestor is authorized to physically access the secured component. Determining308whether the requestor is authorized to physically access the secured component may be carried out by the service processor or access control module and based on the received permissions302, the received request306, and the received biometric signature402. For example, the received biometric signature may be compared with the previously received permissions in order to identify the requestor and determine whether the identified requestor is authorized to physically access the secured component. For example, access to a component within the computing system may be granted to the requestor in response to determining that the received biometric signature identifies the requestor, according to the received permissions, as one that is authorized to access the component. The received permissions may specify a time window for which a requestor is allowed access, such as a length of time in which access is allowed, a start and end time during a specified date, and the like. For example, a requestor that requests access to a component outside a specified time window will not be granted access to the component. In such an example, the biometric signature402may expire, and therefore no longer be effective to grant access to the requestor, after a specified time according to the permissions.

For further explanation,FIG.5sets forth a flow chart illustrating a further exemplary method of component access control according to embodiments of the present disclosure. The method ofFIG.5is similar to the method ofFIG.3in that the method ofFIG.5also includes; receiving300, by an access control module105, permissions302specifying authorization of physical access to one or more secured components of a computing system by one or more requestors; receiving304, by the access control module105from a requestor, a request306to physically access one of the secured components of the computing system; determining308, by the access control module105based on the permissions302, whether the requestor is authorized to physically access the secured component; and responsive to determining308that the requestor is authorized to physically access the secured component, granting312the requestor physical access to the secured component while prohibiting the requestor from physically accessing other secured components of the computing system.

The method ofFIG.5differs from the method ofFIG.3, however, in that the method ofFIG.5also includes receiving500, by the access control module105, permissions502specifying authorization of logical access to one or more secured components of a computing system by one or more requestors. Receiving500permissions502specifying authorization of logical access to one or more secured components of a computing system by one or more requestors may be carried out by receiving, by the access control module, the permission from a system-wide management module. The permissions502may specify a recognized user or personnel via a password, biometric signature, or the like, and may further specify corresponding logical components for which the user is authorized to access. The permissions502may specify a time window for which the authorization is permitted, such as a length of time in which access is allowed, a start and end time during a specified date, and the like. The received permissions502may be stored locally in a database within memory of the service processor, in memory local to the computing system, or remote from the computing system. Examples of logical access include access to data, computing resources, and sub-systems within the computing system. Receiving the permissions502may occur concurrently or consecutively to receiving permissions302.

In view of the explanations set forth above, readers will recognize that the benefits of component access control according to embodiments of the present disclosure include:Increased security for computing systems at the component level due to authorization requirements for each component.Increased system reliability by reducing the likelihood of unauthorized access by service personnel, thereby decreasing threats or undesirable actions made to the computing system.Improved reliability by maintaining an auditable service log of access and service actions for the computing system at the component level.

It will be understood from the foregoing description that modifications and changes may be made in various embodiments of the present disclosure without departing from its true spirit. The descriptions in this specification are for purposes of illustration only and are not to be construed in a limiting sense. The scope of the present disclosure is limited only by the language of the following claims.