Dynamic platform reconfiguration by multi-tenant service providers

摘要

A manageability engine or adjunct processor on a computer platform may receive a request for activation and use of features embedded within that platform from a service provider authorized by the manageability engine's manufacturer. The manageability engine may initiate a request for authority through the service provider to a permit server. The permit server may provide, through the service provider, proof of the service provider's authority, together with a certificate identifying the service provider. Then the manageability engine may enable activation of the features on the platform coupled to the manageability engine, but only by the one particular service provider who has been authorized.

主权项

1. A method comprising:
receiving a request at a manageability engine in a platform from a service provider's remote server to activate a feature of the platform coupled to said manageability engine; in response to said request, requesting in a secure fashion, proof of the service provider's authority to modify the platform including a certificate from a permit server that this service provider is authorized by a manufacturer of the manageability engine to use the platform feature; checking the certificate to prevent another service provider from using the platform feature; sending a request for verification of the service provider's authority to use the feature of the platform coupled to a processor; verifying that the service provider is authorized by a manufacturer of the processor to use the feature; activating the feature only for use by the service provider; and requesting, said proof using a cryptographic scheme enabling remote authentication of hardware devices, while preserving a privacy of a device owner, and using an embedded private key within said manageability engine to indicate that the service provider is certified by the manufacturer of the manageability engine.