Method and apparatus for secure scan of data storage device from remote server

摘要

A method and device for providing a secure scan of a data storage device from a remote server are disclosed. In some embodiments, a computing device may include an in-band processor configured to execute an operating system and at least one host driver, communication circuitry configured to communicate with a remote server, and an out-of-band (OOB) processor capable of communicating with the remote server using the communication circuitry irrespective of the state of the operating system. The OOB processor may be configured to receive a block read request from the remote server, instruct the at least one host driver to send a storage command to a data storage device, receive data retrieved from the data storage device and authentication metadata generated by the data storage device, and transmit the data and the authentication metadata to the remote server.

主权项

1. A method comprising:
receiving a block read request from a remote server driver using an out-of-band (OOB) agent executing on a computing device, the OOB agent being capable of communicating with the remote server driver irrespective of the state of an operating system of the computing device; sending a storage command to a data storage device of the computing device using a host driver of the computing device, in response to receiving the block read request; receiving data retrieved from the data storage device and authentication metadata generated by the data storage device, in response to the storage command, the authentication metadata being generated as a function of the data retrieved; and verifying the data, with the OOB agent or the remote server driver, using the authentication metadata.