-
公开(公告)号:US20240037216A1
公开(公告)日:2024-02-01
申请号:US17875067
申请日:2022-07-27
Applicant: DELL PRODUCTS L.P.
Inventor: Nicholas D. Grobelny , Sumanth Vidyadhara , Richard M. Tonry , Amy C. Nelson
CPC classification number: G06F21/53 , H04L9/3073 , H04L9/3268 , G06F21/572 , G06F2221/033
Abstract: Systems and methods are provided that may be implemented to provide a basic input/output system (BIOS) with the ability to authenticate and then execute one-time unique instructions that are previously left behind (i.e., stored) in public memory of an information handling system by a containerized computing environment session that is no longer executing on the information handling system. The disclosed systems and methods may be so implemented to share with the system BIOS privileged instructions to identify which executables are authorized for execution on a targeted information handling system. The privileged instructions may be previously created and optionally stored together with an executable code in system public memory, and these instructions may provide instructions on how to execute the executable code.
-
公开(公告)号:US11347519B2
公开(公告)日:2022-05-31
申请号:US16884985
申请日:2020-05-27
Applicant: Dell Products L.P.
Inventor: Amy C. Nelson , Richard M. Tonry
IPC: G06F9/00 , G06F9/4401 , G06F11/34 , G06F21/60 , G06F8/654
Abstract: An information handling system may include a processor and a basic input/output system (BIOS) comprising a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of the information handling system. The BIOS may be further configured to, during a boot of the information handling system, determine whether a BIOS configuration change has been made during a current boot session of the information handling system, and responsive to determining that a BIOS configuration change has been made during the current boot session, store an indication of the BIOS configuration change to a non-volatile memory.
-
3.
公开(公告)号:US20210243030A1
公开(公告)日:2021-08-05
申请号:US16777415
申请日:2020-01-30
Applicant: DELL PRODUCTS L.P.
Inventor: Charles D. Robison , Nicholas D. Grobelny , Amy C. Nelson
Abstract: Various embodiments of systems and methods are provided to bind a system identifier that uniquely identifies an information handling system (IHS) to the system platform, so that the identity of the IHS can be cryptographically verified. More specifically, the present disclosure provides methods to bind a unique system identifier to an IHS platform, and methods to cryptographically verify the identity of the IHS using the unique system identifier and a plurality of keys generated and stored with a Trusted Platform Module (TPM) of the IHS. Systems are provided herein to perform such methods. As such, the systems and methods disclosed herein enable system identity to be irrefutably verified, thereby preventing theft and misuse of system identity.
-
4.
公开(公告)号:US20250088848A1
公开(公告)日:2025-03-13
申请号:US18464538
申请日:2023-09-11
Applicant: Dell Products L.P.
Inventor: Amy C. Nelson , Eric Sendelbach , Derric Hobbs
IPC: H04W12/062 , H04W12/37 , H04W24/08
Abstract: A method for assuring a person wanting to access an information handling system is an authorized user comprises the information handling system comparing radio noise detected near the information handling system with radio noise detected near a mobile device associated with the authorized user. If the radio noise information matches, the person wanting to use the information handling system may be determined to be the authorized user. If the radio noise does not match, the information handling system may remain locked until the person can be verified as the authorized user.
-
5.
公开(公告)号:US11909882B2
公开(公告)日:2024-02-20
申请号:US16777415
申请日:2020-01-30
Applicant: DELL PRODUCTS L.P.
Inventor: Charles D. Robison , Nicholas D. Grobelny , Amy C. Nelson
CPC classification number: H04L9/3234 , H04L9/0897 , H04L9/3263 , H04L63/0442
Abstract: Various embodiments of systems and methods are provided to bind a system identifier that uniquely identifies an information handling system (IHS) to the system platform, so that the identity of the IHS can be cryptographically verified. More specifically, the present disclosure provides methods to bind a unique system identifier to an IHS platform, and methods to cryptographically verify the identity of the IHS using the unique system identifier and a plurality of keys generated and stored with a Trusted Platform Module (TPM) of the IHS. Systems are provided herein to perform such methods. As such, the systems and methods disclosed herein enable system identity to be irrefutably verified, thereby preventing theft and misuse of system identity.
-
6.
公开(公告)号:US12131140B2
公开(公告)日:2024-10-29
申请号:US17486791
申请日:2021-09-27
Applicant: DELL PRODUCTS L.P.
Inventor: Amy C. Nelson , Prasanth K S R , Vivekanandh Narayanasamy Rajagopalan
CPC classification number: G06F8/61 , G06F8/65 , G06F8/71 , G06F21/577
Abstract: Methods and systems are provided that may be implemented to methods and systems may be implemented to automatically identify types and status of vulnerabilities in identified software or firmware components (e.g., libraries), and then automatically deploy security vulnerability fixes (e.g., patches or updates) in these identified components across different affected software or firmware applications. In one example, the disclosed methods and systems may operate to dynamically and automatically aggregate identified third party software and/or firmware vulnerabilities into a centralized repository, and may be further implemented to automatically handle the roll out and deployment of vulnerability fixes to patch or update third party libraries to solve any security vulnerability reported on these third party libraries.
-
7.
公开(公告)号:US20230097733A1
公开(公告)日:2023-03-30
申请号:US17486791
申请日:2021-09-27
Applicant: DELL PRODUCTS L.P.
Inventor: Amy C. Nelson , Prasanth K S R , Vivekanandh Narayanasamy Rajagopalan
Abstract: Methods and systems are provided that may be implemented to methods and systems may be implemented to automatically identify types and status of vulnerabilities in identified software or firmware components (e.g., libraries), and then automatically deploy security vulnerability fixes (e.g., patches or updates) in these identified components across different affected software or firmware applications. In one example, the disclosed methods and systems may operate to dynamically and automatically aggregate identified third party software and/or firmware vulnerabilities into a centralized repository, and may be further implemented to automatically handle the roll out and deployment of vulnerability fixes to patch or update third party libraries to solve any security vulnerability reported on these third party libraries.
-
8.
公开(公告)号:US11604880B2
公开(公告)日:2023-03-14
申请号:US16800751
申请日:2020-02-25
Applicant: DELL PRODUCTS L.P.
Inventor: Charles D. Robison , Nicholas D. Grobelny , Amy C. Nelson
IPC: G06F21/57 , H04L9/32 , H04L9/40 , H04L9/08 , G06F9/4401
Abstract: The present disclosure provides various embodiments of systems and related methods to track and cryptographically verify system configuration changes. More specifically, systems and methods are disclosed herein to track an original system configuration of an information handling system (IHS) as the system was built by a manufacturing facility, and any system configuration changes that are made to the original system configuration after the IHS leaves the manufacturing facility. Once a user takes ownership of the IHS, systems and methods disclosed herein may be used to cryptographically verify a current system configuration of the IHS. In doing so, the present disclosure provides a way to authenticate or validate system configuration changes that may occur after the IHS leaves the manufacturing facility.
-
公开(公告)号:US11481497B2
公开(公告)日:2022-10-25
申请号:US17018416
申请日:2020-09-11
Applicant: Dell Products L.P.
Inventor: Anantha K. Boyapalle , Charles D. Robison , Amy C. Nelson
Abstract: A method may include, during execution of a basic input/output system comprising boot firmware configured to be the first code executed by the processor when the information handling system is booted and/or powered on and execute prior to execution of an operating system of the information handling system, executing a hardware attestation verification application configured to: (i) read a platform certificate comprising information associated with one or more information handling resources of the information handling system recorded during creation of the platform certificate; (ii) perform hardware attestation of the information handling system by comparing information associated with the one or more information handling resources and the information stored within the platform certificate; and (iii) generate a log indicative of the results of the hardware attestation.
-
10.
公开(公告)号:US20210266184A1
公开(公告)日:2021-08-26
申请号:US16800751
申请日:2020-02-25
Applicant: DELL PRODUCTS L.P.
Inventor: Charles D. Robison , Nicholas D. Grobelny , Amy C. Nelson
Abstract: The present disclosure provides various embodiments of systems and related methods to track and cryptographically verify system configuration changes. More specifically, systems and methods are disclosed herein to track an original system configuration of an information handling system (IHS) as the system was built by a manufacturing facility, and any system configuration changes that are made to the original system configuration after the IHS leaves the manufacturing facility. Once a user takes ownership of the IHS, systems and methods disclosed herein may be used to cryptographically verify a current system configuration of the IHS. In doing so, the present disclosure provides a way to authenticate or validate system configuration changes that may occur after the IHS leaves the manufacturing facility.
-
-
-
-
-
-
-
-
-