IP Library › Granted Patent US 12664239
Granted Patent B2
US 12664239 · App. 17/973,797 · Granted Jun 23, 2026

Dynamic transitioning among device security states based on server availability

Inventors: Mukund P. Khatri (Austin, TX); Senthilkumar Ponnuswamy (San Jose, CA); Eugene David Cho (Austin, TX)
Assignee: Dell Products L.P.
G06F21/31H04L69/40G06F11/3055
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12664239
App. No.
17/973,797
Granted
Jun 23, 2026
Kind
B2
Abstract

Techniques are provided for dynamic transitioning among device security states based on server availability. One method comprises configuring a processing device to be in a first one of multiple security states, wherein the first security state comprises user authentication factors administered by one or more servers; transitioning the processing device to a different security state, in response to detecting a change in an availability status of a given one of the servers, wherein the different security state comprises a different user authentication factor administered by a different server than the given server; and initiating processing of a user request to perform a privileged action based on a result of an authentication performed using the different user authentication factor of the different security state. The first state and the different state may be associated with a different stage of a product lifecycle and/or with a different designated threat level.

Claims (32)

1 . A method, comprising:

configuring at least one processing device comprising a processor coupled to a memory to be in a first one of a plurality of security states, wherein the first security state defines one or more user authentication factors evaluated at least in part by one or more server devices that authenticate one or more users, wherein the one or more server devices are distinct from the at least one processing device;

automatically transitioning, by the at least one processing device, the at least one processing device to a different security state of the plurality of security states, in response to detecting, by the at least one processing device, an unavailability status of at least a given server device of the one or more server devices, wherein the different security state defines at least one different user authentication factor to be evaluated at least in part by at least one different server device, of the one or more server devices, wherein the at least one different user authentication factor is different than each of the one or more user authentication factors evaluated by the at least one given server device, wherein the at least one different server device is available at a time of the automatic transition and authenticates one or more users using the at least one different user authentication factor, wherein the one or more user authentication factors and the at least one different user authentication factor are distinct from the one or more server devices; and

initiating, by the at least one processing device, a processing of at least one user request, from a given user of the one or more users, to perform at least one automated action based at least in part on a result of an authentication performed using the at least one different user authentication factor of the different security state, wherein the given user is authenticated in response to a successful evaluation of the at least one different user authentication factor by the at least one different server device;

wherein the method is performed by the at least one processing device.

2 . The method of claim 1 , wherein at least one of the first security state and the different security state comprises different authentication factors for two or more different classes of users.

3 . The method of claim 2 , wherein at least one of the first security state and the different security state comprises a respective specification of authentication factors and user privileges for each of the two or more different classes of users.

4 . The method of claim 1 , wherein the first security state and the different security state are each associated with a different stage of a product lifecycle associated with the at least one processing device.

5 . The method of claim 1 , wherein the first security state and the different security state are each associated with a different designated threat level associated with the at least one processing device.

6 . The method of claim 1 , further comprising receiving, by a management controller, a specification of the respective user authentication factors of at least one of the first security state and the different security state.

7 . The method of claim 1 , wherein at least one of the first security state and the different security state comprises at least one authentication factor based at least in part on a physical presence of a user in proximity to a designated authentication server.

8 . An apparatus comprising:

at least one processing device comprising a processor coupled to a memory;

the at least one processing device being configured to implement the following steps:

configuring at least one processing device comprising a processor coupled to a memory to be in a first one of a plurality of security states, wherein the first security state defines one or more user authentication factors evaluated at least in part by one or more server devices that authenticate one or more users, wherein the one or more server devices are distinct from the at least one processing device;

automatically transitioning, by the at least one processing device, the at least one processing device to a different security state of the plurality of security states, in response to detecting, by the at least one processing device, an unavailability status of at least a given server device of the one or more server devices, wherein the different security state defines at least one different user authentication factor to be evaluated at least in part by at least one different server device, of the one or more server devices, wherein the at least one different user authentication factor is different than each of the one or more user authentication factors evaluated by the at least one given server device, wherein the at least one different server device is available at a time of the automatic transition and authenticates one or more users using the at least one different user authentication factor, wherein the one or more user authentication factors and the at least one different user authentication factor are distinct from the one or more server devices; and

initiating, by the at least one processing device, a processing of at least one user request, from a given user of the one or more users, to perform at least one automated action based at least in part on a result of an authentication performed using the at least one different user authentication factor of the different security state, wherein the given user is authenticated in response to a successful evaluation of the at least one different user authentication factor by the at least one different server device.

9 . The apparatus of claim 8 , wherein at least one of the first security state and the different security state comprises different authentication factors for two or more different classes of users.

10 . The apparatus of claim 9 , wherein the at least one of the first security state and the different security state comprises a respective specification of authentication factors and user privileges for each of the two or more different classes of users.

11 . The apparatus of claim 8 , wherein the first security state and the different security state are each associated with a different stage of a product lifecycle associated with the at least one processing device.

12 . The apparatus of claim 8 , wherein the first security state and the different security state are each associated with a different designated threat level associated with the at least one processing device.

13 . The apparatus of claim 8 , further comprising receiving, by a management controller, a specification of the respective user authentication factors of at least one of the first security state and the different security state.

14 . The apparatus of claim 8 , wherein at least one of the first security state and the different security state comprises at least one authentication factor based at least in part on a physical presence of a user in proximity to a designated authentication server.

15 . A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device to perform the following steps:

configuring at least one processing device comprising a processor coupled to a memory to be in a first one of a plurality of security states, wherein the first security state defines one or more user authentication factors evaluated at least in part by one or more server devices that authenticate one or more users, wherein the one or more server devices are distinct from the at least one processing device;

automatically transitioning, by the at least one processing device, the at least one processing device to a different security state of the plurality of security states, in response to detecting, by the at least one processing device, an unavailability status of at least a given server device of the one or more server devices, wherein the different security state defines at least one different user authentication factor to be evaluated at least in part by at least one different server device, of the one or more server devices, wherein the at least one different user authentication factor is different than each of the one or more user authentication factors evaluated by the at least one given server device, wherein the at least one different server device is available at a time of the automatic transition and authenticates one or more users using the at least one different user authentication factor, wherein the one or more user authentication factors and the at least one different user authentication factor are distinct from the one or more server devices; and

initiating, by the at least one processing device, a processing of at least one user request, from a given user of the one or more users, to perform at least one automated action based at least in part on a result of an authentication performed using the at least one different user authentication factor of the different security state, wherein the given user is authenticated in response to a successful evaluation of the at least one different user authentication factor by the at least one different server device.

16 . The non-transitory processor-readable storage medium of claim 15 , wherein at least one of the first security state and the different security state comprises different authentication factors for two or more different classes of users.

17 . The non-transitory processor-readable storage medium of claim 16 , wherein the at least one of the first security state and the different security state comprises a respective specification of authentication factors and user privileges for each of the two or more different classes of users.

18 . The non-transitory processor-readable storage medium of claim 15 , wherein the first security state and the different security state are each associated with one or more of a different stage of a product lifecycle associated with the at least one processing device and a different designated threat level associated with the at least one processing device.

19 . The non-transitory processor-readable storage medium of claim 15 , further comprising receiving, by a management controller, a specification of the respective user authentication factors of at least one of the first security state and the different security state.

20 . The non-transitory processor-readable storage medium of claim 15 , wherein at least one of the first security state and the different security state comprises at least one authentication factor based at least in part on a physical presence of a user in proximity to a designated authentication server.