IP Library Granted Patent US 10,678,956
Granted Patent B2
US 10,678,956 · App. 16/017,036 · Granted Jun 9, 2020

Keyboard for provisioning security credentials

Inventors: Chandrasekhar Puthillathe (Bangalore, IN); Pravin Janakiram (Bangalore, IN)
Assignee: Dell Products, L.P.
G06F21/83G06F21/44G06F21/57
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,678,956
App. No.
16/017,036
Granted
Jun 9, 2020
Kind
B2
Abstract

A method and data processing device for detecting connection of a second device at an interface of an IHS. The method includes receiving a request to modify at least one secure functionality associated with the IHS, the request comprising identification input. The method includes generating security credentials that correspond to a predetermined level of security that is assigned to the identification input. The method includes triggering the service processor to establish a secure communication link to the second device for communicatively connecting a digitally generated keyboard. The method includes autonomously inputting the security credentials to the digitally generated keyboard. The method includes signaling to the digitally generated keyboard to write the security credentials to the second device for use to obtain access to the IHS according to the predetermined level of security. Based on the predetermined level of security, the method includes enabling management of certain functionalities of the IHS.

Claims (73)

1. A method for managing security credentials associated with a service processor of an information handling system (IHS), the method comprising:

detecting, by a service processor, connection of a second device at an input/output interface of the IHS;

receiving a request to modify at least one secure functionality associated with the IHS, the request comprising an identification input;

in response to receiving the identification input, generating, by the service processor, security credentials that correspond to a predetermined level of security that is assigned to the identification input;

triggering the service processor to establish a secure communication link to the second device for communicatively connecting a digitally generated keyboard for unidirectional input by the service processor;

autonomously inputting the security credentials to the digitally generated keyboard;

signaling to the digitally generated keyboard to write the security credentials to an open text editor of the second device for use to unlock access to the IHS according to the predetermined level of security; and

based on the predetermined level of security, enabling management of certain functionalities of the IHS by the second device.

2. The method of claim 1 , further comprising:

authenticating the identification input;

engendering the digitally generated keyboard as a functional component of the service processor;

utilizing the secure communication link, establishing a secure digital handshake with the second device as a prerequisite to communicatively connect the digitally generated keyboard to the second device; and

outputting the digitally generated keyboard to a display of the second device.

3. The method of claim 1 , further comprising:

establishing communication between the digitally generated keyboard and the open text editor on the second device;

detecting a write of the security credentials to the open text editor; and

in response to detecting the write of the security credentials to the open text editor, disconnecting the digitally generated keyboard from the second device.

4. The method of claim 1 , further comprising:

detecting a hardware connection to a specified input/output interface of the IHS, the specified input/output interface enabling direct access to the service processor;

concurrently receiving the identification input as a hardware trigger; and

in response to receiving the hardware trigger, determining, by the service processor, the predetermined level of security that corresponds to the hardware trigger.

5. The method of claim 1 , further comprising:

enabling selection of the security credentials from the open text editor to input to a software interface that is associated with the service processor for unlocking access to manage the certain functionalities of the IHS; and

invoking system changes to the IHS that correspond to management of the certain functionalities.

6. The method of claim 1 , further comprising:

establishing, by the service processor, a secure connection to the second device for managing the certain functionalities of the IHS using a select network interface that is specific to the service processor.

7. The method of claim 1 , further comprising:

in response to not detecting a writeable text editor, generating a prompt to open the writeable text editor on the second device;

outputting the prompt to the second device; and

in response to detecting opening of the writeable text editor, writing the security credentials to the writeable text editor.

8. The method of claim 7 , further comprising:

retrieving, from a command-line interface, information associated with the IHS; and

selectively outputting the information to the writeable text editor.

9. The method of claim 1 , wherein the input/output interface of the IHS is a micro universal serial bus port utilized for obtaining direct access to the service processor that is associated with the IHS.

10. The method of claim 1 , wherein the digitally generated keyboard is solely accessible for input by the service processor.

11. An information handling system (IHS), comprising:

a processor;

a service processor communicatively coupled to the processor; and

a memory system communicatively coupled to the service processor and having stored thereon a secure digital keyboard utility that executes on the service processor to enable the service processor to:

detect connection of a second device at an input/output interface of the IHS;

receive a request to modify at least one secure functionality associated with the IHS, the request comprising an identification input;

in response to receiving the identification input, generate security credentials that correspond to a predetermined level of security that is assigned to the identification input;

trigger the service processor to establish a secure unidirectional communication link to the second device for communicatively connecting a digitally generated keyboard for unidirectional input by the service processor;

autonomously input the security credentials to the digitally generated keyboard;

signal to the digitally generated keyboard to write the security credentials to an open text editor of the second device for use to unlock access to the IHS according to the predetermined level of security; and

based on the predetermined level of security, enable management of certain functionalities of the IHS by the second device.

12. The IHS of claim 11 , wherein the secure digital keyboard utility further enables the service processor to:

authenticate the identification input;

engender the digitally generated keyboard as a functional component of the service processor;

utilize the secure communication link to establish a secure digital handshake with the second device as a prerequisite to communicatively connecting the digitally generated keyboard to the second device; and

output the digitally generated keyboard to a display of the second device.

13. The IHS of claim 11 , wherein the secure digital keyboard utility further enables the service processor to:

establish communication between the digitally generated keyboard and the open text editor on the second device;

detect a write of the security credentials to the open text editor; and

in response to detecting the write of the security credentials to the open text editor, disconnect the digitally generated keyboard from the second device.

14. The IHS of claim 11 , wherein the secure digital keyboard utility further enables the service processor to:

detect a hardware connection to a specified input/output interface of the IHS, the specified input/output interface enabling direct access to the service processor;

concurrently receive the identification input as a hardware trigger; and

in response to receiving the hardware trigger, determine, by the service processor, the predetermined level of security that corresponds to the hardware trigger.

15. The IHS of claim 11 , wherein the secure digital keyboard utility further enables the service processor to:

enable selection of the security credentials from the open text editor to input to a software interface that is associated with the service processor for obtaining access to manage the certain functionalities of the IHS; and

invoke system changes to the IHS that correspond to management of the certain functionalities.

16. The IHS of claim 11 , wherein the secure digital keyboard utility further enables the service processor to:

establish, by the service processor, a secure connection to the second device for managing the certain functionalities of the IHS using a select network interface that is specific to the service processor.

17. The IHS of claim 11 , wherein the secure digital keyboard utility further enables the service processor to:

in response to not detecting a writeable text editor, generate a prompt to open the writeable text editor on the second device;

output the prompt to the second device; and

in response to detecting opening of the writeable text editor, write the security credentials to the writeable text editor.

18. The IHS of claim 17 , wherein the secure digital keyboard utility further enables the service processor to:

retrieve, from a command-line interface, information associated with the IHS; and

selectively output the information to the writeable text editor.

19. The IHS of claim 11 , wherein the input/output interface of the IHS is a micro universal serial bus port utilized for obtaining direct access to the service processor that is associated with the IHS.

20. The IHS of claim 11 , wherein the digitally generated keyboard is solely accessible for input by the service processor.

Assignments (8)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (047648/0422) Recorded May 20, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
Reel/Frame 060160/0862 →
RELEASE OF SECURITY INTEREST AT REEL 047648 FRAME 0346 Recorded Nov 2, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
Reel/Frame 058298/0510 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
SECURITY AGREEMENT Recorded Mar 21, 2019
From: CREDANT TECHNOLOGIES, INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 049452/0223 →
PATENT SECURITY AGREEMENT (NOTES) Recorded Oct 12, 2018
From: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
Reel/Frame 047648/0422 →
PATENT SECURITY AGREEMENT (CREDIT) Recorded Oct 12, 2018
From: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 047648/0346 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 25, 2018
From: PUTHILLATHE, CHANDRASEKHAR; JANAKIRAM, PRAVIN
To: DELL PRODUCTS, L.P.
Reel/Frame 046191/0163 →