IP Library › Granted Patent US 9,858,421
Granted Patent B2
US 9,858,421 · App. 14/322,041 · Granted Jan 2, 2018

Systems and methods for detecting hardware tampering of information handling system hardware

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,858,421
App. No.
14/322,041
Granted
Jan 2, 2018
Kind
B2
Abstract

A method comprising may include storing, in a BIOS comprising a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of an information handling system, a hardware profile of the information handling system, the hardware profile comprising identifying information of one or more information handling resources of the information handling system recorded during creation of the hardware profile. The method may also include, during a boot of the information handling system in a hardware verification mode, creating a new hardware profile comprising identifying information of the one or more information handling resources, comparing the new hardware profile to the hardware profile stored in the BIOS, and if the new hardware profile differs from the hardware profile stored in the BIOS, issuing an alert indicating potential tampering with hardware of the information handling system after creation of the profile.

Claims (37)

1. An information handling system comprising:

a processor; and

a basic input/output system (BIOS) comprising a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of the information handling system, wherein the BIOS is further configured to:

store, signed with a private key, a hardware profile of the information handling system, the hardware profile comprising identifying information of one or more information handling resources of the information handling system recorded during creation of the hardware profile; and

during a boot of the information handling system in a hardware verification mode:

create a new hardware profile comprising identifying information of the one or more information handling resources;

compare the new hardware profile to the hardware profile stored in the BIOS; and

if the new hardware profile differs from the hardware profile stored in the BIOS, issue an alert indicating potential tampering with hardware of the information handling system after creation of the hardware profile;

wherein at least a portion of the identifying information in the hardware profile is accessible by an intended end user of the information handling system for comparison to known information to determine if the information handling system was free of hardware tampering after creation of the hardware profile.

2. The information handling system of claim 1 , wherein the private key is of a manufacturer of the information handling system.

3. The information handling system of claim 1 , wherein the hardware profile is stored in a manner such that it is retrievable by the intended end user and verifiable via a public key corresponding to the private key in order to determine if the information handling system was free of hardware tampering after creation of the hardware profile.

4. The information handling system of claim 1 , wherein the boot in the hardware verification mode is configured to occur only a first time that the information handling system is booted after delivery to the intended end user.

5. The information handling system of claim 1 , wherein the hardware profile is created by a manufacturer of the information handling system prior to delivery of the information handling system to the intended end user.

6. A method comprising:

storing, signed with a private key, in a basic input/output system (BIOS) comprising a program of instructions executable by a processor and configured to cause the processor to initialize one or more information handling resources of an information handling system, a hardware profile of the information handling system, the hardware profile comprising identifying information of one or more information handling resources of the information handling system recorded during creation of the hardware profile; and

during a boot of the information handling system in a hardware verification mode:

creating a new hardware profile comprising identifying information of the one or more information handling resources;

comparing the new hardware profile to the hardware profile stored in the BIOS; and

if the new hardware profile differs from the hardware profile stored in the BIOS, issuing an alert indicating potential tampering with hardware of the information handling system after creation of the hardware profile;

wherein at least a portion of the identifying information in the hardware profile is accessible by an intended end user of the information handling system for comparison to known information to determine if the information handling system was free of hardware tampering after creation of the hardware profile.

7. The method of claim 6 , wherein the private key is of a manufacturer of the information handling system.

8. The method of claim 6 , further comprising storing the hardware profile in a manner such that it is retrievable by the intended end user and verifiable via a public key corresponding to the private key in order to determine if the information handling system was free of hardware tampering after creation of the hardware profile.

9. The method of claim 6 , wherein the boot in the hardware verification mode occurs only a first time that the information handling system is booted after delivery to the intended end user.

10. The method of claim 6 , wherein the hardware profile is created by a manufacturer of the information handling system prior to delivery of the information handling system to the intended end user.

11. An article of manufacture comprising:

a non-transitory computer readable medium; and

computer-executable instructions carried on the computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to:

store, signed with a private key, in a basic input/output system (BIOS) comprising a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of an information handling system, a hardware profile of the information handling system, the hardware profile comprising identifying information of one or more information handling resources of the information handling system recorded during creation of the hardware profile; and

during a boot of the information handling system in a hardware verification mode:

create a new hardware profile comprising identifying information of the one or more information handling resources;

compare the new hardware profile to the hardware profile stored in the BIOS; and

if the new hardware profile differs from the hardware profile stored in the BIOS, issue an alert indicating potential tampering with hardware of the information handling system after creation of the hardware profile;

wherein at least a portion of the identifying information in the hardware profile is accessible by an intended end user of the information handling system for comparison to known information to determine if the information handling system was free of hardware tampering after creation of the hardware profile.

12. The article of claim 11 , wherein the private key is of a manufacturer of the information handling system.

13. The article of claim 11 , the instructions for further causing the processor to store the signed hardware profile in a manner such that it is retrievable by the intended end user and verifiable via a public key corresponding to the private key in order to determine if the information handling system was free of hardware tampering after creation of the hardware profile.

14. The article of claim 11 , wherein the boot in the hardware verification mode is configured to be initiated based on a command received from the intended end user.

15. The article of claim 11 , wherein the hardware profile is created by a manufacturer of the information handling system prior to delivery of the information handling system to the intended end user.

Assignments (15)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (045455/0001) Recorded May 20, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC); EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC
Reel/Frame 061753/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (040136/0001) Recorded Apr 26, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC); EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC
Reel/Frame 061324/0001 →
RELEASE OF SECURITY INTEREST Recorded Nov 3, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL, L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; WYSE TECHNOLOGY L.L.C.
Reel/Frame 058216/0001 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
SECURITY AGREEMENT Recorded Mar 21, 2019
From: CREDANT TECHNOLOGIES, INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 049452/0223 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 040134/0001 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 040136/0001 →
RELEASE OF REEL 033625 FRAME 0688 (TL) Recorded Sep 14, 2016
From: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
To: DELL SOFTWARE INC.; DELL PRODUCTS L.P.; COMPELLENT TECHNOLOGIES, INC.; SECUREWORKS, INC.
Reel/Frame 040027/0757 →
RELEASE OF REEL 033625 FRAME 0748 (NOTE) Recorded Sep 14, 2016
From: BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
To: DELL SOFTWARE INC.; DELL PRODUCTS L.P.; COMPELLENT TECHNOLOGIES, INC.; SECUREWORKS, INC.
Reel/Frame 040027/0050 →
RELEASE OF REEL 033625 FRAME 0711 (ABL) Recorded Sep 13, 2016
From: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
To: DELL SOFTWARE INC.; DELL PRODUCTS L.P.; COMPELLENT TECHNOLOGIES, INC.; SECUREWORKS, INC.
Reel/Frame 040016/0903 →
SUPPLEMENT TO PATENT SECURITY AGREEMENT (NOTES) Recorded Aug 27, 2014
From: COMPELLENT TECHNOLOGIES, INC.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; SECUREWORKS, INC.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 033625/0748 →
SUPPLEMENT TO PATENT SECURITY AGREEMENT (ABL) Recorded Aug 27, 2014
From: COMPELLENT TECHNOLOGIES, INC.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; SECUREWORKS, INC.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 033625/0711 →
SUPPLEMENT TO PATENT SECURITY AGREEMENT (TERM LOAN) Recorded Aug 27, 2014
From: COMPELLENT TECHNOLOGIES, INC.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; SECUREWORKS, INC.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 033625/0688 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 2, 2014
From: GILLESPIE, KURT D.; HUDGINS, GREGORY S.; SMITH, DAVID WADE
To: DELL PRODUCTS L.P.
Reel/Frame 033230/0487 →