Information handling system multi-security system management
Pre-boot authentication at an information handling system is selectively bypassed based upon conditions detected at the information handling system that indicate a trusted environment. A security monitor integrated with the pre-boot authentication system detects predetermined conditions that authorize bypassing of the pre-boot authentication, such as location, behavior or password type indications of a trusted environment. In one embodiment, a password is input with touches to match a timing and position passcode, such as by mimicking a musical rhythm.
1. An information handling system comprising:
a central processing unit operable to execute instructions to process information;
a memory interfaced with the central processing unit and operable to store the instructions and information;
persistent storage interfaced with the central processing unit and the memory, the persistent storage having non-transitory memory operable to store information, an operating system and an application;
a chipset having processors and non-transitory memory, the processors executing embedded code stored in the non-transitory memory;
a first security system operable to restrict access to the information unless first authentication information is input, the first security system comprising a pre-boot authentication system that restricts access to information before boot of the operating system;
a second security system operable to restrict access to the information unless second authentication information is input, the second security system comprising an operating system authentication system that restricts access to the information after boot of the operating system; and
a security monitor stored in the non-transitory memory and operable to selectively authorize end user access to the information based upon one or more predetermined conditions by selectively overriding restricting of access by one of the first or second security systems or by overriding restricting of access by both of the first and second security systems.
2. The information handling system of claim 1 further comprising a wireless network interface card operable to interface with one or more wireless networks, the security monitor applying wireless information associated with the one or more wireless networks to selectively authorize end user access without the authentication information for the pre-boot authentication system.
3. The system of claim 2 wherein the wireless information comprises a hash of wireless network identification information.
4. The system of claim 2 wherein the wireless information comprises an information handling system in wireless communication and having authentication from the end user.
5. The system of claim 2 wherein the security monitor selectively authorizes end user access based at least in part upon previous submission of pre-boot authentication by the end user within a predetermined time.
6. The system of claim 2 further comprising:
first and second authentication information types for the pre-boot authentication;
wherein the security monitor applies a first security timeout for the first authentication information type and a second security timeout for the second authentication information type.
7. The system of claim 6 wherein:
the first authentication information type comprises an identification card; and
the second authentication information type comprises a touch input pattern unique to the end user.
8. A method for securing an information handling system, the method comprising:
securing access to information stored in a persistent storage device with a first security system having first authentication information;
securing access to information processed by a central processing unit of the information handling system with a second security system having second authentication information;
selectively authorizing access to the information stored in the persistent storage device by overriding the first security system in response to detection and analysis of one or more predetermined conditions by the first security system;
selectively authorizing access to the information processed by the central processing unit by overriding the second security system in response to the detection and analysis of the one or more predetermined conditions; and
selectively authorizing access to both the information stored in the persistent storage device and the information processed by the central processing unit by overriding both the first security system and the second security system based upon detection and analysis of the one or more predetermined conditions.
9. The method of claim 8 further comprising:
detecting the first and second authentication information a predetermined number of times in association with an external condition determinable by the first security system;
wherein selectively authorizing access to information stored in the persistent storage device further comprises determining the external condition by the first security system.
10. The method of claim 9 wherein the external condition comprises predetermined wireless network interfaces transmitting within range of the information handling system.
11. The method of claim 9 wherein the external condition comprises a plurality of other identifiable information handling systems interfaced with the information handling system.
12. The method of claim 8 wherein selectively authorizing access to the information stored in the persistent storage device by overriding the first security system in response to detection and analysis of one or more predetermined conditions by the first security system further comprises:
securing the information handling system from access after detecting non-use for a predetermined amount of time; and
authorizing access to the information handling system without the first authentication information in response to a predetermined of plural types of the second authorization information input to the information handling system.
13. The method of claim 12 wherein the predetermined of plural types of the second authorization information input to the information handling system comprises a series of hand motions input at a horizontally-disposed display.
14. The method of claim 8 wherein selectively authorizing access to the information stored in the persistent storage device by overriding the first security system in response to detection and analysis of one or more predetermined conditions by the first security system further comprises:
tracking one or more behavior patterns with the first security system; and
bypassing input of the first authentication information for a predetermined time period after detection of the one or more predetermined conditions.
15. The method of claim 14 wherein the one or more behavior patterns comprises at least detected wireless networks, detected voice patterns, and detected accelerations within a predetermined time period.
16. The method of claim 14 wherein the one or more behavior patterns comprises at least detected peripheral devices and detected mobile devices within a predetermined time period.