Tracking detection for data processing systems using out-of-band methods
Methods and systems for managing operations of a data processing system are disclosed. To manage operations of the data processing system, a management controller of the data processing system may provide location data for the data processing system to a server via an out-of-band communication channel to identify whether the data processing system is being used for unauthorized tracking purposes. The management controller may then obtain an unauthorized tracking purpose analysis outcome determination via an out-of-band communication channel. If the unauthorized tracking purpose analysis outcome determination indicates that the data processing system is being used to perform unauthorized tracking, an action set may be performed to update an existing operating state of the data processing system to limit an ability of the data processing system to be used to perform the unauthorized tracking.
1 . A method for managing operation of a data processing system, the method comprising:
providing, by a management controller of the data processing system and via an out-of-band communication channel, location data for the data processing system to a server to enable the server to identify whether the data processing system is being used for unauthorized tracking, the location data indicating a geographical location of the data processing system and the unauthorized tracking being a tracking of a person without their consent;
obtaining, by the management controller and via the out-of-band communication channel, an unauthorized tracking purpose analysis outcome determination;
in a first instance of the obtaining, where the unauthorized tracking purpose analysis outcome determination indicates that the data processing system is being used to perform unauthorized tracking:
performing an action set to update an existing operating state of the data processing system to a new operating state of the data processing system to limit an ability of the data processing system to be used to perform the unauthorized tracking, wherein the action set comprises at least one action selected from a group of actions consisting of:
generating, by the data processing system, an auditory notification;
generating, by the data processing system, a visual notification;
locking the data processing system for use until a physical access of the data processing system is made;
disabling a portion of functionality of the data processing system until the physical access of the data processing system is made; and
making a report to an authority of the unauthorized tracking for which the data processing system has been used; and
in a second instance of the obtaining, where the unauthorized tracking purpose analysis outcome determination indicates that the data processing system is not being used to perform unauthorized tracking:
continuing operation of the data processing system in the existing operating state.
2 . The method of claim 1 , wherein the data processing system comprises a network module adapted to separately advertise network endpoints for the management controller and hardware resources of the data processing system, the network endpoints being usable by a server to address communications to the hardware resources using an in-band communication channel and the management controller using the out-of-band communication channel.
3 . The method of claim 2 , wherein the management controller and the network module are on separate power domains from the hardware resources so that the management controller and the network module are operable while the hardware resources are inoperable.
4 . The method of claim 2 , wherein the out-of-band communication channel runs through the network module, and an in-band communication channel that services the hardware resources also runs through the network module.
5 . The method of claim 2 , wherein the network module hosts a transmission control protocol/internet protocol (TCP/IP) stack to facilitate network communications via the out-of-band communication channel.
6 . The method of claim 2 , wherein the location data is generated by the network module.
7 . The method of claim 1 , wherein the unauthorized tracking purpose analysis outcome determination is based on:
the location data of the data processing system;
second location data for a device with a known geographical relationship to the data processing system; and
a device status report regarding the data processing system.
8 . The method of claim 7 , wherein the device status report for the data processing system indicates whether the data processing system has been physically accessed by an authorized user within a predetermined amount of time.
9 . The method of claim 8 , wherein the predetermined amount of time is measured with respect to a start or an end of a geographic relationships between the data processing system and the device.
10 . A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for managing operation of a data processing system, the operations comprising:
providing, by a management controller of the data processing system and via an out-of-band communication channel, location data for the data processing system to a server to enable the server to identify whether the data processing system is being used for unauthorized tracking, the location data indicating a geographical location of the data processing system and the unauthorized tracking being a tracking of a person without their consent;
obtaining, by the management controller and via the out-of-band communication channel, an unauthorized tracking purpose analysis outcome determination;
in a first instance of the obtaining, where the unauthorized tracking purpose analysis outcome determination indicates that the data processing system is be used to perform unauthorized tracking:
performing an action set to update an existing operating state of the data processing system to a new operating state of the data processing system to limit an ability of the data processing system to be used to perform the unauthorized tracking, wherein the action set comprises at least one action selected from a group of actions consisting of:
generating, by the data processing system, an auditory notification;
generating, by the data processing system, a visual notification;
locking the data processing system for use until a physical access of the data processing system is made;
disabling a portion of functionality of the data processing system until the physical access of the data processing system is made; and
making a report to an authority of the unauthorized tracking for which the data processing system has been used; and
in a second instance of the obtaining, where the unauthorized tracking purpose analysis outcome determination indicates that the data processing system is not being used to perform unauthorized tracking:
continuing operation of the data processing system in the existing operating state.
11 . The non-transitory machine-readable medium of claim 10 , wherein the data processing system comprises a network module adapted to separately advertise network endpoints for the management controller and hardware resources of the data processing system, the network endpoints being usable by a server to address communications to the hardware resources using an in-band communication channel and the management controller using the out-of-band communication channel.
12 . The non-transitory machine-readable medium of claim 11 , wherein the management controller and the network module are on separate power domains from the hardware resources so that the management controller and the network module are operable while the hardware resources are inoperable.
13 . The non-transitory machine-readable medium of claim 11 , wherein the out-of-band communication channel runs through the network module, and an in-band communication channel that services the hardware resources also runs through the network module.
14 . The non-transitory machine-readable medium of claim 11 , wherein the network module hosts a transmission control protocol/internet protocol (TCP/IP) stack to facilitate network communications via the out-of-band communication channel.
15 . A data processing system, comprising:
a processor; and
a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations for managing operation of a data processing system, the operations comprising:
providing, by a management controller of the data processing system and via an out-of-band communication channel, location data for the data processing system to a server to enable the server to identify whether the data processing system is being used for unauthorized tracking, the location data indicating a geographical location of the data processing system and the unauthorized tracking being a tracking of a person without their consent;
obtaining, by the management controller and via the out-of-band communication channel, an unauthorized tracking purpose analysis outcome determination;
in a first instance of the obtaining, where the unauthorized tracking purpose analysis outcome determination indicates that the data processing system is be used to perform unauthorized tracking:
performing an action set to update an existing operating state of the data processing system to a new operating state of the data processing system to limit an ability of the data processing system to be used to perform the unauthorized tracking, wherein the action set comprises at least one action selected from a group of actions consisting of:
generating, by the data processing system, an auditory notification;
generating, by the data processing system, a visual notification;
locking the data processing system for use until a physical access of the data processing system is made;
disabling a portion of functionality of the data processing system until the physical access of the data processing system is made; and
making a report to an authority of the unauthorized tracking for which the data processing system has been used; and
in a second instance of the obtaining, where the unauthorized tracking purpose analysis outcome determination indicates that the data processing system is not being used to perform unauthorized tracking:
continuing operation of the data processing system in the existing operating state.
16 . The data processing system of claim 15 , wherein the data processing system comprises a network module adapted to separately advertise network endpoints for the management controller and hardware resources of the data processing system, the network endpoints being usable by a server to address communications to the hardware resources using an in-band communication channel and the management controller using the out-of-band communication channel.
17 . The data processing system of claim 16 , wherein the management controller and the network module are on separate power domains from the hardware resources so that the management controller and the network module are operable while the hardware resources are inoperable.
18 . The data processing system of claim 16 , wherein the out-of-band communication channel runs through the network module, and an in-band communication channel that services the hardware resources also runs through the network module.
19 . The non-transitory machine-readable medium of claim 10 , wherein the unauthorized tracking purpose analysis outcome determination is based on:
the location data of the data processing system;
second location data for a device with a known geographical relationship to the data processing system; and
a device status report regarding the data processing system.
20 . The non-transitory machine-readable medium of claim 19 , wherein the device status report for the data processing system indicates whether the data processing system has been physically accessed by an authorized user within a predetermined amount of time.