IP Library › Granted Patent US 9,400,878
Granted Patent B2
US 9,400,878 · App. 14/075,151 · Granted Jul 26, 2016

Context analysis at an information handling system to manage authentication cycles

Inventors: Charles D. Robison (Buford, GA); Liam B. Quinn (Austin, TX); Rocco Ancona (Austin, TX)
Assignee: Dell Products L.P.
G06F21/31H04L63/0492H04L63/0853H04W4/02H04W12/02G06F2221/2137G06F2221/2139
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,400,878
App. No.
14/075,151
Filed
Nov 8, 2013
Granted
Jul 26, 2016
Kind
B2
Art Unit
2438
USPC
726/10
Abstract

Context captured with sensors of an information handling system is applied to selectively lock access to currently unlocked information, with conditions for locking access based upon the context. Nervous states enforce locking of selected information based upon the confidence of the security of the information under sensed external conditions. Increased sensitivity for locking access includes reduced timeouts to a lock command, increased response to sensed conditions, and more rapid response where unlocked access is to sensitive information.

Claims (41)

1. An information handling system comprising:

a housing;

a processing components disposed in the housing and operable to cooperate to process information;

one or more input/output (I/O) devices interfaced with the processing components and operable to accept touch inputs;

a display interfaced with the processing components and operable to present information as visual images;

one or more optical sensors operable to sense light for adapting brightness of the display;

one or more cameras operable to capture images proximate the display;

one or more wireless communication devices operable to communicate with wireless signals; and

a nervous state engine operable to execute on one or more of the processing components, the nervous state engine transitioning between plural nervous states, each nervous state disenabling access to currently authorized secure information with predetermined conditions defined by each nervous state, the nervous state engine transitioning between nervous states based upon a context sensed by one or more of the I/O devices, optical sensors, camera and wireless communication devices;

wherein the nervous states include at least a first user-present nervous state that transitions to a second user-absent nervous state, the first user-present nervous state having one or more indications that an authorized user is proximate the information handling system, the first user-present nervous state disenabling a first access if a first predetermined condition is detected, the second user-absent nervous state having one or more indications that an authorized user is not proximate the information handling system, the second user-absent state disenabling a second access if the first predetermined condition is detected; and

wherein the predetermined condition comprises a detection of discontinuity between the amount of light sensed by the one or more optical sensors and the one or more cameras, the second access comprising a complete lock of the information handling system.

2. The information handling system of claim 1 wherein the plural nervous states comprise a user absent nervous state having predetermined conditions of at least a lack of touch to the one or more I/O devices for a predetermined time, a lack of an image captured by the one or more optical sensors for a predetermined time and a lack of a wireless signal associated with the user, the nervous state engine disenabling all access to currently authorized secure information in response to the user absent state.

3. The information handling system of claim 1 wherein the plural nervous states comprise a user absent nervous state having predetermined conditions of at least a lack of an image captured by the one or more optical sensors, the nervous state engine immediately disenabling all access to currently authorized secure information in response to an acceleration detected by the information handling system when in the user absent nervous state.

4. The information handling system of claim 1 wherein the plural nervous states comprise a geographic state having predetermined conditions of at least a first wireless network detected followed by a second wireless network detected, the first wireless network included on a network list, the second wireless network absent from the network list, the nervous state engine immediately disenabling all network password accesses in response to detection of the second wireless network.

5. The information handling system of claim 4 wherein the geographic state further comprises a GPS position measured with a GPS receiver disposed in the housing, the predetermined conditions including the second wireless network being located outside a GPS boundary, the nervous state engine not disenabling all network password accesses if the second wireless network is within the GPS boundary.

6. The information handling system of claim 1 wherein the plural nervous states comprise a user absent nervous state having predetermined conditions of at least failure to detect a touch input for a predetermined time and detection of a wireless personal area network associated with a predetermined user, the nervous state continuing to allow access to predetermined authorized information if a first input is detected and the personal area network is detected, and disenabling predetermined authorized information in response to the first input if the wireless personal area network not detected.

7. The information handling system of claim 6 wherein the first input is detection of an acceleration by an accelerometer disposed in the housing.

8. The information handling system of claim 1 further comprising a movie player operable to present a movie, the nervous state engine continuing to allow presenting of the movie after disenabling access to currently authorized secure information.

9. A method for monitoring access at an information handling system, the method comprising:

authorizing access to information through the information handling system;

monitoring the information handling system to deauthorize at least a portion of the access through the information handling system in the event of a first one or more predetermined conditions;

detecting with a sensor integrated in the information handling system at least a first sensed condition indicating absence of the user from a predetermined proximity with the information handling system; and

in response to the detecting, altering the monitoring to deauthorize all access through the information handling system in the event of a detection of hot plug event at a port of an information handling system, the hot plug event associated with insertion of a portable storage device into the port.

10. The method of claim 9 wherein detecting with a sensor integrated in the information handling system at least a first sensed condition indicating absence of a user from a predetermined proximity with the information handling system further comprises:

deauthorizing at least a portion of the access after a predetermined time elapses at a timer without a user input;

sensing with a camera that captures images proximate the information handling system the lack of an end user in the image.

11. The method of claim 10 wherein the deauthorizing further comprises deauthorizing access to all password protected information.

12. The method of claim 11 wherein multimedia information currently presented at the information handling system continues being presented after the predetermined time.

13. The method of claim 9 wherein:

the at least a portion of the access deauthorized in the event of the first one or more predetermined conditions comprises access to network-based information; and

the at least a portion of the access deauthorized in the event of the second one or more predetermined conditions comprises access to locally-stored information.

14. The method of claim 13 wherein the sensor comprises a position sensor, the first one or more predetermined conditions comprise a first position and the second one or more predetermined conditions comprise a second position.

15. The method of claim 13 wherein the sensor comprises an RF sensor that senses a wireless interface.

16. A system for monitoring access to an information handling system, the system comprising:

plural sensors including at least an ambient light sensor for adjusting a display brightness and a camera for capturing images proximate the display, each sensor operable to sense one or more predetermined conditions at the information handling system; and

non-transitory memory storing a nervous state engine, the nervous state engine operable to execute on one or more of processing components disposed in the information handling system, the nervous state engine transitioning between plural nervous states, each nervous state disenabling access to at least a portion of currently authorized information upon detection of predetermined conditions defined by each nervous state, the nervous state engine transitioning between nervous states based upon a context sensed by one or more of the plural sensors;

wherein a first nervous state disenables a first access in response to a first predetermined condition sensed by the plural sensors and a second nervous state disenables all access in response to detection of discontinuity between the amount of light sensed by the ambient light sensor and the camera, the second nervous state entered upon detection of a user absence from a proximity of the information handling system.

17. The system of claim 16 wherein the nervous state engine transitions between first and second nervous states based upon an image sensed by a camera sensor integrated in the information handling system and disenables access in only one of the first and second nervous states based upon an acceleration detected by an accelerometer sensor integrated in the information handling system.

18. The system of claim 16 wherein the nervous state engine transitions between nervous states based upon an RF signal sensed by a wireless interface device integrated in the information handling system and disenables access in a first nervous state but not a second nervous state based upon an acceleration detected by an accelerometer sensor integrated in the information handling system.

19. The system of claim 18 wherein the RF signal comprises a Bluetooth signal from a predetermined device, the nervous state engine disenabling access if the acceleration is detected and the RF signal from the predetermined device is not detected.

20. The system of claim 18 wherein the RF signal comprises a wireless local area network, the nervous state engine disenabling access if the acceleration is detected unless the wireless local area network is on a safe list of wireless local area networks stored on the information handling system.

Assignments (15)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (045455/0001) Recorded May 20, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC); EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC
Reel/Frame 061753/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (040136/0001) Recorded Apr 26, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC); EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC
Reel/Frame 061324/0001 →
RELEASE OF SECURITY INTEREST Recorded Nov 3, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL, L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; WYSE TECHNOLOGY L.L.C.
Reel/Frame 058216/0001 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
SECURITY AGREEMENT Recorded Mar 21, 2019
From: CREDANT TECHNOLOGIES, INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 049452/0223 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 040134/0001 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 040136/0001 →
RELEASE OF SECURITY INTEREST OF REEL 032809 FRAME 0930 (TL) Recorded Sep 14, 2016
From: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
To: DELL SOFTWARE INC.; DELL PRODUCTS L.P.; CREDANT TECHNOLOGIES, INC.; COMPELLENT TECHNOLOGIES, INC.; FORCE10 NETWORKS, INC.; SECUREWORKS, INC.
Reel/Frame 040045/0255 →
RELEASE OF REEL 032810 FRAME 0206 (NOTE) Recorded Sep 14, 2016
From: BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
To: DELL SOFTWARE INC.; DELL PRODUCTS L.P.; CREDANT TECHNOLOGIES, INC.; COMPELLENT TECHNOLOGIES, INC.; FORCE10 NETWORKS, INC.; SECUREWORKS, INC.
Reel/Frame 040027/0204 →
RELEASE OF REEL 032809 FRAME 0887 (ABL) Recorded Sep 13, 2016
From: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
To: DELL SOFTWARE INC.; DELL PRODUCTS L.P.; CREDANT TECHNOLOGIES, INC.; COMPELLENT TECHNOLOGIES, INC.; FORCE10 NETWORKS, INC.; SECUREWORKS, INC.
Reel/Frame 040017/0314 →
SUPPLEMENT TO PATENT SECURITY AGREEMENT (TERM LOAN) Recorded May 1, 2014
From: COMPELLENT TECHNOLOGIES, INC.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; SECUREWORKS, INC.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 032809/0930 →
SUPPLEMENT TO PATENT SECURITY AGREEMENT (NOTES) Recorded May 1, 2014
From: COMPELLENT TECHNOLOGIES, INC.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; SECUREWORKS, INC.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 032810/0206 →
SUPPLEMENT TO PATENT SECURITY AGREEMENT (ABL) Recorded May 1, 2014
From: COMPELLENT TECHNOLOGIES, INC.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; SECUREWORKS, INC.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 032809/0887 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 8, 2013
From: ROBISON, CHARLES D.; QUINN, LIAM B.; ANCONA, ROCCO
To: DELL PRODUCTS L.P.
Reel/Frame 031567/0661 →
Continuity (1)
Related Publication 20150135298A1 · May 14, 2015