# US 12,182,422 B2 · Information handling system configured for authentication of memory expansion capabilities > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,182,422 B2 - Document ID: US12182422B2 - Status: Granted - Kind: B2 - Application number: 17/875,665 - Filed: 2022-07-28 - Published: 2024-02-01 - Granted: 2024-12-31 - Earliest claimed: 2022-07-22 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Milton Taveira; Isaac Q. Wang; Jordan Chin - Web page: https://patentgrep.com/patent/US12182422B2 ## CPC - G06F 3/0622: {in relation to access} - G06F 21/33: using certificates - G06F 3/0637: {Permissions} - G06F 3/0673: {Single storage device} - G06F 21/629: {to features or functions of an application} - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - G06F 21/85: interconnection devices, e.g. bus-connected or in-line devices - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract An information handling system includes a processor and a memory module. The memory module operates with a base set of functions and is configurable to operate with an expanded set of functions. The memory module includes a data storage location to store expansion capability certificates that specify subsets of the expanded set of functions to enable. The processor creates an expansion capability certificate that includes a first unique identifier of the information handling system, a second unique identifier of the memory module, and a subset of the expanded set of functions, and provides the expansion capability certificate to the memory module. The memory module receives the first expansion capability certificate, stores the expansion capability certificate to the data storage location, and enables the subset of the expanded set of functions in response to storing the expansion capability certificate. ## Claims ### Claim 1 An information handling system, comprising: a processor; and a memory that operates with a base set of functions and that is to operate with an expanded set of functions, the memory including a data storage location to store expansion capability certificates, the expansion capability certificates specifying subsets of the expanded set of functions to enable; wherein: the processor is configured to create a first expansion capability certificate that includes a first unique identifier of the information handling system, a second unique identifier of the memory, and a first subset of the expanded set of functions, and to provide the first expansion capability certificate to the memory; and the memory is configured to receive the first expansion capability certificate, to store the first expansion capability certificate to the data storage location, and to enable the first subset of the expanded set of functions in response to storing the first expansion capability certificate to the data storage location. ### Claim 2 (depends on 1) The information handling system of claim 1, wherein the processor is further configured to generate a first public/private key pair associated with a first license to enable the first subset of the expanded set of functions. ### Claim 3 (depends on 2) The information handling system of claim 2, wherein the first expansion capability certificate includes a hash of the first unique identifier, the second unique identifier, and a public key portion of the first public/private key pair. ### Claim 4 (depends on 3) The information handling system of claim 3, wherein the memory is further configured to receive the first unique identifier from the processor, and to authenticate that the memory is installed into the information handling system based upon the first unique identifier and the first expansion capability certificate. ### Claim 5 (depends on 2) The information handling system of claim 2, wherein the processor is further configured to receive a second license to enable a second subset of the expanded set of functions, to create a second expansion capability certificate that includes the first unique identifier, the second unique identifier, and the second subset of the expanded set of functions, and to provide the second expansion capability certificate to the memory. ### Claim 6 (depends on 5) The information handling system of claim 5, wherein the memory is further configured to receive the second expansion capability certificate, to store the second expansion capability to the data storage location, and to enable the second subset of the expanded set of functions in response to storing the second expansion capability certificate to the data storage location. ### Claim 7 (depends on 1) The information handling system of claim 1, wherein the processor is further configured to send an invalidate expansion capability command to the memory. ### Claim 8 (depends on 7) The information handling system of claim 7, wherein the memory is further configured to invalidate the first expansion capability certificate in response to receiving the invalidate expansion capability command. ### Claim 9 (depends on 8) The information handling system of claim 8, wherein the memory is further configured to disable the first subset of the expanded set of functions and to operate with only the base set of functions in further response to receiving the invalidate expansion capability command. ### Claim 10 (depends on 9) The information handling system of claim 9, wherein the processor includes a Baseboard Management Controller (BMC). ### Claim 11 A method, comprising: coupling a processor of an information handling system to a memory module of the information handling system, wherein the memory module operates with a base set of functions and is to operate with an expanded set of functions, the memory module including a data storage location to store expansion capability certificates, the expansion capability certificates specifying subsets of the expanded set of functions to enable; creating, by the processor, a first expansion capability certificate that includes a first unique identifier of the information handling system, a second unique identifier of the memory module, and a first subset of the expanded set of functions; providing the first expansion capability certificate to the memory module; receiving, by the memory module, the first expansion capability certificate; storing the first expansion capability certificate to the data storage location; and enabling the first subset of the expanded set of functions in response to storing the first expansion capability certificate to the data storage location. ### Claim 12 (depends on 11) The method of claim 11, further comprising generating a first public/private key pair associated with a first license to enable the first subset of the expanded set of functions. ### Claim 13 (depends on 12) The method of claim 12, wherein the first expansion capability certificate includes a hash of the first unique identifier, the second unique identifier, and a public key portion of the first public/private key pair. ### Claim 14 (depends on 13) The method of claim 13, further comprising: receiving, by the memory module, the first unique identifier from the processor; and authenticating that the memory module is installed into the information handling system based upon the first unique identifier and the first expansion capability certificate. ### Claim 15 (depends on 12) The method of claim 12, further comprising: receiving, by the processor, a second license to enable a second subset of the expanded set of functions; creating a second expansion capability certificate that includes the first unique identifier, the second unique identifier, and the second subset of the expanded set of functions; and providing the second expansion capability certificate to the memory module. ### Claim 16 (depends on 15) The method of claim 15, further comprising: receiving, by the memory module, the second expansion capability certificate; storing the second expansion capability to the data storage location; and enabling the second subset of the expanded set of functions in response to storing the second expansion capability certificate to the data storage location. ### Claim 17 (depends on 11) The method of claim 11, further comprising sending an invalidate expansion capability command to the memory module. ### Claim 18 (depends on 17) The method of claim 17, further comprising invalidating the first expansion capability certificate in response to receiving the invalidate expansion capability command. ### Claim 19 (depends on 18) The method of claim 18, further comprising: disabling the first subset of the expanded set of functions in further response to receiving the invalidate expansion capability command; and operating the memory module with only the base set of functions in further response to disabling the first subset of the expanded set of functions. ### Claim 20 An information handling system, comprising: a processor; and a first memory that operates with a first base set of functions and that is to operate with a first expanded set of functions, the first memory including a first data storage location to store first expansion capability certificates, the first expansion capability certificates specifying first subsets of the first expanded set of functions to enable; a second memory that operates with a second base set of functions and that is to operate with a second expanded set of functions, the second memory including a second data storage location to store second expansion capability certificates, the second expansion capability certificates specifying second subsets of the second expanded set of functions to enable; wherein: the processor is configured to create a first expansion capability certificate that includes a first unique identifier of the information handling system, a second unique identifier of the first memory, and a first subset of the first expanded set of functions, to provide the first expansion capability certificate to the first memory, to create a second expansion capability certificate that includes the first unique identifier, a second unique identifier of the second memory, and a second subset of the second expanded set of functions, and to provide the second expansion capability certificate to the second memory; the first memory is configured to receive the first expansion capability certificate, and to store the first expansion capability certificate to the first data storage location, and to enable the first subset of the first expanded set of functions in response to storing the first expansion capability certificate to the first data storage location; and the second memory is configured to receive the second expansion capability certificate, and to store the second expansion capability certificate to the second data storage location, and to enable the second subset of the second expanded set of functions in response to storing the second expansion capability certificate to the second data storage location.