# US 12,603,913 B2 · Selecting a transmission path for communicating data based on a classification for the data > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,603,913 B2 - Document ID: US12603913B2 - Status: Granted - Kind: B2 - Application number: 18/649,212 - Filed: 2024-04-29 - Published: 2025-10-30 - Granted: 2026-04-14 - Earliest claimed: 2024-04-29 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Abeye Teshome; Richard M. Tonry; Adolfo Sandor Montero; Bassem El-Azzami; Rajaravi Chandra Kollarapu; Vinodkumar Vasudev Ottar; Luis Antonio Valencia Reyes; Mohit Arora - Web page: https://patentgrep.com/patent/US12603913B2 ## CPC - H04L 63/1433: {Vulnerability analysis} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Methods and systems for managing operations of a data processing system are disclosed. To manage operations of the data processing system, data may be obtained to be provided to a remote entity. Using a classification schema, a classification may be obtained for the data. A transmission path for the data may be selected based on at least the classification and a rule set keyed to the classification. A channel between the data processing system and the remote entity may be identified for transmission of the data. In a first instance of the identifying in which the channel is an in-band communication channel, the data may be provided to the remote entity via the in-band communication channel. In a second instance of the identifying in which the channel is an out-of-band communication channel, the data may be provided to the remote entity via the out-of-band communication channel. ## Claims ### Claim 1 A method for managing operation of a data processing system, the method comprising: obtaining data to be provided to a remote entity; obtaining, using a classification schema, a classification for the data; selecting, based on at least the classification and a rule set keyed to the classification, a transmission path for the data; identifying, based on the transmission path, a channel between the data processing system and the remote entity for transmission of the data; in a first instance of the identifying in which the channel is an in-band communication channel used by hardware resources of the data processing system: providing, via the in-band communication channel, the data to the remote entity; and in a second instance of the identifying in which the channel is an out-of-band communication channel used by a management controller of the data processing system: providing, via the out-of-band communication channel, the data to the remote entity, the management controller being a first computing device that is physically installed in and operates independently from a second computing device configured as the data processing system, and the management controller not being one of the hardware resources of the data processing system. ### Claim 2 (depends on 1) The method of claim 1, wherein the classification takes into account, at least: a type of the data; a sensitivity level of the data; a geographic location of the data processing system; and a level of trust in the remote entity. ### Claim 3 (depends on 2) The method of claim 2, wherein the type of data comprises at least one type of data selected from a list consisting of: telemetry data; location data; security data; and user generated data. ### Claim 4 (depends on 2) The method of claim 2, wherein the sensitivity level of the data indicates a relative level of impact on processes performed by the data processing system should the data be intercepted by a malicious entity while the data is being provided to the remote entity. ### Claim 5 (depends on 2) The method of claim 2, wherein the level of trust in the remote entity indicates whether the remote entity will or will not act maliciously towards the data processing system, the level of trust being based on a trust grading system keyed to indicators of trust which the data processing system is able to evaluate. ### Claim 6 (depends on 1) The method of claim 1, wherein providing the data to the remote entity via the in-band communication channel comprises: obtaining, by an agent hosted by hardware resources of the data processing system, data generated by the hardware resources; initiating, by the agent, generation of control data for the data, the control data being based, at least, on the classification, and the control data being usable to discriminate the transmission path from other transmission paths; providing the data and the control data to a network module of the data processing system; and transmitting, by the network module, the data to the remote entity via the in-band communication channel based at least on the control data. ### Claim 7 (depends on 1) The method of claim 1, wherein the data processing system comprises a single network module that is shared by both the hardware resources and the management controller, the single network module being adapted to separately advertise network endpoints for the management controller and the hardware resources, and the network endpoints being usable by the remote entity to address first communications to the hardware resources using the in-band communication channel and second communications separately to the management controller using the out-of-band communication channel. ### Claim 8 (depends on 7) The method of claim 7, wherein the management controller and the single network module are on separate power domains from the hardware resources so that the management controller and the single network module are operable while the hardware resources are inoperable. ### Claim 9 (depends on 7) The method of claim 7, wherein the out-of-band communication channel runs through the single network module, and the in-band communication channel that services the hardware resources also runs through the single network module. ### Claim 10 (depends on 7) The method of claim 7, wherein the single network module hosts a transmission control protocol/internet protocol (TCP/IP) stack to facilitate network communications via the out-of-band communication channel. ### Claim 11 A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for managing operation of a data processing system, the operations comprising: obtaining data to be provided to a remote entity; obtaining, using a classification schema, a classification for the data; selecting, based on at least the classification and a rule set keyed to the classification, a transmission path for the data; identifying, based on the transmission path, a channel between the data processing system and the remote entity for transmission of the data; in a first instance of the identifying in which the channel is an in-band communication channel used by hardware resources of the data processing system: providing, via the in-band communication channel, the data to the remote entity; and in a second instance of the identifying in which the channel is an out-of-band communication channel used by a management controller of the data processing system: providing, via the out-of-band communication channel, the data to the remote entity, the management controller being a first computing device that is physically installed in and operates independently from a second computing device configured as the data processing system, and the management controller not being one of the hardware resources of the data processing system. ### Claim 12 (depends on 11) The non-transitory machine-readable medium of claim 11, wherein the classification takes into account, at least: a type of the data; a sensitivity level of the data; a geographic location of the data processing system; and a level of trust in the remote entity. ### Claim 13 (depends on 12) The non-transitory machine-readable medium of claim 12, wherein the type of data comprises at least one type of data selected from a list consisting of: telemetry data; location data; security data; and user generated data. ### Claim 14 (depends on 12) The non-transitory machine-readable medium of claim 12, wherein the sensitivity level of the data indicates a relative level of impact on processes performed by the data processing system should the data be intercepted by a malicious entity while the data is being provided to the remote entity. ### Claim 15 (depends on 12) The non-transitory machine-readable medium of claim 12, wherein the level of trust in the remote entity indicates whether the remote entity will or will not act maliciously towards the data processing system, the level of trust being based on a trust grading system keyed to indicators of trust which the data processing system is able to evaluate. ### Claim 16 A data processing system, comprising: a processor; and a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations for managing operation of the data processing system, the operations comprising: obtaining data to be provided to a remote entity; obtaining, using a classification schema, a classification for the data; selecting, based on at least the classification and a rule set keyed to the classification, a transmission path for the data; identifying, based on the transmission path, a channel between the data processing system and the remote entity for transmission of the data; in a first instance of the identifying in which the channel is an in-band communication channel used by hardware resources of the data processing system: providing, via the in-band communication channel, the data to the remote entity; and in a second instance of the identifying in which the channel is an out-of-band communication channel used by a management controller of the data processing system: providing, via the out-of-band communication channel, the data to the remote entity, the management controller being a first computing device that is physically installed in and operates independently from a second computing device configured as the data processing system, and the management controller not being one of the hardware resources of the data processing system. ### Claim 17 (depends on 16) The data processing system of claim 16, wherein the classification takes into account, at least: a type of the data; a sensitivity level of the data; a geographic location of the data processing system; and a level of trust in the remote entity. ### Claim 18 (depends on 17) The data processing system of claim 17, wherein the type of data comprises at least one type of data selected from a list consisting of: telemetry data; location data; security data; and user generated data. ### Claim 19 (depends on 17) The data processing system of claim 17, wherein the sensitivity level of the data indicates a relative level of impact on processes performed by the data processing system should the data be intercepted by a malicious entity while the data is being provided to the remote entity. ### Claim 20 (depends on 17) The data processing system of claim 17, wherein the level of trust in the remote entity indicates whether the remote entity will or will not act maliciously towards the data processing system, the level of trust being based on a trust grading system keyed to indicators of trust which the data processing system is able to evaluate.