Method and system for secure network service
AssigneeDell Products L.P.
InventorJunaid Ghaffar
Life of this patent
Estimating the term…
Abstract
A system and method for providing a secure network service to an information handling system compares the detected network address of a service network location that calls a service on the information handling system with a list of authorized network addresses and denies access to confidential information of the information handling system if the detected network address is not authorized to obtain confidential information from the service. For instance, a service security module loaded on the information handling system detects the URL or domain of a service network location and ensures that the URL or domain is on an authorized list of addresses before service functions are allowed to access confidential information associated with the information handling system.
Claims20
A system for providing a secure network service to an information handling system, the system comprising:
- plural network locations, each network location having a network address and operable to call a service loaded on the information handling system;
- a service loaded on the information handling system, the service operable to access confidential information associated with the information handling system;
- a network service access list having a list of network addresses authorized to access the confidential information associated with the information handling system;
- and
- a service security module interfaced with the service and the network service access list, the service security module operable to detect the network address of a network location that calls the service and to compare the network address with the network service access list to limit access to the confidential information to the authorized network locations.
A method for providing a secure network service to an information handling system, the method comprising:
- defining a set of network locations by address that are authorized to access confidential information associated with the information handling system;
- initiating a service on the information, handling system from a network location having an associated address;
- detecting at the information handling system the address associated with network location that is initiating the service;
- calling a function of the service to access confidential information of the information handling system;
- and
- denying access by the service to the confidential information if the detected address is not in the set of network locations authorized to access the confidential information.
An information handling system comprising:
- a service module having a function operable to provide confidential information in response to a call from a service network location;
- a confidential information file storing the confidential information;
- a network service access list having one or more network location addresses that are authorized to access the confidential information;
- and
- a service security module interfaced with the service module and the network service access list, the service security module operable to detect the network address of a service network location that calls the service module and to confirm that the detected address is authorized to access the confidential information.
Dependencies are inferred from the claim text.