# US 2014/0195799 A1 · Targeted security policy override > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0195799 A1 - Document ID: US20140195799A1 - Status: Published application - Kind: A1 - Application number: 13/736,019 - Filed: 2013-01-07 - Published: 2014-07-10 - Earliest claimed: 2013-01-07 - Assignees: Lenovo (Singapore) Pte. Ltd. - Applicants: Lenovo (Singapore) Pte. Ltd. - Inventors: David Edward Erickson; Randall Scott Springfield - Web page: https://patentgrep.com/patent/US20140195799A1 ## CPC - G06F 21/73: by creating or determining hardware identification, e.g. serial numbers - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - G06F 2221/2115: Third party - H04L 9/0866: {involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics} - H04L 9/0869: {involving random numbers or seeds} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An aspect provides a method, including: gathering, with an information handling device, client system identification data of a client system; providing, with the information handling device, the client system with at least one cryptographic key; transmitting, with the information handling device, the client system identification data and a request for security policy override to a third party; receiving, with the information handling device, encrypted approval data from the third party; and transmitting, with the information handling device, encrypted approval data to the client system. Other aspects are described and claimed. ## Claims ### Claim 1 A method, comprising: gathering, with an information handling device, client system identification data of a client system; providing, with the information handling device, the client system with at least one cryptographic key; transmitting, with the information handling device, the client system identification data and a request for security policy override to a third party; receiving, with the information handling device, encrypted approval data from the third party; and transmitting, with the information handling device, encrypted approval data to the client system. ### Claim 2 (depends on 1) The method of claim 1, wherein the at least one cryptographic key provides the client system a decryption capability for decrypting the encrypted approval data. ### Claim 3 (depends on 1) The method of claim 1, wherein the encrypted approval data further comprises security policy attributes indicative of permitted security policy changes. ### Claim 4 (depends on 1) The method of claim 1, wherein the encrypted approval data is encrypted by the third party using the at least one cryptographic key provided to the client system. ### Claim 5 (depends on 4) The method of claim 4, wherein the encrypted approval data is encrypted by the third party using at least one additional key. ### Claim 6 (depends on 5) The method of claim 5, wherein the at least one additional key is a private key of a public/private key pair. ### Claim 7 (depends on 1) The method of claim 1, wherein the client system identification data comprises a client system hardware identification. ### Claim 8 (depends on 7) The method of claim 7, wherein the client system hardware identification comprises one or more of a machine type, a model number and a serial number. ### Claim 9 (depends on 1) The method of claim 1, wherein the client system comprises an enterprise computing system, wherein the information handling device comprises an enterprise administrative system, and wherein the third party comprises a third party system operated by a manufacturer of the client system. ### Claim 10 An information handling device, comprising: one or more processors; and a memory operatively coupled to the one or more processors that stores instructions executable by the one or more processors to perform acts comprising: gathering client system identification data of a client system; providing the client system with at least one cryptographic key; transmitting the client system identification data and a request for security policy override to a third party; receiving encrypted approval data from the third party; and transmitting encrypted approval data to the client system. ### Claim 11 (depends on 10) The information handling device of claim 10, wherein the at least one cryptographic key provides the client system a decryption capability for decrypting the encrypted approval data. ### Claim 12 (depends on 10) The information handling device of claim 10, wherein the encrypted approval data further comprises security policy attributes indicative of permitted security policy changes. ### Claim 13 (depends on 10) The information handling device of claim 10, wherein the encrypted approval data is encrypted by the third party using the at least one cryptographic key provided to the client system. ### Claim 14 (depends on 13) The information handling device of claim 13, wherein the encrypted approval data is encrypted by the third party using at least one additional key. ### Claim 15 (depends on 14) The information handling device of claim 14, wherein the at least one additional key is a private key of a public/private key pair. ### Claim 16 (depends on 10) The information handling device of claim 10, wherein the client system identification data comprises a client system hardware identification. ### Claim 17 (depends on 16) The information handling device of claim 16, wherein the client system hardware identification comprises one or more of a machine type, a model number and a serial number. ### Claim 18 (depends on 10) The information handling device of claim 10, wherein the client system comprises an enterprise computing system, wherein the information handling device comprises an enterprise administrative system, and wherein the third party comprises a third party system operated by a manufacturer of the client system. ### Claim 19 A program product, comprising: a storage medium having computer program code embodied therewith, the computer program code comprising: computer program code configured to gather, with an information handling device, client system identification data of a client system; computer program code configured to provide, with the information handling device, the client system with at least one cryptographic key; computer program code configured to transmit, with the information handling device, the client system identification data and a request for security policy override to a third party; computer program code configured to receive, with the information handling device, encrypted approval data from the third party; and computer program code configured to transmit, with the information handling device, encrypted approval data to the client system. ### Claim 20 (depends on 1) The method of claim 1, wherein the encrypted approval data from the third party further comprises one or more added attributes such that only targeted areas of a BIOS of the client system can be overridden.