Information Handling System Secret Protection Across Multiple Memory Devices
AssigneeDell Products L.P.
InventorsKurt D. Gillespie, Jonathan B. Barkelew
Life of this patent
Estimating the term…
Abstract
Information handling system secret protection is enhanced by encrypting secrets into a common file and breaking up the encrypted file into plural portions stored at plural memory devices, such as across plural DIMMs disposed in the information handling system. In one embodiment, a decryption key to decrypt the encrypted file is broken into plural portions stored at the plural memory devices. Upon detection of a predetermined security factor, such as an indication of removal of a the encrypted file is removed from the plural portions.
Claims20
An information handling system comprising:
- a chassis;
- a processor disposed in the chassis and operable to process information;
- memory disposed in the chassis and interfaced with the processor, the memory operable to store the information, the memory having at least first and second separate memory devices;
- a memory controller interfaced with the memory and operable to manage locations in the memory devices to store the information;
- and
- a security module interfaced with the memory controller, the security module operable to identify sensitive information based upon predetermined conditions and to locate first and second portions of the sensitive information on the first and second memory devices.
A method for information handling system secret protection across plural memory devices, the method comprising:
- defining sensitive information stored in memory of an information handling system;
- storing a first portion of the sensitive information in a first memory device of the information handling system;
- storing a second portion of the sensitive information in a second memory device of the information handling system;
- detecting a predetermined condition associated with the first memory device;
- and
- in response to the detecting, deleting the second portion from the second memory device.
The method of claim 17 wherein the predetermined condition comprises a temperature threshold.
A system for secret protection across plural RAM memory modules of an information handling system, the system comprising:
- a memory controller operable to map information for storage on the plural RAM memory modules;
- and
- a security module interfaced with the memory controller, the security module operable to map plural portions of predetermined sensitive information for storage across the plural RAM memory modules and to delete the plural portions upon detection of a predetermined security factor.
Dependencies are inferred from the claim text.