# US 2018/0322271 A1 · Information Handling System Multi-Security System Management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0322271 A1 - Document ID: US20180322271A1 - Status: Published application - Kind: A1 - Application number: 15/584,192 - Filed: 2017-05-02 - Published: 2018-11-08 - Earliest claimed: 2017-05-02 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Mohit Arora; Fernando L. Guerrero; Vani Budhati; Danilo O. Tan; Hariprasad J. Iyer; Sathish K. Bikumala - Web page: https://patentgrep.com/patent/US20180322271A1 ## CPC - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/31: User authentication - G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour} - G06F 21/575: {Secure boot} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications} - H04W 12/084: using delegated authorisation, e.g. open authorisation [OAuth] protocol - H04W 12/73: Access point logical identity - G06F 2221/2139: Recurrent verification - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Pre-boot authentication at an information handling system is selectively bypassed based upon conditions detected at the information handling system that indicate a trusted environment. A security monitor integrated with the pre-boot authentication system detects predetermined conditions that authorize bypassing of the pre-boot authentication, such as location, behavior or password type indications of a trusted environment. In one embodiment, a password is input with touches to match a timing and position passcode, such as by mimicking a musical rhythm. ## Claims ### Claim 1 An information handling system comprising: a central processing unit operable to execute instructions to process information; a memory interfaced with the central processing unit and operable to store the instructions and information; persistent storage interfaced with the central processing unit and the memory, the persistent storage having non-transitory memory operable to store information, an operating system and an application; a chipset having processors and non-transitory memory, the processors executing embedded code stored in the non-transitory memory; a first and second security systems operable to independently restrict access to the information dependent upon on authentication information input by a user; and a security monitor stored in the non-transitory memory and operable to selectively authorize end user access without authentication information for one of the first and second security systems. ### Claim 2 (depends on 1) The information handling system of claim 1 wherein: the first security system comprises a pre-boot authentication system that applies authentication information before boot of the operating system; and the second security system comprises an operating system authentication system that applies authentication information to access information through the operating system. ### Claim 3 (depends on 2) The information handling system of claim 2 wherein the security monitor selectively authorizes end user access without authentication information for the pre-boot authentication system. ### Claim 4 (depends on 3) The information handling system of claim 3 further comprising a wireless network interface card operable to interface with one or more wireless networks, the security monitor applying wireless information associated with the one or more wireless networks to selectively authorize end user access without the authentication information for the pre-boot authentication system. ### Claim 5 (depends on 4) The system of claim 4 wherein the wireless information comprises a hash of wireless network identification information. ### Claim 6 (depends on 4) The system of claim 4 wherein the wireless information comprises an information handling system in wireless communication and having authentication from the end user. ### Claim 7 (depends on 3) The system of claim 3 wherein the security monitor selectively authorizes end user access based at least in part upon previous submission of pre-boot authentication by the end user within a predetermined time. ### Claim 8 (depends on 3) The system of claim 3 further comprising: first and second authentication information types for the pre-boot authentication; wherein the security monitor applies a first security timeout for the first authentication information type and a second security timeout for the second authentication information type. ### Claim 9 (depends on 8) The system of claim 8 wherein: the first authentication information type comprises an identification card; and the second authentication information type comprises a touch input pattern unique to the end user. ### Claim 10 A method for securing an information handling system, the method comprising: securing access to information stored in a persistent storage device with a first security system having first authentication information; securing access to information processed by a central processing unit of the information handling system with a second security system having second authentication information; and selectively authorizing access to the persistent storage device without the first authentication information based upon detection of one or more predetermined conditions by the first security system. ### Claim 11 (depends on 10) The method of claim 10 further comprising: detecting the first and second authentication information a predetermined number of times in association with an external condition determinable by the first security system; wherein selectively authorizing access further comprises determining the external condition by the first security system. ### Claim 12 (depends on 11) The method of claim 11 wherein the external condition comprises predetermined wireless network interfaces transmitting within range of the information handling system. ### Claim 13 (depends on 11) The method of claim 11 wherein the external condition comprises a plurality of other identifiable information handling systems interfaced with the information handling system. ### Claim 14 (depends on 10) The method of claim 10 wherein selectively authorizing access to the persistent storage device without the first authentication information based upon detection of one or more predetermined conditions by the first security system further comprises: securing the information handling system from access after detecting non-use for a predetermined amount of time; and authorizing access to the information handling system without the first authentication information in response to a predetermined of plural types of the second authorization information input to the information handling system. ### Claim 15 (depends on 14) The method of claim 14 wherein the predetermined of plural types of the second authorization information input to the information handling system comprises a series of hand motions input at a horizontally-disposed display. ### Claim 16 (depends on 10) The method of claim 10 wherein selectively authorizing access to the persistent storage device without the first authentication information based upon detection of one or more predetermined conditions by the first security system further comprises: tracking one or more behavior patterns with the first security system; and bypassing input of the first authentication information for a predetermined time period after detection of the one or more predetermined conditions. ### Claim 17 (depends on 16) The method of claim 16 wherein the one or more behavior patterns comprises at least detected wireless networks, detected voice patterns, and detected accelerations within a predetermined time period. ### Claim 18 (depends on 16) The method of claim 16 wherein the one or more behavior patterns comprises at least detected peripheral devices and detected mobile devices within a predetermined time period. ### Claim 19 A system for securing an information handling system, the system comprising non-transient memory storing instructions that when executed on a processor: encrypt information stored in persistent storage, including an operating system; decrypt the information in persistent storage in response to a first password including the operating system; boot the operating system after decrypting; restrict access to operating system functions based upon entry of a second password to the operating system; monitor one or more conditions at the information handling system during operating system functions; detect the one or more conditions at a subsequent time before boot of the operating system; and in response to detecting the one or more conditions, decrypting the operating system without input of the first password. ### Claim 20 (depends on 19) The system of claim 19 wherein the one or more conditions comprises a hash of wireless network identifications detected at the information handling system.