# US 2018/0324162 A1 · System and Method to Remotely Secure a Compromised Information Handling System

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2018/0324162 A1
- Document ID: US20180324162A1
- Status: Published application
- Kind: A1
- Application number: 15/589,736
- Filed: 2017-05-08
- Published: 2018-11-08
- Earliest claimed: 2017-05-08
- Assignees: Dell Products L.P.
- Applicants: Dell Products L.P.
- Inventors: Abeye Teshome; Nicholas D. Grobelny; Joseph Kozlowski, JR.; Adolfo S. Montero
- Web page: https://patentgrep.com/patent/US20180324162A1

## CPC

- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- G06F 21/45: Structures or tools for the administration of authentication
- G06F 21/554: {involving event detection and direct action}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

In one or more embodiments, one or more systems, methods, and/or processes may receive, independently of a processor of the information handling system (IHS), first credential management information and may modify, independently of the processor and based on the first credential management information, credential information stored via a secure object store of the IHS. For example, modifying the credential information may include modifying the credential information such that the IHS denies access to at least a portion of the IHS based on the credential information. In one instance, denying access to at least the portion of the IHS may include disabling at least one of password, biometric information associated with a user, and an encryption key. In another instance, denying access to at least the portion of the IHS may include remapping, independently of the processor, at least one human interface device.

## Claims

### Claim 1

An information handling system, comprising:
a network interface;
a management controller coupled to the network interface; and
an embedded controller coupled to the management controller;
wherein the management controller receives, independently of a processor of the information handling system and via the network interface, first credential management information; and
wherein the embedded controller:
receives, independently of the processor, the first credential management information from the management controller; and
modifies, independently of the processor and based on the first credential management information, credential information stored via a secure object store of the information handling system.

### Claim 2 (depends on 1)

The information handling system of claim 1,
wherein the management controller further:
determines, independently of the processor and via the network interface, a change of network; and
provides information associated with the change of network to the embedded controller;
wherein the embedded controller further:
provides, independently of the processor and via the management controller, information associated with the change of network to a management console; and
accesses the credential information; and
wherein when the embedded controller modifies, independently of the processor and based on the first credential management information, the credential information stored via the secure object store of the information handling system, the embedded controller modifies the credential information such that the information handling system denies access to at least a portion of the information handling system based on the credential information.

### Claim 3 (depends on 1)

The information handling system of claim 1,
wherein the credential information includes at least one of a password, biometric information associated with a user, and an encryption key; and
wherein when the embedded controller modifies, independently of the processor and based on the first credential management information, the credential information stored via the secure object store of the information handling system, the embedded controller disables the at least one of the password, the biometric information associated with the user, and the encryption key.

### Claim 4 (depends on 3)

The information handling system of claim 3,
wherein the management controller further receives, independently of the processor and via the network interface, second credential management information; and
wherein the embedded controller further:
receives, independently of the processor and based on the second credential management information, the second credential management information from the management controller; and
enables, independently of the processor, the at least one of the password, the biometric information associated with the user, and the encryption key.

### Claim 5 (depends on 3)

The information handling system of claim 3,
wherein the management controller further receives, independently of the processor and via the network interface, first authentication information;
wherein the information handling system receives second authentication information via a user interface of the information handling; and
wherein the embedded controller further:
determines that the first authentication information and the second authentication information match; and
in response to determining that the first authentication information and the second authentication information match, enables, independently of the processor, the at least one of the password, the biometric information associated with the user, and the encryption key.

### Claim 6 (depends on 1)

The information handling system of claim 1, further comprising:
a non-volatile memory medium that stores the secure object store;
wherein the embedded controller is coupled to the non-volatile memory medium.

### Claim 7 (depends on 1)

The information handling system of claim 1, wherein the embedded controller further remaps, independently of the processor, at least one human interface device.

### Claim 8 (depends on 7)

The information handling system of claim 7, wherein the at least one human interface device includes at least one of a keyboard, a pointing device, a display, a touch screen, and a power button.

### Claim 9 (depends on 7)

The information handling system of claim 7, wherein the embedded controller further receives information that indicates that the information handling system is compromised.

### Claim 10

A method of operating an information handling system, comprising:
a management controller receiving, independently of a processor of the information handling system and via a network interface of the information handling system, first credential management information;
an embedded controller receiving, independently of the processor, the first credential management information from the management controller;
the embedded controller modifying, independently of the processor and based on the first credential management information, credential information stored via a secure object store of the information handling system.

### Claim 11 (depends on 10)

The method of claim 10, further comprising:
the management controller determining, independently of the processor and via the network interface, a change of network;
the embedded controller providing, independently of the processor and via the management controller, information associated with the change of network to a management console;
accessing the credential information; and
denying, based on the credential information, access of at least a portion of the information handling system.

### Claim 12 (depends on 10)

The method of claim 10,
wherein the credential information includes at least one of a password, biometric information associated with a user, and an encryption key; and
wherein the embedded controller modifying, based on the credential management information, the credential information stored via the secure object store of the information handling system includes disabling the at least one of the password, the biometric information associated with the user, and the encryption key.

### Claim 13 (depends on 12)

The method of claim 12, further comprising:
the management controller receiving, independently of the processor and via the network interface, second credential management information;
the embedded controller receiving, independently of the processor, the second credential management information from the management controller; and
the embedded controller enabling, independently of the processor and based on the second credential management information, the at least one of the password, the biometric information associated with the user, and the encryption key.

### Claim 14 (depends on 12)

The method of claim 12, further comprising:
the management controller receiving, independently of the processor and via the network interface, first authentication information;
receiving second authentication information via a user interface of the information handling;
determining that the first authentication information and the second authentication information match; and
in response to the determining that the first authentication information and the second authentication information match, the embedded controller enabling, independently of the processor, the at least one of the password, the biometric information associated with the user, and the encryption key.

### Claim 15 (depends on 10)

The method of claim 10, further comprising:
determining that the information handling system is compromised; and
providing, via a network, the first credential management information, wherein the first credential management information is configured to disable at least a portion of the information handling system.

### Claim 16 (depends on 15)

The method of claim 15, wherein the determining that the information handling system is compromised includes determining that the information handling system is coupled to an unauthorized network.

### Claim 17 (depends on 10)

The method of claim 10, further comprising:
accessing the credential information; and
providing utilization of the information handling system based on the credential information.

### Claim 18 (depends on 10)

The method of claim 10, further comprising:
the embedded controller remapping, independently of the processor, at least one human interface device.

### Claim 19 (depends on 18)

The method of claim 18, wherein the at least one human interface device includes at least one of a keyboard, a pointing device, a display, a touch screen, and a power button.

### Claim 20 (depends on 18)

The method of claim 18, further comprising:
determining, independently of the processor, that the information handling system is compromised;
wherein, in response to the determining, independently of the processor, that the information handling system is compromised, the embedded controller remapping, independently of the processor, the at least one human interface device.