Back to results
US 2020/0092256 A1Published application
Restrict communications to device based on internet access
AssigneeHewlett Packard Enterprise Development LP
InventorsPeter Hansen, Andrew Brown
Life of this patent
Estimating the term…
Abstract
Examples disclosed herein relate to securing a controller of a device. The controller is to determine whether a network interface of the device is connected to the Internet. Communications are restricted on the network interface in response to the port having access to the Internet. In some examples, the restriction can be related to a vulnerability.
Claims20
A device comprising:
- at least one processor and memory;
- a baseboard management controller (BMC), separate from the at least one processor, that is capable of providing out of band services;
- a network interface to communicate with the BMC,
- wherein the BMC is to determine, via the network interface, whether the network interface has access to the Internet, and
- wherein the BMC is to perform a security action in response to the network interface having access to the Internet.
2 more elements
A method comprising:
- determining, by a baseboard management controller (BMC) of a computing system, whether a network interface connected to the BMC has access to Internet,
- wherein the computing system includes the BMC, at least one processor, and memory,
- wherein the BMC is separate from the at least one processor,
- wherein the BMC is capable of providing out of band services;
- and
- restricting communications on the network interface, by the BMC in response to the network interface having access to the Internet.
3 more elements
A non-transitory machine-readable storage medium storing instructions that, if executed by a physical processing element of a controller of a device, cause the controller to:
- determine whether a network interface of the device connected to the controller has access to Internet and is not behind a firewall;
- and
- restrict communications on the network interface in response to the network interface having access to the Internet and not being behind the firewall and based on a vulnerability.
Dependencies are inferred from the claim text.