# US 2021/0240490 A1 · System and method for securing compromised information handling systems > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0240490 A1 - Document ID: US20210240490A1 - Status: Published application - Kind: A1 - Application number: 16/780,383 - Filed: 2020-02-03 - Published: 2021-08-05 - Earliest claimed: 2020-02-03 - Assignees: Dell Products L.P. - Applicants: Dell Products, LP - Inventors: Craig Chaiken; Balasingh P. Samuel; Steven Downum - Web page: https://patentgrep.com/patent/US20210240490A1 ## CPC - G06F 9/4411: {Configuring for operating with peripheral devices; Loading of device drivers} - G06F 21/575: {Secure boot} - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 11/2273: {Test methods} - G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]} - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - G06F 21/6281: {at program execution time, where the protection is within the operating system} - H04L 9/3247: {involving digital signatures} - G06F 11/2284: {by power-on test, e.g. power-on self test [POST]} - G06F 2009/45579: {I/O management, e.g. providing access to device drivers or storage} - G06F 2009/45587: {Isolation or security of virtual machine instances} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An information handling system includes a basic input/output system having a virtual advanced configuration and power interface device. A processor may download a device driver for a particular virtual advanced configuration and power interface device, wherein the device driver includes a code for a security feature and a signed file that includes a list of identifiers of compromised information handling systems. The processor may determine whether the information handling system is compromised based on the list of identifiers of compromised information handling systems in the signed file, and execute the code for the security feature. ## Claims ### Claim 1 A method comprising: downloading, by a processor of an information handling system, a device driver for a virtual advanced configuration and power interface device, wherein the device driver includes a code for a security feature and a signed file that includes a list of identifiers of compromised information handling systems; determining whether the information handling system is compromised based on the list of identifiers of compromised information handling systems; and in response to the determining that the information handling system is compromised, executing the code for the security feature. ### Claim 2 (depends on 1) The method of claim 1, wherein the security feature is selected by an owner of the information handling system. ### Claim 3 (depends on 1) The method of claim 1, further comprising subsequent to the executing the security feature, sending a notification to a manufacturer of the information handling system. ### Claim 4 (depends on 3) The method of claim 3, further comprising subsequent to the sending the notification, incrementing a version of the device driver. ### Claim 5 (depends on 1) The method of claim 1, wherein the security feature is one of a plurality of security features that can be selected by an owner of the information handling system. ### Claim 6 (depends on 5) The method of claim 5, wherein the security features include installing a password to access the information handling system, freezing an operating system of the information handling system, downloading data in a storage device of the information handling system, erasing the data in the storage device of the information handling system, and encrypting the data in the storage device of the information handling system. ### Claim 7 (depends on 6) The method of claim 6, wherein each one of the security features is associated with a particular virtual advanced configuration and power interface device. ### Claim 8 (depends on 1) The method of claim 1, further comprising subsequent to the executing the code for the security feature, executing a second code associated a second security feature selected by an owner of the information handling system. ### Claim 9 (depends on 1) The method of claim 1, wherein the virtual advanced configuration and power interface device is added to a basic input/output system. ### Claim 10 (depends on 1) The method of claim 1, further comprising integrating a security library of the device driver to a hardware component of the information handling system. ### Claim 11 An information handling system, comprising: a basic input/output system that includes a virtual advanced configuration and power interface device; and a processor configured to: download a device driver for a particular virtual advanced configuration and power interface device, wherein the device driver includes a code for a security feature and a signed file that includes a list of identifiers of compromised information handling systems; determine whether the information handling system is compromised based on the list of identifiers of compromised information handling systems in the signed file; and execute the code for the security feature. ### Claim 12 (depends on 11) The information handling system of claim 11, wherein the particular virtual advanced configuration and power interface device is a child of the virtual advanced configuration and power interface device. ### Claim 13 (depends on 11) The information handling system of claim 11, wherein the particular virtual advanced configuration and power interface device is added during power on self-test of the basic input/output system. ### Claim 14 (depends on 11) The information handling system of claim 11, wherein the virtual advanced configuration and power interface device is added during manufacture of the information handling system. ### Claim 15 (depends on 11) The information handling system of claim 11, wherein the execution of the code for the security feature is performed during device driver runtime. ### Claim 16 A method comprising: adding, by a processor while booting an information handling system, an advanced configuration and power interface device to a basic input/output system of the information handling system; receiving, at the information handling system, an update for an advanced configuration and power interface device driver associated with the advanced configuration and power interface device, wherein the update includes a signed file with a list of compromised information handling systems; and if the information handling system is compromised based on the list of compromised information handling systems, then installing the advanced configuration and power interface device driver that includes a code to apply a security feature selected by an owner of the information handling system and applying the security feature. ### Claim 17 (depends on 16) The method of claim 16, further comprising updating a manufacturer of the information handling system that the advanced configuration and power interface device driver has been installed and the security feature has been applied. ### Claim 18 (depends on 17) The method of claim 17, further comprising incrementing a version number of the advanced configuration and power interface device driver subsequent to the updating the signed file. ### Claim 19 (depends on 16) The method of claim 16, further comprising adding a security library of the advanced configuration and power interface device driver to a hardware component of the information handling system. ### Claim 20 (depends on 16) The method of claim 16, further comprising verifying a signature of the signed file prior to the installing the advanced configuration and power interface device driver.