# US 2021/0240832 A1 · Systems and methods for automatic boot to authenticated external device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0240832 A1 - Document ID: US20210240832A1 - Status: Published application - Kind: A1 - Application number: 16/779,864 - Filed: 2020-02-03 - Published: 2021-08-05 - Earliest claimed: 2020-02-03 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Puri R. MALLURU; Daniel L. SMYTHIA; Ibrahim SAYYED; Chris C. GRIFFIN; Anand P. JOSHI - Web page: https://patentgrep.com/patent/US20210240832A1 ## CPC - G06F 21/575: {Secure boot} - G06F 8/65: Updates (security arrangements therefor G06F21/57) - G06F 9/4401: Bootstrapping (security arrangements therefor G06F21/57) - G06F 9/4406: {Loading of operating system} - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]} - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - G06F 21/602: {Providing cryptographic facilities or services} - G06F 21/107: {License processing; Key processing} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract An information handling system may include a processor, an external port communicatively coupled to the processor and configured to receive an external information handling resource and couple the external information handling resource to the processor, and a basic input/output system comprising a program of instructions executable by the processor. The program of instructions may be configured to cause the processor to: (i) determine if the external information handling resource coupled via the external port has a signed payload manifest stored thereon, the signed payload manifest comprising information regarding files of a bootable payload stored on the external information handling resource; (ii) if the external information handling resource has a signed payload manifest stored thereon, attempt to authenticate the signed payload manifest; (iii) if the signed payload manifest is authenticated, attempt to verify the files of the bootable payload based on the information with the signed payload manifest regarding files of the bootable payload; (iv) if the files of the bootable payload are verified, attempt to verify a bootable image of the bootable payload; and (v) if the bootable image is verified, cause the information handling system to boot from the bootable payload. ## Claims ### Claim 1 An information handling system comprising: a processor; an external port communicatively coupled to the processor and configured to receive an external information handling resource and couple the external information handling resource to the processor; and a basic input/output system comprising a program of instructions executable by the processor and configured to cause the processor to: determine if the external information handling resource coupled via the external port has a signed payload manifest stored thereon, the signed payload manifest comprising information regarding files of a bootable payload stored on the external information handling resource; if the external information handling resource has a signed payload manifest stored thereon, attempt to authenticate the signed payload manifest; if the signed payload manifest is authenticated, attempt to verify the files of the bootable payload based on the information with the signed payload manifest regarding files of the bootable payload; if the files of the bootable payload are verified, attempt to verify a bootable image of the bootable payload; and if the bootable image is verified, cause the information handling system to boot from the bootable payload. ### Claim 2 (depends on 1) The information handling system of claim 1, wherein the external information handling resource is an external storage resource. ### Claim 3 (depends on 1) The information handling system of claim 1, wherein: the signed payload manifest is signed with a private cryptographic key; and attempting to authenticate the signed payload manifest comprises authenticating the signed payload manifest using a public cryptographic key stored upon or otherwise accessible to the basic input/output system. ### Claim 4 (depends on 1) The information handling system of claim 1, wherein: information regarding files of a bootable payload stored on the external information handling resource comprises cryptographic signatures of the files; and attempting to verify the files of the bootable payload comprises determining if the files within the bootable payload match the cryptographic signatures of the files. ### Claim 5 (depends on 1) The information handling system of claim 1, wherein the bootable payload comprises a program of instructions for recovering an operating system of the information handling system. ### Claim 6 (depends on 1) The information handling system of claim 1, wherein the bootable payload comprises an update package for the basic input/output system. ### Claim 7 (depends on 1) The information handling system of claim 1, wherein the bootable payload comprises an automated and uninterruptable process. ### Claim 8 A method comprising: determining, with a basic input/output system of an information handling system, if an external information handling resource coupled to the information handling system via an external port of the information handling system has a signed payload manifest stored thereon, the signed payload manifest comprising information regarding files of a bootable payload stored on the external information handling resource; if the external information handling resource has a signed payload manifest stored thereon, attempting, with the basic input/output system, to authenticate the signed payload manifest; if the signed payload manifest is authenticated, attempting to verify, with the basic input/output system, the files of the bootable payload based on the information with the signed payload manifest regarding files of the bootable payload; if the files of the bootable payload are verified, attempting to verify, with the basic input/output system, a bootable image of the bootable payload; and if the bootable image is verified, cause the information handling system to boot from the bootable payload. ### Claim 9 (depends on 8) The method of claim 8, wherein the external information handling resource is an external storage resource. ### Claim 10 (depends on 8) The method of claim 8, wherein: the signed payload manifest is signed with a private cryptographic key; and attempting to authenticate the signed payload manifest comprises authenticating the signed payload manifest using a public cryptographic key stored upon or otherwise accessible to the basic input/output system. ### Claim 11 (depends on 8) The method of claim 8, wherein: information regarding files of a bootable payload stored on the external information handling resource comprises cryptographic signatures of the files; and attempting to verify the files of the bootable payload comprises determining if the files within the bootable payload match the cryptographic signatures of the files. ### Claim 12 (depends on 8) The method of claim 8, wherein the bootable payload comprises a program of instructions for recovering an operating system of the information handling system. ### Claim 13 (depends on 8) The method of claim 8, wherein the bootable payload comprises an update package for the basic input/output system. ### Claim 14 (depends on 8) The method of claim 8, wherein the bootable payload comprises an automated and uninterruptable process. ### Claim 15 An article of manufacture comprising: a computer readable medium; and computer-executable instructions carried on the computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to: determine, with a basic input/output system of an information handling system, if an external information handling resource coupled to the information handling system via an external port of the information handling system has a signed payload manifest stored thereon, the signed payload manifest comprising information regarding files of a bootable payload stored on the external information handling resource; if the external information handling resource has a signed payload manifest stored thereon, attempt, with the basic input/output system, to authenticate the signed payload manifest; if the signed payload manifest is authenticated, attempt to verify, with the basic input/output system, the files of the bootable payload based on the information with the signed payload manifest regarding files of the bootable payload; if the files of the bootable payload are verified, attempt to verify, with the basic input/output system, a bootable image of the bootable payload; and if the bootable image is verified, cause the information handling system to boot from the bootable payload. ### Claim 16 (depends on 15) The article of claim 15, wherein the external information handling resource is an external storage resource. ### Claim 17 (depends on 15) The article of claim 15, wherein: the signed payload manifest is signed with a private cryptographic key; and attempting to authenticate the signed payload manifest comprises authenticating the signed payload manifest using a public cryptographic key stored upon or otherwise accessible to the basic input/output system. ### Claim 18 (depends on 15) The article of claim 15, wherein: information regarding files of a bootable payload stored on the external information handling resource comprises cryptographic signatures of the files; and attempting to verify the files of the bootable payload comprises determining if the files within the bootable payload match the cryptographic signatures of the files. ### Claim 19 (depends on 15) The article of claim 15, wherein the bootable payload comprises a program of instructions for recovering an operating system of the information handling system. ### Claim 20 (depends on 15) The article of claim 15, wherein the bootable payload comprises an update package for the basic input/output system. ### Claim 21 (depends on 15) The article of claim 15, wherein the bootable payload comprises an automated and uninterruptable process.