# US 2021/0243594 A1 · Connecting securely to a wireless display from bios > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0243594 A1 - Document ID: US20210243594A1 - Status: Published application - Kind: A1 - Application number: 16/780,321 - Filed: 2020-02-03 - Published: 2021-08-05 - Earliest claimed: 2020-02-03 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Shekar Babu Suryanarayana; Sumanth Vidyadhara - Web page: https://patentgrep.com/patent/US20210243594A1 ## CPC - H04W 12/50: Secure pairing of devices - G06F 9/4401: Bootstrapping (security arrangements therefor G06F21/57) - G06F 9/4411: {Configuring for operating with peripheral devices; Loading of device drivers} - G06F 21/575: {Secure boot} - G06F 21/84: output devices, e.g. displays or monitors - H04N 21/2347: involving video stream encryption - H04N 21/25816: {involving client authentication (restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06)} - H04N 21/4122: {additional display device, e.g. video projector (digital output for controlling a plurality of local displays G06F3/1423)} - H04N 21/43635: {HDMI} - H04N 21/4367: Establishing a secure communication between the client and a peripheral device or smart card - H04W 12/033: of the user plane, e.g. user's traffic - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/041: Key generation or derivation - H04W 12/069: using certificates or pre-shared keys - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION ## Abstract During the boot process, a secure wireless display connect module of the BIOS can authenticate a wireless display and determine whether the wireless display can comply with the HDCP. When the secure wireless display connect module determines that the wireless display is HDCP compliant, the secure wireless display connect module can create an ACPI secure blob in which is stored a shared session key generated as part of determining that the wireless display is HDCP compliant. A video authentication session module of the BIOS can then retrieve this shared session key from the ACPI secure blob and use it to encrypt video frames that are to be sent to the wireless display. The video authentication session module may additionally embed a session ID and a timeout into each video frame which the wireless display can employ to detect when the video frame should no longer be displayed. ## Claims ### Claim 1 A method, implemented by BIOS during a boot process on a computing system, for connecting securely to a wireless display, the method comprising: authenticating with a wireless display; detecting that the wireless display is compliant with High-Bandwidth Digital Content Protection (HDCP); generating encrypted video frames that comply with the HDCP; and sending the encrypted video frames to the wireless display. ### Claim 2 (depends on 1) The method of claim 1, wherein authenticating with the wireless display comprises performing WPA3-Personal-based authentication. ### Claim 3 (depends on 1) The method of claim 1, wherein detecting that the wireless display is compliant with the HDCP comprises receiving a certificate from the wireless display. ### Claim 4 (depends on 3) The method of claim 3, wherein detecting that the wireless display is compliant with the HDCP further comprises verifying the certificate against a BIOS-based certificate store. ### Claim 5 (depends on 1) The method of claim 1, wherein detecting that the wireless display is compliant with the HDCP comprises generating a shared session key. ### Claim 6 (depends on 5) The method of claim 5, further comprising: storing the shared session key in a data structure. ### Claim 7 (depends on 6) The method of claim 6, wherein the data structure is an Advanced Configuration and Power Interface (ACPI) secure blob. ### Claim 8 (depends on 7) The method of claim 7, further comprising: generating an ACPI node that includes the ACPI secure blob and enables an operating system to cause the ACPI secure blob to be employed to encrypt video frames that are sent to the wireless display. ### Claim 9 (depends on 5) The method of claim 5, wherein the video frames are encrypted using the shared session key. ### Claim 10 (depends on 1) The method of claim 1, further comprising: embedding a timeout in the encrypted video frames, each timeout defining when the wireless display should prevent the corresponding video frame from being displayed. ### Claim 11 (depends on 1) The method of claim 1, further comprising: embedding a session identifier in the encrypted video frames. ### Claim 12 One or more computer storage media storing BIOS which when executed during a boot process on a computing system perform a method for connecting securely to a wireless display during the boot process, the method comprising: performing HDCP authentication with the wireless display, the HDCP authentication including receiving a certificate from the wireless display and verifying the certificate against a BIOS-based certificate store; based on the HDCP authentication, generating encrypted video frames that comply with the HDCP; and sending the encrypted video frames to the wireless display. ### Claim 13 (depends on 12) The computer storage media of claim 12, wherein the HDCP authentication further includes generating a shared session key, the method further comprising: storing the shared session key in an ACPI data structure. ### Claim 14 (depends on 13) The computer storage media of claim 13, wherein the video frames are encrypted using the shared session key. ### Claim 15 (depends on 12) The computer storage media of claim 12, wherein the method further comprises: including a timeout in the encrypted video frames. ### Claim 16 (depends on 12) The computer storage media of claim 12, wherein the method further comprises: performing WPA3-Personal-based authentication with the wireless display. ### Claim 17 A computing system comprising: one or more processors; and computer storage media storing BIOS which when executed by the one or more processors during a boot process on the computing system perform a method for connecting securely to a wireless display during the boot process, the method comprising: performing HDCP authentication with the wireless display, the HDCP authentication including generating a shared session key; employing the shared session key to encrypt video frames; and sending the encrypted video frames to the wireless display. ### Claim 18 (depends on 17) The computing system of claim 17, wherein the method further comprises: including a timeout in the encrypted video frames. ### Claim 19 (depends on 17) The computing system of claim 17, wherein performing the HDCP authentication further includes receiving a certificate from the wireless display and verifying the certificate against a BIOS-based certificate store. ### Claim 20 (depends on 17) The computing system of claim 17, wherein the shared session key is stored in an ACPI data structure.