Information handling system secret protection across multiple memory devices
AssigneeDell Products L.P.
InventorsKurt D. Gillespie, Jonathan B. Barkelew
Life of this patent
Estimating the term…
Abstract
Information handling system secret protection is enhanced by encrypting secrets into a common file and breaking up the encrypted file into plural portions stored at plural memory devices, such as across plural DIMMs disposed in the information handling system. In one embodiment, a decryption key to decrypt the encrypted file is broken into plural portions stored at the plural memory devices. Upon detection of a predetermined security factor, such as an indication of removal of a the encrypted file is removed from the plural portions.
Claims15
An information handling system comprising:
- a chassis;
- a processor disposed in the chassis and operable to process information;
- memory disposed in the chassis and interfaced with the processor, the memory operable to store the information, the memory having at least first and second separate memory devices, the first and second memory devices comprising at least first and second random access memory (RAM) modules;
- a memory controller interfaced with the memory and operable to manage locations in the memory devices to store the information;
- and
- a security module interfaced with the memory controller, the security module operable to identify sensitive information based upon predetermined conditions and to locate first and second portions of the sensitive information on the first and second memory devices;
- wherein:
- the first portion comprises less than all of an encrypted file having encrypted information and less than all of a password to decrypt the encrypted information;
- and
- the second portion comprises less than all of the encrypted file and less than all of the password to decrypt the encrypted information.
A method for information handling system secret protection across plural random access memory (RAM) devices, the method comprising:
- defining sensitive information stored in memory of an information handling system, the sensitive information including at least a key for decrypting the sensitive information, the key having first and second portions;
- storing a first portion of the sensitive information in a first of the plural RAM devices of the information handling system, the first portion including the first portion of the key;
- storing a second portion of the sensitive information in a second of the plural RAM devices of the information handling system, the second portion including the second portion of the key;
- detecting transition of the information handling system to an S3 reduced power state;
- detecting a predetermined condition associated with the first of the plural RAM devices;
- and
- in response to the detecting the predetermined condition, deleting the second portion from the second memory device.
A system for secret protection across plural RAM memory modules of an information handling system, the system comprising:
- a memory controller operable to map information for storage on the plural RAM memory modules;
- and
- a security module interfaced with the memory controller, the security module operable to map plural portions of predetermined sensitive information for storage across the plural RAM memory modules and to delete the plural portions upon detection of a predetermined security factor;
- wherein the plural portions of predetermined sensitive information comprises an encrypted blob of plural files broken into the plural portions;
- and
- wherein the plural portions of predetermined sensitive information comprises a key that decrypts the encrypted blob, the key broken into the plural portions.
Dependencies are inferred from the claim text.