# US 9,519,785 B2 · Basic input/output system (BIOS) security display > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,519,785 B2 - Document ID: US9519785B2 - Status: Granted - Kind: B2 - Application number: 14/563,848 - Filed: 2014-12-08 - Published: 2016-06-09 - Granted: 2016-12-13 - Earliest claimed: 2014-12-08 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Ricardo L. Martinez; Richard M. Tonry; Christopher W. Ramirez - Web page: https://patentgrep.com/patent/US9519785B2 ## CPC - G06F 9/44505: {Configuring for program initiating, e.g. using registry, configuration files} - G06F 9/4401: Bootstrapping (security arrangements therefor G06F21/57) - G06F 9/4406: {Loading of operating system} - G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]} - G06F 2221/034: Test or assess a computer or a system - G06F 2221/2113: Multi-level security, e.g. mandatory access control - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Methods and systems for generating and using a BIOS security display include determining whether a change in a BIOS user setting is associated with security of an information handling system. When the BIOS user setting is associated with security, a security level for the BIOS may be calculated based on weighted security values for BIOS user settings. Security levels for boot phases may also be individually calculated. The security levels may be displayed in the BIOS to the user when the BIOS user setting is changed. ## Claims ### Claim 1 A method comprising: responsive to detecting a change in a user setting of a basic input/output system (BIOS) from an old value to a new value for an information handling system, determining whether the user setting is associated with security of the information handling system; when the user setting is associated with security of the information handling system: determining a weighted security value for the user setting, wherein the weighted security value indicates an importance to security of the information handling system for the user setting; based at least in part on the weighted security value, calculating a security level for the BIOS; and updating a display element included in a BIOS user interface, the display element indicative of the security level for the BIOS. ### Claim 2 (depends on 1) The method of claim 1, wherein determining the weighted security value for the user setting includes: accessing a lookup table of weighted security values for user settings of the BIOS. ### Claim 3 (depends on 2) The method of claim 2, wherein the lookup table is stored in a non-volatile memory accessible to the BIOS. ### Claim 4 (depends on 1) The method of claim 1, wherein determining the weighted security value for the user setting includes: determining a boot phase associated with the user setting; and determining the weighted security value for a plurality of user settings associated with the boot phase, including the user setting. ### Claim 5 (depends on 4) The method of claim 4, wherein calculating the security level for the BIOS includes: calculating the security level for the boot phase. ### Claim 6 (depends on 5) The method of claim 5, wherein the BIOS user interface includes respective display elements for different boot phases, and wherein updating the display element includes: updating the display element indicative of the security level for the boot phase. ### Claim 7 An information handling system, comprising: a microprocessor subsystem having access to a non-volatile memory comprising a basic input/output system (BIOS), wherein the BIOS includes BIOS instructions executable by the processor subsystem to: detect a change in a user setting of the BIOS from an old value to a new value; determine whether the user setting is associated with security of the information handling system; when the user setting is associated with security of the information handling system: determine a weighted security value for the new value of the user setting, wherein the weighted security value indicates an importance to security of the information handling system for the new value; based at least in part on the weighted security value, calculate a security level for the BIOS; and update a display element included in a BIOS user interface, the display element indicative of the security level for the BIOS. ### Claim 8 (depends on 7) The information handling system of claim 7, wherein the instructions to determine the weighted security value for the user setting include instructions to: access a lookup table of weighted security values for user settings of the BIOS. ### Claim 9 (depends on 8) The information handling system of claim 8, wherein the lookup table is stored in a non-volatile memory accessible to the BIOS. ### Claim 10 (depends on 7) The information handling system of claim 7, wherein the instructions to determine the weighted security value for the user setting include instructions to: determine a boot phase associated with the user setting; and determine the weighted security value for a plurality of user settings associated with the boot phase, including the user setting. ### Claim 11 (depends on 10) The information handling system of claim 10, wherein the instructions to calculate the security level for the BIOS include instructions to: calculate the security level for the boot phase. ### Claim 12 (depends on 11) The information handling system of claim 11, wherein the BIOS user interface includes respective display elements for different boot phases, and wherein the instructions to update the display element include instructions to: update the display element indicative of the security level for the boot phase. ### Claim 13 An article of manufacture comprising: a non-transitory computer-readable medium storing instructions, the instructions representing a basic input/output system (BIOS) for an information handling system, that, when executed by a processor of the information handling system, cause the processor to: detect a change in a user setting of the BIOS from an old value to a new value; determine whether the user setting is associated with security of the information handling system; when the user setting is associated with security of the information handling system: determine a weighted security value for the new value of the user setting, wherein the weighted security value indicates an importance to security of the information handling system of the new value; based at least in part on the weighted security value, calculate a security level for the BIOS; and update a display element included in a BIOS user interface, the display element indicative of the security level for the BIOS. ### Claim 14 (depends on 13) The article of manufacture of claim 13, wherein the instructions to determine the weighted security value for the user setting include instructions to: access a lookup table of weighted security values for user settings of the BIOS. ### Claim 15 (depends on 14) The article of manufacture of claim 14, wherein the lookup table is stored in a non-volatile memory accessible to the BIOS. ### Claim 16 (depends on 13) The article of manufacture of claim 13, wherein the instructions to determine the weighted security value for the user setting include instructions to: determine a boot phase associated with the user setting; and determine the weighted security value for a plurality of user settings associated with the boot phase, including the user setting. ### Claim 17 (depends on 16) The article of manufacture of claim 16, wherein the instructions to calculate the security level for the BIOS include instructions to: calculate the security level for the boot phase. ### Claim 18 (depends on 17) The article of manufacture of claim 17, wherein the BIOS user interface includes respective display elements for different boot phases, and wherein the instructions to update the display element include instructions to: update the display element indicative of the security level for the boot phase.