Dell Products Inc.

Charles Delbert Robison, Jr

Daniel Lawrence Hamlin

Vivek Viswanathan Iyer

Philip M Seibert

Carlton A Andrews

Abu Shaher Sanaullah

Jason Alan Shepherd

Claude Lano Cox

Carrie Elaine Gates

Deeder M Aurongzeb

Yuan-Chang Lo

Todd Erick Swierk

Nicholas Diciurcio Grobelny

Joseph Kozlowski

Andrew T Fausak

Richard William Schuckle

Oleg Rombakh

Douglas Evan Messick

Kyle Eric Cross

Erin Lane Price

Frank Quintanilla, Iii

Sinem Kockan

Justin Walter Johnson

Providing access control to distributed resources, including storing, at a computing dock coupled to an information handling system, a local access database indicating verified credentials of one or more users; receiving, at the computing dock, a request for access to a resource coupled to the computing dock; providing, in response to the request for access, an authentication request to an authentication system; in response to the authentication request, providing, by the computing dock, an authentication challenge to the information handling system; receiving, at the computing dock and in response to the authentication challenge, user credentials at the authentication system; verifying, at the authentication system, the user credentials against the local access database; providing, based on the verified user credentials, an authorization token to the first device; and allocating, based on the authorization token, access to the resource to the information handling system.

Providing access control to distributed resources to an information handling system

A disclosed method for provisioning a computing device includes receiving, by provisioning software that executes on the computing device to provision the computing device for access to an enterprise infrastructure from a device orchestration service through which computing devices are provisioned to access the enterprise infrastructure, a digital certificate representing a credential for accessing, by a user via the computing device, the enterprise infrastructure. The method also includes storing, by the provisioning software, the digital certificate in dedicated secure credential storage on the computing device, receiving, by the provisioning software, a one-time-usable nonce value generated by the device orchestration service and usable by the provisioning software to unlock the digital certificate stored in the dedicated secure credential storage, unlocking the digital certificate, and presenting the digital certificate to the enterprise infrastructure to authorize access to the enterprise infrastructure by the user via the computing device.

Device provisioning using dedicated credential storage

Generating fingerprint templates, including receiving a fingerprint image of a user that is obtained at a first fingerprint sensor; identifying a plurality of fingerprint template creation models, each fingerprint template creation model associated with a respective other fingerprint sensor, each other fingerprint sensor differing from one another and differing from the first fingerprint sensor; applying each of the fingerprint template creation models to the fingerprint image to generate respective fingerprint templates; associating, for each generated fingerprint template, i) an identification (ID) of the other fingerprint sensor that corresponds to the fingerprint model that generated the fingerprint template and ii) a user identification (ID) of the user associated with the fingerprint image obtained at the first fingerprint sensor; and storing each of the generated fingerprint templates in a database.

Generating and managing fingerprint templates for fingerprint sensors across information handling systems

A credential management system for an information handling system dynamically determines an available set of authentication techniques based on a system configuration. The dynamic configuration may be based on devices connected to the information handling system, such as keyboard, fingerprint reader, and facial recognition. The dynamic configuration may also be based on a dynamic posture of the information handling system, such as whether a devices is in an open-lid, closed-lid, tent-shape, tablet-mode, or docked configuration.

Credential management for an information handling system

In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may execute a first information handling system (IHS) initialization executable of a first IHS initialization executable/operating system (OS) executable pair; execute a second OS executable of a second IHS initialization executable/OS executable pair via an OS context; determine, by the second OS executable, that at least one application has been installed on the IHS in addition to multiple applications that have already been installed on the IHS; determine, by the second OS executable, information associated with the at least one application and at least one of system information, power configuration information, status configuration information, and hardware information; and provide first information that recommends how to configure power utilization of the IHS and second information that recommends how not to configure power utilization of the IHS based at least on the determined information.

System and method of configuring power settings of an information handling system

Systems and methods for a network environment for client-side remote access of a server device from a client device may utilize a biometric sensor device of the client device and a pluggable authentication and authorization framework. The biometric sensor device may capture a gesture of a target user. The server device may authenticate the target user based on previously registered encrypted biometric information of the target user utilizing the pluggable authentication and authorization framework and a remote desktop protocol. When the target user has been authenticated, the client device may be authorized to access a service of the server device.

System and method for remote access to a personal computer as a service using a remote desktop protocol and windows hello support

Surrogate locational determination may rely on a surrogate device to provide a locational fix. When a device lacks an accurate geo-location system, communication may be established with a nearby surrogate device. The surrogate device is queried for an accurate location, such as that determined by a global positioning system receiver. Because the surrogate device is geographically proximate, the location determined by the global positioning system receiver may serve as a proxy or substitute for the local fix of the device.

System and method for surrogate locational determination

A display information protection system includes a management system that stores a plurality of display information protection policies and that may provide any of the display information protection policies through a network. An endpoint device is coupled to the management system through the network and stores a display information protection policy that may have been automatically populated or received from the management system. The endpoint device displays a plurality of information and may determine that a first subset of the plurality of information that has been provided for display is defined by the display information protection policy. In response to detecting the first display information protection event and determining that the first subset of a plurality of information is defined by the display information protection policy, the endpoint device obfuscates the display of the first subset of the plurality of information on the endpoint device.

Event-based display information protection system

An authentication agent for an information handling system includes a request module, a threshold table, and a comparison module. The request module receives a first request to access a secure resource of the information handling system, determines a first access level associated with the first request, and requests first confidence level information from the information handling system. The threshold table includes a first confidence threshold associated with the first access level. The comparison module compares the first confidence level information with the first confidence threshold. The authentication agent grants access to the secure resource at the first access level when the first confidence level information is greater than the first confidence threshold.

System and method for providing an authentication agent in a persistent authentication framework

An authentication engine for an information handling system includes an event engine that receives authentication information from a plurality of input devices of the information handling system and classifies the authentication information from each input device into a plurality of events, and provides confidence score metadata based upon the authentication information, a confidence module that generates a confidence score based upon the events, and a threshold table that receives the confidence score and determines an authentication state of the information handling system based upon the confidence score.

System and method for providing an authentication engine in a persistent authentication framework

An information handling system includes a host processing system and an authentication processing system. The authentication processing system authenticates to the host processing system based upon a shared secret. An authentication module of the authentication processing system operates as a master authentication module to establish an authentication area, determine that a first device is a first trusted device of the authentication module, determine that the first device is within the authentication area, authenticate the first device on the authentication area based upon the determination that the first device is within the authentication area, determine that a second device is a second trusted device of the authentication module, determine that the second device is not within the authentication area, and prevent the second device from authenticating on the authentication area based upon the determination that the second device is not within the authentication area.

Apparatus and method for host abstracted networked authorization

An information handling system includes a first processor, a second processor, and a third processor. The first processor requests a single-factor authentication from the second processor. The second processor receives a first authentication factor in response to the single-factor authentication request and requests a multi-factor authentication from the third processor. The third processor receives a second authentication factor in response to the multi-factor authentication request and provides the second authentication factor to the second processor. The second processor further verifies the first authentication factor and the second authentication factor and provides a single-factor authentication reply to the first processor in response to verifying the first authentication factor and the second authentication factor.

System and method for off-host abstraction of multifactor authentication

Systems and methods for providing technical support and exporting diagnostic data. In some embodiments, an Information Handling System (IHS) includes a processor; and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: identify a video failure in response to executing a Basic I/O System (BIOS)/Unified Extensible Firmware Interface (UEFI) diagnostics routine prior to the booting of a main Operating System (OS), where the video failure renders the IHS incapable of providing a video interface; and in response to the identification, provide an audio interface to a user, where the audio interface enables the user to perform a troubleshooting operation in the absence of the video interface.

Growing community of inventors

Buford, GA, United States of America

Charles Delbert Robison, Jr