Dell Products Inc.

Dell Inc.

James Darrell Testerman

Dongli Wu

Ricardo Antonio Ruiz

James Michael Burke

Jonathan Nathan Yanez

Luis Antonio Valencia Reyes

Venkata Satya Narasimha Murthy Prayaga

Christopher Duane Burchett

Venkata S N M Prayaga

Kristopher Anthony Slocum

David Konetski

Warren Wade Robbins

Brijesh Kumar Mishra

Sai Sivakumar Dhakshinamurthy

David Albert Consolver

David Wu

David J Fitzgerald

Oliver C Ryan

Vadamalar Varadarajan

Adam W Meek

Nitin D Dixit

In one or more embodiments, one or more systems, one or more methods, and/or one or more methods may: execute a first information handling system (IHS) initialization executable via an environment associated with IHS firmware; register, by the first IHS initialization executable, a process configured to store multiple IHS initialization executable/OS executable pairs via a volatile memory medium of the IHS; for each IHS initialization executable/OS executable pair of the multiple IHS initialization executable/OS executable pairs: call, by an IHS initialization executable of the IHS initialization executable/OS executable pair, the process; and copy, by the process, an OS executable of the IHS initialization executable/OS executable pair from the first non-volatile memory medium to the volatile memory medium; retrieve a driver via a network; execute the driver; and copy, by the driver, each OS executable, which was copied to the volatile memory medium, to a non-volatile memory medium of the IHS.

System and method of operating system executables with information handling systems (IHS)

Embodiments of systems and computer implemented methods are disclosed to automatically restore operating system (OS) application software to an information handling systems (IHS) when the OS application software is removed from a computer readable storage device of the IHS. The disclosed embodiments control the version of the OS application software being deployed to an IHS when deploying the software from the boot firmware. For example, the disclosed embodiments utilize a version identifier to specify which version of the OS application software should be restored, a Content Deliver Network (CDN) server to store multiple versions of the OS application software, and a registration web server to map a device identifier corresponding to the IHS and the version identifier corresponding to the specified version of the OS application software to a universal resource locator (URL) link identifying where the specified version of the OS application software is stored within the CDN server.

Systems and methods to control software version when deploying OS application software from the boot firmware

A system that implements a software tool for data leak prevention whenever a protected document containing sensitive or encrypted content is opened by a document-management application having capability to directly access an Internet Protocol (IP) network, such as the Internet, without using the HyperText Transfer Protocol (HTTP). The application is selectively blocked from accessing the Internet whenever a protected document is opened by the application. The application may be, for example, the Microsoft&#xae; Word or the Adobe&#xae; Acrobat&#xae; Reader. The software tool restores the network access for the application once the protected document is no longer open in the application. Even though one application is blocked from accessing the IP network, the software tool allows another application to access the network so long as a non-protected document is opened by the other application. Thus, application-specific, selective blocking of network access is accomplished by the software tool based on document content.

Selective blocking of network access for third party applications based on file content

Some websites accessed via browser allow for file uploading via drag and drop functionality. In a drag and drop operation, a user selects a file on the information handling system and drags the file to a browser window for uploading via the browser. File encryption systems, such as virtual file systems, may implement an encryption algorithm and enforce encryption standards, set by a user or organization, when uploading files via a browser, including uploading of files performed via file drag and drop functionality.

Browser drag and drop file upload encryption enforcement

Systems and methods for preventing leakage of protected data to unsecured applications and documents may include determining that a first document is a protected document in a managed application, detecting a request to copy protected data from the first document to a system clipboard accessible by unprotected documents, redirecting the protected data to a secure clipboard, determining that a second document is an unprotected document, detecting a request to paste the protected data into the second document, and refraining from pasting the protected data into the second document. The secure clipboard may be implemented by a data leakage prevention (DLP) client. It may be separate from the system clipboard and inaccessible by unprotected documents. Dynamic-link library injection and API hooking may allow the DLP client to intercept clipboard related function calls made by managed applications into the operating system and to transparently change the behavior of the managed application.

Systems and methods for preventing leakage of protected document data

In one or more embodiments, one or more systems, methods, and/or processes may redirect a request to open a document to a background process that controls access to the document; may determine policy information associated with the document and a user of an application; may provide the document to the application; may determine an area of a user interface of the application that displays information of the document; may determine watermark information based at least on the policy information; may generate one or more watermarks based at least on the watermark information; and may display the one or more watermarks, based at least on the watermark information, on the area of the user interface of the application that displays the information of the document.

System and method of displaying watermarks

An information handling system operating a forced data leakage prevention system may comprise a processor executing code instructions of the forced data leakage prevention system to identify a third party application and an associated first dynamic link library address, identify a control policy associated with the third party application and the identified user, wherein the control policy includes a subset of code instructions associated with a secure data set, identify a call to execute code instructions stored at the first dynamic link library address, move the code instructions stored at the first dynamic link library into a second library prior to execution, inject the subset of code instructions into the code instructions stored in the second library according to the control policy, and move the code instructions stored in the second library including the injected subset of code instructions into the first dynamic link library for execution by the processor.

System and method for forced data leakage prevention

Encrypted content may be stored in a file wrapper with unencrypted content that provides information regarding the encrypted content. The file wrapper may be stored around the encrypted content or may be stored in front or behind the encrypted content. The unencrypted content may indicate, for example, that additional content in the file is encrypted. A TIFF-formatted file may be used to store the two portions of content. A TIFF file structure may have content stored in a plurality of images. The unencrypted content may be stored in a first image of a TIFF file. The encrypted content may be stored in a second image, third image, and/or additional images of the TIFF file.

Secure file wrapper for TIFF images

Many users of information handling systems use applications to create, manage, and/or save files containing information. Encryption of the files secures the data against access by unintended recipients. Information handling systems may be designed to perform encryption in the background with minimal user input. For example, applications, application plug-ins, or operating system (OS) level system services may facilitate encryption and decryption of application files with minimal user input. Such applications, plugins, and services may allow applications to interact with encryption systems, such as virtual file systems, and may direct file save and access operations through the encryption systems, automatically encrypting and decrypting files selected by the user without exposing the user to cumbersome or confusing encryption options.

Access path redirection for encrypted files

Systems and methods for secure third-party document editing are described. In some embodiments, a method may include tokenizing a file retrieved from a cloud storage provider (CSP); transmitting the tokenized file to a cloud editing provider (CEP); receiving a modified, tokenized file from the CEP; de-tokenizing the modified file; and enabling rendering of the de-tokenized, modified file. In other embodiments, a memory device may have program instructions stored thereon that, upon execution by a processor of an Information Handling System (IHS), cause the IHS to: provide a portal to a user executing a browser on a client device, wherein the portal includes an interface to a CSP and to a cloud editing provider (CDEP); and allow the user to access a document stored in the CSP and to edit the document using the CDEP via the browser.

Secure third-party document editing

Embodiments of methods, systems, and services for transparent adaptive file transform are described. In one embodiment a method for transparent adaptive file transform is performed by a data processing device. The method may include automatically detecting a data transfer addressed to an external data storage. The method may also include redirecting data associated with the data transfer to a data transformer. Additionally, the method may include applying one or more data transforms to the data associated with the data transfer to generate a transformed data set. In an embodiment, the method may also include transferring the transformed data set to the external data storage. In one embodiment, the external data storage is a cloud storage facility.

Growing community of inventors

McKinney, TX, United States of America

James Darrell Testerman