Dell Products Inc.

Jeroen Diederik Cornelis Antonius Mackenbach

John H Terpstra

Bradley K Goodman

Daniel E Cummins

Pierluca Chiodelli

A method for safeguarding edge systems. The method includes: making a determination that an edge system is armed; based on the determination: detecting a geolocation difference between an edge system geolocation and a locked edge system geolocation; making a second determination that the geolocation difference falls outside a permitted threshold; and executing, based on the second determination, a breached-quarantine action on the edge system.

Minimizing sensitive data exposure LED by unauthorized edge system displacement

An apparatus comprises a processing device comprising a processor coupled to a memory. The processing device is configured to receive, over a first communication channel from an orchestrator entity, at least one command specifying one or more actions to take involving an endpoint device, the one or more actions comprising at least one of writing data to a tag of a tag bridge device and reading data from the tag of the tag bridge device. The processing device is further configured to relay the at least one command to the tag of the tag bridge device over a second communication channel, the second communication channel being established between a tag interface of the processing device and the tag bridge device, wherein the tag bridge device, when plugged in to a port of the endpoint device, relays the at least one command from the tag to the endpoint device.

Management of endpoint devices utilizing tag bridge devices

A computing device quarantine action system includes a computing device having a plurality of computing device components and a Basic Input/Output System (BIOS) subsystem. During an initialization process, the BIOS subsystem determines a current computing device component inventory of the plurality of computing device components included in the computing device, measures a current computing device functionality of each of the plurality of computing device components, and identifies at least one computing device change between at least one of 1) a reference computing device component inventory and the current computing device component inventory, and 2) reference computing device functionalities and the current computing device component functionalities determined for each of the plurality of computing device components. Based in the at least one computing device change, the BIOS subsystem generates a Quarantine Action Metric (QAM) and, based on the QAM, performs at least one quarantine action associated with the computing device.

Computing device quarantine action system

An apparatus comprises a processing device configured to obtain, at a given one of a plurality of computing sites in a supply chain associated with a given computing device, one or more component verification data records associated with the given computing device. The component verification data records are obtained from a distributed ledger maintained by the plurality of computing sites in the supply chain. The component verification data records characterize provisioning actions performed on the given computing device by computing sites in the supply chain. The processing device is also configured to generate component verification data characterizing a current configuration of hardware and software components of the given computing device. The processing device is further configured to determine an authenticity of the given computing device based on validating the generated component verification data for the given computing device utilizing the component verification data records obtained from the distributed ledger.

Management of a computing device supply chain utilizing a distributed ledger

An apparatus comprises a processing device configured to determine, utilizing a firmware-based agent running in firmware, a boot flag status during a boot process of the processing device. The processing device is also configured to execute, responsive to the boot flag status being a first value, a system update handler of the firmware-based agent configured for provisioning of a secured runtime operating system on the processing device, wherein the provisioning comprises digitally signing an image of the secured runtime operating system utilizing a hardware-based root of trust key. The processing device is further configured to execute, responsive to the boot flag status being a second value, a secured operating system boot handler of the firmware-based agent configured for validating and loading secured runtime operating system, wherein the validation comprises performing attestation of a signature of the image of the secured runtime operating system utilizing the hardware-based root of trust key.

Growing community of inventors

Roosendaal, Netherlands

Jeroen Diederik Cornelis Antonius Mackenbach