Dell Products Inc.

Sushma Basavarajaiah

Chitrak Gupta

Rama Rao Bisa

Mukund Purshottam Khatri

Elie Antoun Jreij

Kala Sampathkumar

Deepaganesh Paulraj

Mainak Roy

Rajeshkumar Ichchhubhai Patel

Lucky Pratap Khemani

Ajay Shenoy

Deeder M Aurongzeb

Shekar Babu Suryanarayana

Chandrashekar Nelogal

Wade Andrew Butcher

Shinose Abdul Rahiman

Sanjay Rao

Sanjeev Dambal

Jitendra Kumar

Manjunath Am

Neeraj Joshi

Abhirup Seal

Vigneswaran Ponnusamy

Alonzo Fleming Seay

Charles D Stracener

Diwahar Natarajan

Hari Venkatachalam

A key management system includes a managed system coupled to a management system through a network. The managed system includes managed device locking subsystem(s) coupled to a managed device and a key storage. The managed device locking subsystem(s) retrieve, through the network from the management system, a managed device locking key that is configured to unlock the managed device. The managed device locking subsystem(s) then encrypt the managed device locking key to provide an encrypted managed device locking key, and store the encrypted managed device locking key in the key storage. Subsequent to storing the encrypted managed device locking key, the managed device locking subsystem(s) retrieve the encrypted managed device locking key from the key storage, and decrypt the encrypted managed device locking key to provide a decrypted managed device locking key. The managed device locking subsystem(s) then use the decrypted managed device locking key to unlock the managed device.

Device locking key management system

A device-capability-based locking key management system includes a key management system coupled to a server device via a network. The server device includes storage devices coupled to a remote access controller device. The remote access controller device identifies each of the storage devices, and then identifies a key management profile for each of the storage devices. A first key management profile identified for at least one first storage device is different from a second key management profile identified for at least one second storage device. The remote access controller device then uses the respective key management profile identified for each of the storage devices to create a respective key management sub-client for each of the storage devices, and each respective key management sub-client communicates with the key management system to provide a locking key for its respective storage device.

Device-capability-based locking key management system

A natural language processing system includes a model trainer operable to train a natural language processing model based on a training corpus, wherein the training corpus includes a data set from one of multiple languages. An action manager curates application programming interfaces, and a processor receives a natural language query at the natural language processing system, wherein the natural language query is directed to a remote component, and the natural language query is in a language other than English. The processor determines the language of the natural language query, and binds the intent of the natural language query to an action, wherein the action is a function to be carried out by the remote component.

System and method for determining application programming interface and object bindings on natural language processed inputs

A system, method, and computer-readable medium for a security vulnerability detection operation. The security vulnerability operation includes configuring a firmware security profiling environment with a trusted host and a trusted service processor; receiving a firmware update file via the trusted service processor; using the trusted service processor to identify a security vulnerability within the firmware update file; and, installing the firmware update file to the information handling system only when no security vulnerability is identified by the trusted service processor, the installing being performed by the trusted host.

Security profiling of system firmware and applications from an OOB appliance at a differentiated trust boundary

A redundant key management system includes a key management system coupled to a plurality of server devices through a network. A first server device includes a managed device coupled to a first remote access controller device that receive a device locking key from the key management system and uses it to lock the managed device. The first remote access controller device then encrypts the device locking key, broadcasts the encrypted device locking key through the network to a second remote access controller device in a second server device, and erases the device locking key. Subsequently, the first remote access controller device transmits a request to retrieve the encrypted device locking key. When the first remote access controller receives the encrypted device locking key from the second remote access controller device, it decrypts the encrypted device locking key and uses the resulting device locking key to unlock the managed device.

Redundant device locking key management system

A key retrieval system includes a management system and a managed system that is coupled to the management system through a network. The managed system includes a managed device, a management system configuration storage, a remote access controller device that stores a management system configuration for the management system in the management system configuration storage and provides a key management client subsystem that is configured to use the management system configuration to access the management system. The managed system also includes a BIOS. The BIOS detects an event that triggers unlocking the managed device. The BIOS determines that the remote access controller device is unavailable and, in response, retrieves the management system configuration and accesses the management system using the management system configuration. The BIOS then retrieves the locking key from the management system and unlocks the managed device using the locking key.

Key recovery system

A system includes a management system, a managed system that is coupled to the management system through a network. The managed system comprises a managed device, a key identifier storage, a first managed device locking system coupled to the managed device and the key identifier storage, and a second managed device locking system coupled to the managed device, the key identifier storage, and the first managed device locking system. The first managed device locking system is configured to store a key identifier of the managed device in the key identifier storage and to provide access to a locking key of the managed device based upon the key identifier of the managed device, stored in a management system. The second managed device locking system is configured to monitor the managed device for an event that triggers unlocking the managed device, monitor operating status of the first managed device locking system. In some embodiments, where the first managed device locking system is unavailable, the second managed device locking system is configured to provide access to the locking key of the managed device based upon the key identifier of the managed device, stored in the management system.

Key management and recovery

A locking key secondary access system includes a key management system coupled to a secondary locking key access device and a server device via a network. The server device includes a managed device. The server device receives a request to unlock the managed device, and determines that a first access path via a first communication subsystem and through the network to the key management system is unavailable. In response, the server device provides locking key request information via a second communication subsystem to the secondary locking key access device. The secondary locking key access device may use the locking key information to retrieve a locking key for the managed device from the key management system. The secondary locking key access device sends the locking key to the server device via the second communication subsystem, and the server device uses the locking key to unlock the managed device.

Locking key secondary access system

In accordance with embodiments of the present disclosure, an information handling system may include a processor and a non-transitory computer-readable medium having stored thereon a program of instructions executable by the processor. The program of instructions may be configured to, when read and executed by the processor, receive an initial password, the initial password comprising a string of characters to be entered by a user of the information handling system for accessing the information handling system, separate the initial password into a plurality of compartments, select a random order of the plurality of compartments, generate a key based on the initial password as rearranged in accordance with the random order of the plurality of compartments, and store a key sequence representative of the random order of the plurality of compartments.

Systems and methods for obfuscation of password key and dynamic key pool management

Embodiments of systems and methods for providing configurable video redirection in a data center are discussed. In an embodiment, an Information Handling System (IHS) may include a Baseband Management Controller (BMC); and a memory coupled to the BMC, the memory having program instructions stored thereon that, upon execution by the BMC, cause the BMC to: receive a request from a remote client, where the request follows a first protocol; select one of a plurality of redirection components available to the IHS to populate a framebuffer with video frames using a second protocol; retrieve the video frames from the framebuffer; and transmit a response to the remote client following the first protocol, where the response comprises the video frames.

Configurable video redirection in a data center

An information handling system includes a processor, a managed device that provides a function to the processor, wherein the function is managed in accordance with a Managed Object Format (MOF) file, and a management controller that receives the MOF file, converts the MOF file to a Management Information Base (MIB), and manages the function based upon the MIB.

System and method for dynamic generation of a management information base through common information model class transformation

In accordance with embodiments of the present disclosure, an information handling system may include a processor, a peripheral device, and a service processor communicatively coupled to the processor and the peripheral device and configured to perform out-of-band management of the information handling system. The service processor may further configured to communicatively couple to a management controller having executing thereon a virtual service processor, receive a command associated with the peripheral device from the management controller, deliver the command to the peripheral device, receive data from the peripheral device, and communicate the data to the management controller.

Systems and methods for virtual service processor data bridging

Cryptographic affinities are generated to improve security in data centers. When a blade server is hot swapped, the cryptographic affinities protect electronic data stored within the blade server. The cryptographic affinities are generated based on hashing a unique chassis identifier. If the blade server is installed in a different chassis, the cryptographic affinities lock out the different chassis from read, write, and other access operations. The cryptographic affinities may even require deleting or reformatting before rekeying is commenced.

Chassis-based cryptographic affinities

A method and system for local key management setup and recovery includes receiving a lock request to secure one or more drives, then querying, for one or more key identifiers associated with a requesting device. The method includes: in response to receiving at least one key identifier, dynamically generating a first public-private key and a first public certificate associated with the at least one key identifier; and assigning the first public-private key and the first public certificate to the drives. The method further includes: concealing contents of the first public-private key and first public certificate; automatically transmitting the first public certificate to the first requesting device; and invoking the first public-private key to secure the drives. Finally, the method includes creating a recovery key, generating a recovery certificate associated with the recovery key, then, archiving the recovery key and the recovery certificate in a recovery database and a recovery server.

Growing community of inventors

Bengaluru, India

Sushma Basavarajaiah