Method and apparatus for a modular digital chassis lock assembly in an information handling system

Patent metadata

Field	Value
Publication number	US-11514196-B2
Application number	US-201916540680-A
Country	US
Kind code	B2
Filing date	Aug 14, 2019
Priority date	Aug 14, 2019
Publication date	Nov 29, 2022
Grant date	Nov 29, 2022

Abstract

A lock for an information handling system includes a sensor configured to detect removal of an element from a chassis prior to verification of a user credential, and a plunger that engages the chassis at a first position. A security controller verifies the user credential, and causes the muscle wire to move the plunger from the first position to a second position in response to the verified user credential.

First claim

What is claimed is:

1. An information handling system, comprising:
a chassis;
a removable element; and
a chassis lock assembly that couples the removable element to the chassis, the chassis lock assembly including:
a sensor configured to detect when the removable element is removed from the chassis prior to verification of a user credential;
a plunger that latches to the chassis at a first position; and
a security controller configured to verify the user credential, wherein the security controller disables the sensor and facilitates movement of the plunger from the first position to a second position in response to a verified user credential.

2. The information handling system of claim 1 , wherein the chassis includes a chassis hook having a vertically flipped “L” shaped structure, wherein the plunger is disposed adjacent to a short side of the “L” shaped structure at the first position.

3. The information handling system of claim 2 , wherein the plunger moves from the first position to the second position to disengage from the chassis hook.

4. The information handling system of claim 1 , wherein the chassis lock assembly further including a muscle wire that is coupled to the plunger, wherein the security controller sends an electrical signal to the muscle wire in response to the verified user credential, the electrical signal facilitates the movement of the plunger from the first position to the second position.

5. The information handling system of claim 1 , wherein the security controller includes a data storage that stores a private key to decrypt the user credential that is wrapped by a basis input output system (BIOS) with a public key.

6. The information handling system of claim 5 , wherein the security controller sends an unlocking notification to the BIOS upon the verification of the user credential, wherein the BIOS sends the unlocking notification to a user.

7. The information handling system of claim 5 , wherein the security controller creates a pair of the public key and the private key in response to a request from the BIOS, wherein the pair is used to cryptographically bind the chassis lock assembly to the BIOS.

8. The information handling system of claim 1 , wherein the sensor includes a pressure sensor.

9. The information handling system of claim 8 , wherein the security controller is configured to delete a stored private key in response to a triggering of an interrupt by the sensor.

10. The information handling system of claim 1 , wherein the security controller utilizes a threshold in the verification of the user credential.

11. A lock for coupling an element of a chassis of an information handling system, the lock comprising:
a sensor configured to detect removal of the element from the chassis prior to verification of a user credential;
a plunger that engages the chassis at a first position;
a muscle wire connected to the plunger; and
a security controller configured to verify the user credential, to disable the sensor, and to cause the muscle wire to move the plunger from the first position to a second position in response to the verified user credential.

12. The lock of claim 11 , wherein the plunger latches to a chassis hook of the chassis at the first position, the chassis hook having a vertically flipped “L” shaped structure, wherein the plunger is disposed adjacent to a short side of the “L” shaped structure at the first position.

13. The lock of claim 11 , wherein the sensor is configured to trigger an interrupt in response to a detected removal of the element from the chassis prior to the verification of the user credential, wherein the interrupt indicates an unauthorized removal of the element from the chassis.

14. The lock of claim 11 , wherein the security controller includes a data storage that stores a private key to decrypt the user credential that is wrapped by a basic input output system (BIOS) with a public key.

15. The lock of claim 14 , wherein the security controller sends an unlocking notification to the BIOS upon the verification of the user credential, wherein the BIOS sends the unlocking notification to a user.

16. The lock of claim 14 , wherein the security controller creates a pair of the public key and the private key that are used to cryptographically bind the chassis lock assembly to the BIOS.

17. The lock of claim 11 , wherein the sensor includes a pressure sensor.

18. A method, comprising:
receiving, by a basic input output system (BIOS), a user credential; and
verifying, by a security controller, the user credential, wherein the security controller is configured to disable a sensor of a chassis lock assembly and to disengage a plunger of the chassis lock assembly from a chassis in response to a verified user credential, wherein the sensor is configured to detect when an element that is attached by the chassis lock assembly to the chassis is detached prior to the verification of the user credential.

19. The method of claim 18 , wherein the receiving further including:
searching, by the BIOS, a stored public key;
wrapping the user credential with the public key; and
sending the wrapped user credential to the security controller for verification of the user credential.

20. The method of claim 19 , wherein the security controller decrypts the wrapped user credential using a private key to verify the user credential, wherein the plunger moves from the first position to a second position in response to a verified user credential.

Assignees

• Dell Products Lp
• Dell Products Lp

Inventors

• Grobelny Nicholas D
• David Michael
• Critz Christian L

Classifications

• G06F21/31

  User authentication · CPC title

• G06F21/86 Primary

  Secure or tamper-resistant housings · CPC title

• H04L9/0894

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title

• H04L9/0891

  Revocation or update of secret information, e.g. encryption key update or rekeying · CPC title

• H04L9/3226 Primary

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title