Event-based display information protection system

Patent metadata

Field	Value
Publication number	US-2018225481-A1
Application number	US-201815943440-A
Country	US
Kind code	A1
Filing date	Apr 2, 2018
Priority date	Jul 30, 2015
Publication date	Aug 9, 2018
Grant date	—

Abstract

A display information protection system includes a management system that stores a plurality of display information protection policies and that may provide any of the display information protection policies through a network. An endpoint device is coupled to the management system through the network and stores a display information protection policy that may have been automatically populated or received from the management system. The endpoint device displays a plurality of information and may determine that a first subset of the plurality of information that has been provided for display is defined by the display information protection policy. In response to detecting the first display information protection event and determining that the first subset of a plurality of information is defined by the display information protection policy, the endpoint device obfuscates the display of the first subset of the plurality of information on the endpoint device.

First claim

What is claimed is:

1 . A display information security system, comprising:
a server device that is coupled to a network and that stores a plurality of display information protection policies, wherein the server device is configured to provide any of the display information protection policies through the network; and a computing device that is coupled to the server device through the network, wherein the computing device is configured to:
receive, from the server device through the network, a first display information protection policy of the plurality of display information protection policies;
store the first display information protection policy;
provide a plurality of information for display;
determine that a first subset of the plurality of information that has been provided for display is defined by the first display information protection policy;
detect a first display information protection event, wherein the detecting the first display information protection event includes determining that an amount of time has passed without an input being provided to the computing device; and
obfuscate, in response to detecting the first display information protection event and determining that the first subset of a plurality of information is defined by the first display information protection policy, the first subset of the plurality of information that is provided for display while continuing to provide a second subset of the plurality of information for display.

2 . The display information security system of claim 1 , wherein the determining that the amount of time has passed without the input being provided to the computing device includes determining that a power saving action has been performed on the computing device.

3 . The display information security system of claim 1 , wherein the determining that the amount of time has passed without the input being provided to the computing device includes detecting the performance of a lock action on the computing device.

4 . The display information security system of claim 1 , wherein the determining that the amount of time has passed without the input being provided to the computing device includes detecting the performance of a sleep action on the computing device.

5 . The display information security system of claim 1 , further comprising:
a secure storage system that is included in the computing device and that stores the first display information protection policy, wherein the computing device is configured to authenticate to the secure storage system to retrieve the first display information protection policy.

6 . The display information security system of claim 1 , wherein the obfuscating the first subset of the plurality of information that is provided for display includes at least one of:
minimizing an application that was providing the first subset of the plurality of information for display; providing at least one graphical element for display in place of the first subset of the plurality of information that was provided for display; and stopping transmission of the first subset of the plurality of information over the network such that only the second subset of the plurality of information is transmitted over the network.

7 . An information handling system (IHS), comprising:
at least one input device; a display device connector; a database storing a display information protection policy; a processing system that is coupled to the at least one input device, the display device connector, and the database; and a memory system that is coupled to the processing system and that includes instruction that, when executed by the processing system, cause the processing system to provide a display information protection engine that is configured to:
provide, via the display device connector, a plurality of information for display;
determine that a first subset of the plurality of information that has been provided for display is defined by the display information protection policy;
detect a display information protection event, wherein the detecting the display information protection event includes determining that an amount of time has passed without an input being provided to the at least one input device; and
obfuscate, in response to detecting the display information protection event and determining that the first subset of a plurality of information is defined by the display information protection policy, the first subset of the plurality of information that is provided for display while continuing to provide a second subset of the plurality of information for display.

8 . The IHS of claim 7 , wherein the determining that the amount of time has passed without the input being provided to the at least one input device includes determining that a power saving action has been performed.

9 . The IHS of claim 7 , wherein the determining that the amount of time has passed without the input being provided to the at least one input device includes detecting the performance of a lock action.

10 . The IHS of claim 7 , wherein the determining that the amount of time has passed without the input being provided to the at least one input device includes detecting the performance of a sleep action.

11 . The IHS of claim 7 , further comprising:
a secure storage system that includes the database that stores the display information protection policy, wherein the display information protection engine is configured to authenticate to the secure storage system to retrieve the display information protection policy.

12 . The IHS of claim 7 , wherein the obfuscating the first subset of the plurality of information that is provided for display includes at least one of:
minimizing an application that was providing the first subset of the plurality of information for display; providing at least one graphical element for display in place of the first subset of the plurality of information that was provided for display; and stopping transmission of the first subset of the plurality of information over the network such that only the second subset of the plurality of information is transmitted over the network.

13 . The IHS of claim 7 , wherein the display information protection engine that is configured to:
receive the display information protection policy from a management server over a network; and store the display information protection policy in the database.

14 . A method for providing event-based display information protection, comprising:
providing, by a computing system through a display device connector, a plurality of information for display; determining, by the computing system, that a first subset of the plurality of information that has been provided for display is defined by a display information protection policy that is stored in a storage subsystem; detecting, by the computing system, a display information protection event, wherein the detecting the display information protection event includes determining that an amount of time has passed without an input being provided to at least one input device; and obfuscating, in response to detecting the display information protection event and determining that the first subset of a plurality of information is defined by the display information protection policy, the first subset of the plurality of information that is provided for display while continuing to provide a second subset of the plurality of information for display.

15 . The method of claim 14 , wherein the determining that the amount of time has passed without the input being provided to the at least one inpu

Assignees

• Dell Products Lp

Inventors

• Hamlin Daniel L
• Robison Jr Charles D

Classifications

• G06F2221/032

  Protect output to user by software means · CPC title

• G06F21/84 Primary

  output devices, e.g. displays or monitors · CPC title