Amy Elizabeth Nelson

US Patent:

8312296, Nov 13, 2012

Filed:

Mar 10, 2010

Appl. No.:

12/721390

Inventors:

Amy Christine Nelson - Round Rock TX, US

Assignee:

Dell Products L.P. - Round Rock TX

International Classification:

G06F 21/00

US Classification:

713193, 726 22, 711163, 711164

Abstract:

Systems and methods for reducing problems and disadvantages associated with traditional approaches to encryption and decryption of data are provided. An information handling system may include a processor, a memory communicatively coupled to the processor, and a computer-readable medium communicatively coupled to the processor. The computer-readable medium may have instructions stored thereon, the instructions configured to, when executed by the processor: (i) periodically store, during an encryption or decryption operation performed on the computer-readable medium, one or more variables indicative of an encryption status of a volume of the computer-readable medium; (ii) determine, based on the one or more variables, whether the volume is in a partially encrypted or decrypted state; and (iii) in response to a determination that the volume is in a partially encrypted or decrypted state, boot from the volume and continue the encryption or decryption operation.

US Patent:

20110225406, Sep 15, 2011

Filed:

Mar 10, 2010

Appl. No.:

12/721369

Inventors:

Amy Christine Nelson - Round Rock TX, US
Brian Decker - Round Rock TX, US
Marc D. Alexander - Cedar Park TX, US

Assignee:

DELL PRODUCTS L.P. - Round Rock TX

International Classification:

G06F 21/22
G06F 9/24
G06F 21/00

US Classification:

713 2, 713189, 380277

Abstract:

Systems and methods for reducing problems and disadvantages associated with traditional approaches to encryption and decryption of data are provided. An information handling system may include a processor, a memory communicatively coupled to the processor, an encryption accelerator communicatively coupled to the processor, and a computer-readable medium communicatively coupled to the processor. The encryption accelerator may be configured to encrypt or decrypt data in response to a command from the processor to perform an encryption or decryption task upon data associated with an input/output operation. The computer-readable medium may have instructions stored thereon, the instructions configured to, when executed by the processor: (i) monitor for input/output operations occurring prior to loading of an operating system into the memory; and (ii) in response to detection of an input/output operation, communicate a command to the encryption accelerator to perform an encryption or decryption task upon data associated with an input/output operation.

US Patent:

20110225428, Sep 15, 2011

Filed:

Mar 10, 2010

Appl. No.:

12/721355

Inventors:

Amy Christine Nelson - Round Rock TX, US

Assignee:

DELL PRODUCTS L.P. - Round Rock TX

International Classification:

H04L 9/00

US Classification:

713189

Abstract:

Systems and methods for reducing problems and disadvantages associated with traditional approaches to encryption and decryption of data are provided. A method for encryption and decryption of data, may include encrypting or decrypting data associated with an input/output operation based on at least one of an encryption key and a cryptographic function, wherein at least one of the encryption key and the cryptographic function are selected based on one or more characteristics associated with the data to be encrypted or decrypted. Another method may include encrypting an item of data based on at least one of a first-layer encryption key and a first-layer cryptographic function to produce first-layer encrypted data and encrypting the first-layer encrypted data based on at least one of a second-layer encryption key and a second-layer cryptographic function to produce second-layer encrypted data.

US Patent:

20130067210, Mar 14, 2013

Filed:

Oct 30, 2012

Appl. No.:

13/663738

Inventors:

Amy Christine Nelson - Round Rock TX, US

International Classification:

G06F 21/00

US Classification:

713 2

Abstract:

Systems and methods for reducing problems and disadvantages associated with traditional approaches to encryption and decryption of data are provided. An information handling system may include a processor, a memory communicatively coupled to the processor, and a computer-readable medium communicatively coupled to the processor. The computer-readable medium may have instructions stored thereon, the instructions configured to, when executed by the processor: (i) periodically store, during an encryption or decryption operation performed on the computer-readable medium, one or more variables indicative of an encryption status of a volume of the computer-readable medium; (ii) determine, based on the one or more variables, whether the volume is in a partially encrypted or decrypted state; and (iii) in response to a determination that the volume is in a partially encrypted or decrypted state, boot from the volume and continue the encryption or decryption operation.

US Patent:

6357018, Mar 12, 2002

Filed:

Jan 26, 1999

Appl. No.:

09/237704

Inventors:

John Stuewe - Cedar Park TX
Amy C. Nelson - Round Rock TX

Assignee:

Dell USA, L.P. - Round Rock TX

International Classification:

G06F 1100

US Classification:

714 37, 714 43

Abstract:

A computer system includes at least one processor, at least one memory, and a device for performing a prescribed continuity and integrity check of a memory bus channel having a serial topology. In one embodiment, basic input output system (BIOS) firmware is stored in memory and includes instructions for causing the processor to perform the prescribed continuity and integrity check of the memory bus channel having a serial topology.

US Patent:

20220407714, Dec 22, 2022

Filed:

Jun 18, 2021

Appl. No.:

17/351424

Inventors:

- Round Rock TX, US
Amy Christine Nelson - Round Rock TX, US

International Classification:

H04L 9/32
G06F 8/71

Abstract:

In one or more embodiments, a first information handling system may: receive a chained cryptographic hash value determined by a trusted platform module (TPM) of a second information handling system; receive multiple patch identities associated with multiple updated firmware installed on multiple components of the second information handling system; receive an event log associated with output of the TPM as the TPM determined the chained cryptographic hash value; retrieve multiple layered endorsements respectively associated with the multiple patch identities; determine multiple hash values from multiple signatures stored in the multiple layered endorsements; compare the chained cryptographic hash value with the event log; compare multiple event information with the multiple hash values; and determine that the second information handling system has booted into a trusted state based at least on comparing the chained cryptographic hash value with the event log and comparing the multiple event information with the multiple hash values.

US Patent:

20220383333, Dec 1, 2022

Filed:

May 28, 2021

Appl. No.:

17/333783

Inventors:

- Round Rock TX, US
CHARLES DELBERT ROBISON - Buford GA, US
AMY CHRISTINE NELSON - Round Rock TX, US

International Classification:

G06Q 30/00
G06Q 10/08
H04L 9/08
H04L 9/14

Abstract:

In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may: create a manifest that includes inventory information for components of a first information handling system (IHS); encrypt, with a first private encryption key, a hash value of the manifest to produce a signature of the manifest; provide, to a second IHS, a certificate signing request that includes the manifest, the signature of the manifest, and a first public encryption key; decrypt, utilizing the first public encryption key, the signature of the manifest to obtain the hash value of the manifest; determine name-value pairs from the manifest as attributes; encrypt, with a second private encryption key, a hash value of the attributes to produce a signature of the attributes; create an attribute certificate that includes the attributes and the signature of the attributes; and provide the attribute certificate to the first IHS.

US Patent:

20210266184, Aug 26, 2021

Filed:

Feb 25, 2020

Appl. No.:

16/800751

Inventors:

- Round Rock TX, US
Nicholas D. Grobelny - Austin TX, US
Amy C. Nelson - Round Rock TX, US

International Classification:

H04L 9/32
H04L 29/06
H04L 9/08

Abstract:

The present disclosure provides various embodiments of systems and related methods to track and cryptographically verify system configuration changes. More specifically, systems and methods are disclosed herein to track an original system configuration of an information handling system (IHS) as the system was built by a manufacturing facility, and any system configuration changes that are made to the original system configuration after the IHS leaves the manufacturing facility. Once a user takes ownership of the IHS, systems and methods disclosed herein may be used to cryptographically verify a current system configuration of the IHS. In doing so, the present disclosure provides a way to authenticate or validate system configuration changes that may occur after the IHS leaves the manufacturing facility.