USB Device Screening via Management Controller at System Startup

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data processing systems are vulnerable to security threats from USB devices due to automatic initiation of USB operations without sufficient screening, especially during system startups when security programs may be corrupted or inoperable.

Innovation Solution

A management controller performs a screening procedure using out-of-band components to determine whether a USB device is known good, analyzing communication patterns and device data to allow or deny access, independent of potentially compromised in-band components.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If automatic initiation of USB operations is implemented, then ease of operation is improved, but security vulnerability increases

Engineering Contradiction:

Improveautomatic initiation of USB operationsVSAvoidsecurity vulnerability from malicious USB devices

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The management controller performs a screening procedure on USB devices before allowing automatic initiation of operations. This preliminary screening checks device data and communication patterns against known good device profiles, preventing malicious devices from compromising the system while still enabling automatic operation for legitimate devices.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The management controller acts as an intermediary between USB devices and the data processing system. It intercepts and screens USB device communications, analyzing traffic patterns and device data before permitting access to the main system, thus resolving the security vulnerability without blocking automatic operation.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If security screening procedures are implemented, then security reliability is improved, but device complexity increases

Engineering Contradiction:

Improvesecurity reliabilityVSAvoidcomplexity of screening procedure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The screening functionality is extracted from the main data processing system and implemented in a separate management controller. This isolation prevents the screening complexity from affecting the main system while maintaining security reliability through dedicated screening hardware that operates independently.

Inventive Principle:

Principle #2Taking out (Extraction)

3Reliability

If screening is performed during system startup, then security protection is improved, but productivity decreases due to additional processing time

Engineering Contradiction:

Improvesecurity protection during startupVSAvoidsystem startup speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent replaces software-based security screening with hardware-based screening in the management controller. This substitution enables parallel processing of screening operations during system startup, reducing the impact on startup speed while maintaining security protection.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS20260064466A1Managing USB devices using a management controller of a data procesisng system

Publication Date: 2026.03.05 DELL PROD LP

AI summary

Methods and systems for managing operations of a data processing system are disclosed. To manage operations of the data processing system, a hardware resource of the data processing system may identify that a device is operably connected to the data processing system. A management controller of the data processing system may perform a screening procedure to determine whether the device is an any known good device. If the device is not the any known good device, the device may be denied access to the data processing system to reduce an impact of the device on the operation of the data processing system. If the device is the any known good device, the device may be allowed access to the data processing system to perform functions of the device. Computer-implemented services may be provided using the device.