Patent Application
20230328878
The disclosure relates generally to an information handling system, and in particular, an intrusion detection apparatus for an information handling system.
As the value and use of information continues to increase, individuals and businesses seek additional ways to process and store information. One option available to users is information handling systems. An information handling system generally processes, compiles, stores, and/or communicates information or data for business, personal, or other purposes thereby allowing users to take advantage of the value of the information. Because technology and information handling needs and requirements vary between different users or applications, information handling systems may also vary regarding what information is handled, how the information is handled, how much information is processed, stored, or communicated, and how quickly and efficiently the information may be processed, stored, or communicated. The variations in information handling systems allow for information handling systems to be general or configured for a specific user or specific use such as financial transaction processing, airline reservations, enterprise data storage, or global communications. In addition, information handling systems may include a variety of hardware and software components that may be configured to process, store, and communicate information and may include one or more computer systems, data storage systems, and networking systems.
Innovative aspects of the subject matter described in this specification may be embodied in an intrusion detection apparatus, including a printed circuit board (PCB), including an electrical switch, the electrical switch including conductive pads positioned on a top layer of the PCB, and a conductive ground ring positioned on the top layer and surrounding the conductive pads; and a mechanical pin coupled to a first portion of a chassis of the information handling system at a first end of the mechanical pin, the mechanical pin including a conductive gasket positioned at a second end of the mechanical pin, the first end opposite to the second end, wherein, when the first portion of the chassis is coupled to remaining portions of the chassis of the information handling system, the conductive gasket is in contact with the conductive pads to provide a signal indicating that the first portion of the chassis is coupled to the remaining portions of the information handling system, wherein the ground ring provides an intrusion signal when a foreign conductive object is in contact with the ground ring to indicate a presence of the foreign conductive object.
Other embodiments of these aspects include corresponding systems and apparatus.
These and other embodiments may each optionally include one or more of the following features. For instance, when the first portion of the chassis is not coupled to the remaining portions of the information handling system, the conductive gasket ceases to make contact with the conductive pads to provide a signal indicating that the first portion of the chassis is not coupled to the remaining portions of the information handling system. The PCB further includes a bottom layer and an internal layer, the bottom layer positioned opposite to the top layer and the internal layer positioned between the top layer and the bottom layer, wherein the electrical switch further includes conductive paths coupled to the conductive pads, the conductive paths positioned within the internal layer of the PCB or the bottom layer of the PCB. The conductive paths are positioned with the internal layer of the PCB. The conductive paths are positioned within the bottom layer of the PCB. The ground ring provides the intrusion signal that the foreign conductive object is in contact with the ground ring. The electrical switch includes two conductive pads.
The details of one or more embodiments of the subject matter described in this specification are set forth in the accompanying drawings and the description below. Other potential features, aspects, and advantages of the subject matter will become apparent from the description, the drawings, and the claims.
This disclosure discusses an intrusion detection apparatus for an information handling system. In short, an intrusion detection system of an information handling system can protect malicious intrusions of a chassis of the information handling system. The intrusion detection system can include an electrical switch that includes conductive paths that are routed in inner or bottom layers of a printed circuit board (PCB); and further include a ground ring to detect possible intrusion.
Specifically, this disclosure discusses an intrusion detection apparatus, including a printed circuit board (PCB), including: an electrical switch, the electrical switch including: conductive pads positioned on a top layer of the PCB, and a conductive ground ring positioned on the top layer and surrounding the conductive pads; and a mechanical pin coupled to a first portion of a chassis of the information handling system at a first end of the mechanical pin, the mechanical pin including a conductive gasket positioned at a second end of the mechanical pin, the first end opposite to the second end, wherein, when the first portion of the chassis is coupled to remaining portions of the chassis of the information handling system, the conductive gasket is in contact with the conductive pads to provide a signal indicating that the first portion of the chassis is coupled to the remaining portions of the information handling system, wherein the ground ring provides an intrusion signal when a foreign conductive object is in contact with the ground ring to indicate a presence of the foreign conductive object.
In the following description, details are set forth by way of example to facilitate discussion of the disclosed subject matter. It should be apparent to a person of ordinary skill in the field, however, that the disclosed embodiments are exemplary and not exhaustive of all possible embodiments.
For the purposes of this disclosure, an information handling system may include an instrumentality or aggregate of instrumentalities operable to compute, classify, process, transmit, receive, retrieve, originate, switch, store, display, manifest, detect, record, reproduce, handle, or utilize various forms of information, intelligence, or data for business, scientific, control, entertainment, or other purposes. For example, an information handling system may be a personal computer, a PDA, a consumer electronic device, a network storage device, or another suitable device and may vary in size, shape, performance, functionality, and price. The information handling system may include memory, one or more processing resources such as a central processing unit (CPU) or hardware or software control logic. Additional components of the information handling system may include one or more storage devices, one or more communications ports for communicating with external devices as well as various input and output (I/O) devices, such as a keyboard, a mouse, and a video display. The information handling system may also include one or more buses operable to transmit communication between the various hardware components.
For the purposes of this disclosure, computer-readable media may include an instrumentality or aggregation of instrumentalities that may retain data and/or instructions for a period of time. Computer-readable media may include, without limitation, storage media such as a direct access storage device (e.g., a hard disk drive or floppy disk), a sequential access storage device (e.g., a tape disk drive), compact disk, CD-ROM, DVD, random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), and/or flash memory (SSD); as well as communications media such wires, optical fibers, microwaves, radio waves, and other electromagnetic and/or optical carriers; and/or any combination of the foregoing.
Particular embodiments are best understood by reference to
Turning now to the drawings,
As depicted in
Also in
In information handling system 100, I/O subsystem 140 may comprise a system, device, or apparatus generally operable to receive and/or transmit data to/from/within information handling system 100. I/O subsystem 140 may represent, for example, a variety of communication interfaces, graphics interfaces, video interfaces, user input interfaces, and/or peripheral interfaces. In various embodiments, I/O subsystem 140 may be used to support various peripheral devices, such as a touch panel, a display adapter, a keyboard, an accelerometer, a touch pad, a gyroscope, an IR sensor, a microphone, a sensor, or a camera, or another type of peripheral device.
Local storage resource 150 may comprise computer-readable media (e.g., hard disk drive, floppy disk drive, CD-ROM, and/or other type of rotating storage media, flash memory, EEPROM, and/or another type of solid state storage media) and may be generally operable to store instructions and/or data. Likewise, the network storage resource may comprise computer-readable media (e.g., hard disk drive, floppy disk drive, CD-ROM, and/or other type of rotating storage media, flash memory, EEPROM, and/or other type of solid state storage media) and may be generally operable to store instructions and/or data.
In
In particular embodiments, network 110 may include one or more routers for routing data between client information handling systems 100 and server information handling systems 100. A device (e.g., a client information handling system 100 or a server information handling system 100) on network 110 may be addressed by a corresponding network address including, for example, an Internet protocol (IP) address, an Internet name, a Windows Internet name service (WINS) name, a domain name or other system name. In particular embodiments, network 110 may include one or more logical groupings of network devices such as, for example, one or more sites (e.g. customer sites) or subnets. As an example, a corporate network may include potentially thousands of offices or branches, each with its own subnet (or multiple subnets) having many devices. One or more client information handling systems 100 may communicate with one or more server information handling systems 100 via any suitable connection including, for example, a modem connection, a LAN connection including the Ethernet or a broadband WAN connection including DSL, Cable, T1, T3, Fiber Optics, Wi-Fi, or a mobile network connection including GSM, GPRS, 3G, or WiMax.
Network 110 may transmit data using a desired storage and/or communication protocol, including, but not limited to, Fibre Channel, Frame Relay, Asynchronous Transfer Mode (ATM), Internet protocol (IP), other packet-based protocol, small computer system interface (SCSI), Internet SCSI (iSCSI), Serial Attached SCSI (SAS) or another transport that operates with the SCSI protocol, advanced technology attachment (ATA), serial ATA (SATA), advanced technology attachment packet interface (ATAPI), serial storage architecture (SSA), integrated drive electronics (IDE), and/or any combination thereof. Network 110 and its various components may be implemented using hardware, software, or any combination thereof.
The information handling system 100 can also include a notification computing module 190. The notification computing module 190 can be included by the memory subsystem 130. The notification computing module 190 can include a computer-executable program (software). The notification computing module 190 can be executed by the processor subsystem 120.
In short, an intrusion detection system of the information handling system 100 can protect malicious intrusions of a chassis of the information handling system 202. The intrusion detection system can include an electrical switch that includes conductive paths that are routed in inner or bottom layers of a printed circuit board (PCB); and further include a ground ring to detect possible intrusion.
Turning to
The PCB 210 can include an electrical switch 214 and a conductive ground ring 219. The electrical switch 214 can include conductive pads 216.
The information handling system 202 can further include an intrusion detection apparatus 218. The intrusion detection apparatus 216 can include the electrical switch 216, the mechanical pin 212, and the conductive ground ring 219.
The information handling system 202 can further include a notification computing module 220. In some examples, the notification computing module 220 is similar to, or includes, the notification computing module 190 of
The PCB 210 can further include vias 310a, 310b (collectively referred to as vias 310). The vias 310 can be plated (by electroplating) on sidewalls 312a, 312b (collectively referred to as sidewalls 312) with an electrically conductive material (e.g., copper).
The conductive pad 216 (or pads 216) can be positioned on the top layer 302 of the PCB 210. In some examples, the electrical switch 214 can include two or more conductive pads 216.
The electrical switch 214 can further a conductive path 320 (or conductive paths 320) coupled to the conductive pads 216. The conductive path 320 can be positioned within the internal layer 306, the bottom layer 304, or both. As illustrated, the conductive path 320 is positioned within the internal layer 306. The conductive path 320 can be coupled to the conductive pad 216, and specifically, coupled to the conductive pad 216 by the electrically conductive material positioned on the sidewalls 312a. Furthermore, the conductive path 320 can provide a connection/coupling between the electrical switch 214, and in particular, between the conductive pads 216 and the notification computing module 220.
The conductive ground ring 219 can be positioned on the top layer 302 of the PCB 210. The conductive ground ring 219 can substantially surround the conductive pad 216 (or pads 216).
The electrical switch 214 can further include a conductive path 330 (or conductive paths 330) coupled to the conductive ground ring 219. The conductive path 330 can be positioned within the internal layer 306, the bottom layer 304, or both. As illustrated, the conductive path 330 is positioned within the bottom layer 304. The conductive path 330 can be coupled to the conductive ground ring 219, and specifically, coupled to the conductive ground ring 219 by the electrically conductive material positioned on the sidewalls 312b. Furthermore, the conductive path 320 can provide a connection/coupling between the electrical switch 214, and in particular, between the conductive ground ring 219 and the notification computing module 220.
To that end, when the conductive paths 320, 330 are positioned within the bottom layer 304, the internal layer 306, or both, the electrical switch 214 is provided from malicious attack to the electrical switch 214. Specifically, physical change and/or damage to the electrical paths 320, 330 is prevented by placing the electrical paths 320, 330 within the bottom layer 304, the internal layer 306, or both, by preventing external access to the electrical paths 320, 330.
To that end, when a foreign conductive object is in contact with the ground ring 219, the ground ring 219 can provide an intrusion signal to indicate the presence of the foreign conductive object.
The above disclosed subject matter is to be considered illustrative, and not restrictive, and the appended claims are intended to cover all such modifications, enhancements, and other embodiments which fall within the true spirit and scope of the present disclosure. Thus, to the maximum extent allowed by law, the scope of the present disclosure is to be determined by the broadest permissible interpretation of the following claims and their equivalents, and shall not be restricted or limited by the foregoing detailed description.
Herein, “or” is inclusive and not exclusive, unless expressly indicated otherwise or indicated otherwise by context. Therefore, herein, “A or B” means “A, B, or both,” unless expressly indicated otherwise or indicated otherwise by context. Moreover, “and” is both joint and several, unless expressly indicated otherwise or indicated otherwise by context. Therefore, herein, “A and B” means “A and B, jointly or severally,” unless expressly indicated otherwise or indicated other-wise by context.
The scope of this disclosure encompasses all changes, substitutions, variations, alterations, and modifications to the example embodiments described or illustrated herein that a person having ordinary skill in the art would comprehend. The scope of this disclosure is not limited to the example embodiments described or illustrated herein. Moreover, although this disclosure describes and illustrates respective embodiments herein as including particular components, elements, features, functions, operations, or steps, any of these embodiments may include any combination or permutation of any of the components, elements, features, functions, operations, or steps described or illustrated anywhere herein that a person having ordinary skill in the art would comprehend. Furthermore, reference in the appended claims to an apparatus or system or a component of an apparatus or system being adapted to, arranged to, capable of, configured to, enabled to, operable to, or operative to perform a particular function encompasses that apparatus, system, component, whether or not it or that particular function is activated, turned on, or unlocked, as long as that apparatus, system, or component is so adapted, arranged, capable, configured, enabled, operable, or operative.
