Patent ID: 11909746
Assignee: DELL PRODUCTS L.P.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 18:
19. A computer implemented method, comprising:
receiving a notification of user login from an information handling system (IHS) located at a first location when a user initiates login to a protected network from the IHS;
collecting data from the IHS and one or more trusted devices located within the first location, wherein the collected data comprises system and user-related data;
adding the collected data to user profile data previously stored within a training dataset; and
using the collected data and the user profile data previously stored within the training dataset to securely authenticate the user or detect potential security threats to the protected network;
wherein said using the collected data and the user profile data previously stored within the training dataset to securely authenticate the user or detect potential security threats to the protected network comprises using the collected data and the user profile data to:
determine if the user's login behavior is normal, and
detect if at least one trusted device of the one or more trusted devices is in range of the IHS located at the first location; and

where the user's login behavior is determined to be normal if the user initiates the log-in from the IHS located at a first location during normal work hours of the user and/or during a previously scheduled meeting time, and where the user's log-in behavior is determined to be abnormal if the user initiates the login from the IHS located at a first location not during normal work hours of the user and/or not during a previously scheduled meeting time.