US 11,240,109 B2Granted

Systems and methods for workspace continuity and remediation

AssigneeDell Products L.P.

InventorsCarlton A. Andrews, Girish S. Dhoble, Nicholas D. Grobelny, David Konetski, Joseph Kozlowski, Ricardo L. Martinez, Charles D. Robison

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

Systems and methods for modernizing workspace and hardware lifecycle management in an enterprise productivity ecosystem are described. In some embodiments, a client Information Handling System (IHS) may include a processor and a memory, the memory having program instructions that, upon execution by the processor, cause the client IHS to: receive, from a workspace orchestration service, one or more files or policies configured to enable the client IHS to instantiate a first workspace based upon a first workspace definition; allow a user to execute a non-vetted application in the first workspace; determine that the first workspace is compromised; and receive, in response to the determination, from the workspace orchestration service, one or more other files or policies configured to enable the client IHS to instantiate a second workspace based upon a second workspace definition, where the second workspace definition allows execution of a vetted application corresponding to the non-vetted application.

Claims17

Dependent claims

A client Information Handling System (IHS), the client IHS comprising:

a processor;
and
a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the client IHS to:
instantiate, using one or more files or policies, a first workspace based upon a first workspace definition;
allow a user to execute a non-vetted application in the first workspace;
determine that the first workspace is compromised because the application is non-vetted;
and
in response to the determination:
identify a vetted application that corresponds to the non-vetted application, wherein the vetted application is different than the non-vetted application;
instantiate, using one or more other files or policies, a second workspace based upon a second workspace definition, wherein the second workspace definition indicates the vetted application corresponding to the non-vetted application;
cause the client IHS to migrate a workload from the first workspace to the second workspace;
cause the client IHS to transmit, to a workspace orchestration service, cloned user actions and data collected during execution of the non-vetted application in the first workspace, and wherein the one or more other files or policies comprise an indication of the cloned user actions and data that is applicable to the vetted application in the second workspace;
and
allow the user to execute the vetted application in the second workspace.

11 more elements

A memory storage device having program instructions stored thereon that, upon execution by one or more processors of an Information Handling System (IHS) of a workspace orchestration service, cause the IHS to:

instantiate, using one or more files or policies, a first workspace based upon a first workspace definition;
determine that that the first workspace has been compromised due to execution of a non-vetted application;
and
in response to the determination:
identify a vetted application that corresponds to the non-vetted application, wherein the vetted application is different than the non-vetted application;
cause the client IHS to migrate a workload from the first workspace to the second workspace;
cause the client IHS to transmit, to a workspace orchestration service, cloned user actions and data collected during execution of the non-vetted application in the first workspace, and wherein the one or more other files or policies comprise an indication of the cloned user actions and data that is applicable to the vetted application in the second workspace;
and
instantiate, using one or more other files or policies, a second workspace based upon a second workspace definition, wherein the second workspace definition allows execution of a vetted application corresponding to the non-vetted application, wherein the second workspace definition indicates the vetted application corresponding to the non-vetted application.

6 more elements

A method, comprising:

instantiating, using one or more files or policies, a first workspace based upon a first workspace definition;
receiving user actions and data collected during execution of a non-vetted application in the first workspace;
and
in response to a determination that the first workspace has been compromised due to execution of the non-vetted application:
identifying a vetted application that corresponds to the non-vetted application, wherein the vetted application is different than the non-vetted application;
instantiating, using one or more other files or policies, a second workspace based upon a second workspace definition, wherein the second workspace definition indicates a vetted application corresponding to the non-vetted application, and wherein the one or more other files or policies comprise at least a subset of the user actions and data to be applied to the vetted application in the second workspace;
cause the client IHS to migrate a workload from the first workspace to the second workspace;
cause the client IHS to transmit, to a workspace orchestration service, cloned user actions and data collected during execution of the non-vetted application in the first workspace, and wherein the one or more other files or policies comprise an indication of the cloned user actions and data that is applicable to the vetted application in the second workspace;
and
allowing the user to execute the vetted application in the second workspace.

7 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/670,516Filed 31 Oct 2019
Published: US 2021/0135943 A16 May 2021
Granted: 1 Feb 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

H04L 67/12
Protocols: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in…
H04L 41/0894
Configuration management of networks or network elements: policy-based network configuration management
H04L 63/102
For controlling access to devices or network resources: entity profiles
H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general