Facial recognition based security by a management controller

A non-transitory machine-readable storage medium comprising instructions that upon execution cause a first baseboard management controller (BMC) to:

• perform, based on operation of the first BMC within a cryptographic boundary, management of components of a computer system, the management of components comprising power control of the computer system, wherein the first BMC is separate from a processing resource of the computer system;
• receive image data from an image sensor;
• detect a face in the image data;
• determine whether the detected face corresponds to an authorized user;
• receive second sensor data from a second sensor, the second sensor data indicative of whether a cover of the computer system has been opened;
• receive, at the first BMC from a second BMC, third sensor data acquired by the second BMC remotely located from the first BMC;
• determine, based on the third sensor data acquired by the second BMC, whether a condition present at a location of the image sensor is also present at a further location;
• and
• initiate a security action with respect to the computer system responsive to determining that the detected face does not correspond to an authorized user, determining from the second sensor data that the cover of the computer system has been opened, and the determination from the third sensor data of whether the condition present at the location of the image sensor is also present at the further location, wherein the security action comprises encrypting data communicated by the first BMC.

A computer system comprising:

• a processing resource;
• an operating system executable on the processing resource;
• a first baseboard management controller (BMC) separate from the processing resource, the first BMC to:
• perform, based on operation of the first BMC within a cryptographic boundary, management of components of the computer system, the management of components comprising power control of the computer system;
• receive image data from an image sensor;
• perform facial recognition based on the image data;
• receive second sensor data from a second sensor, the second sensor data indicative of whether a cover of the computer system has been opened;
• receive, at the first BMC from a second BMC, third sensor data acquired by the second BMC remotely located from the first BMC;
• determine, based on the third sensor data acquired by the second BMC, whether a condition present at a location of the image sensor is also present at a further location;
• determine to initiate a security action responsive to the facial recognition, determining from the second sensor data that the cover of the computer system has been opened, and the determination from the third sensor data of whether the condition present at the location of the image sensor is also present at the further location;
• and
• perform the security action comprising encrypting data communicated by the first BMC.