Information handling systems and methods to provide a secure platform control point for cloud-native applications
AssigneeDell Products L.P.
InventorsAnantha K. Boyapalle, Vivek V. Iyer
Life of this patent
Estimating the term…
Abstract
Various embodiments of information handling systems and related methods provide a secure platform control point, which enables cloud-native applications to access the local hardware resources and platform capabilities of the information handling system. The embodiments disclosed herein provide the same level of security, manageability and compute/intelligence for cloud-native applications, as endpoint-native applications run locally on the information handling system.
Claims19
An information handling system (IHS) having a host processor, the IHS comprising:
- a web browser executable by the host processor to access a cloud-native application running on a remote system communicatively coupled to the IHS via a network;
- a web browser extension executable by the host processor to collect information about the cloud-native application, wherein the information collected by the web browser extension identifies the cloud-native application and a hardware resource requested by the cloud-native application;
- and
- an operating system (OS) kernel-mode virtual driver executed by the host processor to:
- discover hardware resources and platform capabilities provided within the IHS;
- receive a request from the web browser extension to access the hardware resource requested by the cloud-native application;
- and
- provide the web browser access to a specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application.
An information handling system (IHS) having a host processor, the IHS comprising:
- a web browser executable by the host processor to access a cloud-native application running on a remote system communicatively coupled to the IHS via a network;
- a web browser extension executable by the host processor to collect information about the cloud-native application, wherein the information collected by the web browser extension identifies the cloud-native application and a hardware resource requested by the cloud-native application;
- and
- a kernel-mode virtual driver executed by the host processor to:
- discover hardware resources and platform capabilities provided within the IHS;
- receive a request from the web browser extension to access the hardware resource requested by the cloud-native application;
- and
- provide the web browser access to a specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- wherein the kernel-mode virtual driver is further executable by the host processor to:
- generate handles to software drivers that control the hardware resources provided within the IHS;
- and
- provide a handle to the web browser, via the web browser extension, for accessing the hardware resource requested by the cloud-native application, wherein the handle provides a data path to access a specific software driver, which controls the specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- and
- wherein the web browser extension destroys the handle provided by the kernel-mode virtual driver when the cloud-native application no longer requires access to the hardware resource.
An information handling system (IHS) having a host processor, the IHS comprising:
- a web browser executable by the host processor to access a cloud-native application running on a remote system communicatively coupled to the IHS via a network;
- a web browser extension executable by the host processor to collect information about the cloud-native application, wherein the information collected by the web browser extension identifies the cloud-native application and a hardware resource requested by the cloud-native application;
- and
- a kernel-mode virtual driver executed by the host processor to:
- discover hardware resources and platform capabilities provided within the IHS;
- receive a request from the web browser extension to access the hardware resource requested by the cloud-native application;
- and
- provide the web browser access to a specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- wherein the kernel-mode virtual driver is further executable by the host processor to:
- generate handles to software drivers that control the hardware resources provided within the IHS;
- and
- provide a handle to the web browser, via the web browser extension, for accessing the hardware resource requested by the cloud-native application, wherein the handle provides a data path to access a specific software driver, which controls the specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- where the information handling system further comprises an operating system (OS) service executed by the host processor to:
- (a) transfer the request from the web browser extension to the OS kernel-mode virtual driver, and (b) transfer the handle from the kernel-mode virtual driver to the web browser extension;
- and
- wherein the OS service uses interprocess communication (IPC) messages to:
- (a) transfer the request from the web browser extension to the kernel-mode virtual driver, and (b) transfer the handle from the kernel-mode virtual driver to the web browser extension.
An information handling system (IHS) having a host processor, the IHS comprising:
- a web browser executable by the host processor to access a cloud-native application running on a remote system communicatively coupled to the IHS via a network;
- a web browser extension executable by the host processor to collect information about the cloud-native application, wherein the information collected by the web browser extension identifies the cloud-native application and a hardware resource requested by the cloud-native application;
- and
- a kernel-mode virtual driver executed by the host processor to:
- discover hardware resources and platform capabilities provided within the IHS;
- receive a request from the web browser extension to access the hardware resource requested by the cloud-native application;
- provide the web browser access to a specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- generate handles to software drivers that control the hardware resources provided within the IHS;
- provide a handle to the web browser, via the web browser extension, for accessing the hardware resource requested by the cloud-native application, wherein the handle provides a data path to access a specific software driver, which controls the specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- and
- communicate with the specific software driver to initiate an action on the specific hardware resource and control security for the action, wherein the kernel-mode virtual driver is further executable by the host processor to control security for the action based on contextual information collected from the IHS.
An information handling system (IHS) having a host processor, the IHS comprising:
- a web browser executable by the host processor to access a cloud-native application running on a remote system communicatively coupled to the IHS via a network;
- a web browser extension executable by the host processor to collect information about the cloud-native application, wherein the information collected by the web browser extension identifies the cloud-native application and a hardware resource requested by the cloud-native application;
- and
- a kernel-mode virtual driver executed by the host processor to:
- discover hardware resources and platform capabilities provided within the IHS;
- receive a request from the web browser extension to access the hardware resource requested by the cloud-native application;
- provide the web browser access to a specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- generate handles to software drivers that control the hardware resources provided within the IHS;
- provide a handle to the web browser, via the web browser extension, for accessing the hardware resource requested by the cloud-native application, wherein the handle provides a data path to access a specific software driver, which controls the specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- and
- communicate with the specific software driver to initiate an action on the specific hardware resource and control security for the action, wherein the kernel-mode virtual driver is further executable by the host processor to use the platform capabilities provided within the IHS to control security for the action.
A computer implemented method performed by a host processor of an information handling system (IHS), and wherein the computer implemented method comprises:
- accessing, via a web browser executed by the host processor, a cloud-native application running on a remote system communicatively coupled to the IHS via a network;
- collecting, via a web browser extension executed by the host processor, information about the cloud-native application, wherein the information identifies the cloud-native application and a hardware resource requested by the cloud-native application;
- discovering hardware resources and platform capabilities provided within the IHS;
- receiving a request from the web browser extension to access the hardware resource requested by the cloud-native application;
- and
- providing the web browser access to a specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- wherein said discovering, receiving and providing are performed by an operating system (OS) kernel-mode virtual driver executed by the host processor.
A computer implemented method performed by a host processor of an information handling system (IHS), and wherein the computer implemented method comprises:
- accessing, via a web browser executed by the host processor, a cloud-native application running on a remote system communicatively coupled to the IHS via a network;
- collecting, via a web browser extension executed by the host processor, information about the cloud-native application, wherein the information identifies the cloud-native application and a hardware resource requested by the cloud-native application;
- discovering hardware resources and platform capabilities provided within the IHS;
- receiving a request from the web browser extension to access the hardware resource requested by the cloud-native application;
- and
- providing the web browser access to a specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- wherein said providing the web browser access to a specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application comprises:
- generating handles to software drivers that control the hardware resources provided within the IHS;
- and
- providing a handle to the web browser, via the web browser extension, for accessing the hardware resource requested by the cloud-native application, wherein the handle provides a data path to access a specific software driver, which controls the specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- and
- where the method further comprises destroying the handle provided to the web browser when the cloud-native application no longer requires access to the hardware resource.
A computer implemented method performed by a host processor of an information handling system (IHS), and wherein the computer implemented method comprises:
- accessing, via a web browser executed by the host processor, a cloud-native application running on a remote system communicatively coupled to the IHS via a network;
- collecting, via a web browser extension executed by the host processor, information about the cloud-native application, wherein the information identifies the cloud-native application and a hardware resource requested by the cloud-native application;
- discovering hardware resources and platform capabilities provided within the IHS;
- receiving a request from the web browser extension to access the hardware resource requested by the cloud-native application;
- providing the web browser access to a specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application by:
- generating handles to software drivers that control the hardware resources provided within the IHS;
- and
- providing a handle to the web browser, via the web browser extension, for accessing the hardware resource requested by the cloud-native application, wherein the handle provides a data path to access a specific software driver, which controls the specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- communicating with the specific software driver to initiate an action on the specific hardware resource and control security for the action;
- collecting contextual information from the IHS;
- and
- controlling security for the action based on the contextual information.
A computer implemented method performed by a host processor of an information handling system (IHS), and wherein the computer implemented method comprises:
- accessing, via a web browser executed by the host processor, a cloud-native application running on a remote system communicatively coupled to the IHS via a network;
- collecting, via a web browser extension executed by the host processor, information about the cloud-native application, wherein the information identifies the cloud-native application and a hardware resource requested by the cloud-native application;
- discovering hardware resources and platform capabilities provided within the IHS;
- receiving a request from the web browser extension to access the hardware resource requested by the cloud-native application;
- providing the web browser access to a specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application by:
- generating handles to software drivers that control the hardware resources provided within the IHS;
- and
- providing a handle to the web browser, via the web browser extension, for accessing the hardware resource requested by the cloud-native application, wherein the handle provides a data path to access a specific software driver, which controls the specific hardware resource within the IHS that corresponds to the hardware resource requested by the cloud-native application;
- communicating with the specific software driver to initiate an action on the specific hardware resource and control security for the action;
- and
- using the platform capabilities provided within the IHS to control security for the action.
Dependencies are inferred from the claim text.