# US 12,182,596 B2 · System and method for secure application domain on bare metal information handling system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,182,596 B2 - Document ID: US12182596B2 - Status: Granted - Kind: B2 - Application number: 17/462,088 - Filed: 2021-08-31 - Published: 2023-03-02 - Granted: 2024-12-31 - Earliest claimed: 2021-08-31 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Anantha K. Boyapalle; Sumanth Vidyadhara - Web page: https://patentgrep.com/patent/US12182596B2 ## CPC - G06F 9/45541: {Bare-metal, i.e. hypervisor runs directly on hardware} - G06F 9/4406: {Loading of operating system} - G06F 9/445: Program loading or initiating (bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57) - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 9/455: Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines - G06F 2009/45587: {Isolation or security of virtual machine instances} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system, method, and computer-readable medium are disclosed for servicing and managing a bare metal information handling system. An embedded lightweight operating system on the bare metal information handling system is booted up. The embedded lightweight operating system initiates a platform inference engine which is provided rules and policies as to applications to be run on the bare metal information handling system. The platform inference engine initiates a secure workspace launcher to launch a user workspace user experience environment. The user workspace user experience environment is provided on the bare metal information handling system. ## Claims ### Claim 1 A computer-implementable method for servicing and managing a bare metal information handling system, comprising: booting up an embedded lightweight operating system on the bare metal information handling system; initiating a platform inference engine by the embedded lightweight operating system, wherein the platform inference engine is provided inference rules and policies as to applications to be run on the bare metal information handling system, wherein the platform inference engine receives inference rules from one or more of the following: out of band of the embedded lightweight operating system, in band of the embedded lightweight operating system, cloud resource, BIOS boot behavior, wherein the platform inference engine is connected to a core infrastructure that includes a container engine that includes an infrastructure with the applications; initiating a secure workspace launcher to launch a user workspace user experience environment; and providing the user workspace user experience environment on the bare metal information handling system. ### Claim 2 (depends on 1) The method of claim 1, wherein the booting is from BIOS on the information handling system. ### Claim 3 (depends on 1) The method of claim 1, wherein the inference rules and policies are set by an information technology management unit. ### Claim 4 (depends on 1) The method of claim 1, wherein the platform inference engine further invokes a secure domain name launcher that initiates native application with domain namespace. ### Claim 5 (depends on 1) The method of claim 1, wherein the secure workspace launcher launches a user workspace user experience environment through a virtual machine manager or through a container environment. ### Claim 6 (depends on 1) The method of claim 1, wherein user workspace user experience environment provides for applications, policies, and storage of applications. ### Claim 7 A system comprising: a processor; a data bus coupled to the processor; and a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations for servicing and managing a bare metal information handling system and comprising instructions executable by the processor and configured for: booting up an embedded lightweight operating system on the bare metal information handling system; initiating a platform inference engine by the embedded lightweight operating system, wherein the platform inference engine is provided inference rules and policies as to applications to be run on the bare metal information handling system, wherein the platform inference engine receives inference rules from one or more of the following: out of band of the embedded lightweight operating system, in band of the embedded lightweight operating system, cloud resource, BIOS boot behavior, wherein the platform inference engine is connected to a core infrastructure that includes a container engine that includes an infrastructure with the applications; initiating a secure workspace launcher to launch a user workspace user experience environment; and providing the user workspace user experience environment on the bare metal information handling system. ### Claim 8 (depends on 7) The system of claim 7, wherein the booting is from BIOS on the information handling system. ### Claim 9 (depends on 7) The system of claim 7, wherein the inference rules and policies are set by an information technology management unit. ### Claim 10 (depends on 7) The system of claim 7, wherein the platform inference engine further invokes a secure domain name launcher that initiates native application with domain namespace. ### Claim 11 (depends on 7) The system of claim 7, wherein the secure workspace launcher launches a user workspace user experience environment through a virtual machine manager or through a container environment. ### Claim 12 (depends on 7) The system of claim 7, wherein user workspace user experience environment provides for applications, policies, and storage of applications. ### Claim 13 A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for: booting up an embedded lightweight operating system on the bare metal information handling system; initiating a platform inference engine by the embedded lightweight operating system, wherein the platform inference engine is provided inference rules and policies as to applications to be run on the bare metal information handling system, wherein the platform inference engine receives inference rules from one or more of the following: out of band of the embedded lightweight operating system, in band of the embedded lightweight operating system, cloud resource, BIOS boot behavior, wherein the platform inference engine is connected to a core infrastructure that includes a container engine that includes an infrastructure with the applications; initiating a secure workspace launcher to launch a user workspace user experience environment; and providing the user workspace user experience environment on the bare metal information handling system. ### Claim 14 (depends on 13) The non-transitory, computer-readable storage medium of claim 13, wherein the inference rules and policies are set by an information technology management unit. ### Claim 15 (depends on 13) The non-transitory, computer-readable storage medium of claim 13, wherein the platform inference engine further invokes a secure domain name launcher that initiates native application with domain namespace. ### Claim 16 (depends on 13) The non-transitory, computer-readable storage medium of claim 13, wherein the secure workspace launcher launches a user workspace user experience environment through a virtual machine manager or through a container environment. ### Claim 17 (depends on 13) The non-transitory, computer-readable storage medium of claim 13, wherein user workspace user experience environment provides for applications, policies, and storage of applications.