Systems and methods for self-protecting and self-refreshing workspaces

A memory storage device having program instructions stored thereon that, upon execution by an Information Handling System (IHS), cause the IHS to:

• receive, from a workspace orchestration service, one or more files or policies configured to enable the client IHS to instantiate a workspace based upon a workspace definition;
• determine that a context of the client IHS has been modified;
• in response to the determination, terminate the workspace;
• and
• receive, from the workspace orchestration service, one or more files or policies configured to enable the client IHS to re-instantiate the workspace based upon the workspace definition.

A method, comprising:

• receiving, from a workspace orchestration service, one or more files or policies configured to enable the client IHS to instantiate a workspace based upon a workspace definition;
• deriving a key based upon a static portion of workspace state;
• encrypting memory using the key;
• deriving another key based upon a modified static portion of the workspace state;
• failing to decrypt the memory using the other key;
• in response to the failure, terminating the workspace;
• and
• receiving, from the workspace orchestration service, one or more files or policies configured to enable the client IHS to re-instantiate the workspace based upon the workspace definition.