# US 2023/0065950 A1 · System and Method for Secure Application Domain on Bare Metal Information Handling System > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2023/0065950 A1 - Document ID: US20230065950A1 - Status: Published application - Kind: A1 - Application number: 17/462,088 - Filed: 2021-08-31 - Published: 2023-03-02 - Earliest claimed: 2021-08-31 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Anantha K. Boyapalle; Sumanth Vidyadhara - Web page: https://patentgrep.com/patent/US20230065950A1 ## CPC - G06F 9/45541: {Bare-metal, i.e. hypervisor runs directly on hardware} - G06F 9/4406: {Loading of operating system} - G06F 9/445: Program loading or initiating (bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57) - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 9/455: Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines - G06F 2009/45587: {Isolation or security of virtual machine instances} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system, method, and computer-readable medium are disclosed for servicing and managing a bare metal information handling system. An embedded lightweight operating system on the bare metal information handling system is booted up. The embedded lightweight operating system initiates a platform inference engine which is provided rules and policies as to applications to be run on the bare metal information handling system. The platform inference engine initiates a secure workspace launcher to launch a user workspace user experience environment. The user workspace user experience environment is provided on the bare metal information handling system. ## Claims ### Claim 1 A computer-implementable method for servicing and managing a bare metal information handling system, comprising: booting up an embedded lightweight operating system on the bare metal information handling system; initiating a platform inference engine by the embedded lightweight operating system, wherein the platform inference engine is provided rules and policies as to applications to be run on the bare metal information handling system; initiating a secure workspace launcher to launch a user workspace user experience environment; and providing the user workspace user experience environment on the bare metal information handling system. ### Claim 2 (depends on 1) The method of claim 1, wherein the booting is from BIOS on the information handling system. ### Claim 3 (depends on 1) The method of claim 1, wherein the rules and policies are set by an information technology management unit. ### Claim 4 (depends on 1) The method of claim 1, wherein platform inference engine is connected to a core infrastructure that includes a container engine that includes an infrastructure with the applications. ### Claim 5 (depends on 1) The method of claim 1, wherein the platform inference engine further invokes a secure domain name launcher that initiates native application with domain namespace. ### Claim 6 (depends on 1) The method of claim 1, wherein the secure workspace launcher launches a user workspace user experience environment through a virtual machine manager or through a container environment. ### Claim 7 (depends on 1) The method of claim 1, wherein user workspace user experience environment provides for applications, policies, and storage of applications. ### Claim 8 A system comprising: a processor; a data bus coupled to the processor; and a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations for servicing and managing a bare metal information handling system and comprising instructions executable by the processor and configured for: booting up an embedded lightweight operating system on the bare metal information handling system; initiating a platform inference engine by the embedded lightweight operating system, wherein the platform inference engine is provided rules and policies as to applications to be run on the bare metal information handling system; initiating a secure workspace launcher to launch a user workspace user experience environment; and providing the user workspace user experience environment on the bare metal information handling system. ### Claim 9 (depends on 8) The system of claim 8, wherein the booting is from BIOS on the information handling system. ### Claim 10 (depends on 8) The system of claim 8, wherein the rules and policies are set by an information technology management unit. ### Claim 11 (depends on 8) The system of claim 8, wherein platform inference engine is connected to a core infrastructure that includes a container engine that includes an infrastructure with the applications. ### Claim 12 (depends on 8) The system of claim 8, wherein the platform inference engine further invokes a secure domain name launcher that initiates native application with domain namespace. ### Claim 13 (depends on 8) The system of claim 8, wherein the secure workspace launcher launches a user workspace user experience environment through a virtual machine manager or through a container environment. ### Claim 14 (depends on 8) The system of claim 8, wherein user workspace user experience environment provides for applications, policies, and storage of applications. ### Claim 15 A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for: booting up an embedded lightweight operating system on the bare metal information handling system; initiating a platform inference engine by the embedded lightweight operating system, wherein the platform inference engine is provided rules and policies as to applications to be run on the bare metal information handling system; initiating a secure workspace launcher to launch a user workspace user experience environment; and providing the user workspace user experience environment on the bare metal information handling system. ### Claim 16 (depends on 15) The non-transitory, computer-readable storage medium of claim 15, wherein the rules and policies are set by an information technology management unit. ### Claim 17 (depends on 15) The non-transitory, computer-readable storage medium of claim 15, wherein the secure workspace launcher launches a user workspace user experience environment through a virtual machine manager or through a container environment. ### Claim 18 (depends on 15) The non-transitory, computer-readable storage medium of claim 15, wherein the platform inference engine further invokes a secure domain name launcher that initiates native application with domain namespace. ### Claim 19 (depends on 15) The non-transitory, computer-readable storage medium of claim 15, wherein the secure workspace launcher launches a user workspace user experience environment through a virtual machine manager or through a container environment. ### Claim 20 (depends on 15) The non-transitory, computer-readable storage medium of claim 15, wherein user workspace user experience environment provides for applications, policies, and storage of applications.