Systems and methods for managing hardware privacy configuration in modern workspaces
AssigneeDell Products L.P.
InventorsVivek Viswanathan Iyer, Daniel L. Hamlin
Life of this patent
Estimating the term…
Abstract
Systems and methods for managing hardware privacy configuration in modern workspaces are described. In an embodiment, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: receive, at a workspace privacy agent, a first hardware privacy request from a first application executed within a first workspace instantiated by a local management agent; and execute the first hardware privacy request.
Claims20
An Information Handling System (IHS), comprising:
- a processor;
- a memory having program instructions stored thereon coupled to the processor, and a remote access controller configured to perform a cryptographic verification process on the IHS, the remote access controller comprising:
- a second processor;
- second memory coupled to the second processor,
- a root of trust coupled to the memory, and
- a secure object store coupled to the root of trust,
- the root of trust having second program instructions stored thereon that upon execution by the second processor, cause the remote access controller to perform the cryptographic verification process to verify the program instructions, the processor, the memory, a local management agent, and a workspace privacy agent;
- wherein the processor is configured to, upon cryptographic verification of the program instructions, the processor, the memory, the local management agent, and the workspace privacy agent, execute the program instructions to cause the IHS to:
- instantiate a first workspace and a second workspace by the local management agent,
- instantiate a first local resource service for the first workspace and a second local resource service for the second workspace,
- receive, by the workspace privacy agent, a first hardware privacy request from the first local resource service in response to a first application running in the first workspace,
- receive, by the workspace privacy agent, a second hardware privacy request from second local resource service in response to a second application running in the second workspace, and
- service the first privacy request, including performing an action that affects a state of a peripheral device coupled to the processor.
A memory storage device having program instructions stored thereon that, upon execution by an Information Handling System (IHS), cause the IHS to, upon cryptographic verification of the program instructions, a processor of the IHS, a local management agent, and a workspace privacy agent:
- instantiate a first workspace and a second workspace by the local management agent,
- instantiate a first local resource service for the first workspace and a second local resource service for the second workspace,
- receive, by the workspace privacy agent, a first hardware privacy request from the first local resource service in response to a first application running in the first workspace,
- receive, by the workspace privacy agent, a second hardware privacy request from second local resource service in response to a second application running in the second workspace,
- service the first privacy request, including performing a first action that affects a state of a first peripheral device coupled to the processor, and
- service the second privacy request, including performing a second action that affects a state of a second peripheral device coupled to the processor.
A method performed by an Information Handling System (IHS), the method comprising:
- performing a cryptographic verification process to verify program instructions, a processor of the IHS, a memory storing the program instructions, a local management agent, and a workspace privacy agent;
- executing the program instructions upon cryptographic verification of the program instructions, the processor, the memory, the local management agent, and the workspace privacy agent,
- instantiating a first workspace and a second workspace by the local management agent,
- instantiating a first local resource service for the first workspace and a second local resource service for the second workspace,
- receiving, by the workspace privacy agent, a first hardware privacy request from the first local resource service in response to a first application running in the first workspace,
- receiving, by the workspace privacy agent, a second hardware privacy request from second local resource service in response to a second application running in the second workspace,
- servicing the first privacy request, including performing a first action that affects a state of a first peripheral device coupled to the processor, and
- servicing the second privacy request, including performing a second action that affects a state of a second peripheral device coupled to the processor.
Dependencies are inferred from the claim text.