System and method for secure application domain on bare metal information handling system

Patent metadata

Field	Value
Publication number	US-12182596-B2
Application number	US-202117462088-A
Country	US
Kind code	B2
Filing date	Aug 31, 2021
Priority date	Aug 31, 2021
Publication date	Dec 31, 2024
Grant date	Dec 31, 2024

Abstract

A system, method, and computer-readable medium are disclosed for servicing and managing a bare metal information handling system. An embedded lightweight operating system on the bare metal information handling system is booted up. The embedded lightweight operating system initiates a platform inference engine which is provided rules and policies as to applications to be run on the bare metal information handling system. The platform inference engine initiates a secure workspace launcher to launch a user workspace user experience environment. The user workspace user experience environment is provided on the bare metal information handling system.

First claim

What is claimed is:

1. A computer-implementable method for servicing and managing a bare metal information handling system, comprising:
booting up an embedded lightweight operating system on the bare metal information handling system;
initiating a platform inference engine by the embedded lightweight operating system, wherein the platform inference engine is provided inference rules and policies as to applications to be run on the bare metal information handling system, wherein the platform inference engine receives inference rules from one or more of the following: out of band of the embedded lightweight operating system, in band of the embedded lightweight operating system, cloud resource, BIOS boot behavior, wherein the platform inference engine is connected to a core infrastructure that includes a container engine that includes an infrastructure with the applications;
initiating a secure workspace launcher to launch a user workspace user experience environment; and
providing the user workspace user experience environment on the bare metal information handling system.

2. The method of claim 1 , wherein the booting is from BIOS on the information handling system.

3. The method of claim 1 , wherein the inference rules and policies are set by an information technology management unit.

4. The method of claim 1 , wherein the platform inference engine further invokes a secure domain name launcher that initiates native application with domain namespace.

5. The method of claim 1 , wherein the secure workspace launcher launches a user workspace user experience environment through a virtual machine manager or through a container environment.

6. The method of claim 1 , wherein user workspace user experience environment provides for applications, policies, and storage of applications.

7. A system comprising:
a processor;
a data bus coupled to the processor; and
a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations for servicing and managing a bare metal information handling system and comprising instructions executable by the processor and configured for:
booting up an embedded lightweight operating system on the bare metal information handling system;
initiating a platform inference engine by the embedded lightweight operating system, wherein the platform inference engine is provided inference rules and policies as to applications to be run on the bare metal information handling system, wherein the platform inference engine receives inference rules from one or more of the following: out of band of the embedded lightweight operating system, in band of the embedded lightweight operating system, cloud resource, BIOS boot behavior, wherein the platform inference engine is connected to a core infrastructure that includes a container engine that includes an infrastructure with the applications;
initiating a secure workspace launcher to launch a user workspace user experience environment; and
providing the user workspace user experience environment on the bare metal information handling system.

8. The system of claim 7 , wherein the booting is from BIOS on the information handling system.

9. The system of claim 7 , wherein the inference rules and policies are set by an information technology management unit.

10. The system of claim 7 , wherein the platform inference engine further invokes a secure domain name launcher that initiates native application with domain namespace.

11. The system of claim 7 , wherein the secure workspace launcher launches a user workspace user experience environment through a virtual machine manager or through a container environment.

12. The system of claim 7 , wherein user workspace user experience environment provides for applications, policies, and storage of applications.

13. A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:
booting up an embedded lightweight operating system on the bare metal information handling system;
initiating a platform inference engine by the embedded lightweight operating system, wherein the platform inference engine is provided inference rules and policies as to applications to be run on the bare metal information handling system, wherein the platform inference engine receives inference rules from one or more of the following: out of band of the embedded lightweight operating system, in band of the embedded lightweight operating system, cloud resource, BIOS boot behavior, wherein the platform inference engine is connected to a core infrastructure that includes a container engine that includes an infrastructure with the applications;
initiating a secure workspace launcher to launch a user workspace user experience environment; and
providing the user workspace user experience environment on the bare metal information handling system.

14. The non-transitory, computer-readable storage medium of claim 13 , wherein the inference rules and policies are set by an information technology management unit.

15. The non-transitory, computer-readable storage medium of claim 13 , wherein the platform inference engine further invokes a secure domain name launcher that initiates native application with domain namespace.

16. The non-transitory, computer-readable storage medium of claim 13 , wherein the secure workspace launcher launches a user workspace user experience environment through a virtual machine manager or through a container environment.

17. The non-transitory, computer-readable storage medium of claim 13 , wherein user workspace user experience environment provides for applications, policies, and storage of applications.

Assignees

• Dell Products Lp

Inventors

• Boyapalle Anantha K
• Vidyadhara Sumanth

Classifications

• G06F9/445

  Program loading or initiating (bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57) · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title

• G06F2009/45587

  Isolation or security of virtual machine instances · CPC title

• G06F9/4406 Primary

  Loading of operating system · CPC title

• G06F9/45541 Primary

  Bare-metal, i.e. hypervisor runs directly on hardware · CPC title