Systems and methods for provisioning a database of trusted users stored within one or more information handling systems

Patent metadata

Field	Value
Publication number	US-12530472-B2
Application number	US-202318098216-A
Country	US
Kind code	B2
Filing date	Jan 18, 2023
Priority date	Jan 18, 2023
Publication date	Jan 20, 2026
Grant date	Jan 20, 2026

Abstract

Embodiments of systems and methods are provided for provisioning a database of trusted users stored locally on one or more information handling systems. The systems and methods disclosed herein may utilize a database of trusted users (otherwise referred to as a trusted multi-user database, or TMU database), a database template and/or policy stored within a remote system (e.g., a cloud or backend server) to remotely manage and provision a TMU database stored locally within one or more information handling systems. In doing so, the systems and methods disclosed herein may be used to securely back-up and restore a TMU database stored locally with an IHS, remotely manage enrollment and provisioning of a TMU database stored locally within one or more information handling systems based on policy, and apply TMU configuration settings globally to the TMU databases stored locally within a plurality of information handling systems.

First claim

What is claimed is:

1 . A system, comprising:
a first information handling system (IHS) having a first processor and a first non-transitory memory, the first non-transitory memory storing a trusted multi-user (TMU) database for one or more IHSs and policy for managing the TMU database stored within the one or more IHSs; and a second IHS communicatively coupled to the first IHS over a network, wherein the second IHS comprises: a second processor; and a second non-transitory memory storing: a local TMU database for the second IHS, wherein the local TMU database contains one or more trusted users, biometric data obtained from the one or more trusted users and one or more TMU configuration settings specified for the one or more trusted users; a first set of program instructions executable on the second processor for managing the local TMU database stored within the second non-transitory memory; and a second set of program instructions executable on the second processor for communicating information between the second IHS and the first IHS over the network; and a third set of program instructions executable on the second processor to provision the local TMU database stored within the second non-transitory memory of the second IHS using at least one of the TMU database and the policy stored within the first non-transitory memory of the first IHS.

2 . The system of claim 1 , wherein the second non-transitory memory stores instructions that when executed on the second processor cause:
transmit, over the network to the first IHS, a restore request to restore the local TMU database stored within the second IHS; receive, over the network from the first IHS, the TMU database stored within the first IHS in response to the restore request; and restore the local TMU database stored within the second IHS using the TMU database received from the first IHS.

3 . The system of claim 1 , wherein the second non-transitory memory stores instructions that when executed on the second processor cause:
utilize the policy stored within the first IHS to manage enrollment of new users within the local TMU database stored within the second IHS.

4 . The system of claim 3 , wherein the second non-transitory memory stores instructions that when executed on the second processor cause:
utilize the policy stored within the first IHS to restrict enrollment of new users within the TMU database stored within the second IHS when the second IHS is located within an unsecure environment.

5 . The system of claim 1 , wherein the first IHS stores a database template containing a predetermined set of trusted users, biometric data obtained from the predetermined set of trusted users and one or more TMU configuration settings specified for the predetermined set of trusted users.

6 . The system of claim 5 , wherein the second non-transitory memory stores instructions that when executed on the second processor cause:
receive the database template over the network from the first IHS; and utilize the database template received from the first IHS to provision the local TMU database stored within the second IHS by storing the biometric data and the one or more TMU configuration settings contained within the database template within the local TMU database stored within the second IHS.

7 . The system of claim 5 , wherein the second non-transitory memory stores instructions that when executed on the second processor cause second non-transitory memory stores instructions that when executed on the second processor cause:
receive the database template over the network from the first IHS; and utilize the database template received from the first IHS to provision the local TMU database stored within the second IHS by applying the one or more TMU configuration settings contained within the database template to the local TMU database stored within the second IHS.

8 . A method for provisioning a database of trusted users stored within an information handling system, the method comprising:
enrolling one or more trusted users within a trusted multi-user (TMU) database stored locally with a first information handling system (IHS), wherein said enrolling the one or more trusted users comprises storing biometric data obtained from the one or more trusted users and one or more TMU configuration settings specified for the one or more trusted users within the TMU database; transmitting the TMU database stored locally within the first IHS, over a network, to a remote IHS for remote storage and management of the TMU database, wherein the remote IHS stores the TMU database received from the first IHS and policy for managing the TMU database stored locally within the first IHS; and subsequently utilizing at least one of the TMU database and the policy stored within the remote IHS to provision the TMU database stored locally within the first IHS.

9 . The method of claim 8 , wherein said subsequently utilizing at least one of the TMU database and the policy stored within the remote IHS to provision the TMU database stored locally within the first IHS comprises:
utilizing the TMU database stored within the remote IHS to restore a TMU database previously stored within the first IHS.

10 . The method of claim 9 , wherein said utilizing the TMU database stored within the remote IHS to restore the TMU database previously stored within the first IHS comprises:
transmitting a restore request, over the network from the first IHS to the remote IHS, to restore the TMU database previously stored within the first IHS; receiving, over the network from the remote IHS to the first IHS, the TMU database stored within the remote IHS in response to the restore request; and restoring the TMU database previously stored within the first IHS using the TMU database received from the remote IHS.

11 . The method of claim 8 , wherein said subsequently utilizing at least one of the TMU database and the policy stored within the remote IHS to provision the TMU database stored locally within the first IHS comprises:
utilizing the policy stored within the remote IHS to manage enrollment of new users within the TMU database stored locally within the first IHS.

12 . The method of claim 11 , wherein said utilizing the policy stored within the remote IHS to manage enrollment of new users within the TMU database stored locally within the first IHS comprises:
restricting the enrollment of new users within the TMU database stored locally within the first IHS when the first IHS is located within an unsecure environment.

13 . The method of claim 8 , wherein the method further comprises:
utilizing a database template stored within the remote IHS to reprovision the TMU database stored locally within the first IHS; wherein the database template contains a predetermined set of trusted users, biometric data obtained from the predetermined set of trusted users and one or more TMU configuration settings specified for the predetermined set of trusted users; and wherein said utilizing the database template comprises storing the biometric data and the one or more TMU configuration settings contained within the database template within the TMU database stored locally within the first IHS.

14 . The method of claim 13 , wherein the policy stored within the remote IHS specifies one or more rules for reprovisioning the TMU database stored locally within the first IHS, and wherein said utilizing the database template further comprises:
utilizing the database template stored within the remote IHS to reprovision the TMU database stored locally within the first IHS based on the policy stored within the remot

Assignees

• Dell Products Lp

Inventors

• Reddy Karun P
• Hamlin Daniel L
• Alfano Keith M
• Alpay Waldman Banu
• Phelps Mandy C

Classifications

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F21/32 Primary

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06F21/604 Primary

  Tools and structures for managing or administering access control systems · CPC title