Abstract: A computerized method to store aggregate information handling system interaction telemetry data representing levels of operational activity reported for a user of an information handling system in a monitoring system data repository memory device and for receiving aggregate information handling system interaction telemetry data for a plurality of other users crowd-sourced from a population of information handling systems accessed by a plurality of other users. An interaction signature platform may apply a supervised learning model algorithm to the aggregate information handling system interaction telemetry data for the user in comparison to the aggregate information handling system interaction telemetry data for the plurality of other users to determine at least one indirect identifier of the interaction telemetry data.

Abstract: An information handling system may include a processor; a memory; a network interface device to communicatively couple the information handling system to a first wireless communication networks of a plurality of wireless communication networks; an embedded subscriber identity module (eSIM) to provide data descriptive of wireless communication network-specific information to authenticate the information handling system; and an eSIM profile switching module to: monitor for signal strengths of each of a plurality of wireless communication networks.

Abstract: An information handling system of a Radio Access Network (RAN) system operating a secure network slice orchestration system may comprise a network interface device of the RAN system transceiving data within a 5G New Radio (NR) frequency band with an endpoint computing device, the network interface device receiving an instruction from a client solutions management (CSM) platform to assign a network slice within the 5G NR frequency band, based on a security profile associating the endpoint computing device with a security tier, to a network slice as established by a software defined network (SDN) controller within a sub-portion of the 5G NR frequency band, the secure network slice orchestration system determining the endpoint computing device is associated with the network slice within a communications profile received from the CSM platform, and the SDN controller establishing a virtual access point transceiving data within the network slice with the endpoint computing device.

Abstract: Systems and methods for managing persistence in workspaces are described. The system for managing workspaces includes computer-executable instructions for instantiating a workspace in response to receiving a login request, creating a base OS layer in the workspace, and installing one or more applications onto the base OS layer in which the applications have been installed on the workspace of a previous login session. The system may then virtually map application data to the memory of the workspace to be used by the applications in which the application data was generated by the applications during the previous login session of the workspace.

Abstract: Systems and methods are provided that may be implemented to provide a hardware-rooted, protected, and operating system (OS)-agnostic environment in which designated logic (e.g., one or more software and/or firmware tools such as an OS agent) may be run to verify the ownership and/or registration of a given information handling system before the OS is booted and running, and therefore before system data (e.g., user data) is exposed. In one exemplary embodiment, the designated logic may include a unified extensible firmware interface (UEFI) driver that is protected (e.g., signed), and that runs during the system boot sequence before the OS is booted. The disclosed systems and methods may be advantageously implemented in one embodiment to allow a system user who purchases and acquires a given information handling system from a source and/or channel other than the original system manufacturer to register and/or associate the given information handling system with their manufacturer-assigned user account.

Abstract: Systems and methods are provided for prioritizing system memory for separate isolated computing workspaces (e.g., cloud-based software containers) that are executing together on an information handling system by reallocating higher performance system memory to higher-ranked computing workspace/s. In one example, the disclosed systems and methods may be implemented to optimize system memory usage for memory-heavy heterogeneous workloads of workspaces that are simultaneously executing together as modern clients on an information handling system.

Abstract: Systems and methods for migration of workloads across cloud services based upon endpoint performance are described. In some embodiments, an endpoint Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: receive telemetry data indicative of a utilization of the IHS during execution of a workload by a first cloud service; determine a difference between a capability of the IHS and the utilization; and at least one of: (a) in response to the difference being greater than a first threshold, migrate the workload to a second cloud-based service with higher performance than the first cloud service; or (b) in response to the difference being smaller than a second threshold, migrate the workload to a third cloud-based service with lower performance than the first cloud service.

Abstract: An edge device is disclosed and includes a processor, a memory, and a power management unit (PMU). The processor executes code instructions of an edge throughput services management system for managing a wireless network and one or more devices operatively coupled to the wireless network and the edge device. The processor detects a number of managed client information handling systems operatively coupled to the edge device; creates a persona associated with each of the managed client information handling systems; conducts an inventory of one or more applications requiring network access associated within each persona; prioritizes each persona for network access; and prioritizes each application associated with each persona for network access. The edge throughput services management system to provide a service for monitoring and recommending adjustments to the wireless network and managed client information handling systems for flexible data bandwidth access to the wireless network.

Abstract: An information handling system including a port or wireless antenna to operatively couple one or more peripheral devices to the information handling system and the processor executing code instructions of a peripheral devices reporting module for managing the one or more peripheral devices in coordination for a remotely-located peripheral device management system, wherein the processor is configured to generate a manifest of the information handling system and the one or more peripheral devices, and a network interface device to transmit to the remotely-located peripheral device management system the manifest to be associated a user account for peripheral device management services utilize usage data from the one or more peripheral devices to monitor peripheral device usage lifecycle status or peripheral device health status.

Abstract: A system, method, and computer-readable medium are disclosed for servicing and managing a bare metal information handling system. An embedded lightweight operating system on the bare metal information handling system is booted up. The embedded lightweight operating system initiates a platform inference engine which is provided rules and policies as to applications to be run on the bare metal information handling system. The platform inference engine initiates a secure workspace launcher to launch a user workspace user experience environment. The user workspace user experience environment is provided on the bare metal information handling system.

Abstract: The present disclosure provides various embodiments of information handling systems and related methods to provide a secure platform control point, which enables cloud-native applications to access the local hardware resources and platform capabilities of the information handling system. In doing so, the embodiments disclosed herein provide the same level of security, manageability and compute/intelligence for cloud-native applications, as is currently provided for endpoint-native applications run locally on the information handling system.

Abstract: Embodiments of systems and computer implemented methods are provided to transfer software licenses and entitlements associated with a user account from a first information handling system (IHS) to a second IHS. A computer implemented method in accordance with the present disclosure may generally include executing an entitlement management service to reassign the software licenses and entitlements associated with the user account to the second IHS, executing at least one local validation service on the second IHS to validate the second IHS and the user's workspace, and if the second IHS and the user's workspace is successfully validated by the at least one local validation service, executing one or more cloud-based orchestration services to verify the user account, determine which software licenses and entitlements are associated with the user account, and acquire and validate the software licenses and entitlements before transferring the software licenses and entitlements to the second IHS.

Abstract: Embodiments of systems and methods are provided to trigger migration of a workload from cloud-based resources to local resources, or vice versa. In the disclosed embodiments, an orchestration service receives telemetry data from a client system associated with a user and cloud resource usage data corresponding to the user from a plurality of cloud service providers. Before the end of each cloud computing service billing cycle, the orchestration service: uses the cloud resource usage data and/or the telemetry data to determine a cloud resource usage, which is expected for the user at the end of the cloud computing service billing cycle; generates a trigger to migrate the user's workload from cloud-based resources to local resources, or vice versa, based on the expected cloud resource usage; and initiates migration of the user's workload if a trigger is generated. As such, the orchestration service can be used to effectively manage per-user cloud resource costs.

Abstract: In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may: execute a first application within a first operating system (OS) virtualization on a first information handling system (IHS); suspend the first application at a point of execution; determine one or more statuses associated with the first application, in which the one or more statuses includes the point of execution where the first application was suspended; provide the one or more statuses to a second IHS; configure a second application and a second OS virtualization with the one or more statuses associated with the first application within the first OS virtualization; establish input/output associated with the second application with one or more components of the first IHS via the network; and execute the second application within the second OS virtualization on the second IHS at the point of execution.

Abstract: Systems and methods are provided that may be implemented to provide a hardware-rooted, protected, and operating system (OS)-agnostic environment in which designated logic (e.g., one or more software and/or firmware tools such as an OS agent) may be run to verify the ownership and/or registration of a given information handling system before the OS is booted and running, and therefore before system data (e.g., user data) is exposed. In one exemplary embodiment, the designated logic may include a unified extensible firmware interface (UEFI) driver that is protected (e.g., signed), and that runs during the system boot sequence before the OS is booted. The disclosed systems and methods may be advantageously implemented in one embodiment to allow a system user who purchases and acquires a given information handling system from a source and/or channel other than the original system manufacturer to register and/or associate the given information handling system with their manufacturer-assigned user account.

Abstract: An information handling system includes a virtual interface configured to provide communication between an agent and an embedded controller, wherein the virtual interface is located below a kernel space of the information handling system. The agent may be configured to transmit telemetry data published by the embedded controller to a data repository, wherein the agent is located at a user space of the information handling system. The embedded controller publishes telemetry data to the data repository via the virtual interface through the agent.

Abstract: Run-time attestation of a workspace including deploying, at a client information handling system, an application broker, the application broker including a model that defines characteristics of a computer-implemented application accessible through a server information handling system; establishing a trust relationship between a control vault system of the client information handling system and the server information handling system; provisioning entitlements, by the application broker, that are associated with the computer-implemented application at the client information handling system; identifying an execution of the entitlements at the client computing device, and comparing the execution of the entitlements with the model; determining, based on the comparing, a violation of the model, and in response, procuring a trust challenge from the server information handling system; generating, by the application broker and in response to the trust challenge, an attestation of the trust relationship between the con

Abstract: A method may include, during execution of a basic input/output system comprising boot firmware configured to be the first code executed by the processor when the information handling system is booted and/or powered on and execute prior to execution of an operating system of the information handling system, executing a hardware attestation verification application configured to: (i) read a platform certificate comprising information associated with one or more information handling resources of the information handling system recorded during creation of the platform certificate; (ii) perform hardware attestation of the information handling system by comparing information associated with the one or more information handling resources and the information stored within the platform certificate; and (iii) generate a log indicative of the results of the hardware attestation.

Abstract: A method of securing functionalities of an integrated subscriber identification module (iSIM) on an information handling system may include with an embedded controller (EC), detecting a powering-up process at the information handling system and determine a chain of trust access keys during bootup; with the execution of the EC, detecting and activating a wireless wide area network (WWAN) module; with the execution of the EC, detecting and accessing an integrated subscriber identity module (iSIM); with the execution of the EC, authenticating access to iSIM content including authorization information and carrier profile information with the chain of trust access keys generated from encryption keys based on digital signatures; and sending the authorization information and carrier profile information form the iSIM to the WWAN module for authentication, wirelessly, with a switched multimegabit data service (SM-DS) server associated with the carrier profile.

Abstract: Managing cloud native workloads at an information handling system, including obtaining, for each tab of a plurality of tabs of a web browser executing on an information handling system, parameters associated with execution of the tab of the web browser; determining, for each tab of the web browser, a reactivation probability of the tab based on the parameters of the tab; comparing, for each tab of the web browser, the reactivation probability to a first threshold; determining, based on the comparing, that a first tab of the tabs is associated with a first reactivation probability greater than the first threshold; in response to determining that the first tab is associated with a first reactivation probability greater than the first threshold, assigning the first tab of the web browser to a first grouping; and maintaining execution of the first tab based on the first grouping.