Abstract: A method includes receiving, at an electronic device and from a second electronic device, a second root identifier, wherein the second root identifier is associated with a second profile tree maintained at the second electronic device and determining that a first root identifier does not match the second root identifier, wherein the first root identifier is based on a first profile tree maintained at the electronic device. The method further includes sending, to the second electronic device, the first profile tree, wherein the first profile tree comprises representation of currently maintained user profiles at the electronic device, receiving, from the second electronic device, user profile update information, and updating a subset of the currently maintained user profiles based on the user profile update information.

Abstract: An electronic device, a method, and a non-transitory, computer-readable medium storing instructions for dynamically verifying trusted applications (TAs) during a boot sequence. The electronic device includes a memory and a processor operably connected to the memory. The processor executes instructions stored in the memory to cause the electronic device to initialize a kernel boot sequence in response to confirming that executable codes for booting the electronic device are from a trusted binary and then verify one or more registered TAs during the kernel boot sequence. Completion of the kernel boot sequence is based on verification results of the set of registered TAs.

Abstract: An electronic device, a method, and a non-transitory, computer-readable medium storing instructions for dynamically verifying trusted applications (TAs) during a boot sequence. The electronic device includes a memory and a processor operably connected to the memory. The processor executes instructions stored in the memory to cause the electronic device to initialize a kernel boot sequence in response to confirming that executable codes for booting the electronic device are from a trusted binary and then verify one or more registered TAs during the kernel boot sequence. Completion of the kernel boot sequence is based on verification results of the set of registered TAs.