Abstract: A method may include executing a privileged service on top of an operating system of an information handling system, the privileged service configured to: (i) configure a rules engine defining rules for selectively enabling and disabling an electronic privacy screen of a display device associated with the information handling system, the rules based on a configuration policy; (ii) in response to an event for triggering enabling or disabling of the electronic privacy screen, determine a context of the information handling system; (iii) based on the context and the rules engine, determine whether a threat level associated with the event is within a range for enabling the electronic privacy screen; and (iv) based on the threat level, cause communication of a control signal to the display device, the control signal indicative of whether to enable or disable the electronic privacy screen.

Abstract: An information handling system may include a processor, a management controller communicatively coupled to the processor for out-of-band management of the information handling system, and configured to monitor for a user action to modify a security or privacy mode of a peripheral associated with the information handling system and responsive to the user action, communicate a vendor-defined message to the peripheral to modify the security or privacy mode.

Abstract: An information handling system may include a plurality of sensors comprising a camera sensor for communicating camera data, a user presence and focus state manager configured to receive the camera data and generate an inference of user presence and focus based on the camera data, and a dynamic filtering service. The dynamic filtering service may be configured to receive the inference, determine based on the inference a filtering action, and cause the filtering action to be applied to dynamically-generated information associated with a user of the information handling system and communicated to other information handling systems communicatively coupled to the information handling system.

Abstract: A system for supporting a dual role controller in an information handling systems configurable as a device or a host. When the information handling system is connected to another information handling system and configured for operating in a device mode, a proxy service and an agent service execute on the information handling system. Communications from the other information handling system are received by the proxy service and sent to the agent service, which translates generic requests into application specific requests and commands. Device functions like MTP (storage), Webcam (streaming) and generic-USB commands are enabled in device mode for virtual desktop interface (VDI) or hardware isolated applications.

Abstract: In a system of networked IHSs (Information Handling Systems) supporting the use of roaming biometric profiles, an individual may utilize biometric authentication for gaining access to various IHSs within the system. An IHS configured to support roaming biometric authentication includes biometric sensors that support secure transmission and management of biometric prints collected by such sensors. Such biometric sensors may interoperate with a secure processing component of the IHS in order to prevent transmission and storage of unprotected biometric prints, while still supporting roaming biometric authentication. The biometric sensor utilizes an encryption key for encoding biometric prints where the key is selected based on a group affiliation of the individual, thus protecting biometric prints from other groups that use roaming biometric authentication while sharing the same network of IHSs.

Abstract: An information handling system includes a plurality of containerized applications, a container service, a hardware device, and a host processor to initialize a host service. The container service is associated with the containerized applications. The hardware device is virtualized to the containerized applications. The host processor identifies the hardware device that is virtualized to the containerized applications. The host processor receives a power notification from the container service. Based on the power notification, the host processor changes a power state of the hardware device.

Abstract: An information handling system manages operation of an infrared time of flight sensor to provide accurate and timely user presence and absence detection through adjustments of the time of flight sensor detection sensitivity based upon ambient light brightness and color temperature sensed by an ambient light sensor. An integrated sensor hub in a central processing unit disables infrared illumination by the time of flight sensor, senses ambient light conditions with the ambient light sensor, looks up sensitivity settings from a lookup table that associates infrared time of flight sensor sensitivity and ambient light conditions, applies the associated sensitivity at the infrared time of flight sensor and then re-enables infrared illumination to detect end user presence and absence with the infrared time of flight sensor.

Abstract: An information handling system may include a processor, a wireless network interface communicatively coupled to the processor, and a synchronization manager comprising a program of instructions embodied in non-transitory computer-readable media communicatively coupled to the processor, the synchronization manager configured to, when executed by the processor, in response to an event for communicating data via the wireless network interface between the information handling system and a second information handling system: (i) determine a context associated with the information handling system; (ii) determine a synchronization algorithm for the data based on the context and the type of data; and (iii) synchronize the data based on the synchronization algorithm.

Abstract: An information handling system may include a processor, a plurality of sensors comprising a secure camera sensor for securely communicating camera data, and a service configured to generate user awareness parameters based on data received from the plurality of sensors, apply an adaptive user presence policy to the user awareness parameters based on an adaptive user presence policy, and generate one or more actions to be executed by an operating system executing on the processor in response to the user awareness parameters and adaptive user presence policy.

Abstract: In some examples, a target device determines that each device of a plurality of devices (i) includes a certificate that is provided to each device during provisioning, (ii) is within a predetermined distance from the target device, (iii) includes a beacon secret that is broadcast to each device at a predetermined time interval, and (iv) that either: (a) a privilege level associated with at least one device of the plurality of devices satisfies a particular privilege level specified by an access policy or (b) a number of the plurality devices with the determined distance from the target device satisfies a predetermined number specified by the access policy. The target device grants at least one device of the plurality of devices access to the target device, and receives a message from the at least one device. The target device initiates an action based at least in part on the message.

Abstract: A method may include a software service executing at an information handling system to determine desired capabilities of a docking station. The software service receives information from available docking stations via a wireless communication interface, the information identifying actual capabilities of each docking station. The method further includes coupling the information handling system to a selected docking station in response to determining at the information handling system that the actual capabilities of the selected docking station provide the desired capabilities.

Abstract: An authentication system for providing shared credential authentication includes a client information handling (IHS) system having a resource service application, and a mobile IHS having a shared authentication application. The shared authentication token indicates that an authenticated state between the client IHS and the mobile IHS exists. The resource service application receives a request to access the resource, and sends an authentication request to an authentication server to authorize access to the resource. The shared authentication application receives a query from the authentication server to verify a status of a shared authentication token, and, when the shared authentication token is valid, responds to the query that the shared authentication token is valid. The resource service application further receives a response to the authentication request, and grants access to the resource when the authentication token indicates that the shared authentication token is valid.

Abstract: An information handling system includes a host device and multiple monitor devices. One of the monitor devices is configured as a parent monitor device, and the remaining monitor devices are configured as child monitor devices. The parent monitor device receives a user presence detect (UPD) status signal, and queries all of the child monitor devices for a current UPD status. In response to the queries, the parent monitor consolidates the current UPD status from each of the child monitor devices and the current UPD status of the parent monitor device. Based on the consolidated current UPD status and based on a UPD policy, the parent monitor device sets a current user status as a user absence or presence. In response to the processor being in a low power state and the current user status being the user presence, the patent monitor device provides a wake notification to the host device.

Abstract: An information handling system may include a processor, a management controller communicatively coupled to the processor and configured to provide out-of-band management facilities for the management of the information handling system, the management controller further configured to generate a unique identifier associated with the information handling system and a network interface communicatively coupled to the processor and the management controller and configured to encapsulate the unique identifier in a datagram for wireless communication to a wireless docking station and broadcast the datagram. The management controller may be further configured to, in response to receiving a response datagram from the wireless docking station, wake the information handling system.

Abstract: A method may include, in an operating system, implementing a sensor hub in firmware of a platform controller hub of an information handling system, the sensor hub configured to implement a plurality of sensor physical microdrivers, each of the plurality of sensor physical microdrivers corresponding to a respective sensor of a plurality of sensors and configured to communicate a signal representing a physical quantity sensed by the respective sensor; a plurality of algorithm microdrivers implemented as virtual microdrivers, each of the plurality of algorithm microdrivers corresponding to a respective sensor physical microdriver of the plurality of sensor physical microdrivers; and a user-awareness arbitration microdriver implemented as a virtual microdriver and configured to receive an arbitration policy for user awareness detection, receive sensor information from the plurality of algorithm microdrivers, and based on the arbitration policy, apply arbitration logic to the sensor information to determine a user

Abstract: A system for a time-based one-time password security system operating at a provisioning server may comprise transmitting one or more first locally generated random-string numbers for generation of a first time-based one-time password to a remotely connected internet of things sensor and a remotely connected internet of things sensor hub. The system may also comprise executing code instructions to associate the internet of things sensor with a first client key in a table stored in a memory operatively connected to the processor, associate the internet of things sensor hub with a second client key in the table, and associate the internet of things sensor and internet of things sensor hub with the one or more first locally generated random-string numbers in the table. Further the first remotely generated random-string numbers may identify a first preset function for generation of a first session key used in encrypting and decrypting sensor data records.

Abstract: A method for configuring resources at an information handling system may include determining, during initialization, a wide area network (WAN) Internet Protocol (IP) address associated with the information handling system, and retrieving a list of trusted IP addresses from a storage location at the information handling system. The method may further include configuring a first resource at the information handling system to operate in a first state in response to determining that the WAN IP address is included at the list of trusted IP addresses, and configuring the first resource at the information handling system to operate in a second state in response to determining that the WAN IP address is not included at the list of trusted IP addresses.

Abstract: An information handling system includes an embedded controller to capture a current battery power level of a battery that is a sole source of power of the information handling system. A service module may update a configuration table with anticipated power consumption associated with a component of the information handling system, wherein the anticipated power consumption is based on an operation, and predict whether the current battery power level is sufficient to complete the operation, including comparing the current battery power level with the anticipated power consumption of the component. If the current battery power level is sufficient to complete the operation, then the service module may execute the operation. If the current battery power level is insufficient to complete the operation, then the service module may provide one or more options associated with the operation based on a power management policy.

Abstract: Systems and methods are provided that may be implemented to wake an information handling system from a reduced-powered state in response to a wireless signal wake-up event received from a wireless peripheral device. Non-operating system (OS) components and/or non-BIOS components of an information handling system may be optionally enabled to securely perform pre-OS operations to determine whether or not to wake other components (e.g., such as a system OS and/or system BIOS executing on a host processing device or embedded controller) of the information handling system from a reduced-powered state upon receipt of the wireless signal wake-up event.

Abstract: Embodiments of systems and methods are provided herein to establish a secure communication channel for communicating dock configuration actions from an administrator information handling system (IHS) to a docking station. One embodiment of such a system includes an administrator IHS configured to communicate dock configuration actions to a docking station, a host IHS configured to verify the validity of a dock certificate received from the docking station against a dock certificate authority server, and a docking station configured to verify the validity of an administrator certificate received from the admin IHS against a preconfigured list of valid administrator certificates stored within the docking station. If the validity of the dock certificate and the administrator certificate are respectively verified by the host IHS and the docking station, the host IHS and the docking station are further configured to establish the secure communication channel between the administrator IHS and the docking station.