Abstract: Managing privacy controls in an information handling system to allow Information Technology Decision Makers (ITDMs) to prevent unwanted disclosure of information while allowing users to work together. A first privacy policy is asserted to protect information. When a user device requests an override to access an I/O device, embodiments analyze device parameters and application parameters to determine whether to authorize the use of the I/O device. If the override request is authorized, the user is able to access the I/O device and a new privacy policy is asserted. If a device parameter changes, embodiments may assess whether the change could result in unwanted disclosure of information and dynamically change the privacy policy to prevent the disclosure.

Abstract: Providing access control to distributed resources, including storing, at a computing dock coupled to an information handling system, a local access database indicating verified credentials of one or more users; receiving, at the computing dock, a request for access to a resource coupled to the computing dock; providing, in response to the request for access, an authentication request to an authentication system; in response to the authentication request, providing, by the computing dock, an authentication challenge to the information handling system; receiving, at the computing dock and in response to the authentication challenge, user credentials at the authentication system; verifying, at the authentication system, the user credentials against the local access database; providing, based on the verified user credentials, an authorization token to the first device; and allocating, based on the authorization token, access to the resource to the information handling system.

Abstract: In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may determine an identification of an application executing on an information handling system (IHS); determine a first performance profile based at least on a policy and based at least on the identification of the application; configure a processor to utilize power up to a first power level based at least on the first performance profile; determine that a user physically utilizes at least one human input device of the IHS within an amount of time transpiring; receive information indicating that the user is physically in contact with the IHS; determine a second performance profile based at least on the policy and based at least on the information; and configure the processor to utilize power up to a second power level based at least on the second performance profile.

Abstract: An information handling system includes a network interface card and a processor. The network interface card includes first and second virtual network interface cards. The processor communicates with the network interface card, and connects with an infrastructure access point via the first virtual network interface card. The processor forms multiple network connections via the infrastructure access point and the first virtual network interface card. The processor detects a wireless dock is within a predetermined proximity. In response to the wireless dock being within the predetermined proximity, the processor initiates a connection with the wireless dock via the second virtual network interface card. The processor resumes one or more of the network connections through the wireless dock via the second virtual network interface card. In response to the one or more of the network connections being resumed through the wireless dock, the processor drops the connection with the infrastructure access point.

Abstract: A system for configuring an information handling system based on a multi-user state change. An intelligent sensor hub communicates with sensors to detect the number of persons in a field of view of the information handling system. When the intelligent sensor hub determines there is a change in the number of persons, the information is sent out-of-band to an embedded controller (EC) independent of a host operating system. The EC makes a change to the configuration of the information handling system if needed.

Abstract: A disclosed method for provisioning a computing device includes receiving, by provisioning software that executes on the computing device to provision the computing device for access to an enterprise infrastructure from a device orchestration service through which computing devices are provisioned to access the enterprise infrastructure, a digital certificate representing a credential for accessing, by a user via the computing device, the enterprise infrastructure.

Abstract: Providing access control to distributed resources, including storing, at a computing dock coupled to an information handling system, a local access database indicating verified credentials of one or more users; receiving, at the computing dock, a request for access to a resource coupled to the computing dock; providing, in response to the request for access, an authentication request to an authentication system; in response to the authentication request, providing, by the computing dock, an authentication challenge to the information handling system; receiving, at the computing dock and in response to the authentication challenge, user credentials at the authentication system; verifying, at the authentication system, the user credentials against the local access database; providing, based on the verified user credentials, an authorization token to the first device; and allocating, based on the authorization token, access to the resource to the information handling system.

Abstract: In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may determine an identification of an application executing on an information handling system (IHS); determine a first performance profile based at least on a policy and based at least on the identification of the application; configure a processor to utilize power up to a first power level based at least on the first performance profile; determine that a user physically utilizes at least one human input device of the IHS within an amount of time transpiring; receive information indicating that the user is physically in contact with the IHS; determine a second performance profile based at least on the policy and based at least on the information; and configure the processor to utilize power up to a second power level based at least on the second performance profile.

Abstract: In one embodiment, a method for managing image sensors communicably coupled to an information handling system includes accessing a device inventory storing a list indicating the image sensors; identifying, from the list, an image sensor having a login functionality and a capture functionality, the login functionality causing the image sensor to capture identifying features of a user of the information handling system, the capture functionality causing the image sensor to capture images of the user; accessing a configuration inventory storing configuration policies indicating user permissions associated with the information handling system; determining that the login functionality of the image sensor is permitted based on the user permissions; programmatically enabling the login functionality of the image sensor; determining that the capture functionality of the image sensor is not permitted based on the user permissions; and programmatically disabling the capture functionality of the image sensor.

Abstract: Generating fingerprint templates, including receiving a fingerprint image of a user that is obtained at a first fingerprint sensor; identifying a plurality of fingerprint template creation models, each fingerprint template creation model associated with a respective other fingerprint sensor, each other fingerprint sensor differing from one another and differing from the first fingerprint sensor; applying each of the fingerprint template creation models to the fingerprint image to generate respective fingerprint templates; associating, for each generated fingerprint template, i) an identification (ID) of the other fingerprint sensor that corresponds to the fingerprint model that generated the fingerprint template and ii) a user identification (ID) of the user associated with the fingerprint image obtained at the first fingerprint sensor; and storing each of the generated fingerprint templates in a database.

Abstract: Managing privacy controls in an information handling system to allow Information Technology Decision Makers (ITDMs) to prevent unwanted disclosure of information while allowing users to work together. A first privacy policy is asserted to protect information. When a user device requests an override to access an I/O device, embodiments analyze device parameters and application parameters to determine whether to authorize the use of the I/O device. If the override request is authorized, the user is able to access the I/O device and a new privacy policy is asserted. If a device parameter changes, embodiments may assess whether the change could result in unwanted disclosure of information and dynamically change the privacy policy to prevent the disclosure.

Abstract: In one embodiment, a method for managing image sensors communicably coupled to an information handling system includes accessing a device inventory storing a list indicating the image sensors; identifying, from the list, an image sensor having a login functionality and a capture functionality, the login functionality causing the image sensor to capture identifying features of a user of the information handling system, the capture functionality causing the image sensor to capture images of the user; accessing a configuration inventory storing configuration policies indicating user permissions associated with the information handling system; determining that the login functionality of the image sensor is permitted based on the user permissions; programmatically enabling the login functionality of the image sensor; determining that the capture functionality of the image sensor is not permitted based on the user permissions; and programmatically disabling the capture functionality of the image sensor.

Abstract: A system for configuring an information handling system based on a multi-user state change. An intelligent sensor hub communicates with sensors to detect the number of persons in a field of view of the information handling system. When the intelligent sensor hub determines there is a change in the number of persons, the information is sent out-of-band to an embedded controller (EC) independent of a host operating system. The EC makes a change to the configuration of the information handling system if needed.

Abstract: A credential management system for an information handling system dynamically determines an available set of authentication techniques based on a system configuration. The dynamic configuration may be based on devices connected to the information handling system, such as keyboard, fingerprint reader, and facial recognition. The dynamic configuration may also be based on a dynamic posture of the information handling system, such as whether a devices is in an open-lid, closed-lid, tent-shape, tablet-mode, or docked configuration.

Abstract: In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may execute a first information handling system (IHS) initialization executable of a first IHS initialization executable/operating system (OS) executable pair; execute a second OS executable of a second IHS initialization executable/OS executable pair via an OS context; determine, by the second OS executable, that at least one application has been installed on the IHS in addition to multiple applications that have already been installed on the IHS; determine, by the second OS executable, information associated with the at least one application and at least one of system information, power configuration information, status configuration information, and hardware information; and provide first information that recommends how to configure power utilization of the IHS and second information that recommends how not to configure power utilization of the IHS based at least on the determined information.

Abstract: A disclosed method for provisioning a computing device includes receiving, by provisioning software that executes on the computing device to provision the computing device for access to an enterprise infrastructure from a device orchestration service through which computing devices are provisioned to access the enterprise infrastructure, a digital certificate representing a credential for accessing, by a user via the computing device, the enterprise infrastructure.

Abstract: In one embodiment, a method for offloading one or more tasks from an information handling system to a smart peripheral device in a computing environment includes establishing a connection between the smart peripheral device and the information handling system; receiving a user identification from the information handling system indicating a user of the information handling system; receiving a query from the information handling system requesting a capabilities inventory of the smart peripheral device indicating the one or more tasks to be offloaded; determining user permissions based on a configuration policy of the smart peripheral device; generating the capabilities inventory based on the user permissions; sending the capabilities inventory to the information handling system; receiving one or more commands from the information handling system indicating the one or more tasks to be offloaded from the information handling system to the smart peripheral device; and executing the one or more commands.

Abstract: In one embodiment, a method for offloading one or more tasks from an information handling system to a smart peripheral device in a computing environment includes establishing a connection between the smart peripheral device and the information handling system; receiving a user identification from the information handling system indicating a user of the information handling system; receiving a query from the information handling system requesting a capabilities inventory of the smart peripheral device indicating the one or more tasks to be offloaded; determining user permissions based on a configuration policy of the smart peripheral device; generating the capabilities inventory based on the user permissions; sending the capabilities inventory to the information handling system; receiving one or more commands from the information handling system indicating the one or more tasks to be offloaded from the information handling system to the smart peripheral device; and executing the one or more commands.

Abstract: An information handling system includes a network interface card and a processor. The network interface card includes first and second virtual network interface cards. The processor communicates with the network interface card, and connects with an infrastructure access point via the first virtual network interface card. The processor forms multiple network connections via the infrastructure access point and the first virtual network interface card. The processor detects a wireless dock is within a predetermined proximity. In response to the wireless dock being within the predetermined proximity, the processor initiates a connection with the wireless dock via the second virtual network interface card. The processor resumes one or more of the network connections through the wireless dock via the second virtual network interface card. In response to the one or more of the network connections being resumed through the wireless dock, the processor drops the connection with the infrastructure access point.

Abstract: An information handling system for providing computer implemented services to users includes a camera and a low power manager that manages operation of the camera. The information handling system also includes a storage for storing: context data regarding an operating state of the information handling system, and management policies for managing operation of the camera. The information handling system also includes a camera settings manager that dynamically updates operation of the low power manager using the context data and the management policies.