Abstract: Systems and methods for endpoint context-driven, dynamic workspaces are described.

Abstract: Systems and methods support secure transfer of data between workspaces operating on an IHS (Information Handling System). Upon a request for access to a first managed resource, such as protected data, a first workspace is deployed according to a first workspace definition. Upon a request for access to a second managed resource, a second workspace is deployed according to a second workspace definition. In response to an indication of a portion of the protected data from the first workspace being copied to a buffer supported by the IHS and of a request to paste the copied portion of the protected data to the second workspace, the protections provided by the second workspace are evaluated. If the protections of the second workspace are inadequate, an updated second workspace definition is selected that specifies additional protections. The second workspace is updated according to the updated second workspace definition and the transfer is permitted.

Abstract: Systems and methods provide multilevel authorization of workspaces using certificates, where all of the authorization levels may be authorized separately or may instead be authorized at once. A measurement of an IHS (Information Handling System) is calculated based on the identity of the IHS and based on firmware of the IHS. A measurement of the configuration of the IHS is calculated based on information for configuring the IHS for supporting workspaces and also based on the IHS measurement. A measurement of a workspace session is calculated based on properties of a session used to remotely support operation of the workspace by the IHS and also based on the configuration measurement. Workspace session data may by authorized at all three levels by evaluating the session measurement against a reference session measurement.

Abstract: Systems and methods for dynamic workspace targeting with crowdsourced user context are described. In some embodiments, an Information Handling System (IHS) of a workspace orchestration service may include a processor; and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: detect execution of an application in a workspace instantiated by a client IHS; validate the application based upon productivity context information and security context information received from the client IHS; and in response to the validation, distribute the validated application to another workspace instantiated by another client IHS.

Abstract: Systems and methods for modernizing workspace and hardware lifecycle management in an enterprise productivity ecosystem are described. In some embodiments, a client Information Handling System (IHS) may include a processor and a memory, the memory having program instructions that, upon execution by the processor, cause the client IHS to: receive, from a workspace orchestration service, one or more files or policies configured to enable the client IHS to instantiate a first workspace based upon a first workspace definition; allow a user to execute a non-vetted application in the first workspace; determine that the first workspace is compromised; and receive, in response to the determination, from the workspace orchestration service, one or more other files or policies configured to enable the client IHS to instantiate a second workspace based upon a second workspace definition, where the second workspace definition allows execution of a vetted application corresponding to the non-vetted application.

Abstract: Methods and system are provided for dynamically securing a workspace based on changes in the security context in which the workspace operates. Upon receiving a request from an IHS for access to a managed resource and receiving attributes of a risk context for the request, a risk score for the request is determined. A workspace definition that provides access to the managed resource is selected based on the risk score. A workspace definition includes security requirements for operation of the workspace by the IHS, where the security requirements are commensurate with the risk score. The workspace definition is transmitted to the IHS for operation of the workspace according to the security requirements. A risk context may include, IHS software, a physical environment in which the IHS is located, a physical location of the IHS, a classification of the requested resource, IHS hardware, and a user of the IHS.

Abstract: Systems and methods for modernizing workspace and hardware lifecycle management in an enterprise productivity ecosystem are described.

Abstract: Systems and methods are provided for recording and validating modifications to a secured container. Modifications to the secured container by trusted parties are logged. The log may be maintained in a secured memory of an IHS (Information Handling System) and may be periodically validated. Each logged modification specifies a timestamp of the modification and the digital watermark assigned to the trusted party making the modification. Upon completing modifications, the secured container is sealed by imprinting the first digital watermark and the first timestamp at locations in the secured container specified by a watermarking algorithm assigned to the trusted party making the modification. Additional modifications may be serially watermarked on the secured container according the watermarking algorithm of the trusted party making each modification. The secured container is unsealed by re-applying each of the watermarking algorithms in reverse order.

Abstract: A patient introducer for use with a surgical robotic system is disclosed. In one aspect, the patient introducer may include an introducer tube extending between (i) a distal end connectable to a port and (ii) a proximal end configured to receive a surgical tool. The introducer tube may be configured to guide the surgical tool into the port. The patient introducer may also include an alignment member connected to the introducer tube and including a first shape and a first alignment marking. The alignment member may be configured to interface with a manipulator assembly of a robotic system. The manipulator assembly may include a second shape and a second alignment marking, the first shape being complementary to the second shape. The first alignment marking of the alignment member may facilitate rotational alignment of the alignment member and the manipulator assembly.

Abstract: Systems and methods that may be implemented to use encryption to isolate SMI functions, libraries and data from each other, such as during operation of systems management mode (SMM). Isolation of SMI function, library and data (and limitation of SMI function/library privileges) may be achieved in SMI at runtime by decrypting only that code and data needed for performing the required action/s in response to a SMI received from a calling process by a host processor (e.g., CPU).

Abstract: An information handling system (IHS) includes a memory having a BIOS, at least one sensor that generates security related data for the IHS, a controller, and one or more I/O drivers. The memory, at least one sensor and controller operate within a secure environment of the IHS; the I/O driver(s) operate outside of the secure environment. The controller includes a security policy management engine, which is executable during runtime of the IHS to continuously monitor security related data generated by the at least one sensor, determine whether the security related data violates at least one security policy rule specified for the IHS, and provide a notification of security policy violation to the BIOS, if the security related data violates at least one security policy rule. The I/O driver(s) include a security enforcement engine, which is executable to receive the notification of security policy violation from the BIOS, and perform at least one security measure in response thereto.

Abstract: A dynamic, real-time, genomics decision support and simulation system is disclosed. The system receives individual search criteria associated with an individual, and generates and formats a digital file including the individual search criteria into a format suitable for communication, storage, synthesis, analysis, or a combination thereof, by components of the system. The system compares the individual search criteria from the formatted digital file to information from a reference database. Based on the comparing, the system may identify a potential relationship between the individual search criteria and a disease or condition identified in the information from the reference database. The system may present the potential match, along with an analysis relating to the relationship, on a visualization interface on a device associated with the individual.

Abstract: Systems and methods for continuous evaluation of workspace definitions using endpoint context. In some embodiments, an Information Handling System (IHS) of a workspace orchestration service may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: receive context information from a local management agent of a client device; in response to the context information indicating that a current workspace provided via the local management agent is over-privileged, modify a current workspace definition into a modified workspace definition, where the modified workspace definition outlines fewer resources than the current workspace definition; and transmit, to the local management agent, one or more files configured to enable the local management agent to modify the current workspace based upon the modified workspace definition to reduce a number of resources available to a user of the client device.

Abstract: Information handling systems may be equipped with interfaces to facilitate connection with peripheral devices to serve a variety of functions. A peripheral device may be configured with read-only configuration data when coupled to an information handling system, and the peripheral device allowed to operate in read-only mode. The configuration data may be transmitted as configuration channel (CC) sideband of the interface, such as a USB Type-C interface. If the peripheral device cannot be configured in read-only mode, the information handling system may prevent access to the peripheral device to maintain security policies and prevent data leakage.

Abstract: A root of trust may include one or more hardware components of an IHS (Information Handling System) that operate using validated hardware instructions. Once a root of trust has been established, it may be extended by validating additional components and the instructions by which these components operate. A chain of trusted boot components may be used to securely initialize a set of components required to support core functions of the IHS. In order to detect components of a trusted boot chain that have been compromised, boot chain components validate their own instructions as well as the instructions to be utilized by the next boot component and the instructions utilized by the prior boot component, thus providing bidirectional validation of trusted boot chain components.

Abstract: A method includes saving state information in response to receiving a system management interrupt (SMI), the state information including a first value retrieved from a first register and a second value retrieved from a second register. The method further includes determining a function associated with the SMI based on the first value and determining a calling address associated with the SMI based on the second value. A counter corresponding to the function and calling address pair is incremented in response to receiving the SMI. The method concludes by selectively invoking the function based on the value of the counter and based on a predetermined threshold.

Abstract: A system includes a plurality of portable lockers. Each of the portable lockers includes a lockable compartment configured to contain contents. The system also includes a docking station that includes a vault configured to secure the plurality of portable lockers, a user input device configured to receive a request from a user to take a first portable locker of the plurality of portable lockers, a biometrics sensor configured to collect a biometric from the user, and a processing circuit. The processing circuit is configured to determine, based on the biometric, whether the user has permission to take the first portable locker and control the vault to release the first portable locker to the user in response to a determination that the user has permission to take the first portable locker.

Abstract: Pharmaceutical compositions of the invention comprise functionalized N,N-dialkylamino phenyl ethers derivatives having a disease-modifying action in the treatment of diseases associated with lysosomal storage dysfunction that include Gaucher's disease, and any disease or condition involving lysosomal storage dysfunction.

Abstract: Systems and methods are structured to impart an emotional connection to a goal and to generate customized, appropriate challenges that maintain participant engagement by handicapping certain parameters. In one embodiment, a financial health computing system is configured to: generate a first profile for a first participant; generate a first goal for the first participant, the first goal comprising a first plurality of milestones and a first plurality of rewards; assess a participant's progress based on a first status item; and generate an advisory alert for the first participant based on the first status item. The advisory alert comprises a recommended financial health activity and is configured to accept a user input for directing an auxiliary system to perform the recommended financial health activity. The first goal and the first plurality of rewards are customized to the first participant based at least in part on the first profile.

Abstract: Methods, systems, and computer programs encoded on computer storage medium, for identifying a virtual desktop infrastructure (VDI) that includes a plurality of components; identifying a secure boot state of each of the components; aggregating the secure boot state of each of the components to define an aggregated secure boot state of the VDI; comparing the aggregated secure boot state of the VDI with a secure boot lookup table to identify a measure of trust of the VDI; identifying access control policies for the VDI for the identified measure of trust of the VDI; and enabling access to one or more resources based on the identified access control policies for the VDI.