Peripheral Access Handles for Isolated Workspace Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Information Handling Systems (IHSs) face challenges in securely managing the use of peripheral devices by isolated workspaces due to isolation from the hardware and operating system, preventing workspaces from accessing and controlling peripheral devices for exclusive operations, which is crucial for secure functions like user authentication.
Innovation Solution
The system provides workspaces with exclusive use of peripheral devices through handles or tokens, leveraging firmware interfaces and remote access controllers to manage and orchestrate workspace operations, ensuring isolation and secure access to peripheral devices like smartcard readers and biometric scanners.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If workspaces are isolated from hardware and operating system, then security is improved, but access to peripheral devices is lost
Solution Approach 1:
The patent introduces a peripheral device handle as an intermediary mechanism that bridges the isolation barrier. The handle allows workspaces to access peripheral devices without direct hardware access, maintaining security while enabling controlled interaction through the handle interface
Solution Approach 2:
The patent segments peripheral device access into discrete handles that can be independently managed. Each handle represents a specific access right to a peripheral device, allowing fine-grained control and isolation while maintaining the ability to access peripherals when authorized
2Ease of operation
If peripheral devices are made accessible to workspaces, then ease of operation is improved, but risk of monopolization and security breaches increases
Solution Approach 1:
The patent implements dynamic access control where peripheral device handles have explicit validity periods and can be revoked. Access rights are not static but can be dynamically adjusted based on workspace needs, preventing permanent monopolization and enabling flexible resource allocation
Solution Approach 2:
The system provides feedback mechanisms to track and manage peripheral device usage. The handle system allows monitoring of which workspaces have access to which peripherals, enabling the system to prevent monopolization and ensure fair resource distribution
3Reliability
If exclusive access to peripheral devices is provided, then security is improved, but device complexity increases
Solution Approach 1:
Instead of giving workspaces direct access to complex hardware interfaces, the system creates simplified handles that copy the essential access functionality. The handle is a lightweight abstraction that provides peripheral access without exposing the underlying hardware complexity
Data Source
AI summary
Methods and system support use of peripheral devices by workspaces operating on an Information Handling System (IHS), where the workspaces operate in isolation from the hardware and other software of the IHS. Workspaces are thus unable to interface with hardware coupled to the IHS, including peripheral devices coupled to the IHS. In embodiments, workspace issue request for use of a remote operation supported by a peripheral device. A handle is then provided for invoking the remote operation supported by the peripheral device and for providing the workspace with exclusive use of the peripheral device for the duration of a validity of the handle. One the handle is used to invoke the remote operation supported by the peripheral device, the workspace is provided with output from the remote operation conducted during exclusive use of the peripheral device by the workspace.