Virtual Interface for Secure OS-Agnostic Telemetry

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing information handling systems face challenges in securely accessing and transmitting telemetry data and platform data across different operating systems, as direct hardware access is restricted, and re-imaging can delete the operating system agent responsible for data collection.

Innovation Solution

An information handling system with a virtual interface located below the kernel space allows for secure bi-directional data handling by an agent that transmits telemetry data from an embedded controller to a data repository, using a virtual interface that operates independently of the operating system, enabling in-band and out-of-band data transmission.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If direct hardware access is implemented for telemetry data collection, then data access efficiency is improved, but system security and stability deteriorate

Engineering Contradiction:

Improvedata access efficiencyVSAvoidsystem security and stability

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent introduces a virtual interface as an intermediary component located below kernel space that mediates between the agent and embedded controller. This virtual interface enables data access without direct hardware access, maintaining both efficiency and security/stability by acting as a controlled buffer layer.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the system into distinct layers: user space (agent), virtual interface layer (below kernel space), and embedded controller layer. This segmentation allows each layer to operate independently with defined interfaces, improving security while maintaining access efficiency through proper layering.

Inventive Principle:

Principle #1Segmentation

2Productivity

If operating system-specific agents are used for data collection, then data collection functionality is improved, but adaptability across different operating systems deteriorates

Engineering Contradiction:

Improvedata collection functionalityVSAvoidoperating system compatibility

Core Design Contradiction:

ProductivityVSAdaptability or versatility

Solution Approach 1:

The virtual interface is designed to be operating system-agnostic, providing universal data access capabilities across different operating systems. By placing the virtual interface below kernel space, it can serve multiple operating systems without being tied to any specific OS, thereby achieving both functionality and adaptability.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Ease of operation

If the agent is located in user space for ease of deployment, then ease of operation is improved, but data access reliability deteriorates due to re-imaging deletion

Engineering Contradiction:

Improvedeployment easeVSAvoiddata collection continuity

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent establishes the virtual interface below kernel space before the operating system agent is deployed. This preliminary action ensures that the data access pathway is already in place and protected, so even if the user-space agent is deleted during re-imaging, the underlying virtual interface remains intact and can restore functionality.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS11914725B2Operating system agnostic and secure bi-directional data handling

Publication Date: 2024.02.27 DELL PROD LP

AI summary

An information handling system includes a virtual interface configured to provide communication between an agent and an embedded controller, wherein the virtual interface is located below a kernel space of the information handling system. The agent may be configured to transmit telemetry data published by the embedded controller to a data repository, wherein the agent is located at a user space of the information handling system. The embedded controller publishes telemetry data to the data repository via the virtual interface through the agent.