Dell Products Inc.

Emc IP Holding Company LLC

Dominique Prunier

Eric Williams

Elie Antoun Jreij

Michael Emery Brown

Christopher Atkinson

Sudhir Vittal Shetty

Stephen Glen Graham

Damon Earley

Kirk Frey

Tommi Salli

Susan Elizabeth Young

Ching-Yun Chao

Yun Zhang

Mark A O'Connell

Bridget Cate

Sisir Samanta

Andrew Nepogodin

Jason Davidson

Shibi Panikkar

Deepaganesh Paulraj

Robert Anthony Lincourt, Jr

Anurag Sharma

Rajeshkumar Ichchhubhai Patel

Jitendra Kumar

Salvatore DeSimone

Qi Jin

Yi Fang

Michael James Barnes

Ashutosh P Nanekar

Raphaël Aubert

Afzal Rahman Jan

Vineeth Totappanavar

Kshitij Patel

Matthew L Troutman

Aaron W Spiegel

Alan White

Alexandre Lemay

Alan Raymond White

Paul R Kingston

Flavio Paiva Junqueira

Michal Sara Davidson

Frederic Meunier

Santoshkumar Kavadimatti

Daniel A Lottero

Derek Labadie

Christoper Atkinson

Eric Gelinas

Sameer Kumar Patro

Systems and methods for establishing biometric hardwired Information Handling System (IHS) ownership are described. In an illustrative, non-limiting embodiment, an IHS may include: a processor; a biometric module including a one-time write biometric profile; and a memory coupled to the processor, where the memory includes program instructions store thereon that, upon execution by the processor, cause the IHS to: obtain biometric data from a user of the IHS; and allow access to the IHS based, at least in part, on a validation of the biometric data with the biometric profile. In another embodiment, a method includes obtaining biometric data from a user of an IHS; and allowing access to the IHS based, at least in part, on a validation of the biometric data with a biometric profile stored in a one-time write memory of the IHS.

System and method for establishing biometric hardwired information handling system (IHS) ownership

Systems and methods for location-based IHS disablement in an Information Handling System (IHS) are described. In an embodiment, an IHS may include: a host processor; a security processor coupled to the host processor; and a memory coupled to the security processor, the memory having program instructions stored thereon that, upon execution, cause the security processor to: detect a location where the IHS is currently disposed; determine one or more restrictions associated with the detected location, each of the restrictions specifying a limitation to be imparted on a resource of the IHS; and communicate with the IHS to apply the determined restrictions.

Location-based IHS disablement system and method

A system, method, and computer-readable medium are disclosed for performing a data center connectivity management operation. The connectivity management operation includes: providing a data center asset with a data center asset client module; establishing a connection between the data center asset client module and a connectivity management system, the connectivity management system comprising a connectivity management system aggregator; updating the data center asset client module to a new version of the data center asset client module, the new version of the data center asset client module including new data center asset module state information and new data center asset connectivity information; and, providing the connectivity management system aggregator with the new data center asset module connectivity information.

Connectivity management system client module update and failure recovery

Architectures and techniques are described that can provide decentralized, zero-trust authorization according to variable fine-grained policies For example, an authorization server can receive an authorization request from a requesting device. The authorization request can comprise a reference address to a resource, in which case resource data can be fetched, or comprise a signed entity indicative of the resource. In either case, resource data used to evaluate a policy can be obtained and, if an associated policy evaluation is authorized, the authorization request can be validated and an associated token can be provided to the requesting device, which can then be transmitted along with an API call to a service through which a resource is provided.

Decentralized authorization with Zero-Trust

In one or more embodiments, one or more systems may provision a virtual console as a service. A remote access controller (RAC) may communicate virtual console content to a virtual console service (VCS) executing on a private cloud server, enabling recording of larger amounts of virtual console content (VCC) and more advanced processing of the VCC by the private cloud server. In the event a crash occurs, more VCC can be accessed to analyze a system, including streaming subsequent VCC.

System and method for providing a virtual console as a service

A system, method, and computer-readable medium for performing a communications management operation. The communications management operation includes: providing a data center asset with a connectivity management system client module; setting the data center asset to a disable until claimed status; providing the data center asset with proof of possession information; establishing a connection between the connectivity management system client module and a connectivity management system of a data center monitoring and management console, establishing a secure communication channel between the connectivity management system client module and a connectivity management system aggregator based upon the proof of ownership information; and, setting the data asset center to a claimed status based upon the information exchanged between the connectivity management system client module and the connectivity management system.

Device disabled until claimed

A system, method, and computer-readable medium are disclosed for performing a data center connectivity management operation. The connectivity management operation includes: providing a data center asset with a data center asset client module, the data center asset client module comprising a file download module, the data center asset client module storing a file block; establishing a connection between the data center asset client module and a connectivity management system, the connectivity management system comprising a connectivity management system aggregator, the connectivity management system aggregator communicating with a file distribution service, the file distribution service communicating with a file tracker service, the location of the software component being maintained by the file tracker service; and, distributing the file block from the data center asset client module to the data center asset client module via the file download module.

Connectivity management system client software distribution operation

A system, method, and computer-readable medium for performing a data center monitoring and management operation. The data center monitoring and management operation includes: submitting a request for a workload instance to a cloud service provider; establishing a secure communication channel between the cloud service provider and a data center monitoring and management console; exchanging information between the cloud service provider and the data center monitoring and management console via the secure communication channel, the information including a verifiable workload instance identity; and, using the verifiable workload instance identity to authenticate a workload instance provided by the cloud service provider.

Method and apparatus for external control planes to cryptographically trust software artifacts launched at public cloud providers

A system, method, and computer-readable medium for processing in-order messages. A message broker is provided with unique message keys to performing in-order ensuring that a batch of messages are sent on the same message broker partition or data flow. A reactive generic data streaming processor provides a parallel data stream uniquely grouped to each message broker partition or data flow. In-order processing is maintained on each parallel data stream by using downstream publishers that preserve strict order in each data stream. A terminal sync message with a unique message key to identifies end of in-order streaming a message group.

System and method to support in-order message processing with reactive microservices

A system, method, and computer-readable medium are disclosed for performing a data center connectivity management operation. The connectivity management operation includes: providing a data center asset with a data center asset client module, the data center asset client module including an endpoint extension; providing an endpoint with a data center asset client extension; establishing a connection between the data center asset client module and a connectivity management system, the connectivity management system comprising a connectivity management system aggregator; and, communicating between the endpoint and the connectivity management system via the data center asset client extension.

Connectivity management system client and host aware extensions for non-embedded use cases

A system, method, and computer-readable medium are disclosed for performing a data center connectivity management operation. The connectivity management operation includes: establishing a secure communication channel between a connectivity management system client and a connectivity management system; exchanging information between the connectivity management system client and the connectivity management system via the secure communication channel between the connectivity management system client and the connectivity management system, the information including a provisioning request, the provisioning request being generated by the baseboard management controller; and, providing provisioning information to the data center asset via the secure communication channel.

Data center asset deployment via a connectivity management deployment operation

A system, method, and computer-readable medium are disclosed for performing a data center connectivity management operation. The connectivity management operation includes: providing a data center asset with a data center asset client module; establishing a connection between an end user device browser and a connectivity management system, the connectivity management system comprising a connectivity management system aggregator; submitting a request to the connectivity management system via the end user device browser to establish connectivity with the data center asset client module; establishing a connection between the data center asset client module and the connectivity management system based upon the request; and, exchanging information between the data center asset client module and the data connectivity management system via the secure communication channel between the data center asset client module and the connectivity management system aggregator.

Client browser to endpoint peer to peer redirection from cloud control pane

A system, method, and computer-readable medium for performing a data center connectivity management operation. The connectivity management operation includes: providing a data center asset with and an embedded data center asset client module; establishing a connection between the embedded data center asset client module and a connectivity management system, the connectivity management system comprising a connectivity management system aggregator; and, communicating between the embedded data center asset client module and the connectivity management system.

Connectivity management system which optimizes embedded connectivity management system operations

Techniques are provided for microservice configuration information retrieval and storage using a generation-based cache. One method comprises obtaining, by a first microservice, a data item from a second microservice with a corresponding generation counter; maintaining, by the first microservice, the data item in a cache with the corresponding generation counter; invalidating, by the first microservice, one or more entries in the cache having a lower generation counter value than a current generation counter; and in response to a request for the data item, performing, by the first microservice: processing the requested data item, if the requested data item is in the cache after the invalidation; and if the requested data item is not in the cache after the invalidation: (i) retrieving the requested data item from the second microservice, (ii) processing the retrieved data item and (iii) placing the retrieved requested data item in the cache with a corresponding generation counter value.

Microservice data item storage and retrieval using generation-based cache

A system, method, and computer-readable medium are disclosed for performing a data center connectivity management operation. The connectivity management operation includes: providing a data center asset with a data center asset client module and an embedded data center asset client module; establishing a secure communication channel between the connectivity management system client and a connectivity management system; exchanging information between the connectivity management system client and the connectivity management system via the secure communication channel between the connectivity management system client and the connectivity management system, the information including a data center asset client module authentication request; authenticating the data center asset client module in response to the data center asset module authentication request; and, configuring software in the data center asset in response to authentication of the data center asset client module.

Data center asset client module authentication via a connectivity management authentication operation

Growing community of inventors

Montreal, Canada

Dominique Prunier