System and method for secure manageability of privacy mode
Managing privacy controls in an information handling system to allow Information Technology Decision Makers (ITDMs) to prevent unwanted disclosure of information while allowing users to work together. A first privacy policy is asserted to protect information. When a user device requests an override to access an I/O device, embodiments analyze device parameters and application parameters to determine whether to authorize the use of the I/O device. If the override request is authorized, the user is able to access the I/O device and a new privacy policy is asserted. If a device parameter changes, embodiments may assess whether the change could result in unwanted disclosure of information and dynamically change the privacy policy to prevent the disclosure.
1. A computer-implemented method for dynamically managing privacy settings in an information handling system (IHS), the method comprising:
a privacy manager service asserting a first privacy policy including a first set of privacy rules for one or more of an input device and an output device based on an environment in which the IHS is operating, the first set of privacy rules including a defined geographic area;
an IHS service receiving a privacy override request;
the IHS service determining, at a first time, a set of IHS parameters and a set of application parameters for the application based on the environment, the IHS parameters including a first geographic location of the IHS;
the IHS service sending the privacy override request to a server service, the privacy override request including the set of IHS parameters and the set of application parameters;
the server service, based on the first geographic location of the IHS, sending a response to the IHS service to allow the privacy override request, the response including a token and a second privacy policy including a second set of privacy rules;
the IHS service receiving the response from the server service;
the IHS service sending the second privacy policy to the privacy manager service;
the privacy manager service asserting the second privacy policy;
the IHS service determining, at a second time after the first time, a change from the first geographic location to a second geographic location;
the IHS service sending data including the second geographic location of the IHS to the server service;
the privacy manager, based on the second geographic location of the IHS, determining that the second geographic location does not meet the second set of privacy rules of the second privacy policy;
the privacy manager sending a default privacy policy to the IHS service, the default privacy policy blocking access to the one or more of the input device and the output device; and
asserting, by the privacy manager service, the default privacy policy.
2. The computer-implemented method of claim 1 , wherein:
the first privacy policy comprises a first set of privacy rules for preventing use of a camera or a microphone based on the environment, and
the second privacy policy comprises a second set of privacy rules for allowing one or more of the camera or the microphone in the environment.
3. The computer-implemented method of claim 1 , wherein:
the first privacy policy comprises a first set of privacy rules for preventing use of a display or a speaker based on the environment, and
the second privacy policy comprises a second set of privacy rules for allowing use of the display or the speaker in the environment.
4. The computer-implemented method of claim 1 , wherein:
the first privacy policy comprises one or more privacy rules for the IHS operating relative to a defined time period associated with the environment;
the set of changed IHS parameters comprises a time outside the time period; and
the second privacy policy comprises one or more privacy rules for the IHS operating at a different time period.
5. The computer-implemented method of claim 1 , further comprising:
the privacy manager service monitoring the set of application parameters to determine a set of changed application parameters;
the privacy manager service sending the set of changed application parameters to the server service;
the server service determining a new privacy policy based on to the set of changed application parameters;
the server service sending the new privacy policy to the IHS service based on to the set of changed application parameters;
the IHS service sending the new privacy policy to the privacy manager service; and
the privacy manager service asserting the new privacy policy.
6. The computer-implemented method of claim 5 , wherein:
the first privacy policy comprises a set of privacy rules for the application that do not include using one of a camera or a microphone, and
the new privacy policy comprises a set of privacy rules for the application that include using one or more of the camera or the microphone.
7. The computer-implemented method of claim 5 , wherein:
the first privacy policy comprises a set of privacy rules for the application that do not include using one of a display or a speaker, and
the new privacy policy comprises a set of privacy rules for the application that include using one or more of the display or the speaker.
8. An information handling system (IHS) comprising:
one or more devices for receiving audio or video user input;
one or more devices for communicating audio or video output;
an embedded controller (EC) comprising an EC processor having access to an EC memory storing a privacy manager service configured to assert a privacy policy including privacy rules for preventing computer-implemented actions associated with one or more of an input device and an output device based on an environment in which the IHS is operating; and
an IHS processor having access to an IHS memory storing instructions executable by the IHS processor to:
initiate an application;
in response to receiving a request from the user to override the privacy policy:
determine, at a first time, a set of IHS parameters and a set of application parameters for the application, the IHS parameters including a first geographic location of the IHS;
send the request to a server executing a server service, the request including the set of IHS parameters and the set of application parameters;
in response to receiving a response from the server service, the response including a token and a second privacy policy, send the second privacy policy to the privacy manager service, the second privacy policy comprising a set of privacy rules for allowing computer-implemented actions associated with one or more of the input device and the output device based on the environment;
determine, at a second time after the first time, a change from the first geographic location to a second geographic location;
send data including the second geographic location of the IHS to the server service;
in response to sending the data, receive a response from the server service including a default privacy policy based on the second geographic location not meeting the set of privacy rules of the second privacy policy, the default privacy blocking access to the one or more of the input device and the output device,
wherein the privacy manager service is configured to assert the second default privacy policy.
9. The information handling system of claim 8 , wherein:
the first privacy policy comprises a set of privacy rules for preventing use of a camera or a microphone as the input device based on the environment, and
the second privacy policy comprises a set of privacy rules for allowing one or more of the camera or the microphone in the environment.
10. The information handling system of claim 8 , wherein:
the first privacy policy comprises a set of privacy rules for preventing use of a display or a speaker as the output device based on the environment, and
the second privacy policy comprises a set of privacy rules for allowing use of the display or the speaker in the environment.
11. The information handling system of claim 8 , wherein:
the first privacy policy comprises one or more privacy rules for the IHS operating relative to a defined time period associated with the environment;
the set of changed IHS parameters comprises a time outside the time period; and
the second privacy policy comprises one or more privacy rules for the IHS operating at a different time period.
12. The information handling system of claim 8 , wherein:
the privacy manager service is configured to monitor the set of application parameters to determine a set of changed application parameters and send the set of changed application parameters to the server service;
the server service is configured to determine a new privacy policy based on to the set of changed application parameters and send the new privacy policy to the IHS service; and
the IHS service is configured to send the new privacy policy to the privacy manager service, wherein the privacy manager service is configured to assert the new privacy policy.