System and method for machine learning applied to in-band to out-of-band communications management
An information handling system operating a low power communications engine comprising a wireless adapter for communicating on a low power communication technology network for receiving low power communication technology data traffic for at least one always-on remote management service for the information handling system, a controller receiving a location status of the information handling system via the low power communication technology network indicating a location or network, where the controller executes code instructions for a low power communications engine to assess a location trust level from an environment characteristics analysis engine to determine whether the location status is a trusted zone location or an untrusted zone location utilizing binary classification machine learning based on input variables including data relating to history of activity at the location or on the network learned by the environment characteristics analysis engine from reported operational or network activity, and the controller to trigger an embedded controller to wake a BIOS of the information handling system and forward the incoming low power communication technology data traffic to in-band applications on the information handling system if the information handling system location status is determined to be in one trusted zone location and the controller to ignore the received low power communication technology data traffic if the information handling system location status is in one untrusted zone location.
1. An information handling system comprising:
a wireless adapter configured to communicate on a low power communication technology network (LPWAN) for transmitting LPWAN data traffic for at least one always-on remote management service for the information handling system;
a processor to receive location status of a client information handling system and to execute code instructions for a low power communications machine learning engine configured to assess a location trust level of whether the location is a trusted zone location or an untrusted zone location based on data relating to history of activity at the location from reported operational or network activity; and
the processor to send a command to trigger an embedded controller at the client information handling system to wake a basic input/output operating system (BIOS) of the information handling system and forward LPWAN data traffic to in-band applications on the information handling system if the client information handling system location is determined to be in the untrusted zone location; and
the processor to store LPWAN data traffic in an out of band environment to be transmitted at a later time when an indication is received that the client information handling system enters a next wake mode if the client information handling system location is determined to be in the trusted zone location.
2. The information handling system of claim 1 wherein the reported operational or network activity includes reports of security attacks reported on a network or at a location and secured or unsecured status of a wireless network at the location.
3. The information handling system of claim 1 , further comprising:
the processor to assess the location trust level of whether the location is the trusted zone location or the untrusted zone location based on assessment of a security posture of the information handling system including sensitivity of enterprise data accessible by the information handling system and security required for access to the information handling system.
4. The information handling system of claim 1 , further comprising:
the low power communications engine to pass the low power communication technology data traffic to in-band applications on the information handling system.
5. The information handling system of claim 1 wherein the always-on remote management service includes a security service and alert messages pertaining to a security compromise which are forwarded to the in-band application when the information handling system is the untrusted zone location for immediate attention by the in-band application.
6. The information handling system of claim 1 wherein the reported operational or network activity includes reports of high-risk network activity by a user of the information handling activity.
7. The information handling system of claim 1 , further comprising:
a memory operatively connected to the low power communications engine to store a database of location or network trust level grading based on learned environment characteristics from reports on history of activity at a plurality of locations or networks and further including reports on history of activity crowd-sourced from similar classes of devices as the information handling system.
8. A computer implemented method comprising:
receiving low power communication technology network data traffic for at least one always-on remote management service for a managed information handling system via a wireless adapter operating via a low power communication technology network wireless link;
receiving location status of the managed information handling system;
executing code instructions, via a processor, for a low power communications machine learning engine configured to assess a location trust level of whether the location status is a trusted zone location or an untrusted zone location based on data relating to history of activity at the location from reported operational or network activity and on assessment of a security posture of the information handling system including sensitivity of enterprise data accessible by the information handling system and security required for access to the information handling system; and
triggering an embedded controller to wake a BIOS of the managed information handling system and forward the incoming low power communication technology data traffic to an in-band application on the managed information handling system if the managed information handling system is determined to be in the untrusted zone location to implement immediate security or management measures.
9. The method of claim 8 , further comprising:
ignoring the received low power communication technology data traffic if the information handling system is in a trusted zone; and
storing ignored low power communication technology data traffic in a memory via the low power communications engine.
10. The method of claim 9 , further comprising:
forwarding the low power communication technology data traffic to the in-band application of the managed information handling system upon the next wake of the managed information handling system from a sleep state.
11. The method of claim 8 wherein the always-on remote management service includes a security service and alert messages pertaining to a security compromise which are forwarded to the in-band application when the managed information handling system is not in the trusted zone location for immediate attention by the in-band application.
12. The method of claim 8 wherein the low power communication technology network utilizes a low power wide area network (LPWAN) protocol.
13. The method of claim 8 wherein the low power communication technology network utilizes a LoRa, Sigfox, or other low power IoT wireless protocol.
14. The method of claim 8 wherein the low power communications engine accesses a database of location trust level grading at an environment characteristics analysis engine via a low-power communication wireless link to determine if the information handling system is in one trusted zone location or not.
15. The method of claim 8 , wherein an environment characteristics analysis engine utilizes machine learning to designate a detected location as the untrusted zone location based on a plurality of factors including reported levels of security attacks within a period of time, security of one or more wireless networks at the detected location, or a history of risky wireless data operations by a user at the detected location.
16. An information handling system comprising:
a wireless adapter for communicating on a low power communication technology network for receiving and transmitting low power communication technology network data traffic for operating an always-on remote management service;
a remote management card executing code instructions via a controller for a low power communications machine learning engine to manage low power communication technology network data traffic;
the controller executing the low power communications machine learning engine to assess whether a detected location of the information handling system is categorized as a trusted zone location or an untrusted zone location from a location trust level provided by an environment characteristics analysis engine and adjusted such that determination of whether the detected location is trusted or untrusted depends on assessment of a security posture of the information handling system including sensitivity of enterprise data accessible by the information handling system and security required for access to the information handling system; and
the low power communications engine to determine whether to wake a basic input/output operating system (BIOS) of the information handling system depending on whether the detected location is one trusted zone location or one untrusted zone location.
17. The information handling system of claim 16 , further comprising:
the low power communications engine to determine whether to wake BIOS of the information handling system depending on whether the information handling system is connected to a power source or has battery power above a threshold level.
18. The information handling system of claim 16 , further comprising:
the controller to wake the BIOS of the information handling system and forward LPWAN data traffic to in-band applications on the information handling system if the detected location of the client information handling system is determined to be categorized as the untrusted zone location.
19. The information handling system of claim 16 wherein the low power communication technology network is a low power wide area network (LPWAN) protocol for LTE Category Narrow Band 1 (LTE NB-IOT) wireless links.
20. The information handling system of claim 16 wherein the low power communications engine operates via an out-of-band operating system.