Systems and methods for enrolling new users within a database of trusted users
Embodiments of systems and methods are provided for enrolling new users within a database of trusted users during an active system session. The disclosed systems and methods automate and streamline the process of enrolling new trusted users within a database of trusted users (otherwise referred to as a trusted multi-user database, or TMU database). In some embodiments, the systems and methods disclosed herein may initiate enrollment of a new user within a TMU database upon: (a) receiving confirmation from an authenticated user verifying acceptance of the new user as a trusted user, and (b) detecting a passive enrollment response from the new user. This enables the disclosed systems and methods to securely and efficiently enroll new trusted users within a TMU database, with limited user interaction.
1 . An information handling system (IHS), comprising: a sensor configured to obtain biometric data from at least one user present within a field of view (FOV) of the sensor; a non-transitory memory configured to store: a first set of program instructions; and a trusted multi-user (TMU) database containing biometric data corresponding to one or more trusted users; a processing device configured to execute the first set of program instructions during an active system session to: detect user presence of a first user present within the FOV of the sensor, wherein the first user is an authenticated user of the active system session and enrolled as a trusted user in the TMU database, and wherein the authenticated user controls access by any other user of the active system session; detect user presence of a second user present within the FOV of the sensor; and compare biometric data obtained from the second user with biometric data stored within the TMU database to determine a TMU status of the second user; and a host processor coupled to receive the TMU status of the second user from the processing device, wherein if the TMU status indicates that the second user is an unknown user not included within the TMU database, the host processor is configured to execute a second set of program instructions during the active system session to: display a user presence notification on a display screen of the IHS to notify the first user of the user presence of the second user; display a prompt on the display screen to accept the second user as a trusted user for the active system session to provide access to the active system session without authentication of the second user to the active system session;
receive confirmation verifying acceptance of the second user as a trusted user; and
in response to acceptance of the second user as a trusted user, wherein upon receiving the confirmation verifying acceptance of the second user as a trusted user, the host processor is further configured to execute the second set of program instructions during the active system session to:
detect a visual or auditory response from the second user; and
generate an enrollment notification to initiate enrollment of the second user within the TMU database upon detecting the visual or auditory response from the second user, simultaneously interacting with both the first user and the second user as trusted users, the first user having a first policy, the second user having a second policy.
2 . The information handling system of claim 1 , wherein the visual or auditory response detected from the second user comprises a user gesture.
3 . The information handling system of claim 1 , wherein the visual or auditory response detected from the second user comprises a word or phrase spoken by the second user.
4 . The information handling system of claim 1 , wherein upon receiving the enrollment notification from the host processor, the processing device is further configured to execute the first set of program instructions during the active system session to: enroll the second user as a trusted user within the TMU database.
5 . The information handling system of claim 4 , wherein upon receiving the enrollment notification from the host processor, the processing device is further configured to execute the first set of program instructions during the active system session to:
store biometric data obtained from the second user within the TMU database.
6 . The information handling system of claim 5 , wherein the biometric data stored within the TMU database includes a facial identifier composed of a plurality of facial landmarks.
7 . The information handling system of claim 4 , wherein upon receiving the enrollment notification from the host processor, the processing device is further configured to execute the first set of program instructions during the active system session to:
store policy managed limitations for the second user within the TMU database, wherein the policy managed limitations include one or more limitations restricting access to, or preventing interaction with, the IHS.
8 . The information handling system of claim 7 , wherein the policy managed limitations include a first limitation, which prevents the second user from interacting with the IHS for longer than a predetermined amount of time.
9 . The information handling system of claim 7 , wherein the policy managed limitations include a second limitation, which prevents the second user from accessing certain applications or data stored within the IHS.
10 . A method for enrolling new users within a database of trusted users, the method comprising: detecting user presence of a first user present within a field of view (FOV) of an information handling system (IHS) during an active system session, wherein the first user is an authenticated user of the active system session, and wherein the authenticated user is enrolled as a trusted user in a trusted multi-user (TIU) database, which stores biometric data corresponding to one or more trusted users, the authenticated user controlling access by any other user to the active system session; detecting user presence of a second user present within the FOV of the IHS during the active system session; displaying a user presence notification on a display screen of the IHS to notify the first user of the user presence of the second user;
display a prompt on the display screen to accept the second user as a trusted user for the active system session; wherein upon receiving confirmation verifying acceptance of the second user as a trusted user, the method further comprises:
detecting a visual or auditory response from the second user to initiate enrollment of the second user within the TMU database;
enrolling the second user as a trusted user within the TMU database upon detecting the visual or auditory response from the second user; and
simultaneously interacting with both the first user and the second user as trusted users, the first user having a first policy, the second user having a second policy, the second user is not an authenticated user of the active system session.
11 . The method of claim 10 , wherein prior to displaying the user presence notification on the display screen of the IHS, the method further comprises:
comparing biometric data obtained from the second user with biometric data stored within the TMU database to determine if the second user is a trusted user included within the TMU database or an unknown user not included within the TMU database.
12 . The method of claim 11 , wherein said displaying the user presence notification on the display screen of the IHS comprises:
displaying the user presence notification on the display screen of the IHS to notify the first user of the user presence of the second user when said comparing determines that the second user is an unknown user.
13 . The method of claim 10 , wherein the visual or auditory response from the second user comprises a user gesture.
14 . The method of claim 13 , wherein the user gesture comprises a head gesture, an arm gesture or a hand gesture.
15 . The method of claim 10 , wherein the visual or auditory response from the second user comprises a word or phrase spoken by the second user.
16 . The method of claim 10 , wherein said enrolling the second user as a trusted user within the TMU database comprises:
storing biometric data obtained from the second user within the TMU database.
17 . The method of claim 10 , wherein said enrolling the second user as a trusted user within the TMU database comprises:
storing policy managed limitations for the second user within the TMU database, wherein the policy managed limitations include one or more limitations restricting access to, or preventing interaction with, the IHS.
18 . The method of claim 17 , wherein said storing policy managed limitations for the second user within the TMU database comprises storing a first limitation, which prevents the second user from interacting with the IHS for longer than a predetermined amount of time.
19 . The method of claim 17 , wherein said storing policy managed limitations for the second user within the TMU database comprises storing a second limitation, which prevents the second user from accessing certain applications or data stored within the IHS.