Systems and methods for provisioning a database of trusted users stored within one or more information handling systems
Embodiments of systems and methods are provided for provisioning a database of trusted users stored locally on one or more information handling systems. The systems and methods disclosed herein may utilize a database of trusted users (otherwise referred to as a trusted multi-user database, or TMU database), a database template and/or policy stored within a remote system (e.g., a cloud or backend server) to remotely manage and provision a TMU database stored locally within one or more information handling systems. In doing so, the systems and methods disclosed herein may be used to securely back-up and restore a TMU database stored locally with an IHS, remotely manage enrollment and provisioning of a TMU database stored locally within one or more information handling systems based on policy, and apply TMU configuration settings globally to the TMU databases stored locally within a plurality of information handling systems.
1 . A system, comprising:
a first information handling system (IHS) having a first processor and a first non-transitory memory, the first non-transitory memory storing a trusted multi-user (TMU) database for one or more IHSs and policy for managing the TMU database stored within the one or more IHSs; and
a second IHS communicatively coupled to the first IHS over a network, wherein the second IHS comprises:
a second processor; and
a second non-transitory memory storing:
a local TMU database for the second IHS, wherein the local TMU database contains one or more trusted users, biometric data obtained from the one or more trusted users and one or more TMU configuration settings specified for the one or more trusted users;
a first set of program instructions executable on the second processor for managing the local TMU database stored within the second non-transitory memory; and
a second set of program instructions executable on the second processor for communicating information between the second IHS and the first IHS over the network; and
a third set of program instructions executable on the second processor to provision the local TMU database stored within the second non-transitory memory of the second IHS using at least one of the TMU database and the policy stored within the first non-transitory memory of the first IHS.
2 . The system of claim 1 , wherein the second non-transitory memory stores instructions that when executed on the second processor cause:
transmit, over the network to the first IHS, a restore request to restore the local TMU database stored within the second IHS;
receive, over the network from the first IHS, the TMU database stored within the first IHS in response to the restore request; and
restore the local TMU database stored within the second IHS using the TMU database received from the first IHS.
3 . The system of claim 1 , wherein the second non-transitory memory stores instructions that when executed on the second processor cause:
utilize the policy stored within the first IHS to manage enrollment of new users within the local TMU database stored within the second IHS.
4 . The system of claim 3 , wherein the second non-transitory memory stores instructions that when executed on the second processor cause:
utilize the policy stored within the first IHS to restrict enrollment of new users within the TMU database stored within the second IHS when the second IHS is located within an unsecure environment.
5 . The system of claim 1 , wherein the first IHS stores a database template containing a predetermined set of trusted users, biometric data obtained from the predetermined set of trusted users and one or more TMU configuration settings specified for the predetermined set of trusted users.
6 . The system of claim 5 , wherein the second non-transitory memory stores instructions that when executed on the second processor cause:
receive the database template over the network from the first IHS; and
utilize the database template received from the first IHS to provision the local TMU database stored within the second IHS by storing the biometric data and the one or more TMU configuration settings contained within the database template within the local TMU database stored within the second IHS.
7 . The system of claim 5 , wherein the second non-transitory memory stores instructions that when executed on the second processor cause second non-transitory memory stores instructions that when executed on the second processor cause:
receive the database template over the network from the first IHS; and
utilize the database template received from the first IHS to provision the local TMU database stored within the second IHS by applying the one or more TMU configuration settings contained within the database template to the local TMU database stored within the second IHS.
8 . A method for provisioning a database of trusted users stored within an information handling system, the method comprising:
enrolling one or more trusted users within a trusted multi-user (TMU) database stored locally with a first information handling system (IHS), wherein said enrolling the one or more trusted users comprises storing biometric data obtained from the one or more trusted users and one or more TMU configuration settings specified for the one or more trusted users within the TMU database;
transmitting the TMU database stored locally within the first IHS, over a network, to a remote IHS for remote storage and management of the TMU database, wherein the remote IHS stores the TMU database received from the first IHS and policy for managing the TMU database stored locally within the first IHS; and
subsequently utilizing at least one of the TMU database and the policy stored within the remote IHS to provision the TMU database stored locally within the first IHS.
9 . The method of claim 8 , wherein said subsequently utilizing at least one of the TMU database and the policy stored within the remote IHS to provision the TMU database stored locally within the first IHS comprises:
utilizing the TMU database stored within the remote IHS to restore a TMU database previously stored within the first IHS.
10 . The method of claim 9 , wherein said utilizing the TMU database stored within the remote IHS to restore the TMU database previously stored within the first IHS comprises:
transmitting a restore request, over the network from the first IHS to the remote IHS, to restore the TMU database previously stored within the first IHS;
receiving, over the network from the remote IHS to the first IHS, the TMU database stored within the remote IHS in response to the restore request; and
restoring the TMU database previously stored within the first IHS using the TMU database received from the remote IHS.
11 . The method of claim 8 , wherein said subsequently utilizing at least one of the TMU database and the policy stored within the remote IHS to provision the TMU database stored locally within the first IHS comprises:
utilizing the policy stored within the remote IHS to manage enrollment of new users within the TMU database stored locally within the first IHS.
12 . The method of claim 11 , wherein said utilizing the policy stored within the remote IHS to manage enrollment of new users within the TMU database stored locally within the first IHS comprises:
restricting the enrollment of new users within the TMU database stored locally within the first IHS when the first IHS is located within an unsecure environment.
13 . The method of claim 8 , wherein the method further comprises:
utilizing a database template stored within the remote IHS to reprovision the TMU database stored locally within the first IHS;
wherein the database template contains a predetermined set of trusted users, biometric data obtained from the predetermined set of trusted users and one or more TMU configuration settings specified for the predetermined set of trusted users; and
wherein said utilizing the database template comprises storing the biometric data and the one or more TMU configuration settings contained within the database template within the TMU database stored locally within the first IHS.
14 . The method of claim 13 , wherein the policy stored within the remote IHS specifies one or more rules for reprovisioning the TMU database stored locally within the first IHS, and wherein said utilizing the database template further comprises:
utilizing the database template stored within the remote IHS to reprovision the TMU database stored locally within the first IHS based on the policy stored within the remote IHS.
15 . The method of claim 14 , wherein said utilizing the database template stored within the remote IHS to reprovision the TMU database stored locally within the first IHS based on the policy stored within the remote IHS comprises:
utilizing the database template stored within the remote IHS to reprovision the TMU database stored locally within the first IHS when the first IHS is located within an unsecure environment.
16 . The method of claim 14 , wherein said utilizing the database template stored within the remote IHS to reprovision the TMU database stored locally within the first IHS based on the policy stored within the remote IHS comprises:
utilizing the database template stored within the remote IHS to reprovision the TMU database stored locally within the first IHS when the first IHS moves from a first location to a second location.
17 . A method for provisioning a database of trusted users stored within a plurality of information handling systems (IHSs), the method comprising:
providing each of the plurality of IHSs with a trusted multi-user (TMU) database;
retrieving a database template stored within a remote IHS, the database template containing a predetermined set of trusted users, biometric data obtained from the predetermined set of trusted users and one or more TMU configuration settings specified for the predetermined set of trusted users; and
utilizing the database template retrieved from the remote IHS to provision TMU databases provided within each of the plurality of IHSs.
18 . The method of claim 17 , wherein said utilizing the database template retrieved from the remote IHS to provision the TMU databases provided within each of the plurality of IHSs comprises:
storing the biometric data and the one or more TMU configuration settings contained within the database template within the TMU databases provided within each of the plurality of IHSs.
19 . The method of claim 17 , wherein said utilizing the database template retrieved from the remote IHS to provision the TMU databases provided within each of the plurality of IHSs comprises:
applying the one or more TMU configuration settings contained within the database template to the TMU databases provided within each of the plurality of IHSs.
20 . The method of claim 17 , wherein the one or more TMU configuration settings specify one or more of the following: locations in which the predetermined set of trusted users is enrolled as trusted users, and whether to enable or disable a display of notifications on a display screen of the plurality of IHSs.