Systems and methods for managing system protection settings with heterogeneous computing platforms
Systems and methods for managing system protection settings with heterogeneous computing platforms are described. In an illustrative, non-limiting embodiment, an IHS may include a heterogeneous computing platform and a memory coupled to the heterogeneous computing platform, where the memory comprises a plurality of sets of firmware instructions, where each of the sets of firmware instructions, upon execution by a respective device among a plurality of devices of the heterogeneous computing platform, enables the respective device to provide a corresponding firmware service, and where at least one of the plurality of devices operates as an orchestrator configured to: receive context or telemetry data; and based, at least in part, upon the context or telemetry data, modify a setting of a feature selected from the group consisting of: Wake-on-Approach (WoA), and Walk away Lock (WaL).
1. An Information Handling System (IHS), comprising:
a heterogeneous computing platform; and
a memory coupled to the heterogeneous computing platform, wherein the memory comprises a plurality of sets of firmware instructions, wherein each of the sets of firmware instructions, upon execution by a respective device among a plurality of devices of the heterogeneous computing platform, enables the respective device to provide a corresponding firmware service, and wherein at least one of the plurality of devices operates as an orchestrator configured to:
receive context or telemetry data; and
based, at least in part, upon the context or telemetry data, modify a setting of a feature selected from the group consisting of: Wake-on-Approach (WoA), and Walk away Lock (WaL).
2. The IHS of claim 1 , wherein the heterogeneous computing platform comprises at least one of: a System-On-Chip (SoC), a Field-Programmable Gate Array (FPGA), or an Application-Specific Integrated Circuit (ASIC).
3. The IHS of claim 1 , wherein the orchestrator comprises at least one of: a sensing hub, an Embedded Controller (EC), or a Baseboard Management Controller (BMC).
4. The IHS of claim 1 , wherein the context or telemetry data comprises an indication of at least one of: a core utilization, a memory utilization, a network utilization, a battery utilization, a peripheral device utilization, an application state, an IHS location, or an IHS posture.
5. The IHS of claim 1 , wherein to receive the context or telemetry data, the orchestrator is configured to receive a message from a firmware service executed by a selected one of the plurality of devices via an Application Programming Interface (API) without any involvement by any host Operating System (OS).
6. The IHS of claim 5 , wherein the selected device comprises at least one of: a Video Processing Unit (VPU), an Image Signal Processor (ISP), an audio Digital Signal Processor (aDSP), an Embedded Controller (EC), a camera controller, a time-of-flight sensor, a presence detection sensor, a wireless controller, a network adapter, or a modem.
7. The IHS of claim 1 , wherein the orchestrator is configured to determine a proximity of a user of the IHS, at least in part, based upon the context or telemetry data.
8. The IHS of claim 1 , wherein the WoA setting comprises at least one of: WoA enabled, WoA disabled, a minimum level of confidence of detection, a triggering distance, or a user authentication requirement.
9. The IHS of claim 1 , wherein the WoL setting comprises at least one of: WoA enabled, WoA disabled, a minimum level of confidence of detection, a triggering distance, or a locking delay.
10. The IHS of claim 1 , wherein the feature further comprises an Onlooker Detection feature, and wherein the Onlooker Detection is performed by at least one of: a Central Processing Unit (CPU), a Graphics Processing Unit (GPU), a high-performance AI device, a low-power AI device, a Video Processing Unit (VPU), an audio Digital Signal Processor (aDSP), an Image Signal Processor (ISP), a camera controller, or the orchestrator.
11. The IHS of claim 10 , wherein the Onlooker Detection setting comprises at least one of: Onlooker Detection enabled, Onlooker Detection disabled, a sensitivity of detection, a number of onlookers required to trigger a responsive action, the responsive action, a selection of one or more of a plurality of cameras configured to capture images usable to perform Onlooker Detection.
12. The IHS of claim 1 , wherein to modify the setting, the orchestrator is configured to send a message to a host OS.
13. The IHS of claim 1 , wherein in response to an indication that the IHS is located in a trusted location, the modification comprises a disablement of the WoL feature.
14. The IHS of claim 1 , wherein in response to an indication that the IHS is located in an untrusted location, the modification comprises an enablement of the WoL feature.
15. The IHS of claim 1 , wherein to modify the setting, the orchestrator is further configured to receive a policy from an Information Technology Decision Maker (ITDM) or Original Equipment Manufacturer (OEM).
16. The IHS of claim 15 , wherein the policy associates the context or telemetry data with at least one of: the setting, the modification to the setting, or a responsive action to a WoA or WaL event.
17. A memory device having a plurality of sets of firmware instructions, wherein each of the sets of firmware instructions is executable by a respective device among a plurality of devices of a heterogeneous computing platform to enable the respective device to provide a corresponding firmware service, and wherein a given one of the plurality of sets of firmware instructions, upon execution by a given device, cause the given device to:
identify a modification to at least one of: a Wake-on-Approach (WoA) setting, or a Walk away Lock (WaL) setting; and
in response to the identification, communicate an indication of the modification to a host Operating System (OS) executed by the heterogeneous computing platform.
18. The memory device of claim 17 , wherein the identification of the modification is based, at least in part, upon context or telemetry data.
19. A method, comprising:
transmitting a policy, from a remote server to an orchestrator among a plurality of devices of a heterogeneous computing platform in a client Information Handling System (IHS), wherein the policy comprises at least one of: a Wake-on-Approach (WoA) setting, or a Walk away Lock (WaL) setting, and wherein the orchestrator is configured to implement at least one of: the WoA setting, or the WaL setting;
receiving a request, at the remote server, to modify at least one of the WoA setting or the WaL setting; and
updating the policy, by the remote server, to reflect the modification.
20. The method of claim 19 , wherein the request is produced by a least one of: (a) a user of the client IHS; or (b) the orchestrator in response to a determination that: (i) the user does not utilize the IHS after execution of the WoA feature, or (ii) the WaL setting negatively impacts the user's productivity.