Electronic device, method for protecting electronic device, and non-transitory computer readable storage medium

Abstract

An electronic device includes a housing, a tamper detector, a security chip, and a controller. The tamper detector is disposed within the internal space of the housing and configured to generate a warning signal in response to the housing being opened. The security chip is configured to store verification data, which, in an initial state, includes a first code. The security chip is communicatively connected to the tamper detector and configured to modify the content of the verification data in response to receiving a warning signal. The controller is communicatively connected to the security chip. When the electronic device initiates a power-on procedure, the controller is configured to receive the verification data and verify whether the verification data matches the first code. If the verification data matches the first code, the controller allows the power-on procedure to continue; otherwise, the controller causes the power-on procedure to pause or terminate.

Description

Technical Field

[0001] This disclosure relates to an electronic device, a method for protecting an electronic device, and a non-transitory computer-readable storage medium. Prior Technology

[0002] For typical electronic devices such as laptops, it is difficult for users to determine whether the device has been tampered with by malicious individuals. If the device has been tampered with and the user continues to use it without their knowledge, there is a risk of data leakage. Summary of the Invention

[0003] In view of this, one of the purposes of this disclosure is to propose an electronic device with a disassembly detection mechanism to improve the security of electronic devices.

[0004] To achieve the above objectives, according to some embodiments disclosed herein, an electronic device includes a housing, a tamper detector, a security chip, and a controller. The housing has an internal space, and the tamper detector is disposed within the internal space of the housing and configured to generate a warning signal in response to the housing being opened. The security chip is configured to store verification data, which, in an initial state, includes a first code. The security chip is communicatively connected to the tamper detector and configured to modify the content of the verification data in response to receiving a warning signal. The controller is communicatively connected to the security chip. When the electronic device initiates a power-on procedure, the controller is configured to receive the verification data and verify whether the verification data matches the first code. If the verification data matches the first code, the controller allows the power-on procedure to continue. If the verification data does not match the first code, the controller causes the power-on procedure to pause or terminate.

[0005] In one or more embodiments disclosed herein, the security chip includes a microprocessor and a data storage device, with encrypted transmission between the microprocessor and the data storage device. The data storage device is configured to store verification data, and the microprocessor is configured to instruct the data storage device to replace the first code with a second code in response to receiving an alert signal, wherein the second code is randomly generated by the microprocessor or the data storage device.

[0006] In one or more embodiments disclosed herein, the second code is calculated by a microprocessor or data storage device based on the first code.

[0007] In one or more embodiments disclosed herein, the housing includes a first housing component and a second housing component, which are combined to form the housing. The disassembly detector includes at least one of the following: a push-button switch disposed on the first housing component and configured to be pressed against by the second housing component; a pressure sensor disposed on the first housing component and configured to be pressed against by the second housing component; a Hall effect sensor and a magnet disposed at corresponding positions on the first and second housing components; and a light sensor configured to sense light intensity within the housing.

[0008] In one or more embodiments disclosed herein, the controller is further configured to receive disassembly permission information and determine whether to skip the step of verifying the data based on the disassembly permission information.

[0009] In one or more embodiments disclosed herein, the controller is an embedded controller, which includes memory configured to store a first code. The embedded controller is configured to verify whether the verification data matches the first code stored in the memory.

[0010] In one or more embodiments disclosed herein, the controller is configured to prevent the electronic device from loading the operating system, thereby causing the startup process to pause or terminate.

[0011] In one or more embodiments disclosed herein, a communication device and a processor are further included. The processor is coupled to the communication device and configured to: during the power-on process, detect whether an authorized hardware key is connected to the electronic device; if an authorized hardware key exists, connect to the server via the communication device and verify the device identification information of the electronic device via the server; and if the device identification information is verified, allow the power-on process to continue.

[0012] In one or more embodiments disclosed herein, the device identification information includes at least one of the following: a serial number of the electronic device, an identification code of a hardware component of the electronic device, and a unique identification code of the electronic device. The unique identification code is a combination of the identification codes of a plurality of hardware components of the electronic device.

[0013] In one or more embodiments disclosed herein, the controller includes memory configured to record authorized power-on information when the device identification information is successfully verified. During the power-on process, the controller is configured to check whether the memory contains authorized power-on information; if the memory contains authorized power-on information, the controller allows the power-on procedure to continue.

[0014] According to some embodiments disclosed herein, a method for protecting an electronic device includes: storing verification data in a security chip of the electronic device, wherein in an initial state, the verification data includes a first code; detecting an event that the casing of the electronic device has been opened by a tamper detector of the electronic device, and generating a warning signal when the event of opening the casing is detected; modifying the content of the verification data by the security chip in response to receiving the warning signal; and when the electronic device performs a power-on procedure, receiving the verification data from the security chip by a controller, and confirming whether the verification data matches the first code; if the verification data matches the first code, the electronic device continues to perform the power-on procedure; if the verification data does not match the first code, the electronic device suspends or terminates the power-on procedure.

[0015] In one or more embodiments disclosed herein, the step of changing the content of the verification data includes: randomly generating a second code from the security chip and replacing the first code with the second code.

[0016] In one or more embodiments disclosed herein, the step of changing the content of the verification data includes: calculating a second code based on a first code by a security chip, and replacing the first code with the second code.

[0017] In one or more embodiments disclosed herein, the steps of the disassembly detector to detect an event that the casing has been disassembled include: using a push switch or a pair of Hall sensors and a magnet to detect that the two casing components of the casing are at least partially separated; or using a light sensor disposed in the casing to detect that external light enters the casing.

[0018] In one or more embodiments disclosed herein, the method for protecting an electronic device further includes: receiving disassembly authorization information by a controller, and determining whether to skip the step of verifying data based on the disassembly authorization information.

[0019] In one or more embodiments disclosed herein, the controller is an embedded controller, which includes memory configured to store a first code. The embedded controller is configured to verify whether the verification data matches the first code stored in the memory.

[0020] In one or more embodiments disclosed herein, the step of suspending or terminating the power-on procedure of an electronic device includes: preventing the electronic device from loading the operating system by a controller.

[0021] In one or more embodiments disclosed herein, the method for protecting an electronic device further includes: during the power-on process, detecting whether an authorized hardware key is connected to the electronic device; if an authorized hardware key exists, the electronic device connects to a server and verifies the device identification information of the electronic device through the server; and if the device identification information is verified, the electronic device continues the power-on process.

[0022] In one or more embodiments disclosed herein, the device identification information includes at least one of the following: the serial number of the electronic device, the identification code of the hardware component of the electronic device, and the unique identification code of the electronic device.

[0023] In one or more embodiments disclosed herein, the method for protecting an electronic device further includes: when the device identification information is verified, the controller's memory records authorized power-on information; and during the power-on process, the controller confirms whether the memory stores authorized power-on information, and if the memory stores authorized power-on information, the electronic device continues the power-on procedure.

[0024] According to some embodiments disclosed herein, a non-transitory computer-readable storage medium is configured to store one or more instructions. When a controller executes the instructions, the instructions cause the controller to perform the following operations: receiving verification data from the security chip of the electronic device in response to the power button of the electronic device being pressed, wherein in an initial state, the verification data includes a first code, and the security chip is configured to change the content of the verification data in response to the casing of the electronic device being opened; confirming whether the verification data matches the first code; and if the verification data matches the first code, allowing the electronic device to power on, and if the verification data does not match the first code, pausing or prohibiting the electronic device from powering on.

[0025] In one or more embodiments disclosed herein, when the controller executes an instruction, the instruction causes the controller to further perform the following operations: receive disassembly permission information, and determine whether to skip the step of verifying the data based on the disassembly permission information.

[0026] In one or more embodiments disclosed herein, the controller is an embedded controller, which includes memory configured to store a first code. The embedded controller is configured to verify whether the verification data matches the first code stored in the memory.

[0027] In one or more embodiments disclosed herein, the controller is configured to prevent the electronic device from loading the operating system, thereby suspending or preventing the electronic device from powering on.

[0028] In one or more embodiments disclosed herein, when the controller executes an instruction, the instruction causes the controller to further perform the following operations: when the electronic device obtains authorized power-on information, the authorized power-on information is recorded in the controller's memory; and in response to the power button of the electronic device being pressed, the controller checks whether the memory contains authorized power-on information, and if the memory contains authorized power-on information, the controller allows the electronic device to power on.

[0029] In summary, the disclosed electronic device includes a tamper detector and a security chip. The security chip stores verification data and modifies the verification data upon receiving a warning signal from the tamper detector (indicating that the casing has been opened). When the electronic device initiates the power-on process, the controller receives the verification data and verifies whether it has been altered. If the verification data remains unchanged, it means the casing has not been opened, and the electronic device can power on normally. If the verification data has been altered, the controller causes the power-on process to pause or terminate, preventing the electronic device from loading the operating system and thus preventing the theft of user-stored data. Simple Explanation of the Diagram

[0030] To make the above and other objects, features, advantages and embodiments of this disclosure more apparent and understandable, the accompanying drawings are described below: Figure 1 is a schematic assembly diagram illustrating an electronic device according to one embodiment of this disclosure. Figure 2 is a schematic exploded view of the electronic device shown in Figure 1. Figure 3 is a schematic cross-sectional view of the electronic device shown in Figure 1 at the line segment 3-3'. Figure 4 is a functional block diagram illustrating the electronic device shown in Figure 1. Figure 5 is a functional block diagram illustrating an electronic device according to another embodiment of this disclosure. Figure 6 is a schematic cross-sectional view showing the Hall sensor shown in Figure 5 installed inside the housing of an electronic device. Figure 7 is a functional block diagram illustrating an electronic device according to another embodiment of this disclosure. Figure 8 is a schematic cross-sectional view showing the light sensor shown in Figure 7 installed inside the housing of an electronic device. Figure 9 is a functional block diagram illustrating an electronic device according to another embodiment of this disclosure. Figure 10 is a schematic cross-sectional view showing the pressure sensor shown in Figure 9 installed inside the housing of an electronic device. Figure 11 is a functional block diagram illustrating an electronic device according to another embodiment of this disclosure. Implementation

[0031] To make the description of this disclosure more detailed and complete, reference may be made to the accompanying drawings and the various embodiments described below. The elements in the drawings are not drawn to scale and are provided for illustrative purposes only. Many practical details are described below to provide a comprehensive understanding of this disclosure; however, those skilled in the art will understand that this disclosure can be practiced without one or more of these practical details, and therefore, these details should not be used to limit this disclosure.

[0032] Please refer to Figures 1 and 2. Figures 1 and 2 respectively illustrate a schematic assembly diagram and a schematic exploded view of an electronic device 12A according to an embodiment of this disclosure. The electronic device 12A (e.g., a notebook computer, desktop computer, or tablet computer) includes a housing 20, which has an internal space 29 configured to accommodate various electronic components and mechanical parts of the electronic device 12A. For example, in this embodiment, the electronic device 12A also includes a motherboard 23 disposed in the internal space 29 of the housing 20. The motherboard 23 may be provided with one or more electronic components, such as a central processing unit (CPU), a graphics processing unit (GPU), a chipset, an embedded controller, a firmware storage chip (e.g., a UEFI or BIOS chip), a memory module (DRAM module), a data storage device (e.g., a hard disk drive or a solid-state drive), and a communication module (e.g., Ethernet, Bluetooth, Wi-Fi, 4G, 5G communication chips), etc.

[0033] As shown in Figures 1 and 2, the housing 20 includes a first housing component 21 and a second housing component 22. The first housing component 21 and the second housing component 22 are detachable and can be combined to form the housing 20. The first housing component 21 and the second housing component 22 can be joined together by screws, clips, adhesive, or other suitable fixing methods. The internal space 29 of the housing 20 is the space surrounded by the first housing component 21 and the second housing component 22.

[0034] As shown in Figures 1 and 2, the electronic device 12A further includes a tamper detector disposed within the internal space 29 of the housing 20 and configured to generate a warning signal in response to the housing 20 being disassembled (e.g., when the first housing component 21 and the second housing component 22 are partially or completely separated). In this embodiment, the tamper detector includes at least one push-button switch 61, which includes a movable button portion. When the button portion is not pressed, the push-button switch 61 is configured to output a first signal, and when the button portion is pressed, the push-button switch 61 is configured to output a second signal. In some embodiments, the push-button switch 61 may be disposed along one or more edges of the housing 20. In some embodiments, the push-button switch 61 may be disposed at a corner or all corners of the housing 20.

[0035] Please refer to Figure 3, which is a schematic cross-sectional view of the electronic device 12A shown in Figure 1 at the line segment 3-3'. In some embodiments, the push-button switch 61 is disposed on the first housing member 21 and configured to be pressed against by the second housing member 22. When the first housing member 21 and the second housing member 22 are engaged, the button portion of the push-button switch 61 is pressed down by the second housing member 22. When the housing 20 is disassembled, the push-button switch 61 is not pressed down, so the signal output by the push-button switch 61 changes from the second signal to the first signal, and the electronic device 12A can detect this change to know that the housing 20 has been disassembled. In some embodiments, the first signal output by the push-button switch 61 can serve as a warning signal.

[0036] Please refer to Figure 4, which is a functional block diagram illustrating the electronic device 12A shown in Figure 1. In some embodiments, the tamper detector 60A includes a plurality of push-button switches 61 and an OR gate circuit element 62 electrically connected to each push-button switch 61. If any push-button switch 61 outputs a first signal, the OR gate circuit element 62 is configured to output the first signal as a warning signal.

[0037] As shown in Figure 4, the electronic device 12A also includes a security chip 30, which can be disposed on the motherboard 23 shown in Figure 1. The security chip 30 is configured to store verification data, which, in its initial state (e.g., when the electronic device 12A is shipped from the factory or when it is restored to factory settings), contains a first code. The first code can be a number, such as an integer or a floating-point number, or other form of data, such as a string. The security chip 30 is communicatively connected to a tamper detector 60A and is configured to modify the content of the verification data in response to receiving a warning signal from the tamper detector 60A. Therefore, the security chip 30 modifies the content of the verification data in response to the disassembly of the casing 20 of the electronic device 12A.

[0038] As shown in Figure 4, in some embodiments, the security chip 30 includes a microprocessor 31 and a data storage device 35. The microprocessor 31 is communicatively connected to the data storage device 35; in other words, the microprocessor 31 can transmit data or instructions to the data storage device 35, or receive data or instructions from the data storage device 35. Encrypted transmission is used between the microprocessor 31 and the data storage device 35, and the data storage device 35 prohibits unauthorized data reading to prevent data from being skimmed or arbitrarily read. The data storage device 35 is configured to store verification data. The microprocessor 31 is communicatively connected to a tamper detector 60A and is configured to instruct the data storage device 35 to replace the first code with a second code different from the first code upon receiving an alert signal; in other words, the content of the verification data stored in the data storage device 35 is changed from the first code to the second code.

[0039] In some embodiments, the second code is randomly generated by the microprocessor 31 or the data storage device 35 (the data storage device 35 may have built-in circuitry for a random number generator). In some embodiments, the second code is calculated by the microprocessor 31 or the data storage device 35 based on the first code (the data storage device 35 may have built-in circuitry for computation). For example, the microprocessor 31 or the data storage device 35 may perform one or more mathematical operations such as addition, subtraction, multiplication, division, modulo, and bitwise operations (e.g., shift, NOT, OR, XOR, AND, etc.) on the first code to generate the second code. In some embodiments, the first code and the second code are numbers, and the second code is the first code plus one.

[0040] In some embodiments, the microprocessor 31 may include an ARM-based microprocessor, but this disclosure is not limited thereto. In some embodiments, the data storage device 35 may include a flash memory chip. In some embodiments, the electronic device 12A also includes a battery (not shown), a security chip 30, and a tamper detector 60A connected to the battery of the electronic device 12A. The security chip 30 and the tamper detector 60A can also draw power from the battery to maintain operation even when the electronic device 12A is powered off, in order to respond to situations where the casing 20 is disassembled.

[0041] As shown in Figure 4, the electronic device 12A also includes a controller 50, which is communicatively connected to the security chip 30 (specifically, to the microprocessor 31 of the security chip 30). In other words, the controller 50 can transmit data or instructions to the security chip 30, or receive data or instructions from the security chip 30. The controller 50 may be located on the motherboard 23 shown in Figure 1.

[0042] When the electronic device 12A initiates the power-on process (e.g., the electronic device 12A begins the power-on process in response to the pressing of the power button (not shown)), the controller 50 is configured to receive verification data from the security chip 30 and confirm whether the verification data matches the first code. If the verification data matches the first code, it means that the verification data has not been altered, that is, the casing 20 has not been opened, and the controller 50 allows the power-on process to continue, that is, the electronic device 12A can be powered on normally. Conversely, if the verification data does not match the first code, it means that the verification data has been altered, that is, the casing 20 has been opened, and the controller 50 causes the power-on process to pause (e.g., the display (not shown) of the electronic device 12A remains on a warning screen) or terminate (e.g., the electronic device 12A is prevented from powering on and is directly powered off), to prevent the user's data stored in the electronic device 12A from being stolen.

[0043] In some embodiments, when the electronic device 12A performs the boot process, the controller 50 actively reads the verification data stored in the security chip 30. For example, the controller 50 may send an instruction to the microprocessor 31 of the security chip 30, instructing the microprocessor 31 to read the verification data stored in the data storage device 35 and send the verification data back. In some embodiments, the controller 50 is configured to prevent the electronic device 12A from loading the operating system (that is, to prevent the electronic device 12A from loading the operating system image file stored on the hard drive of the electronic device 12A into the main memory and executing the operating system code), thereby causing the boot process to pause or terminate.

[0044] In some embodiments, controller 50 is an embedded controller (EC). The embedded controller receives verification data from the security chip 30 in response to the power button of electronic device 12A being pressed, and verifies whether the verification data matches a first code. In some embodiments, the embedded controller includes memory 53 configured to store the first code. The embedded controller is configured to verify whether the verification data obtained from the security chip 30 matches the first code stored in memory 53, thereby determining whether the verification data has been altered. In some embodiments, the memory 53 of controller 50 is an electronically eraseable, rewritable, read-only memory (EEPROM).

[0045] In some implementations, the embedded controller is communicatively connected to the central processing unit (CPU) of the electronic device 12A. If the verification data matches the first code, the embedded controller reports a first message to the CPU indicating that the verification data is correct; conversely, if the verification data does not match the first code, the embedded controller reports a second message to the CPU indicating that the verification data is incorrect. When the CPU receives the first message, it continues the boot process, and when the CPU receives the second message, it pauses or terminates the boot process (e.g., the CPU causes the display (not shown) of the electronic device 12A to display a warning screen and remain on the warning screen, which may include a warning message that the casing 20 has been opened).

[0046] In some implementations, memory 53 further stores one or more instructions executable by the embedded controller, which, when executed, cause the embedded controller to perform the aforementioned operations of receiving and verifying the data, and to perform the aforementioned operations of sending a report message to the central processing unit.

[0047] In some implementations, the controller 50 may also be a central processing unit (CPU). In response to the pressing of the power button on the electronic device 12A, the CPU executes code / instructions stored in a firmware storage chip (e.g., a UEFI or BIOS chip). Executing the code / instructions causes the CPU to receive verification data from the security chip 30, confirm whether the verification data matches the first code, and, based on the result of the verification data confirmation, allow the boot process to continue or cause the boot process to pause or terminate.

[0048] In some embodiments, the controller 50 is further configured to receive disassembly permission information and determine whether to skip the verification data confirmation step (i.e., the step of confirming whether the verification data matches the first code) based on the disassembly permission information. The disassembly permission information is information provided by the user through one or more input devices (not shown) of the electronic device 12A. In some embodiments, the disassembly permission information is a specific key or button combination of the electronic device 12A (e.g., a combination of the power button and the ESC key). In some embodiments, the controller 50 skips the verification data confirmation step upon detecting that the user has pressed a specific key or button combination. In this way, when there is a need to disassemble the casing 20 of the electronic device 12A for repair work, the electronic device 12A can be powered on normally after repair.

[0049] In some embodiments, the controller 50 is also configured to determine whether to perform a reset operation based on disassembly permission information. The reset operation may include the following steps: (1) the controller 50 instructs the security chip 30 to change the content of the verification data stored in the security chip 30 to a new first code (the new first code may be randomly generated by the microprocessor 31 or the data storage device 35); (2) after the security chip 30 completes the change of the content of the verification data, it sends the new first code back to the controller 50; and (3) the controller 50 stores the new first code in the memory 53. In this way, when there is a need to disassemble the casing 20 of the electronic device 12A for maintenance, the electronic device 12A can be turned on normally after maintenance.

[0050] In some embodiments, the controller 50 performs a reset operation in response to detecting a combination of specific key or button presses by the user. In some embodiments, the controller 50 skips the verification data confirmation step and performs a reset operation in response to detecting a combination of specific key or button presses by the user.

[0051] In some embodiments, the controller 50 is further configured to receive disassembly permission information and determine, based on the disassembly permission information, whether to instruct the security chip 30 not to temporarily change the verification data (regardless of whether an alert signal is received). In some embodiments, the disassembly permission information is a password. The controller 50 can verify the password. If the password is correct, the controller 50 instructs the security chip 30 not to temporarily change the verification data. If the password is incorrect, the security chip 30 maintains its original operating mode; that is, the security chip 30 changes the verification data in response to receiving an alert signal. The password is known only to personnel with disassembly permission, such as repair personnel or users of the electronic device 12A. In this way, when repair is needed, the password can be entered first to prevent the security chip 30 from temporarily changing the verification data due to the disassembly of the casing 20. After repair, the electronic device 12A can be powered on normally.

[0052] In some implementations, when the verification data does not match the first code, causing the boot process to pause (e.g., when the display of electronic device 12A remains on a warning screen), controller 50 is further configured to receive disassembly permission information and determine whether to continue the boot process based on the disassembly permission information. In some implementations, the disassembly permission information is a password entered by the user. Controller 50 can verify the password; if the password is correct, controller 50 allows the boot process to continue (e.g., the operating system can begin loading); if the password is incorrect, the boot process remains paused. This configuration provides the user with the option to choose whether to continue using electronic device 12A.

[0053] In some implementations, when the electronic device 12A is powered on, if the disassembly detector 60A generates a warning signal in response to the disassembly of the housing 20, the microprocessor 31 receives the warning signal and sends an abnormal signal to the controller 50 in response to receiving the warning signal. The controller 50 then drives the electronic device 12A to power off in response to receiving the abnormal signal (for example, the controller 50 may send a signal to the central processing unit to report that the housing 20 has been disassembled, causing the central processing unit to execute the shutdown procedure).

[0054] In some implementations, if an event occurs in which the casing 20 is disassembled (e.g., when the disassembly detector 60A generates a warning signal), the memory 53 of the controller 50 is also configured to record relevant information about the event in which the casing 20 is disassembled (e.g., the date and time of the event in which the casing 20 is disassembled).

[0055] Please refer to Figures 5 and 6. Figure 5 is a functional block diagram illustrating an electronic device 12B according to another embodiment of this disclosure. Figure 6 is a schematic cross-sectional view illustrating the Hall sensor shown in Figure 5 installed within the housing 20 of the electronic device 12B. In this embodiment, the disassembly detector 60B includes at least one Hall sensor 63, each Hall sensor 63 being paired with a magnet 65. The Hall sensors 63 and magnets 65 are disposed within the internal space 29 of the housing 20, and are located at corresponding positions on the first housing component 21 and the second housing component 22. In some embodiments, the Hall sensors 63 and magnets 65 may be disposed along one or more edges of the housing 20. In some embodiments, the Hall sensors 63 and magnets 65 may be disposed at a corner or all corners of the housing 20.

[0056] As shown in Figures 5 and 6, when the housing 20 is disassembled, the distance between the Hall sensor 63 and the magnet 65, respectively disposed on the first housing component 21 and the second housing component 22, is relatively large. In this case, the Hall sensor 63 is configured to output a first signal. When the housing 20 is not disassembled, the distance between the Hall sensor 63 and the magnet 65 is relatively small. In this case, the Hall sensor 63 is configured to output a second signal. The electronic device 12B can detect when the signal output by the Hall sensor 63 changes from the second signal to the first signal, thus indicating that the housing 20 has been disassembled. In some embodiments, the first signal output by the Hall sensor 63 can serve as a warning signal.

[0057] As shown in Figures 5 and 6, in some embodiments, the tamper detector 60B includes a plurality of Hall sensors 63 and an OR gate circuit element 62 electrically connected to each Hall sensor 63. The OR gate circuit element 62 is communicatively connected to the security chip 30, and if any Hall sensor 63 outputs a first signal, the OR gate circuit element 62 is configured to output the first signal as a warning signal.

[0058] Please refer to Figures 7 and 8. Figure 7 is a functional block diagram illustrating an electronic device 12C according to another embodiment of this disclosure. Figure 8 is a schematic cross-sectional view illustrating the installation of the light sensor shown in Figure 7 within the housing 20 of the electronic device 12C. In this embodiment, the disassembly detector 60C includes at least one light sensor 67 disposed within the internal space 29 of the housing 20. In some embodiments, the light sensor 67 may be disposed along one or more edges of the housing 20. In some embodiments, the light sensor 67 may be disposed at a corner or all corners of the housing 20.

[0059] A light sensor 67 is configured to provide a sensing signal, which indicates the light intensity detected by the light sensor 67. The security chip 30 is communicatively connected to the light sensor 67. If any light sensor 67 provides a sensing signal indicating a light intensity greater than a threshold value, the security chip 30 can determine that the casing 20 has been opened (i.e., the light sensor 67 has detected external light entering the casing 20) and alter the verification data. In other words, a sensing signal indicating a light intensity greater than the threshold value serves as a warning signal.

[0060] Please refer to Figures 9 and 10. Figure 9 is a functional block diagram illustrating an electronic device 12D according to another embodiment of this disclosure. Figure 10 is a schematic cross-sectional view illustrating the installation of the pressure sensor shown in Figure 9 within the housing 20 of the electronic device 12D. In this embodiment, the disassembly detector 60D includes at least one pressure sensor 69, which is disposed on a first housing member 21 and configured to be pressed against by a second housing member 22. In some embodiments, the pressure sensor 69 may be disposed along one or more edges of the housing 20. In some embodiments, the pressure sensor 69 may be disposed at a corner or all corners of the housing 20.

[0061] Pressure sensor 69 is configured to provide a sensing signal that displays the pressure applied to it. In the absence of any other external force, the sensing signal indicates the force exerted by the first housing component 21 and the second housing component 22 on the pressure sensor 69. Safety chip 30 is communicatively connected to pressure sensor 69 and configured to monitor whether housing 20 has been disassembled or damaged by force based on the sensing signal provided by pressure sensor 69.

[0062] In some embodiments, if any pressure sensor 69 provides a sensing signal indicating a pressure less than a first threshold value, the safety chip 30 can determine that the casing 20 has been disassembled and the verification data has been altered. In other words, a sensing signal indicating a pressure less than the first threshold value serves as a warning signal. In some embodiments, if any pressure sensor 69 provides a sensing signal indicating a pressure greater than a second threshold value, the safety chip 30 can determine that the casing 20 has been forcibly damaged and the verification data has been altered. In other words, a sensing signal indicating a pressure greater than the second threshold value can also serve as a warning signal. In some embodiments, the disassembly detector 60D includes a plurality of pressure sensors 69, and if the plurality of sensing signals provided by the plurality of pressure sensors 69 indicate uneven pressure (e.g., the difference between the maximum and minimum pressure values ​​corresponding to the plurality of sensing signals is greater than a third threshold value), the safety chip 30 can determine that the casing 20 has been disassembled or forcibly damaged and the verification data has been altered.

[0063] In some embodiments, the pressure sensor 69 may include a piezoelectric sensor comprising a piezoelectric material configured to output a voltage proportional to the applied force as a sensing signal. The pressure sensor 69 may also include other suitable materials or circuitry for detecting changes in force, such as a piezoresistive material.

[0064] Please refer to Figure 11. Figure 11 is a functional block diagram illustrating an electronic device 12E according to another embodiment of this disclosure. The electronic device 12E of this embodiment includes a tamper detector 60E, the aforementioned security chip 30, and a controller 50. The tamper detector 60E can be any combination of the aforementioned tamper detectors 60A, 60B, 60C, 60D, or any other combination thereof. The controller 50 is an embedded controller coupled to the central processing unit of the electronic device 12E.

[0065] As shown in Figure 11, the electronic device 12E further includes a connection port 77 for connection of an authorized hardware key 96. For example, the connection port 77 may include a slot, and the authorized hardware key 96 may include an electrical connector that inserts into the slot of the connection port 77. The connection port 77 may be a USB interface port, and correspondingly, the authorized hardware key 96 may be a USB hardware key. The authorized hardware key 96, connected to the electronic device 12E via the connection port 77, can communicate with the electronic device 12E; that is, the authorized hardware key 96 can transmit data to or receive data from the electronic device 12E.

[0066] The authorized hardware key 96 can be used to assist the electronic device 12E in obtaining authorized power-on information, allowing the electronic device 12E, which cannot be powered on due to the protection mechanism being triggered (such as the situation described above where the casing is opened, causing the electronic device to be prohibited from powering on), to be powered on normally. For example, the authorized hardware key 96 can be used in the following scenarios: after maintenance personnel or other authorized personnel disassemble the electronic device 12E for inspection, they use the authorized hardware key 96 to enable the electronic device 12E to be powered on normally.

[0067] As shown in Figure 11, electronic device 12E further includes a communication device 71, which is connected to network 97 and connected to server 90 via network 97. Communication device 71 may include at least one of the following: an Ethernet network card, a Wi-Fi network card, and a mobile communication chip (e.g., a 4G or 5G chip). Electronic device 12E further includes a processor 70 coupled to communication device 71, such as a central processing unit (CPU). Electronic device 12E further includes one or more hard drives 75, configured to store operating systems and other programs or data. Hard drives 75 may include mechanical hard drives, solid-state drives, or hard drives employing other storage technologies.

[0068] During the power-on process of electronic device 12E, processor 70 is configured to execute steps S1 to S3 to assist electronic device 12E in normal power-on when the protection mechanism is triggered. First, in step S1, processor 70 is configured to detect whether an authorized hardware key 96 is connected to electronic device 12E (e.g., detecting whether an authorized hardware key 96 is inserted into port 77). In some embodiments, processor 70 first determines whether electronic device 12E is prevented from powering on; if electronic device 12E is prevented from powering on (e.g., when controller 50 determines that the verification data does not match the first code, or when controller 50's memory 53 records information related to the event that casing 20 was opened), then step S1 is performed. In some embodiments, processor 70 performs step S1 during the execution of UEFI or BIOS code.

[0069] If an authorized hardware key 96 exists, the processor 70 begins executing a hardware verification program. In some embodiments, the hardware verification program is stored in the authorized hardware key 96, and the electronic device 12E powers on to the authorized hardware key 96 to execute the hardware verification program. In some embodiments, before powering on to the authorized hardware key 96, the electronic device 12E powers off its hard drive 75 to ensure that data on the hard drive 75 cannot be read. In some embodiments, if the authorized hardware key 96 does not exist, the boot process terminates, and the processor 70 powers off the electronic device 12E.

[0070] After the hardware verification process begins, the processor 70 connects to the server 90 via the communication device 71 and verifies at least one device identification information of the electronic device 12E via the server 90 (step S2). In some embodiments, the processor 70 first determines whether the communication device 71 is connected to the network 97. If the communication device 71 is connected to the network 97, then step S2 is performed. In some embodiments, if the communication device 71 is not connected to the network 97, the processor 70 drives the electronic device 12E to shut down. The processor 70 may also drive the display (not shown) of the electronic device 12E to display the message "Unable to connect to the server" before the electronic device 12E shuts down.

[0071] In some implementations, the device identification information includes at least one of the following: the serial number of the electronic device 12E (e.g., a serial number assigned by the manufacturer of the electronic device 12E), the identification code of any hardware component of the electronic device 12E (e.g., CPUID, MAC address, IMEI code, etc.), and a unique identification code of the electronic device. The unique identification code is a combination of the individual identification codes of a plurality of hardware components of the electronic device 12E. For example, the unique identification code can be generated by applying a hash function to the identification codes of the plurality of hardware components.

[0072] In some embodiments, the processor 70 is configured to read the device identification information from the read-only memory 73 of the electronic device 12E. The read-only memory 73 may be located on the motherboard of the electronic device 12E, or be a hardware component such as the processor 70 or communication device 71 built into the electronic device 12E. The processor 70 may perform the operation of reading the device identification information through a driver.

[0073] In some implementations, server 90 is configured to record an authorization list, each item in which may include device identification information of the device authorized to power on (e.g., the device identification information mentioned above) and authorization power-on information (e.g., authorization code, number of authorized power-ons, and authorization power-on duration). In some implementations, server 90 accepts authorization power-on requests from maintenance personnel or other authorized personnel. For example, before disassembling electronic device 12E for repair, maintenance personnel or other authorized personnel may submit an application to transmit the device identification information of electronic device 12E to server 90. If the application is approved (either manually or automatically by server 90 according to a specific procedure), the device identification information of electronic device 12E is added to the authorization list, and the corresponding authorization power-on information is set.

[0074] In some implementations, the step of verifying the device identification information of electronic device 12E includes: transmitting the device identification information of electronic device 12E to server 90 via communication device 71; server 90 confirming whether the authorization list contains the device identification information of electronic device 12E (e.g., confirming whether the device identification information of any item in the authorization list matches the device identification information of electronic device 12E); if the authorization list contains the device identification information of electronic device 12E, a verification success message is sent back to electronic device 12E (authorized power-on information may be included in the verification success message); if the authorization list does not contain the device identification information of electronic device 12E, a verification failure message is sent back to electronic device 12E. The processor 70 of electronic device 12E can determine whether the device identification information of electronic device 12E has passed verification based on the message received from server 90.

[0075] In some embodiments, server 90 transmits some or all items of the authorization list to electronic device 12E. After receiving some or all items of the authorization list, processor 70 verifies whether the device identification information received from the server matches the device identification information of electronic device 12E. If they match, processor 70 determines that the device identification information of electronic device 12E has passed verification; if they do not match, processor 70 determines that the device identification information of electronic device 12E has failed verification. In some embodiments, electronic device 12E is configured to transmit its serial number to server 90. After receiving the serial number of electronic device 12E, server 90 filters out items from the authorization list that match the serial number of electronic device 12E and sends them back.

[0076] Next, in step S3, if the device identification information of electronic device 12E passes verification, electronic device 12E continues the boot process (for example, electronic device 12E may start supplying power to hard disk 75, load the operating system image file stored on hard disk 75 into main memory, and execute the operating system code). Conversely, if the device identification information of electronic device 12E fails verification, processor 70 drives electronic device 12E to shut down. Processor 70 may also drive the display (not shown) of electronic device 12E to display the message "No power-on authorization" before electronic device 12E shuts down.

[0077] In some embodiments, when the device identification information verification passes, the memory 53 of the controller 50 is configured to record authorized power-on information. The next time the electronic device 12E is powered on, during the power-on process, the controller 50 is configured to check whether the memory 53 contains authorized power-on information. If the memory 53 contains authorized power-on information, the controller 50 allows the power-on process to continue, and the processor 70 does not need to perform the hardware verification steps S1 to S3 again. In some embodiments, the controller 50 first determines whether the electronic device 12E is prohibited from powering on. If the electronic device 12E is prohibited from powering on (e.g., the case where the controller 50 determines that the verification data does not match the first code as described above), then it checks whether the memory 53 contains authorized power-on information.

[0078] In some embodiments, the authorized power-on information is obtained by the communication device 71 from the server 90. In some embodiments, the authorized power-on information may include at least one of the following: personnel identity, authorization code, authorized power-on count, and authorized power-on period. In some embodiments, the controller 50 is further configured to confirm whether the authorized power-on count in the authorized power-on information is greater than zero. If the authorized power-on count is greater than zero, the power-on process is allowed to continue and the authorized power-on count is decremented by one; if the authorized power-on count is equal to zero, the power-on process is paused or terminated. In some embodiments, the controller 50 is further configured to confirm whether the current time is within the authorized power-on period. If the current time is within the authorized power-on period, the power-on process is allowed to continue; if the current time is not within the authorized power-on period, the power-on process is paused or terminated.

[0079] According to some embodiments disclosed herein, a method for protecting an electronic device includes: storing verification data in a security chip (e.g., the aforementioned security chip 30), wherein in an initial state, the verification data includes a first code; detecting an event that the casing of the electronic device has been disassembled by a disassembly detector (e.g., the aforementioned disassembly detectors 60A, 60B, 60C, 60D, 60E), and generating a warning signal when the disassembly event is detected; modifying the content of the verification data by the security chip in response to receiving the warning signal; and receiving the verification data from the security chip when the electronic device is performing a power-on procedure, and verifying whether the verification data matches the first code; if the verification data matches the first code, the electronic device continues to perform the power-on procedure; if the verification data does not match the first code, the electronic device suspends or terminates the power-on procedure. In some embodiments, the method of protecting the electronic device may include the operations performed by the processor 70, communication device 71, security chip 30, controller 50, and tamper detectors 60A, 60B, 60C, 60D, 60E, etc., as mentioned above.

[0080] In summary, the disclosed electronic device includes a tamper detector and a security chip. The security chip stores verification data and modifies the verification data upon receiving a warning signal from the tamper detector (indicating that the casing has been opened). When the electronic device initiates the power-on process, the controller receives the verification data and verifies whether it has been altered. If the verification data remains unchanged, it means the casing has not been opened, and the electronic device can power on normally. If the verification data has been altered, the controller causes the power-on process to pause or terminate, preventing the electronic device from loading the operating system and thus preventing the theft of user-stored data.

[0081] Although this disclosure has been described above with reference to embodiments, it is not intended to limit this disclosure. Anyone skilled in the art may make various modifications and refinements without departing from the spirit and scope of this disclosure. Therefore, the scope of protection of this disclosure shall be determined by the claims attached.

[0082] 12A, 12B, 12C, 12D, 12E: Electronic devices 20: Chassis 21: First housing component 22: Second housing component 23: Motherboard 29: Interior Space 30: Security Chip 31: Microprocessor 35: Data storage device 50: Controller 53: Memory 60A, 60B, 60C, 60D, 60E: Disassembly Detector 61: Press switch 62: or gate circuit element 63: Hall sensor 65: Magnet 67: Light sensor 69: Pressure sensor 70: Processor 71: Communication devices 73: Read-only memory 75: Hard Drive 77: Connection Port 90: Server 96: Authorized hardware key 97: Internet

[0083] Domestic storage information (please note in order of storage institution, date, and number) none Overseas storage information (please note in the order of storage country, institution, date, and number) none

Claims

1. An electronic device comprising: a housing having an internal space; and a tamper detector disposed in the internal space of the housing and configured to generate an alarm signal in response to the housing being disassembled. A security chip is configured to store verification data. In an initial state, the verification data includes a first code. The security chip is communicatively connected to a tamper detector and configured to, in response to receiving an alarm signal, modify the content of the verification data by replacing the first code with a second code, the second code being randomly generated by the security chip or calculated by the security chip based on the first code. A controller is communicatively connected to the security chip, wherein the controller is an embedded controller. The embedded controller includes a memory configured to store the first code. When the electronic device performs a boot process, the controller is configured to receive the verification data and verify whether the verification data matches the first code stored in the memory. If the verification data matches the first code, the controller allows the boot process to continue; if the verification data does not match the first code, the controller causes the boot process to pause or terminate.

2. The electronic device as claimed in claim 1, wherein the security chip includes a microprocessor and a data storage device, the microprocessor and the data storage device communicating with encrypted data, wherein the data storage device is configured to store the verification data, and the microprocessor is configured to instruct the data storage device to replace the first code with the second code in response to receiving the warning signal.

3. The electronic device as claimed in claim 1, wherein the housing includes a first housing component and a second housing component, the first housing component and the second housing component being joined to form the housing, wherein the disassembly detector includes at least one of the following: a push switch disposed on the first housing component and configured to be pressed against by the second housing component; a pressure sensor disposed on the first housing component and configured to be pressed against by the second housing component; a Hall sensor and a magnet disposed at corresponding positions on the first housing component and the second housing component; and a light sensor configured to sense light intensity within the housing.

4. The electronic device as claimed in claim 1, wherein the controller is further configured to receive disassembly permission information and determine, based on the disassembly permission information, whether to skip the step of verifying the verification data.

5. The electronic device as claimed in claim 1, wherein the controller is configured to prevent the electronic device from loading an operating system, thereby causing the boot process to pause or terminate.

6. The electronic device as claimed in claim 1, further comprising: a communication device; and a processor coupled to the communication device and configured to: during the boot process, detect whether an authorized hardware key is connected to the electronic device; if the authorized hardware key exists, connect to a server through the communication device and verify device identification information of the electronic device through the server; and if the device identification information is verified, allow the boot process to continue.

7. The electronic device as claimed in claim 6, wherein the device identification information includes at least one of the following: a serial number of the electronic device, an identification code of a hardware component of the electronic device, and a unique identification code of the electronic device, wherein the unique identification code is a combination of the identification codes of each of a plurality of hardware components of the electronic device.

8. The electronic device as claimed in claim 6, wherein when the device identification information is verified, the memory is configured to record authorized power-on information, wherein in the power-on process, the controller is configured to confirm whether the memory stores the authorized power-on information, and if the memory stores the authorized power-on information, the controller allows the power-on process to continue.

9. A method for protecting an electronic device, comprising: storing verification data in a security chip of the electronic device, wherein in an initial state, the verification data includes a first code; detecting an event that a casing of the electronic device is disassembled by a tamper detector of the electronic device, and generating an alarm signal upon detecting the event that the casing is disassembled; and, in response to receiving the alarm signal, modifying the content of the verification data by the security chip, wherein the step of modifying the content of the verification data includes: replacing the first code with a second code, the second code being randomly generated by the security chip or calculated by the security chip based on the first code; and when the electronic device performs a power-on procedure, receiving the verification data from the security chip by a controller, and confirming whether the verification data matches the first code stored in a memory of the controller; if the verification data matches the first code, the electronic device continues the power-on procedure; if the verification data does not match the first code, the electronic device suspends or terminates the power-on procedure, wherein the controller is an embedded controller.

10. The method of protecting an electronic device as claimed in claim 9, wherein the step of the disassembly detector detecting the event that the housing has been disassembled comprises: detecting, using a push switch, a pressure sensor, or a pair of Hall sensors and a magnet, that at least partially separates the two housing components of the housing; or using a light sensor disposed in the housing to detect the entry of external light into the housing.

11. The method for protecting an electronic device as described in claim 9 further comprises: receiving a disassembly authorization information from the controller, and determining, based on the disassembly authorization information, whether to skip the step of verifying the verification data.

12. The method for protecting an electronic device as claimed in claim 9, wherein the step of suspending or terminating the power-on procedure of the electronic device comprises: preventing the electronic device from loading an operating system by the controller.

13. The method for protecting an electronic device as described in claim 9 further comprises: during the power-on process, detecting whether an authorized hardware key is connected to the electronic device; if the authorized hardware key exists, the electronic device connects to a server and verifies device identification information of the electronic device through the server; and if the device identification information is verified, the electronic device continues the power-on process.

14. The method of protecting an electronic device as claimed in claim 13, wherein the device identification information includes at least one of the following: a serial number of the electronic device, an identification code of a hardware component of the electronic device, and a unique identification code of the electronic device, wherein the unique identification code is a combination of the identification codes of each of a plurality of hardware components of the electronic device.

15. The method for protecting an electronic device as described in claim 13 further comprises: when the device identification information is verified, the memory of the controller records an authorized power-on information; and during the power-on process, the controller confirms whether the memory stores the authorized power-on information, and if the memory stores the authorized power-on information, the electronic device continues to perform the power-on process.

16. A non-transitory computer-readable storage medium configured to store one or more instructions, which, when executed by a controller, cause the controller to perform the following operations: receiving verification data from a security chip of an electronic device in response to a power button being pressed, wherein, in an initial state, the verification data includes a first code, wherein the security chip is configured to modify the content of the verification data in response to the opening of a casing of the electronic device by replacing the first code with a second code, the second code being randomly generated by the security chip or calculated by the security chip based on the first code; verifying whether the verification data matches the first code stored in a memory of the controller, wherein the controller is an embedded controller; and if the verification data matches the first code, allowing the electronic device to power on, and if the verification data does not match the first code, suspending or prohibiting the electronic device from powering on.

17. The non-transitory computer-readable storage medium as described in claim 16, wherein when the controller executes the one or more instructions, the one or more instructions cause the controller to further perform the following operations: receive disassembly permission information and determine, based on the disassembly permission information, whether to skip the step of verifying the verification data.

18. The non-transitory computer-readable storage medium as described in claim 16, wherein the controller is configured to prevent the electronic device from loading an operating system, thereby suspending or preventing the electronic device from powering on.

19. The non-transitory computer-readable storage medium as described in claim 16, wherein when the controller executes the one or more instructions, the one or more instructions cause the controller to further perform the following operations: when the electronic device obtains an authorization power-on message, record the authorization power-on message in the memory of the controller; and in response to the pressing of the power button of the electronic device, confirm whether the memory contains the authorization power-on message, and if the memory contains the authorization power-on message, allow the electronic device to power on.

Images