Method for BIOS authentication prior to BIOS execution

Abstract

A cryptographic device is implemented in communication with a host processor to prevent the host processor from performing a standard boot-up procedure until a basic input output system (BIOS) code is authenticated. This is accomplished by a cryptographic device which is addressed by the host processor during execution of a first instruction following a power-up reset. The cryptographic device includes a first integrated circuit (IC) device and a second IC device. The first IC device includes a memory to contain firmware and a root certification key. The second IC device includes logic circuitry to execute a software code to authenticate the BIOS code before permitting execution of the BIOS code by the host processor.

Description

[0001] 1. Field[0002] The present invention relates to the field of data security. More particularly, this invention relates to a system and method for authenticating software code before execution by the host processor.[0003] 2. General Background[0004] Over the last few years, computers have become products highly valued by consumers. The reason is that computers are highly versatile and enjoy a wide range of applications. Of major concern, however, is that computers, especially mobile computers such as laptops or hand-helds, are vulnerable to theft due to their commercial value and their exposure to insecure environments such as cars, hotel rooms and airport lobbies.[0005] Currently, there exist a number of security mechanisms that are marginally effective. However, these mechanisms are still vulnerable to component or device replacement since no protected environment for execution of code and for manipulation of data is provided. For example, one type of conventional security me...

AI Technical Summary

Problems solved by technology

Of major concern, however, is that computers, especially mobile computers such as laptops or hand-helds, are vulnerable to theft due to their commercial value and their exposure to insecure environments such as cars, hotel rooms and airport lobbies.

However, these mechanisms are still vulnerable to component or device replacement since no protected environment for execution of code and for manipulation of data is provided.

Unfortunately, the password-based security mechanism and other current security mechanisms can be easily circumvented.

Additionally, due to the growing usage of networking solutions such as the Internet, computers are becoming more susceptible to invasive software virus attacks.

Likewise, some of the software viruses are intended to damage the BIOS code which renders the computer inoperable.

Images