Biometric Secure Power-Up Logic for Theft Prevention

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current computing devices are not theft-proof, as they can be easily reset to factory settings and resold after unauthorized access, allowing stolen devices to enter black or grey markets.

Innovation Solution

A power-up scheme that utilizes a biometric sensor, such as a fingerprint sensor, to authenticate users before enabling power-up of the computing system. This scheme includes a logic that compares the output of the biometric sensor with registered user data stored in non-volatile memory, allowing power-up only if a match is found and disabling battery charging if no match exists.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a computing device allows factory reset and re-use, then device accessibility and ease of operation are improved, but security and theft prevention deteriorate

Engineering Contradiction:
Improvedevice accessibilityVSAvoidtheft prevention
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent applies preliminary action by storing biometric data in a secure enclave before any unauthorized access attempts occur. The secure power-up mechanism is pre-configured to require biometric authentication before allowing device operation or factory resets, preventing theft-related misuse before it can happen.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces a biometric authentication intermediary between the user and the device's power-up process. This intermediary layer verifies the user's identity through biometric data comparison in the secure enclave, allowing legitimate users to access the device while blocking unauthorized users from performing factory resets or misusing the device.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If biometric authentication is implemented for power-up, then security and theft prevention are improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidpower-up mechanism complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies segmentation by separating biometric data storage and authentication logic into a dedicated secure enclave, isolated from the main device processing units. This segmentation protects the authentication mechanism from attacks while simplifying the overall device architecture by creating a specialized security domain.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies local quality by implementing security-specific characteristics in the secure enclave, where biometric data is stored with enhanced protection measures distinct from the rest of the device. The secure power-up mechanism operates with different security parameters and access controls localized to the authentication pathway.

Inventive Principle:
Principle #3Local quality

Data Source

PatentEP4020126B1Secure device power-up apparatus and method
Publication Date: 2025.02.12 INTEL CORP
  • EP4020126B1 patent drawingFigure 1
  • EP4020126B1 patent drawingFigure 2
  • EP4020126B1 patent drawingFigure 3

AI summary

A power-up scheme for a computing system that applies a biometric sensor (e.g., a fingerprint sensor, eye sensor, etc.) to authenticate a user before enabling power-up of the computing system or to resume transition to a power state (e.g., one of the power states defined by the Advance Configuration and Power Interface (ACPI)). Output of the biometric sensor is compared against data of a registered user for a match. The data may include an original copy of an output of the biometric sensor saved in a non-volatile memory (e.g., serial peripheral interface (SPI) flash device). If a match exists, a logic in the computing system will allow the computing system to power-up. In the absence of a match, the computing system will not be powered up. In some examples, battery charging is also disabled if the match is not found.