BIOS Boot Device Access Control via Restricted Classification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional BIOS systems lack effective security measures to prevent unauthorized access and data theft through external boot devices, which can be easily carried and hidden, posing a significant risk to system security.
Innovation Solution
A method is introduced to block external boot devices by classifying them as restricted devices within the BIOS, hiding their device information, and requiring a password for access, ensuring only authorized devices can execute the OS program code.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If external boot devices are allowed to be accessed without restriction, then system adaptability and ease of operation are improved, but system security and reliability deteriorate
Solution Approach 1:
The patent segments boot devices into two categories: restricted devices (internal boot devices) and unrestricted devices (external boot devices). This segmentation allows the system to apply different access control policies to different device types, enabling secure access to internal devices while allowing flexible access to external devices when needed.
Solution Approach 2:
The patent introduces a classification mechanism as an intermediary between the boot device and the BIOS access process. This intermediary classifies devices as restricted or unrestricted and applies appropriate access control measures, thereby resolving the contradiction between security and accessibility.
2Reliability
If device information of external boot devices is hidden in BIOS Setup Menu, then system security is improved, but ease of operation deteriorates
Solution Approach 1:
The patent extracts device information of restricted boot devices from the BIOS Setup Menu and Boot Option list, hiding them from normal user view. This extraction prevents unauthorized access while maintaining system security.
Solution Approach 2:
The patent performs preliminary classification of boot devices as restricted or unrestricted before displaying them in the BIOS interface. This preliminary action ensures that restricted devices are automatically hidden, while authorized users can still access them through alternative means (such as Boot Menu or password authentication).
Data Source
AI summary
A method for blocking an external boot device, a non-transient computer readable storage medium, and a computer are provided. The method includes: executing BIOS program code in a POST process, where the program code includes a BIOS setup menu, which includes a boot device option; hiding device information of an external boot device in the boot device option when determining that the external boot device is classified as a restricted device; displaying a boot device menu when determining that received input information is consistent with a piece of hot key information, where the boot device menu includes the device information of the external boot device; displaying a password input window when determining that the external boot device corresponding to received selection information is classified as the restricted device; and reading the external boot device to execute operating system program code when determining that received password information matches a preset password.