BIOS Command Authentication with External Device Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing firmware authentication systems are vulnerable to remote attacks where attackers can modify settings using stolen credentials without additional verification, compromising device security.
Innovation Solution
Implementing a two-factor authentication scheme that requires a second authentication from an external device before applying firmware changes, enhancing detection of malicious entities by suspending or aborting unauthorized commands.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single authentication path is used for firmware settings, then the ease of operation is improved, but the reliability is worsened due to vulnerability to remote attacks
Solution Approach 1:
The authentication process is segmented into two distinct paths: a fast path for local authentication and a slow path for remote authentication requiring external device verification. This segmentation allows the system to maintain ease of operation for local users while enhancing reliability for remote access by requiring additional verification steps only when necessary.
Solution Approach 2:
An external device is introduced as an intermediary in the authentication process. When a remote setting change command is received, the system suspends processing and requires confirmation from an external device before applying the change. This intermediary layer prevents unauthorized remote modifications while maintaining normal operation for authenticated local users.
2Reliability
If a second authentication from external device is required, then the reliability is improved, but the device complexity is worsened
Solution Approach 1:
The authentication system is divided into two separate authentication mechanisms working in sequence. The first authentication verifies local credentials, and the second authentication (only triggered for remote commands) verifies external device confirmation. This segmentation allows the system to maintain simple operation for most cases while adding enhanced security only when needed.
Solution Approach 2:
The system performs preliminary authentication checks locally before initiating the more complex external verification process. By first validating local credentials and only then requiring external device confirmation for remote commands, the system prepares the authentication state in advance, reducing the overall complexity burden during critical security moments.
3Reliability
If command is suspended awaiting second authentication, then the reliability is improved, but the productivity is worsened due to delayed setting changes
Solution Approach 1:
The authentication process is segmented into a fast local authentication path and a slower remote authentication path. Local setting changes are applied immediately after single authentication, maintaining high productivity. Remote setting changes are suspended only when necessary for external verification, minimizing the impact on overall system productivity while enhancing security for remote access.
Solution Approach 2:
The authentication process is made dynamic rather than static. The system adapts its authentication requirements based on the source of the command: local commands receive expedited processing with single authentication, while remote commands trigger the suspended-waiting pattern with double authentication. This dynamic approach optimizes productivity for trusted local operations while maintaining security for remote access.
Data Source
AI summary
Examples of electronic devices are described herein. In some examples, an electronic device includes a communication interface. In some examples, the electronic device includes a Basic Input/Output System (BIOS). In some examples, the electronic device includes a processor to, in response to receiving a command to modify a setting of the BIOS, perform a first authentication. In some examples, the processor is to instruct the communication interface to send an authentication message to an external device in response to a first success of the first authentication. In some examples, the processor is to perform a second authentication based on a response message from the external device. In some examples, the processor is to, in response to a second success of the second authentication, modify the setting of the BIOS.