BIOS Golden Copy Update via Embedded Controller Mediator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for verifying and updating BIOS golden copies in information processing apparatuses are limited, leading to outdated versions and potential vulnerabilities due to restricted access and inefficient update processes.
Innovation Solution
An information processing apparatus with a configuration that allows the embedded controller to update the BIOS golden copy using the latest BIOS version, comparing version information to determine updates, and ensuring secure restoration and protection against falsification through dedicated storage and access controls.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the BIOS golden copy is stored in a second memory accessible only by the embedded controller to prevent unauthorized rewriting, then security against falsification is improved, but the ability to update the BIOS golden copy deteriorates
Solution Approach 1:
The patent introduces an intermediary mechanism where the embedded controller acts as a mediator between the CPU and the second memory. The embedded controller receives update requests from the CPU, verifies the authenticity of update data through hash value comparison, and then updates the BIOS golden copy in the second memory. This intermediary structure maintains security while enabling controlled updates.
Solution Approach 2:
The patent implements dynamic access control to the second memory. The memory is configured to be accessible only by the embedded controller under normal operation, but can be accessed by the CPU through the embedded controller during authorized update operations. This dynamic access control resolves the contradiction between security and updatability.
2Stability of the object's composition
If hash value comparison is always performed to ensure BIOS and BIOS golden copy are the same, then consistency is improved, but startup time increases
Solution Approach 1:
The patent implements partial hash value comparison by only comparing specific portions of the BIOS and BIOS golden copy rather than performing complete hash value calculations on the entire firmware. This partial comparison approach maintains sufficient consistency verification while significantly reducing the computational overhead and startup time penalty.
3Reliability
If the BIOS golden copy is updated every time the BIOS is updated, then the latest secure version is maintained, but the risk of rolling back to old versions with vulnerabilities increases
Solution Approach 1:
The patent implements a feedback mechanism where the embedded controller compares hash values between the current BIOS and the BIOS golden copy before and after updates. This feedback loop ensures that updates only proceed when authenticity is verified, preventing unauthorized rollbacks to vulnerable older versions while maintaining the latest secure version.
Solution Approach 2:
The patent performs preliminary hash value verification before executing BIOS updates. The embedded controller calculates and compares hash values in advance to confirm the authenticity of update data, ensuring that only verified secure versions are installed and preventing rollback attacks before they can occur.
Data Source
AI summary
An information processing apparatus stores first software and second software, the first software is stored in a first storage medium accessible by a central processing unit and an embedded controller, and the second software is used to restore the first software and stored in a second storage medium accessible by the embedded controller. The information processing apparatus includes an update unit configured to update the second software using the first software depending on a result of a comparison between version information about the first software and version information about the second software, a falsification detection unit configured to detect whether the first software is falsified; and a restoration unit configured to restore the first software using the second software in a case where the falsification detection unit detects that the first software is falsified.