BIOS Operating System Password Sharing via E820 Memory Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face a tiresome experience due to the need to input separate passwords for the BIOS and operating system during login, which often results in identical passwords being used, compromising user experience while attempting to maintain data security.
Innovation Solution
A method and apparatus that allow password sharing between the BIOS and operating system by prompting the user to input the BIOS password during power-on self-test, verifying it, storing it in a target memory, and using E820H information to access the operating system memory contents, enabling login if correct, thus eliminating the need to input the operating system password separately.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate passwords are set for BIOS and operating system to enhance data security, then security is improved, but user experience deteriorates due to the need to input multiple passwords
Solution Approach 1:
The patent merges the BIOS password and operating system password into a single unified password. The BIOS password input interface is modified to accept both BIOS password and operating system password together, allowing users to authenticate for both systems with one password entry, thus improving ease of operation while maintaining security through the unified authentication mechanism
Solution Approach 2:
The BIOS password input interface is designed to serve multiple functions: it can accept either a traditional BIOS password alone or a unified password that serves both as BIOS password and operating system password. This multi-functional design allows the same interface to support both security models, enabling users to choose the unified password approach for better convenience without compromising the security architecture
2Ease of operation
If identical passwords are used for BIOS and operating system to simplify user input, then ease of operation is improved, but security is compromised due to increased vulnerability
Solution Approach 1:
The patent introduces a password conversion module as an intermediary that securely handles the unified password. This module receives the unified password input, converts it into separate BIOS password and operating system password forms, and distributes them to the respective authentication systems. This intermediary mechanism allows users to input only one password while maintaining distinct security credentials for both BIOS and operating system, thus improving ease of operation without compromising security
3Reliability
If multiple password verification steps are implemented to ensure security, then data security is improved, but login time increases
Solution Approach 1:
The patent implements preliminary action by performing the operating system password verification during the BIOS password verification process itself. When the user inputs the unified password, the system simultaneously verifies it against both the BIOS password database and the operating system password database in one unified verification step, rather than requiring separate verification steps. This preliminary combined verification maintains security through dual authentication while significantly reducing the total login time
Data Source
AI summary
A method, an apparatus and a device for sharing a password between a BIOS and an operating system are provided, which are applied to a Legacy boot mode. In the method, a user is prompted to input a password of the BIOS. The password inputted by the logon user is received and verified. The verified password is stored in a predetermined target memory and E820H information is created if the received password is verified as correct, where address data in the E820H information points to an address of the target memory. The address of the target memory is determined based on the created E820H information and memory contents are obtained if a password is set for the operating system. The logon user is permitted to log on the operating system if the acquired memory contents are verified as correct.