Portable Device Security via BIOS Password Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing security methods for portable devices are inadequate as they increase the probability of the device being cracked since power is supplied to the basic input/output system even after the security function is enabled, allowing unauthorized access.

Innovation Solution

A security method that sets a protection variable in the read-only memory, which checks the password input upon each power-on and, after a predetermined number of incorrect attempts, sets either a stolen flag in the battery memory or a lock flag in the read-only memory, preventing the device from powering on by neglecting the boot signal or disabling the battery discharge mode.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the basic input/output system is supplied with power after security function is enabled, then the system can perform password checking operations, but the probability of the device being cracked is increased

Engineering Contradiction:
Improvesecurity functionVSAvoidprobability of being cracked
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent divides the security verification process into two independent stages: first verifying a first password to access a first protection variable, then verifying a second password to access a second protection variable. This segmentation ensures that even if one stage is compromised, the other remains protected, thereby reducing the overall probability of the device being cracked while maintaining operational capability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent sets the first protection variable in the read-only memory before the device is fully powered on or before normal operations begin. This preliminary action ensures that the security mechanism is already in place and configured, allowing the system to perform password checking without requiring continuous power supply to the basic input/output system, thus reducing the probability of being cracked.

Inventive Principle:
Principle #10Preliminary action

2Device complexity

If a single password checking mechanism is used, then the security process is simple, but the security level is insufficient against multiple attack scenarios

Engineering Contradiction:
Improvesecurity processVSAvoidsecurity level
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent implements a two-stage password verification process with separate protection variables stored in read-only memory. The first password checks against the first protection variable, and the second password checks against the second protection variable. This segmentation increases the security level by requiring multiple independent verification steps, making it more resistant to various attack scenarios while maintaining a relatively simple overall structure.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent combines multiple security mechanisms (first password verification, second password verification, protection variables in read-only memory, keyboard controller interventions) into a composite security system. This composite approach integrates different security layers that work together to provide enhanced protection against multiple attack scenarios while managing complexity through systematic organization.

Inventive Principle:
Principle #40Composite materials

Data Source

PatentUS8850559B2Security method of a portable device
Publication Date: 2014.09.30 WISTRON CORP
  • US8850559B2 patent drawing
  • US8850559B2 patent drawing
  • US8850559B2 patent drawing

AI summary

An application program of the portable device receives a command of an owner when the portable device is powered on. The application program notifies a basic input/output system to set a protection variable, and notifies the owner to set a password in a setup menu of the basic input/output system after the application program receives the command of the owner. A keyboard controller turns off the portable device to enable the protection variable after the basic input/output system sets the protection variable and the setup menu of the basic input/output system stores the password. After the protection variable is enabled, whenever the portable device is powered on, the basic input/output system checks a password inputted to the portable device at least once and the basic input/output system executes a corresponding operation according to a check result.