Portable Device Security via BIOS Password Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security methods for portable devices are inadequate as they increase the probability of the device being cracked since power is supplied to the basic input/output system even after the security function is enabled, allowing unauthorized access.
Innovation Solution
A security method that sets a protection variable in the read-only memory, which checks the password input upon each power-on and, after a predetermined number of incorrect attempts, sets either a stolen flag in the battery memory or a lock flag in the read-only memory, preventing the device from powering on by neglecting the boot signal or disabling the battery discharge mode.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the basic input/output system is supplied with power after security function is enabled, then the system can perform password checking operations, but the probability of the device being cracked is increased
Solution Approach 1:
The patent divides the security verification process into two independent stages: first verifying a first password to access a first protection variable, then verifying a second password to access a second protection variable. This segmentation ensures that even if one stage is compromised, the other remains protected, thereby reducing the overall probability of the device being cracked while maintaining operational capability.
Solution Approach 2:
The patent sets the first protection variable in the read-only memory before the device is fully powered on or before normal operations begin. This preliminary action ensures that the security mechanism is already in place and configured, allowing the system to perform password checking without requiring continuous power supply to the basic input/output system, thus reducing the probability of being cracked.
2Device complexity
If a single password checking mechanism is used, then the security process is simple, but the security level is insufficient against multiple attack scenarios
Solution Approach 1:
The patent implements a two-stage password verification process with separate protection variables stored in read-only memory. The first password checks against the first protection variable, and the second password checks against the second protection variable. This segmentation increases the security level by requiring multiple independent verification steps, making it more resistant to various attack scenarios while maintaining a relatively simple overall structure.
Solution Approach 2:
The patent combines multiple security mechanisms (first password verification, second password verification, protection variables in read-only memory, keyboard controller interventions) into a composite security system. This composite approach integrates different security layers that work together to provide enhanced protection against multiple attack scenarios while managing complexity through systematic organization.
Data Source
AI summary
An application program of the portable device receives a command of an owner when the portable device is powered on. The application program notifies a basic input/output system to set a protection variable, and notifies the owner to set a password in a setup menu of the basic input/output system after the application program receives the command of the owner. A keyboard controller turns off the portable device to enable the protection variable after the basic input/output system sets the protection variable and the setup menu of the basic input/output system stores the password. After the protection variable is enabled, whenever the portable device is powered on, the basic input/output system checks a password inputted to the portable device at least once and the basic input/output system executes a corresponding operation according to a check result.


