BIOS Recovery Image Activation for Secure Firmware Restore
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing role-based access control (RBAC) techniques in computing devices are vulnerable to attacks such as password theft and session hijacking, compromising device security and making recovery from BIOS corruption or damage complex and costly.
Innovation Solution
A method involving a BIOS recovery image stored on a recovery chip, which is activated to update the BIOS chip, ensuring secure and efficient restoration of the BIOS during failures or unauthorized software detection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If RBAC techniques are used to restrict access to devices, then device security is improved, but the system becomes vulnerable to attacks such as password theft and session hijacking
Solution Approach 1:
The patent introduces a BIOS recovery image stored on a separate recovery chip as an intermediary mechanism. This recovery image acts as a mediator that can restore the BIOS to a known good state when security attacks or corruption occur, providing a safety net that bypasses the vulnerable RBAC authentication system.
Solution Approach 2:
The BIOS recovery image is prepared and stored in advance on a recovery chip during manufacturing or before potential security incidents. This preliminary preparation ensures that a valid BIOS image is readily available when needed, eliminating the need to perform complex recovery operations after security breaches or corruption.
2Reliability
If BIOS recovery is implemented to restore corrupted BIOS, then device reliability is improved, but the recovery process becomes complex and costly
Solution Approach 1:
The recovery chip serves as a simple intermediary that directly provides the BIOS recovery image to the system. This eliminates complex recovery procedures by using a straightforward mechanism: the system reads the recovery image from the recovery chip and restores the BIOS, avoiding complicated diagnostic and recovery workflows.
Solution Approach 2:
The patent creates a copy of the valid BIOS image and stores it on a separate recovery chip. This copy serves as a backup that can be directly applied to restore the original BIOS without requiring complex reconstruction or external intervention, simplifying the recovery process significantly.
3Reliability
If BIOS recovery image is stored on a recovery chip, then security against unauthorized modification is improved, but the device complexity increases
Solution Approach 1:
The patent segments the BIOS storage function by separating the active BIOS chip from the recovery BIOS image stored on a dedicated recovery chip. This segmentation provides security through physical and functional separation, while the added complexity is minimized because the recovery chip uses simple read-only storage without requiring complex control logic or additional processing components.
Data Source
AI summary
Techniques are provided for device recovery using activation of a basic input/output system (BIOS) recovery image. One method comprises receiving an activation signal to initiate a recovery of a BIOS; obtaining, responsive to the activation signal, a BIOS recovery image from a recovery chip; updating a BIOS chip comprising the BIOS using the obtained BIOS recovery image; and initiating a boot process using the updated at least one BIOS chip. The activation signal may be received in response to a user physically activating a BIOS recovery activator (e.g., during an execution of a boot process). The activation signal may be received during an execution of a boot process for the at least one processing device and/or responsive to a failure occurring during the boot process for the at least one processing device.