BIOS Secondary OS Verification via Signed Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Information handling systems face security vulnerabilities due to secondary operating systems, which can be tampered with by malicious actors to access user data, as they lack effective verification mechanisms.
Innovation Solution
Implementing a basic input/output system (BIOS) with a signed signature of the secondary operating system, verified using a public-private key pair, to ensure secure booting to the secondary operating system only if it is authentic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secondary operating system is installed to enable recovery and diagnostic functions, then system reliability and functionality are improved, but security vulnerabilities increase due to potential tampering with the secondary operating system
Solution Approach 1:
The patent applies preliminary action by computing and storing a hash value of the secondary operating system code during system initialization or manufacturing, before the system is deployed or potentially tampered with. This pre-computed hash is stored in a protected location (such as a secure element or trusted platform module), enabling future verification of the secondary OS integrity without requiring re-computation at boot time.
Solution Approach 2:
The patent implements feedback by creating a verification mechanism that compares the current hash of the secondary operating system code against the pre-stored hash value. This feedback loop allows the system to detect any modifications or tampering with the secondary OS, triggering appropriate security responses such as preventing boot or alerting security personnel.
2Ease of operation
If the secondary operating system is made accessible for recovery operations, then ease of operation is improved, but the risk of malicious access to user data increases
Solution Approach 1:
The patent introduces an intermediary verification layer between the secondary operating system and the user data. This intermediary mechanism (the hash verification system) acts as a gatekeeper that must be satisfied before the secondary OS can access any protected resources. The intermediary checks the integrity of the secondary OS code and only allows execution if verification succeeds, thereby preventing malicious actors from using tampered secondary OS to access user data.
3Reliability
If verification mechanisms are added to the basic input/output system, then security is improved, but device complexity increases
Solution Approach 1:
The patent extracts the complex verification logic from the main basic input/output system firmware and places it in a separate, dedicated security module or trusted execution environment. This extraction allows the core BIOS to remain relatively simple while the verification functions are handled by a specialized component designed specifically for security operations. The hash comparison and verification routines are isolated in this separate module, reducing the attack surface and simplifying the main system.
Data Source
AI summary
An information handling system may include a processor, non-transitory computer readable media communicatively coupled to the processor and having stored thereon a primary operating system of the information handling system and a secondary operating system of the information handling system, and a basic input/output system communicatively coupled to the processor and having provisioned thereon a signed signature of the secondary operating system signed with a private key of a public-private key pair and a public key of the public-private key pair. The basic input/output system is configured to, responsive to a determination to boot to the secondary operating system in lieu of booting to the primary operating system of the information handling system verify the secondary operating system using the signed signature of the secondary operating system and the public key and responsive to verifying the secondary operating system, allow the information handling system to boot to the secondary operating system.