BIOS SKU Verification and Secure Configuration for Model Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Configuring BIOS settings for specific computer models is complicated and prone to mistakes, and unauthorized exposure of manufacturer information during the process is a risk.
Innovation Solution
A method involving a processor and NVRAM device to manage BIOS configuration data and secure boot verification using public and private keys to ensure only authorized personnel can configure BIOS settings, preventing unauthorized access to manufacturer information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If BIOS settings are manually configured for each computer model, then customization for specific models is achieved, but the manufacturing process becomes complicated and error-prone
Solution Approach 1:
BIOS configuration data sets are pre-configured for multiple computer models and stored in the NVRAM device before manufacturing. During system initialization, the processor automatically retrieves the appropriate pre-configured data set based on the asserted SKU code, eliminating the need for manual configuration during manufacturing and reducing errors.
Solution Approach 2:
The system performs self-configuration by automatically selecting the appropriate BIOS configuration data set based on the asserted SKU code without requiring external manual intervention. The processor autonomously compares the asserted SKU code with reference SKU codes and applies the matching configuration, streamlining the manufacturing process.
2Adaptability or versatility
If ordinary BIOS firmware containing manufacturer information is used, then compatibility with various manufacturers and models is achieved, but unauthorized exposure of manufacturer information occurs during configuration
Solution Approach 1:
The BIOS configuration data is segmented into multiple separate data sets, each corresponding to a specific computer model or SKU code. Each data set contains only the manufacturer information relevant to that specific model, preventing unauthorized exposure of information for other manufacturers while maintaining compatibility across different models.
Solution Approach 2:
Different BIOS configuration data sets with different manufacturer information are stored for different SKU codes. The system selectively applies the appropriate data set based on the asserted SKU code, ensuring that each computer model receives only its designated manufacturer information and preventing unauthorized access to other manufacturers' data.
3Reliability
If secure boot verification with private and public keys is implemented, then security against unauthorized access is improved, but the BIOS configuration process becomes more complex
Solution Approach 1:
Public keys are pre-stored in the NVRAM device alongside the BIOS configuration data sets during manufacturing. When BIOS configuration is needed, the system performs secure boot verification by comparing the asserted SKU code with reference SKU codes using the pre-stored public keys, then retrieves the corresponding pre-configured BIOS data set. This preliminary setup eliminates the need for complex real-time cryptographic operations during configuration, maintaining security while simplifying the process.
Data Source
AI summary
A method includes obtaining an asserted SKU code; determining whether the asserted SKU code matches a reference SKU code; when the asserted SKU code does not match the reference SKU code, modifying a comparison flag to indicate an inconsistent state; selecting a public key corresponding to one of ordinary SKU codes that matches the asserted SKU code; obtaining an OS image; performing a secure boot verification to verify the OS image based on the public key and a private key contained in the OS image; when the OS image is successfully verified, determining whether the comparison flag indicates the inconsistent state; when the comparison flag indicates the inconsistent state, replacing the reference SKU code with the asserted SKU code; selecting a BIOS configuration data set corresponding to one of the ordinary SKU codes that matches the asserted SKU code; and configuring the BIOS settings with the BIOS configuration data set.