BIOS Update Approval Interception During Reboot and Shutdown
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing role-based access control (RBAC) techniques in computing devices are vulnerable to attacks such as password theft and session hijacking, and users may unknowingly execute commands that could corrupt or damage the Basic Input/Output System (BIOS) during device reboot or shutdown, leading to complex and costly repairs.
Innovation Solution
Implementing a method where an operating system entity intercepts reboot or shutdown requests, checks for pending BIOS updates, and requires user approval before executing the command, allowing the BIOS to be updated during the boot process only if approved.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If RBAC techniques are used to restrict access to devices, then user access control is improved, but the system becomes vulnerable to password theft and session hijacking attacks
Solution Approach 1:
The patent introduces an intermediary approval mechanism between the user's reboot/shutdown request and the actual system action. This intermediary layer checks for pending BIOS updates and requires explicit user approval before allowing the operation to proceed, thereby preventing unauthorized BIOS modifications even if authentication credentials are compromised through password theft or session hijacking
2Reliability
If BIOS updates are automatically applied during reboot, then system security is improved, but users may unknowingly execute malicious commands that corrupt the BIOS
Solution Approach 1:
The patent implements a feedback mechanism where the system notifies the user of pending BIOS updates before executing the reboot or shutdown operation. The user receives information about the pending update and must explicitly approve it, providing feedback that prevents unintentional or malicious BIOS corruption while maintaining user control
Solution Approach 2:
The system performs preliminary checking for pending BIOS updates before allowing the reboot or shutdown operation to execute. This preliminary action ensures that users are aware of and approve any BIOS changes before they occur, preventing unauthorized modifications while maintaining ease of operation
3Reliability
If user approval is required for BIOS updates during reboot, then protection from unauthorized changes is improved, but the operation time increases
Solution Approach 1:
The patent applies partial action by only requiring user approval when a BIOS update is pending, not for every reboot operation. The system checks for pending updates and only interrupts the user flow when necessary, minimizing the time loss while maintaining BIOS protection
Data Source
AI summary
Techniques are provided for basic input/output system (BIOS) protection using BIOS modification interception and approval. One method comprises, by an entity associated with an operating system of a device, obtaining a request to perform a reboot and/or a shutdown of the processing device; determining, prior to performing the reboot and/or the shutdown, whether an update of a BIOS of the device is pending; generating an approval request, responsive to determining that the update of the BIOS is pending and prior to performing the reboot and/or the shutdown; and initiating an automated action, responsive to a result of the approval request. In some embodiments, a BIOS update flag may be reset and/or a BIOS staging environment may be cleared following the updating of the image, responsive to a user not approving the update.