BIOS Update Suppression for Secure Boot Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing role-based access control (RBAC) techniques in computing devices are vulnerable to attacks such as password theft and session hijacking, necessitating improved methods to protect devices from suspicious and unauthorized computer operations.
Innovation Solution
A method is implemented to suppress pending BIOS updates by clearing the BIOS staging environment and resetting the BIOS update flag, allowing the current BIOS to initialize the startup process, thereby protecting the device from unauthorized modifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If BIOS update is automatically applied, then system security and functionality are improved, but device vulnerability to unauthorized modifications increases
Solution Approach 1:
The patent implements a preliminary approval mechanism where BIOS updates are staged but not automatically applied. The update is prepared in advance and placed in a staging environment, requiring explicit user or administrator approval before becoming active. This preliminary action prevents unauthorized modifications by inserting an approval checkpoint between update preparation and application.
Solution Approach 2:
The patent introduces an intermediary approval mechanism that mediates between the BIOS update system and the actual update application. This intermediary layer (user approval interface, administrator consent mechanism) acts as a buffer that prevents automated or unauthorized BIOS updates while allowing legitimate updates to proceed after verification.
2Object-affected harmful factors
If BIOS update suppression is implemented, then protection from malicious actions is improved, but system adaptability to security patches decreases
Solution Approach 1:
The patent implements a dynamic BIOS update system that can adapt its behavior based on approval status. The system allows updates to be staged and prepared dynamically, with the ability to approve or suppress updates on demand. This dynamic approach maintains system adaptability to security patches while providing control mechanisms to prevent malicious modifications.
Solution Approach 2:
The patent changes the state parameter of BIOS updates from automatic application to conditional application. By introducing an approval state parameter that can be set or cleared based on user/administrator input, the system maintains flexibility to apply security patches when appropriate while suppressing updates when potential threats are detected.
3Stability of the object's composition
If BIOS staging environment is cleared, then current BIOS stability is maintained, but update capability is temporarily lost
Solution Approach 1:
The patent maintains BIOS update capability by implementing a staging environment that preserves update images in advance. Rather than clearing updates immediately, the system prepares and stages updates beforehand, allowing them to be held in a pending state without being lost. This preliminary action ensures update capability remains intact while current BIOS stability is maintained during the approval process.
Data Source
AI summary
Techniques are provided for basic input/output system (BIOS) protection using BIOS update suppression. One method comprises receiving, by an operating system of a processing device comprising a BIOS chip having a first BIOS version, a request to suppress a pending BIOS update; and suppressing an application of the pending BIOS update, in response to the request, wherein a boot process of the processing device uses the first BIOS version. The suppressing may comprise clearing a BIOS staging environment of the at least one BIOS chip and/or resetting a BIOS update flag. A user of the processing device may be notified of the pending BIOS update, in response to detecting that an update of the first BIOS version is pending. The request may be received responsive to the notification.