BMC Access Control via Unlock Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing systems face challenges in ensuring security during in-band access, as the server manager has limited control over access and cannot easily prevent malicious users from accessing hardware components.
Innovation Solution
A computing system comprising a BIOS, a BMC, and hardware components, where the BMC transitions between a locked and unlocked state based on authentic unlock signatures received from users, thereby controlling access to hardware components.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If in-band connection is allowed for user access, then ease of operation is improved, but security control deteriorates
Solution Approach 1:
The BMC dynamically transitions between locked and unlocked states based on authentication results. During normal operation, the BMC remains locked to prevent access. When a valid unlock command with correct signature is received, it transitions to unlocked state to allow hardware access, and automatically returns to locked state after a timeout period or when the system enters system management mode. This dynamic state management resolves the contradiction by enabling access only when necessary and authenticated.
Solution Approach 2:
The BMC acts as an intermediary between users and hardware components, controlling all access requests. It validates unlock commands containing signatures before allowing access to hardware components. The BMC mediates between the need for user access and security control by filtering and authenticating all access requests, preventing direct unauthenticated access to hardware.
2Ease of operation
If BMC remains in unlocked state for extended period, then ease of operation is improved, but security risk increases
Solution Approach 1:
The BMC implements periodic security checks by automatically transitioning from unlocked to locked state after a predetermined timeout period expires. This periodic re-locking ensures that even if the BMC becomes compromised or left unlocked accidentally, the window for potential security breaches is limited to the timeout duration. System management mode entry also triggers periodic re-evaluation of access state.
3Reliability
If BMC validates every unlock command, then security is improved, but processing time increases
Solution Approach 1:
The system performs preliminary authentication by validating the signature in the unlock command before granting access. The BMC checks whether the unlock command contains a valid signature that authenticates the user identity. This preliminary validation ensures that only authenticated users can transition the BMC to unlocked state, maintaining strong security control while enabling legitimate access.
Data Source
AI summary
A computing system includes a BIOS, a BMC coupled to the BIOS, and one or more hardware components. The BMC can receive commands from a user, and transition between a locked state and an unlocked state. When the BMC is in the unlocked state, the BMC responds to commands received from the user. When the BMC is in the locked state, the BMC ignores commands received from the user. The BMC is configured to receive an unlock command from a user that includes an unlock signature. The BMC is further configured to determine whether the unlock signature is authentic. If the unlock signature is authentic and the BMC is in the locked state, the BMC is configured to transition from the locked state to the unlocked state, to allow the user access to the hardware components of the computing system.