BMC Emulated Secure Storage for Host Configuration Files
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing devices face security vulnerabilities due to unauthorized access, which can lead to malware attacks and tampering of configuration files, compromising the security of sensitive data stored in storage devices.
Innovation Solution
Implementing a secure storage system using a Baseboard Management Controller (BMC) that emulates a remote or RAM-based storage, inaccessible after boot, and monitors configuration files for changes, performing security actions when unauthorized modifications are detected, ensuring only authenticated users can access the secure storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If configuration files are stored in accessible storage devices for ease of access and updates, then ease of operation is improved, but security is worsened due to unauthorized access and malware attacks
Solution Approach 1:
The system divides storage into separate secure and non-secure portions. Configuration files are stored in a secure storage device that is isolated from the host operating system, while maintaining controlled access through specific interfaces. This segmentation allows the system to maintain security while enabling authorized access and updates through defined protocols.
Solution Approach 2:
A secure storage device acts as an intermediary between the host system and configuration files. The device includes a processor that mediates all access requests, implementing authentication and authorization protocols. This intermediary layer prevents direct access by malware while allowing legitimate updates through controlled interfaces.
2Reliability
If configuration files are stored in secure isolated storage, then security is improved, but ease of operation is worsened due to restricted access
Solution Approach 1:
The secure storage device implements feedback mechanisms through monitored interfaces that track access patterns and authentication events. The system provides status information about configuration file integrity and access control states, enabling operators to verify security while maintaining controlled access. Update mechanisms provide feedback on the status of configuration changes.
Solution Approach 2:
The secure storage device with its integrated processor serves as an intelligent intermediary that automates access control decisions. It authenticates users, manages permissions, and controls file access without requiring manual security interventions. This automation maintains security while simplifying legitimate access operations.
3Ease of operation
If the secure storage is made accessible to the host operating system, then ease of operation is improved, but security is worsened as the OS becomes a vulnerability point
Solution Approach 1:
The system implements strict segmentation between the host operating system and the secure storage device. The secure storage is presented as a separate logical unit with controlled interfaces, preventing the OS from directly accessing or compromising the secure portion. This segmentation ensures that OS vulnerabilities cannot directly affect secure configuration files.
Solution Approach 2:
The secure storage device acts as an intermediary that sits between the host system and configuration files. It implements authentication protocols and access control mechanisms that are independent of the host OS security model. This intermediary layer prevents malware on the host from directly accessing secure storage while allowing legitimate access through defined protocols.
Data Source
AI summary
Example implementations relate a system and method for storing configuration files of a host computing device in a secure storage of a Baseboard Management Controller (BMC). The secure storage includes configuration files associated with the host computing device. The BMC is communicatively connected to the host computing device using a communication link. The secure storage is emulated as a storage device to the host computing device. The BMC monitors the secure storage to detect changes in the configuration files. When there is a change in a configuration file, the BMC performs a security action in the host computing device.