Boot Time Optimization via Driver Authentication Caching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional information handling systems experience significant delays during boot-up due to the requirement for a system reboot to check the integrity of BIOS/UEFI images and drivers, especially when a secure boot policy is changed, which affects boot time and operating system launch time.
Innovation Solution
Implementing a dynamic authentication check of drivers within the information handling system during the initial boot process using an authentication results data structure (ARDS) to identify and store the results of UEFI image authentication, allowing for continued booting without rechecking if all drivers pass the authentication, and providing notifications for failed checks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a system reboot is performed to check the integrity of BIOS/UEFI images and drivers when secure boot policy is changed, then the security and integrity of the boot process is ensured, but the boot time and operating system launch time are significantly delayed
Solution Approach 1:
The patent performs authentication checks of BIOS/UEFI images and drivers during the initial boot process before the secure boot policy change takes effect. The authentication results are stored in a data structure that can be quickly referenced when policy changes occur, eliminating the need for time-consuming reboots and re-checks.
Solution Approach 2:
The patent creates an authentication results data structure that stores the authentication status of each driver and BIOS/UEFI image. This data structure serves as a cached copy of authentication information that can be rapidly accessed and evaluated when secure boot policy changes, avoiding the need to重新perform the entire authentication process.
2Reliability
If authentication checks are performed on all drivers during boot process, then the security of the system is improved, but the boot process complexity and time consumption increase
Solution Approach 1:
The patent divides the authentication process into discrete segments, where each driver and BIOS/UEFI image is authenticated individually during the initial boot process. The authentication results are stored in a structured data format that allows for efficient retrieval and evaluation, reducing the complexity of managing authentication states.
Solution Approach 2:
The system automatically performs authentication checks during the initial boot process and stores the results in an authentication data structure. When secure boot policy changes occur, the system automatically evaluates the stored authentication results to determine whether a reboot is necessary, eliminating the need for manual intervention or complex decision-making processes.
Data Source
AI summary
A method and information handling system (IHS) that optimizes boot time. The method includes a basic input output system (BIOS) performing an authentication check of drivers during an initial boot process. The results of the authentication check are stored along with an unified extensible firmware interface (UEFI) image for each driver in an authentication results data structure (ARDS). In response to receipt of a subsequent request to enable a secure boot of the IHS, when the initial boot process was performed with the secure boot disabled, the ARDS is accessed to determine if any of the drivers failed the authentication check. When none of the drivers have failed the authentication check, the boot process is continued using the UEFI images of the drivers. When at least one of the drivers has failed its authentication check, a notification is output indicating a failure of the authentication check.