Electronic Device Security via BIOS and Application Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Theft of electronic devices containing valuable hardware and sensitive information is prevalent, and existing security measures such as physical attachment and password protection do not effectively prevent theft or enable tracking and recovery.

Innovation Solution

An electronic device security and tracking system (ESTSM) that includes hardware, software, and firmware components, allowing communication between the device and a server to register for services, track the device, and take actions such as disabling or recovering the device if stolen, using a combination of application, BIOS, and non-viewable components for secure operation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If physical attachment or password protection is used, then theft prevention is improved, but tracking and recovery capability deteriorates

Engineering Contradiction:
Improvetheft preventionVSAvoidtracking and recovery capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The security system is divided into separate functional modules: a security agent component installed on the electronic device for local security operations, and a remote server component for centralized management and tracking. This segmentation allows the system to provide both local theft prevention and remote tracking capabilities simultaneously, resolving the contradiction between preventing theft and maintaining tracking capability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A remote server acts as an intermediary between the user and the stolen device. The server receives communications from the security agent on the device, processes security events, and enables tracking without requiring direct user-access to the device. This intermediary mechanism allows continuous tracking capability even when the device is stolen and physically separated from the user.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If motion sensors or alarms are attached, then theft deterrence is improved, but cost and complexity increase

Engineering Contradiction:
Improvetheft deterrenceVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The security agent software provides multiple security functions including motion detection, alarms, tracking, and device disabling through a single integrated system. Rather than requiring separate physical sensors and alarms, the software-based multi-functional approach achieves theft deterrence while reducing hardware complexity and system cost.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

Physical motion sensors and mechanical alarms are replaced with software-based detection and notification mechanisms. The security agent monitors device state changes through software, and electronic notifications replace physical alarm mechanisms, significantly reducing hardware complexity while maintaining security effectiveness.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If existing security measures are used, then basic protection is provided, but tracking and recovery functionality is lost

Engineering Contradiction:
Improvebasic protectionVSAvoiddevice location information
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The security agent continuously communicates with the remote server, providing feedback about device status, location, and security events. This feedback mechanism ensures that even when the device is stolen, the server receives ongoing information about the device's state and location, enabling tracking and recovery while maintaining basic security protection.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The security agent is pre-installed on the electronic device before theft occurs, and the device is pre-registered with the remote server. This preliminary setup ensures that tracking and communication capabilities are already in place when theft happens, eliminating the loss of location information and enabling immediate tracking without requiring post-theft configuration.

Inventive Principle:
Principle #10Preliminary action

4Reliability

If the operating system is tampered with, then system security is compromised, but ESTSM security features remain operational

Engineering Contradiction:
ImproveESTSM security operationVSAvoidOS tampering vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The security agent is installed and configured in advance, creating protected system components and establishing secure communication channels before any tampering occurs. This preliminary setup includes registering the device with the server and establishing security policies that persist even if the operating system is later compromised, ensuring security features remain operational.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The security functionality is separated into a distinct security agent component that operates semi-independently from the main operating system. This segmentation allows the security agent to maintain its protective functions and communication capabilities even when the OS is tampered with, as the security module remains intact and can continue to report to the remote server.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS8529635B2Electronic device security and tracking system and method
Publication Date: 2013.09.10 SOFTEX LLC
  • US8529635B2 patent drawing
  • US8529635B2 patent drawing
  • US8529635B2 patent drawing

AI summary

A system and method for securing and tracking an electronic device. The system includes hardware, software and firmware components that cooperate to allow tracking, disabling, and other interaction with the stolen electronic device. The system includes an application component, non-viewable component and Basic Input/Output Subsystem (BIOS) component that are present on the electronic device. The BIOS component maintains the secured environment of the application and non-viewable components. If only the application component was provided, a simple low level format of the hard disk drive would remove the application and bypass the security features. The system implements an “application and BIOS” based solution to electronic device security.