Firmware Utility Access Restriction Persistence

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing information processing apparatuses face challenges in imposing access restrictions on devices like USB storage and optical disk drives, as current methods either allow easy removal of restrictions when the OS is reinstalled or lack flexibility in setting detailed access controls, particularly at the BIOS level.

Innovation Solution

An information processing apparatus that combines firmware and utility software, using a first restricting unit to enforce access restrictions and a second unit to manage and remove these restrictions, allowing for detailed control and ensuring that access restrictions cannot be easily removed, even after OS reinstallation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If access restriction is imposed at the BIOS level, then the restriction cannot be easily externally removed, but the flexibility to set detailed access control is lost

Engineering Contradiction:

Improveaccess restriction persistenceVSAvoidaccess control flexibility

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The access restriction function is divided into two independent restricting units: a first restricting unit in the firmware that provides persistent restriction, and a second restricting unit in the utility software that provides flexible and detailed control. This segmentation allows each unit to specialize in one aspect, resolving the contradiction between persistence and flexibility.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent combines the first restricting unit (firmware level) and the second restricting unit (utility software level) into a unified access restriction system. The utility software can detect when the first restricting unit is active and coordinate its operations accordingly, merging the persistence advantage of firmware with the flexibility of software-based detailed control.

Inventive Principle:

Principle #5Merging (Combining)

2Adaptability or versatility

If access restriction is imposed using utility software in the OS, then detailed access restriction content can be set, but the restriction can be easily disabled when the utility is uninstalled or OS is reinstalled

Engineering Contradiction:

Improveaccess restriction detailVSAvoidaccess restriction persistence

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The first restricting unit in the firmware performs preliminary action by setting up the basic access restriction framework before the utility software operates. This ensures that even if the utility software is removed, the fundamental restriction remains in place, providing persistent protection while allowing detailed control through the utility software.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The first restricting unit acts as an intermediary between the utility software and the device. It maintains the core restriction functionality independently of the utility software's presence, while the utility software can still provide detailed configuration. This intermediary role ensures persistence without sacrificing detailed control capability.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If access restriction is imposed on all USB devices at the BIOS level, then USB storage access is restricted, but even the mouse cannot be used

Engineering Contradiction:

Improveaccess restriction enforcementVSAvoiddevice usability

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The second restricting unit in the utility software implements local quality control by allowing different access restriction settings for different USB devices. Instead of a blanket restriction on all USB devices, the system can selectively restrict only specific devices (e.g., USB storage) while permitting others (e.g., mouse), thereby maintaining usability while enforcing security.

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS8769667B2Information processing apparatus

Publication Date: 2014.07.01 DYNABOOK INC

AI summary

An information processing apparatus includes firmware incorporated in the apparatus; utility software that can be installed and uninstalled; a first restricting unit; and a second restricting unit. The information processing apparatus executes the firmware and the utility software to access a device. The firmware uses the first restricting unit to restrict use of the device on the basis of restriction information, supplies the restriction information to the utility software, and removes the restriction by the first restricting unit if an instruction to remove the restriction is received from the utility software. The utility software determines whether the use of the device has already been restricted by the second restricting unit when the utility software receives the restriction information from the firmware, and instructs the firmware to remove the restriction by the first restricting unit if the use of the device has already been restricted by the second restricting unit.