Image Forming Apparatus Firmware Write-Protection Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing image forming apparatuses lack a method to securely check if the start-up firmware is write-protected, as disabling the BIOS setup menu prevents modification but also prevents checking the write-protection status of non-volatile memory, posing a security risk.
Innovation Solution
An image forming apparatus with a control unit that copies the setting value for write-protecting non-volatile memory to a volatile memory space accessible by the operating system, allowing the OS to check and verify the write-protection status without executing the BIOS setup menu.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the BIOS setup menu execution is disabled to prevent modification of setting items, then the security against unauthorized alteration of start-up firmware is improved, but the ability to check the write-protection status of non-volatile memory is lost
Solution Approach 1:
The patent divides the setting information into two parts: setting items stored in non-volatile memory (which remain write-protected) and copied setting values stored in volatile memory (which can be read by the operating system). This segmentation allows the OS to check write-protection status without enabling modification of the original firmware settings.
Solution Approach 2:
The patent introduces volatile memory as an intermediary between the write-protected non-volatile memory and the operating system. The control unit copies setting values from non-volatile memory to volatile memory, which then serves as a readable interface for the OS to verify write-protection status without compromising the security of the original firmware.
2Loss of information
If the BIOS setup menu execution is enabled to allow checking of setting items, then the ability to verify write-protection status is improved, but the risk of unauthorized alteration of start-up firmware increases
Solution Approach 1:
The patent extracts the read function from the BIOS setup menu and implements it separately in the operating system through direct access to copied setting values in volatile memory. This extraction allows checking of write-protection status without requiring execution of the BIOS setup menu, thereby eliminating the security risk associated with enabling menu access.
3Loss of information
If the operating system is given direct access to BIOS setting information in non-volatile memory, then the ability to check write-protection status is improved, but the security of the start-up firmware is compromised
Solution Approach 1:
The patent creates a copy of the setting values from non-volatile memory and stores them in volatile memory. The operating system accesses this copy rather than the original firmware settings, allowing verification of write-protection status while maintaining the integrity and security of the start-up firmware in non-volatile memory.
Data Source
AI summary
An image forming apparatus comprises a non-volatile memory storing start-up firmware a volatile memory having a memory space commonly available for the start-up firmware and an operating system of the image forming apparatus; and a control unit configured to copy, to the memory space, a setting value of a setting item for write-protecting the non-volatile memory, among setting items included in the start-up firmware, wherein the operating system acquires and checks the setting value copied to the memory space.