Non-Volatile Memory Password Protection During Power State Transitions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing BIOS systems face challenges in protecting passwords during transitions between power states, particularly when returning from suspend or hibernation states, as they often automatically transmit passwords, making them vulnerable to eavesdropping, and this compromises usability and security.
Innovation Solution
A method where a password is stored in non-volatile memory, and upon detection of unauthorized access during power saving state transitions, the system requests user input for authentication before returning to the power-on state, ensuring secure password protection while maintaining data integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the BIOS automatically transmits a password stored in a secure area to the disk drive when returning from suspend state, then usability is improved, but security deteriorates due to vulnerability to eavesdropping
Solution Approach 1:
The system performs preliminary detection of disk drive attachment status before resuming from suspend state. By checking whether the disk drive is properly attached before automatically transmitting the password, the system prevents password eavesdropping attacks that occur when the drive is detached and connected to an eavesdropping device. This preliminary check ensures that automatic password transmission only occurs when the drive is in its intended location.
2Object-affected harmful factors
If the BIOS requests password input from user when returning from suspend state, then security is improved, but usability deteriorates due to user burden
Solution Approach 1:
The system dynamically adjusts its authentication behavior based on the detected state of the disk drive. When the drive is properly attached, the system automatically transmits the password without user input. When the drive is detached or improperly connected, the system requests password input from the user. This dynamic adaptation allows the system to balance security and usability based on real-time conditions.
3Object-affected harmful factors
If the UEFI firmware forcibly shifts the computer to power-off state to prevent password leakage, then security is improved, but productivity deteriorates due to loss of data under editing
Solution Approach 1:
The system performs preliminary detection of disk drive attachment status before resuming from suspend state. By checking whether the disk drive is properly attached beforehand, the system can safely resume operations without forcing a power-off, thereby preventing loss of edited data while still protecting against password leakage when the drive is improperly connected.
Solution Approach 2:
The patent introduces an intermediate detection mechanism that checks disk drive attachment status between the suspend state and resume state. This intermediary check allows the system to make informed decisions about whether to resume normally or take protective measures, avoiding the extreme of forcing power-off while still preventing password leakage.
Data Source
AI summary
A method for protecting a password of a computer having a non-volatile memory is disclosed. A password is stored in a non-volatile memory of a computer. The computer is then transitioned to a power saving state. In response to a detection of an unauthorized access to the non-volatile memory during the power saving state transition, a password input is requested from a user. The computer returns to a power-on state from the power saving state when there is a success in authentication of the input password.