Emulated Network Responses for Offline Encrypted-Storage Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for accessing encrypted storage devices in computing devices face challenges when BIOS updates alter the system, leading to unauthorized access attempts, requiring manual password input or network connectivity that may fail during updates, compromising security and administrative access.
Innovation Solution
A method using a secure storage of a private key or password within the device, enabling an emulated network service response to decrypt data without manual input or network connection, ensuring secure and automated decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a system checks BIOS state to block unauthorized access, then security is improved, but legitimate BIOS updates are blocked
Solution Approach 1:
The system performs preliminary actions by storing backup cryptographic keys securely before BIOS updates are needed. When a BIOS update occurs, the system can retrieve these pre-stored keys to maintain decryption capability, resolving the contradiction between security checking and update adaptability.
Solution Approach 2:
A secure key storage mechanism acts as an intermediary between the BIOS security checking system and the encrypted storage. This intermediary preserves cryptographic keys even when BIOS changes occur, allowing the system to distinguish between malicious tampering and legitimate updates while maintaining security.
2Reliability
If manual password input is required for decryption, then security is maintained, but user convenience deteriorates
Solution Approach 1:
The system implements self-service by automatically retrieving stored cryptographic keys from secure storage during the boot process. This eliminates the need for manual password input while maintaining security, as the key retrieval is performed automatically by the system itself without user intervention.
3Ease of operation
If network connection is used for automatic password input, then user convenience is improved, but system reliability deteriorates due to network failure
Solution Approach 1:
The system performs preliminary action by storing cryptographic keys locally in secure storage during device initialization. This pre-stored key mechanism ensures that decryption can proceed automatically without requiring network connectivity, eliminating network failure as a reliability concern while maintaining automatic operation.
4Adaptability or versatility
If remote administrator access is required for BIOS updates, then system adaptability is improved, but security control deteriorates
Solution Approach 1:
Secure key storage acts as an intermediary that maintains security control during remote BIOS updates. The preserved cryptographic keys enable automatic decryption continuation after updates, allowing remote administrators to perform updates without compromising security control or requiring manual password intervention.
Data Source
AI summary
An example storage medium is described, wherein the storage medium comprises instructions that, when executed, cause a processor of an electronic device to determine whether data private key is stored in a first memory of the electronic device and whether a network connection is available. If the private key is stored and no network is available, emulated responses of a networked service are generated for decryption of data in the electronic device.