Peripheral Channel Switching for Secure Boot Loader Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer systems are vulnerable to tampering of boot loaders through physical channels during the secure boot process due to the lack of effective protection mechanisms.
Innovation Solution
A computer system and device equipped with a reset module, switching module, processing module, and storage module that generate control signals to manage a switching signal to enable, disable, or prohibit tampering with peripheral devices, particularly during the root of trust process, using a reset signal to control the physical channel.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a physical channel is provided between the computer device and peripheral device for boot loader storage, then accessibility and ease of operation are improved, but security and reliability deteriorate due to tampering risks
Solution Approach 1:
The patent applies dynamics by making the physical channel dynamically controllable through a switching module. The channel transitions between connected and disconnected states based on system operation phase, allowing easy access during normal operation while preventing tampering during critical boot operations. The switching module responds to reset signals to automatically adjust channel connectivity.
Solution Approach 2:
The patent introduces a switching module as an intermediary between the computer device and peripheral device. This mediator controls the physical channel connectivity, enabling or disabling access based on system state. The switching module acts as a gatekeeper that can isolate the peripheral device from the computer device when security risks are detected.
2Ease of operation
If the physical channel remains continuously connected for normal operation, then ease of operation is maintained, but vulnerability to attacks during boot process increases
Solution Approach 1:
The patent applies preliminary anti-action by proactively disconnecting the physical channel before the boot process begins. The switching module receives a reset signal during system initialization and automatically isolates the peripheral device, preventing potential attacks on the boot loader before they can occur. This preemptive measure addresses the security vulnerability before it can be exploited.
Solution Approach 2:
The patent implements periodic action by cyclically controlling the physical channel connectivity. The channel is disconnected during critical boot phases when reset signals are active, then reconnects when the system transitions to normal operation. This periodic switching pattern ensures security during vulnerable periods while maintaining accessibility during operational periods.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A computer system includes a peripheral device (20); and a computer device (10), coupled to the peripheral device (20) through a physical channel, configured to access the peripheral device (20), comprising: a reset module (102), configured to output a reset signal; a switching module (104), coupled to the reset module (102); a processing module (106), coupled to the reset module (102) and the switching module (104); and a storage module (108), coupled to the processing module (106), storing a program code to instruct the processing module (106) to perform the following steps: generating a control signal according to the reset signal; and controlling the switching module (104) to generate a switching signal to instruct the peripheral device (20) to enable, disable or prohibit tampering according to the control signal and the reset signal.