Peripheral Channel Switching for Secure Boot Loader Protection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing computer systems are vulnerable to tampering of boot loaders through physical channels during the secure boot process due to the lack of effective protection mechanisms.

Innovation Solution

A computer system and device equipped with a reset module, switching module, processing module, and storage module that generate control signals to manage a switching signal to enable, disable, or prohibit tampering with peripheral devices, particularly during the root of trust process, using a reset signal to control the physical channel.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a physical channel is provided between the computer device and peripheral device for boot loader storage, then accessibility and ease of operation are improved, but security and reliability deteriorate due to tampering risks

Engineering Contradiction:
Improveaccessibility to peripheral deviceVSAvoidsecurity against tampering
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent applies dynamics by making the physical channel dynamically controllable through a switching module. The channel transitions between connected and disconnected states based on system operation phase, allowing easy access during normal operation while preventing tampering during critical boot operations. The switching module responds to reset signals to automatically adjust channel connectivity.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent introduces a switching module as an intermediary between the computer device and peripheral device. This mediator controls the physical channel connectivity, enabling or disabling access based on system state. The switching module acts as a gatekeeper that can isolate the peripheral device from the computer device when security risks are detected.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If the physical channel remains continuously connected for normal operation, then ease of operation is maintained, but vulnerability to attacks during boot process increases

Engineering Contradiction:
Improvecontinuous accessibilityVSAvoidsusceptibility to boot loader attacks
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary anti-action by proactively disconnecting the physical channel before the boot process begins. The switching module receives a reset signal during system initialization and automatically isolates the peripheral device, preventing potential attacks on the boot loader before they can occur. This preemptive measure addresses the security vulnerability before it can be exploited.

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

The patent implements periodic action by cyclically controlling the physical channel connectivity. The channel is disconnected during critical boot phases when reset signals are active, then reconnects when the system transitions to normal operation. This periodic switching pattern ensures security during vulnerable periods while maintaining accessibility during operational periods.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentEP4664334A1Computer system and computer device
Publication Date: 2025.12.17 MOXA INC
  • EP4664334A1 patent drawingFigure 1
  • EP4664334A1 patent drawingFigure 2
  • EP4664334A1 patent drawingFigure 3

AI summary

A computer system includes a peripheral device (20); and a computer device (10), coupled to the peripheral device (20) through a physical channel, configured to access the peripheral device (20), comprising: a reset module (102), configured to output a reset signal; a switching module (104), coupled to the reset module (102); a processing module (106), coupled to the reset module (102) and the switching module (104); and a storage module (108), coupled to the processing module (106), storing a program code to instruct the processing module (106) to perform the following steps: generating a control signal according to the reset signal; and controlling the switching module (104) to generate a switching signal to instruct the peripheral device (20) to enable, disable or prohibit tampering according to the control signal and the reset signal.