Reset Write-Once Register for Secure USB Port Disabling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for disabling communication ports on computing devices are not secure, as they can be circumvented by knowledgeable users, and are not universal, requiring different techniques for various USB controllers, making it difficult for manufacturers to implement secure and consistent port disabling solutions.
Innovation Solution
Implementing a reset write-once mechanism using a register that can only be changed during a system reset, which drives GPIO signals to disable communication ports, ensuring secure and universal port control through a boot module and security module that authenticates access to setting information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If existing methods for disabling communication ports are used, then ease of operation is improved, but security is worsened as they can be circumvented by knowledgeable users
Solution Approach 1:
The patent applies preliminary action by configuring the register to disable communication ports during the boot process before the operating system loads. This ensures that ports are disabled early in the system initialization, preventing users from accessing or circumventing the disabling mechanism through software running in the operating system. The boot module sets the register state during system reset, establishing security before user interaction is possible.
Solution Approach 2:
The patent introduces a register as an intermediary component between the boot module and the communication ports. This register acts as a secure control mechanism that the boot module can configure but that is not directly accessible to users or applications. The register mediates between the disabling command and the actual port functionality, providing a security layer that prevents direct manipulation of port enablement while maintaining ease of operation through automated boot-time configuration.
2Adaptability or versatility
If different techniques are used for various USB controllers, then adaptability is improved, but device complexity is worsened
Solution Approach 1:
The patent applies universality by designing a solution that uses a standardized register interface for disabling communication ports across different USB controllers. Instead of implementing separate disabling mechanisms for each controller type, the system uses a single register that can control multiple ports and different controller families. This universal approach allows the boot module to disable ports on various USB controllers through the same method, reducing implementation complexity while maintaining broad compatibility.
Solution Approach 2:
The patent applies parameter changes by utilizing a register that can be configured with different values to control the state of communication ports. The register accepts parameter inputs that determine which specific ports to disable and in what configuration. This parameter-based approach allows a single register mechanism to adapt to different USB controller types and port configurations without requiring separate disabling techniques for each controller, thereby reducing device complexity while maintaining adaptability.
Data Source
AI summary
Example embodiments disclosed herein relate to enabling or disabling a port by writing to a reset write-once register. A boot process for a device is initiated. The reset write-once register is set, during the boot process, to disable or enable the port.