SST Secure Boot Order Modification via Server Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Self-Service Terminals (SSTs) face challenges in servicing due to password-protected BIOS, which hinders technicians from modifying the boot device order for diagnostic purposes without compromising security, as they need to know the password and risk misuse.
Innovation Solution
A system and method allowing a mobile device app to request and authenticate modifications to the SST's boot order through a server, verifying the technician's authorization and proximity, using out-of-band management with e-Policy Orchestrator and Intel Active Management Technology, enabling secure boot modifications from removable media.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password protection is applied to BIOS and boot device order, then security of the SST is improved, but ease of operation for technicians deteriorates
Solution Approach 1:
A server acts as an intermediary between technicians and the SST BIOS authentication system. The server stores credentials and handles authentication requests, allowing technicians to modify boot device order without directly possessing BIOS passwords. This mediator approach maintains security while improving ease of operation.
Solution Approach 2:
The system enables self-service authentication where technicians can authenticate themselves through the server using their credentials, and the server automatically manages the authentication process and credential verification. This eliminates the need for manual password management and improves operational ease.
2Ease of repair
If technicians possess security credentials for SST servicing, then ease of repair is improved, but reliability of security deteriorates due to potential misuse
Solution Approach 1:
The server serves as an intermediary that controls and monitors credential usage. Instead of technicians directly possessing and using BIOS passwords, the server mediates all authentication requests, logging and tracking each authentication event. This maintains ease of repair while preserving security through centralized control.
Solution Approach 2:
The system implements feedback mechanisms where the server logs and tracks all authentication requests and credential usage. This creates an audit trail that provides feedback on system access patterns, enabling monitoring and detection of potential misuse while maintaining secure operation.
3Ease of operation
If centralized credential management is implemented, then ease of operation is improved, but device complexity increases
Solution Approach 1:
The server acts as an external intermediary that handles all credential management complexity remotely. The SST itself remains relatively simple, while the server manages the complex authentication logic, credential storage, and verification processes. This distributes complexity to a dedicated management system rather than embedding it in the SST.
Data Source
AI summary
Various embodiments herein each include at least one of systems, methods, and software for SST secure boot device order modification. One such embodiment, in the form of a method performed by a server, includes, receiving a request from a mobile device app to modify a boot order of a computer controlling operation of an SST. The method proceeds by authenticating the request. When the request is authenticated, the server performing the method then sends a command to the SST to modify the boot order of the SST.