Self-service terminal secure boot using hash authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Self-Service Terminals, such as ATMs, face significant security challenges due to the inability to remotely change BIOS passwords, making them vulnerable to rogue boot attacks that can lead to unauthorized access and cash depletion, especially since network access is often unavailable for servicing engineers.
Innovation Solution
A method for secure device boot is implemented using a portable non-transitory computer-readable storage medium that authenticates boot data by comparing a hash value from the medium's header with a generated hash value, ensuring only authenticated boot data is used to boot the device, and optionally encrypting the hash value with the ATM's private key for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If BIOS passwords are locked down to prevent unauthorized access, then security is improved, but the ability to remotely change passwords is lost and manual visits are required
Solution Approach 1:
A secure boot image is pre-configured with authentication mechanisms (hash comparison) before being deployed to the ATM. The boot image contains a hash value that is compared against a generated hash during boot, establishing security in advance rather than requiring password changes later.
Solution Approach 2:
The patent replaces the mechanical/password-based BIOS security system with a cryptographic hash-based authentication system. Instead of relying on BIOS passwords that require manual changes, the system uses hash value comparison to authenticate boot images, enabling remote security management without physical access.
2Reliability
If BIOS passwords are manually changed at each ATM, then security is maintained, but service time and operational complexity increase significantly
Solution Approach 1:
The ATM performs self-authentication during the boot process by automatically comparing the hash value embedded in the boot image against a generated hash. This eliminates the need for service personnel to manually visit each ATM to change passwords, as the system verifies its own boot integrity autonomously.
Solution Approach 2:
Authentication credentials (hash values) are pre-configured in the boot image before deployment. This preliminary setup allows the ATM to perform self-verification without requiring subsequent manual intervention for password changes or security updates.
3Reliability
If network access is restricted for security reasons, then ATM security is improved, but the ability to remotely service and update ATMs is lost
Solution Approach 1:
The patent replaces network-dependent remote servicing with a cryptographic authentication system that works offline. The hash-based verification mechanism allows security validation and boot authentication without requiring network connectivity, enabling secure remote deployment of boot images while maintaining security isolation.
Solution Approach 2:
The hash value acts as an intermediary that bridges security verification and remote deployment without requiring direct network access to the ATM. The hash can be generated and verified locally, allowing secure boot validation while maintaining network restrictions.
Data Source
AI summary
A Basic Input/Output System (BIOS) of a device is modified to: obtain a first value from a medium interfaced to the device, produce a second value from boot data resident on the medium, compare the first value to the second value, and boot from the boot data of the medium when the first value is equal to the second value.