Tracking Device State Transitions via Pre-Boot Controller
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Embedded tracking devices in portable computing devices lack a physical button for activation and deactivation, making secure deactivation challenging, especially against malicious remote deactivation, as they rely on operating system controls which can be overridden.
Innovation Solution
Implementing a controller that manages state transitions of the tracking device via a data pin, enabling activation and deactivation in the operating system and pre-boot environment respectively, with secure deactivation enforced in the pre-boot environment to prevent unwanted deactivation, using signal assertions over the data pin for various operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If the tracking device is embedded in the computing device without a physical button, then the device integration is improved, but the security against malicious remote deactivation deteriorates
Solution Approach 1:
The patent segments the control environment into two distinct parts: the operating system environment and the pre-boot environment. By separating deactivation control to the pre-boot environment, the system maintains device integration while preventing malicious remote deactivation attempts that occur during OS operation.
Solution Approach 2:
The patent implements preliminary action by establishing secure deactivation control in the pre-boot environment before the operating system loads. This preliminary security measure ensures that even if malicious code is introduced during OS operation, the tracking device cannot be deactivated remotely without physical access to the device during boot.
2Ease of operation
If the tracking device relies on operating system controls for activation and deactivation, then the ease of operation is improved, but the security against unwanted deactivation deteriorates
Solution Approach 1:
The patent introduces the pre-boot environment as an intermediary layer between the user and the tracking device control. This intermediary prevents direct OS-level deactivation commands from reaching the tracking device, requiring physical presence during boot as a mediator to verify legitimate deactivation intent.
3Ease of operation
If deactivation is enabled in the operating system, then the ease of operation is improved, but the vulnerability to remote deactivation attacks increases
Solution Approach 1:
The patent applies preliminary anti-action by blocking remote deactivation commands at the pre-boot level before they can affect the tracking device. This preemptive measure counteracts potential malicious actions by establishing security controls before the operating system and any potential malicious software can operate.
Data Source
AI summary
An example computing device includes a tracking device, an interface, a processor, and a controller. The interface including a power pin, a data pin, and a clock pin, where the interface is to couple the tracking device to the computing device via the power pin and the data pin, and the clock pin is disconnected from the tracking device. The controller is communicatively coupled to the processor and the interface, the controller is to control an operation of the tracking device via the data pin.