UEFI Firmware Operation History for Unauthorized Use Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing apparatuses cannot detect unauthorized use or determine the cause of malfunctions that occur when the operating system is shut down to when it is started, as operation history information is not generated during this period.
Innovation Solution
An information processing apparatus with a UEFI Chip that creates and stores operation history information in nonvolatile RAM during idle times, including events like power supply switching, hardware operations, and system startups, allowing for detection of unauthorized use and malfunction analysis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If operation history information is not generated during OS shutdown period, then device complexity is reduced, but unauthorized use detection capability deteriorates
Solution Approach 1:
The patent divides the system into two independent components: a simple OS that shuts down completely, and a separate firmware layer (UEFI/BIOS) that independently generates operation history information. This segmentation allows the OS to remain simple while the firmware handles security monitoring, resolving the contradiction between device complexity and detection capability.
Solution Approach 2:
The firmware acts as an intermediary between the OS and the detection system. It generates operation history information during the OS shutdown period without requiring the OS to be active, enabling unauthorized use detection while keeping the OS simple and the shutdown period truly idle.
2Reliability
If operation history is stored during idle time, then unauthorized use detection is improved, but loss of information is reduced
Solution Approach 1:
The firmware performs preliminary action by generating and storing operation history information during the idle time between OS shutdown and startup. This ensures that any unauthorized operations occurring during this previously unmonitored period are captured, eliminating information loss without affecting OS performance.
3Measurement precision
If nonvolatile storage is used for operation history, then measurement precision is improved, but use of energy is increased
Solution Approach 1:
The firmware utilizes the system's existing power infrastructure and hardware resources (nonvolatile storage, CPU) to generate and store operation history information. By self-service during the idle period when no other operations are occurring, it achieves precise monitoring without requiring additional dedicated power sources or increasing overall energy consumption.
Data Source
AI summary
The present disclosure provides an information processing apparatus effective in detecting an unauthorized use or misuse of the information processing apparatus from when the OS is shut down to when the OS is started. An information processing apparatus controlled by an operating system comprises: an operation history generating section which creates an operation history of the information processing apparatus after the operating system is shut down before the operating system is started; and a storage unit which stores information including the created operation history.