USB Ignition Key BIOS Authentication for Unauthorized Access Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computer system security methods, such as username and password authentication, are inadequate in preventing unauthorized access, especially in shared environments like enterprises or public spaces, where employees or travelers may inadvertently expose sensitive data.
Innovation Solution
A portable USB memory stick, acting as an 'ignition key,' is used in conjunction with a modified BIOS to lock and unlock a computer system, requiring verification before allowing boot-up and access to peripherals and network connections, thereby controlling access and limiting exposure of sensitive data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If username and password authentication is used, then access control is implemented, but security against unauthorized access in shared environments is inadequate
Solution Approach 1:
A portable USB memory stick serves as an intermediary authentication device between the user and the computer system. The ignition key contains encrypted authentication data that mediates the access control process, providing stronger security than direct username/password entry while maintaining ease of use through simple insertion and removal actions.
Solution Approach 2:
The patent replaces the mechanical/chemical authentication method (username and password typing) with a physical object-based authentication system. The ignition key uses cryptographic algorithms stored in hardware (USB device) rather than relying on user memory and manual input, substituting the authentication mechanism to achieve higher reliability.
2Reliability
If a portable ignition key is required to boot the computer, then security is enhanced, but device complexity increases
Solution Approach 1:
The ignition key system is designed to work with standard USB ports and conventional computer boot processes, making the security enhancement universal across different computer systems without requiring proprietary or specialized hardware. The same USB ignition key can authenticate multiple different computers, reducing overall system complexity.
Solution Approach 2:
The BIOS automatically performs the authentication verification when the ignition key is inserted, without requiring manual intervention or complex configuration by the user. The system self-services the security check during the boot process, integrating seamlessly into existing workflows and minimizing the perceived complexity for end users.
3Reliability
If the ignition key verifies information during boot sequence, then unauthorized access is prevented, but boot time increases
Solution Approach 1:
The authentication verification is performed as a preliminary check during the early boot sequence, before the full operating system loads. By conducting the security verification early in the process, the patent ensures that unauthorized access is prevented before any sensitive operations begin, while the verification itself is designed to be quick to minimize time loss.
Solution Approach 2:
The ignition key authentication process is designed to rapidly verify cryptographic signatures and authentication data during the boot sequence, rushing through the verification process efficiently. The BIOS performs the essential security checks in a streamlined manner, completing the authentication quickly before proceeding with the normal boot process, thus minimizing the time penalty.
Data Source
AI summary
The present invention provides methods and apparatuses for computer system security. According to certain aspects, embodiments of the invention comprise a portable storage device that, when attached, “unlocks” a computer system, such as a desktop, laptop, tablet computer running a conventional operating system such as Windows, thereby creating added security. More particularly, embodiments of the invention use a standard USB memory stick as an “ignition key” to unlock and operate a PC, tablet or other computer system. The ignition key can be required to boot the computer, utilize peripheral devices, ports, network connections, a keyboard and/or a mouse of the computer system, and limit access to certain parts of computer. According to further aspects, in these and other embodiments, the invention is implemented using a modified BIOS that prevents a computer from fully booting into an operational state until verifying the presence of, and information stored on the “ignition key” connected to the computer.