USB Interface Security Mode via Class Code Whitelist
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile device management (MDM) policies often restrict the use of USB interfaces in electronic devices, preventing the use of accessories such as docking stations and HID devices, and do not allow flexible control over which accessories can connect, leading to limitations in device functionality.
Innovation Solution
An electronic device with a USB interface and a processor that can enter a security mode to receive USB class codes from connected devices, determine if they are on a white list of allowable devices, and control communication connections accordingly, allowing flexible adjustment of accessory usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If MDM policy is applied to restrict USB interface usage for security, then security is improved, but device functionality and accessory usability deteriorate
Solution Approach 1:
The patent applies different security policies to different USB device types by maintaining a whitelist of approved USB class codes. Each device type (storage, audio, video, HID) is evaluated independently against the whitelist, allowing selective authorization. This enables security restrictions to be applied locally to specific device categories rather than globally to all USB interfaces, resolving the contradiction between security and accessory usability.
2Reliability
If MDM policy blocks all USB accessories for security, then security is improved, but device functionality deteriorates
Solution Approach 1:
The system performs preliminary action by pre-configuring a whitelist of approved USB class codes before runtime. During USB device connection, the system checks the device's class code against this pre-established whitelist and makes authorization decisions based on the match. This preliminary preparation enables rapid security verification without blocking legitimate accessories, thus maintaining device functionality while ensuring security.
3Reliability
If USB interface is restricted by security policy, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The USB device authorization system operates autonomously by automatically checking device class codes against the whitelist without requiring user intervention. When a USB device is connected, the system self-verify the device type, consults the whitelist, and automatically grants or denies access. This self-service mechanism eliminates the need for manual security policy configuration by users, maintaining ease of operation while enforcing security.
Data Source
AI summary
An electronic device according to an embodiment of the present invention comprises: a universal serial bus (USB) interface; a processor electrically connected to the USB interface; and a memory electrically connected to the processor, wherein the memory may store instructions configured to, when executed, cause the processor to: enter a security mode; in the security mode, receive, from an external device connected to the electronic device via the USB interface, a USB class code corresponding to the external device; determine whether the USB class code is included in a white list of connectable devices allowed to be connected to the electronic device in the security mode; and control a communication connection between the external device and the electronic device according to whether the USB class code is included in the white list. Other embodiments are also possible.