Virtual BIOS and vTPM Initialization in Secure SCP Memory
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional computing devices face security vulnerabilities due to physical BIOS and TPM devices, which require separate security subsystems, increasing costs and attack risks during initialization.
Innovation Solution
A System Control Processor (SCP) processing system creates a virtual initialization information storage and a virtual Trusted Platform Module (vTPM) in a secure memory portion, managing resource system initialization and authentication information to provide secure initialization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical BIOS and TPM devices are used for initialization, then initialization functionality is provided, but security vulnerabilities and increased costs occur due to separate security subsystems
Solution Approach 1:
The patent merges the BIOS and TPM functions into a single integrated initialization information storage device. This unified device stores both initialization information and authentication information, eliminating the need for separate physical BIOS and TPM devices while maintaining security functions. The integration reduces the number of security subsystems and associated costs while preserving the reliability of initialization and authentication processes.
2Reliability
If physical BIOS and TPM devices are used for initialization, then initialization functionality is provided, but costs increase due to separate security subsystems
Solution Approach 1:
By combining BIOS and TPM functions into a single initialization information storage device, the patent reduces component count and assembly complexity. This integration lowers manufacturing costs while maintaining the security functions of initialization and authentication, as the unified device performs all necessary security operations that previously required separate subsystems.
3Reliability
If virtual initialization information storage and vTPM are created in secure memory, then security is enhanced and costs are reduced, but system complexity in memory management increases
Solution Approach 1:
The patent creates virtual copies of initialization information and authentication information within secure memory regions. The virtual initialization information storage and vTPM are software-based representations that replicate the functionality of physical devices while providing enhanced security through virtualization. This copying approach maintains system functionality while improving security posture.
Solution Approach 2:
The secure memory system serves multiple functions: it stores virtual initialization information, provides authentication through vTPM, and enables both BIOS and TPM operations through a unified memory-based platform. This multi-functionality reduces the need for separate dedicated hardware subsystems while maintaining all necessary security and initialization capabilities.
Data Source
AI summary
An initialization information storage virtualization system includes a resource system that is coupled to a resource management system and that includes a processing system coupled to a System Control Processor (SCP) device. The SCP device creates a virtual initialization information storage and a virtual Trusted Platform Module (vTPM) in its secure memory subsystem. The SCP device then receives resource system initialization information and resource system initialization authentication information for the resource system from the resource management system, populates the virtual initialization information storage with the resource system initialization information, and populates the vTPM with the resource system initialization authentication information. When the SCP device receives an initialization information request from the processing system, the SCP device provides the resource system initialization information and the resource system initialization authentication information to the processing system.