Technologies for secure input/output device activation
AssigneeIntel Corporation
InventorsTamir Damian Munafo, Rafi Davidovich
Life of this patent
Estimating the term…
Abstract
Technologies for secure input/output device activation include a compute device to identify an attempt to activate an input/output device of the compute device, notify a controller of the compute device of the attempt to activate the input/output device via a communication channel that is out-of-band relative to an operating system of the compute device, determine whether to authorize activation of the input/output device based on a security policy, and allow the input/output device to resume activation in response to a determination that the security policy authorizes the activation. The security policy indicates whether one or more applications are authorized to access the input/output device.
Claims25
A compute device for secure input/output device activation, the compute device comprising:
- a controller;
- an input/output device;
- a monitoring module to identify an attempt to activate the input/output device;
- a notification module to notify the controller of the attempt to activate the input/output device via a communication channel that is out-of-band relative to an operating system of the compute device;
- and
- a policy management module to (i) determine whether to authorize activation of the input/output device based on a security policy, wherein the security policy indicates whether one or more applications are authorized to access the input/output device, and (ii) allow the input/output device to resume activation in response to a determination that the security policy authorizes the activation.
One or more machine-readable storage media comprising a plurality of instructions stored thereon that, in response to execution by a compute device, causes the compute device to:
- identify an attempt to activate the input/output device;
- notify a controller of the compute device of the attempt to activate the input/output device via a communication channel that is out-of-band relative to an operating system of the compute device;
- determine whether to authorize activation of the input/output device based on a security policy, wherein the security policy indicates whether one or more applications are authorized to access the input/output device;
- and
- allow the input/output device to resume activation in response to a determination that the security policy authorizes the activation.
A method for secure activation of an input/output device of a compute device, the method comprising:
- identifying, by the compute device, an attempt to activate the input/output device;
- notifying, by the compute device, a controller of the compute device of the attempt to activate the input/output device via a communication channel that is out-of-band relative to an operating system of the compute device;
- determining, by the controller, whether to authorize activation of the input/output device based on a security policy, wherein the security policy indicates whether one or more applications are authorized to access the input/output device;
- and
- allowing, by the compute device, the input/output device to resume activation in response to a determination that the security policy authorizes the activation.
Dependencies are inferred from the claim text.