Privileged Firmware Mode Protection
AssigneeSamsung Electronics Co., Ltd.
InventorsBaibhav Singh, Stephen Elliot McLaughlin, Hayawardh Vijayakumar
Life of this patent
Estimating the term…
Abstract
In one embodiment, a method includes accessing a request from a lower privileged process executing on a computing device to access a privileged firmware mode of the computing device and accessing a set of access policies for detecting whether the request is an unauthorized access to the privileged firmware mode. The method further includes determining, based on at least part of a content of the request and on the set of access policies, whether the request to access a privileged firmware mode is authorized; and denying or permitting, based on the determination, access by the lower privileged process to the privileged firmware mode.
Claims20
A method comprising:
- accessing a request from a lower privileged process executing on a computing device to access a privileged firmware mode of the computing device;
- accessing a set of access policies for detecting whether the request is an unauthorized access to the privileged firmware mode;
- determining, based on at least part of a content of the request and on the set of access policies, whether the request to access a privileged firmware mode is authorized;
- and
- denying or permitting, based on the determination, access by the lower privileged process to the privileged firmware mode.
One or more non-transitory computer readable storage media embodying instructions and coupled to one or more processors that are operable to execute the instructions to:
- access a request from a lower privileged process executing on a computing device to access a privileged firmware mode of the computing device;
- access a set of access policies for detecting whether the request is an unauthorized access to the privileged firmware mode;
- determine, based on at least part of a content of the request and on the set of access policies, whether the request to access a privileged firmware mode is authorized;
- and
- deny or permit, based on the determination, access by the lower privileged process to the privileged firmware mode.
A system comprising one or more processors and a non-transitory computer readable storage media embodying instructions coupled to the one or more processors, the one or more processors operable to execute the instructions to:
- access a request from a lower privileged process executing on a computing device to access a privileged firmware mode of the computing device;
- access a set of access policies for detecting whether the request is an unauthorized access to the privileged firmware mode;
- determine, based on at least part of a content of the request and on the set of access policies, whether the request to access a privileged firmware mode is authorized;
- and
- deny or permit, based on the determination, access by the lower privileged process to the privileged firmware mode.
Dependencies are inferred from the claim text.