Method and system for improved computer security during ROM Scan
AssigneeInternational Business Machines Corporation
InventorsRichard Alan Dayan, Robert Duane Johnson
Life of this patent
Estimating the term…
Abstract
A system and method of improving security during power-on-self-test (POST), particularly the ROM scan portion identifying ROM adapters, while selectively allowing user input. While a user input during ROM scan may be normally locked out to prevent the user from making changes to the configuration of the system, when the ROM scan during POST detects a ROM adapter which uses an input from the user, the system can override the lockout and allows for a user input. An optional control, such as a password or other personal identifier, can provide security, allowing the user input only when the user is authorized to provide the input (in response to an appropriate password or personal identifier such as a biometric identifier).
Claims8
A computer system having a processor, a memory address space and a stored program including a power-on-self-test in the memory address space comprising:
- an input device operatively connected to the processor;
- an adapter ROM located in certain blocks of the memory address space;
- a control associated with the power-on-self-test for preventing an input from the input device during the power-on-self-test to prevent user inputs from entering the memory;
- a security signature in said adapter ROM for identifying said adapter selectively accepts user input;
- a ROM security routine for determining if user input is required and further including a test for user authorization;
- and
- an indicator stored in the memory for permitting a user input during at least a portion of the power-on-self-test, with the processor responding to the indicator and allowing a user input at the input device during power-on-self-test by at least temporarily overriding the control preventing a user input during the power-on-self-test if the user successfully satisfies the authorization test.
A method of operating a computer system with a memory address space and having an input device connected to the computer system, the method including the steps of:
- initiating a power-on-self-test when the computer system is turned on;
- initially locking out the input device from affecting the memory during the power-on-self-test;
- performing a ROM Scan in a specified portion of the memory address space for locating a ROM Scan Header;
- sensing a security signature in a ROM adapter header stored in said memory that a user input is desirable during the power-on-self-test;
- overriding the lockout of the input device after an authorization test;
- and
- allowing authorized user input during at least a portion of the power-on-self-test.
Dependencies are inferred from the claim text.