FIRMWARE SENSOR LAYER

• US 20160216974A1
• Filed: 06/24/2014
• Published: 07/28/2016
• Est. Priority Date: 06/24/2014
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation, Jiewen Yao, Ulf R. Hanebutte, Vincet J. Zimmer
• Inventors: HANEBUTTE, Ulf R., YAO, Jiewen, ZIMMER, Vincent J.
• Granted Patent: US 10,169,047 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 9/4401 Bootstrapping security arrangements therefor G06F21/57

Abstract

Computing devices, computer-readable storage media, and methods associated with providing an operating system (OS)-absent firmware sensor layer to support a boot process are disclosed herein. In embodiments, a computing device may include a processor and firmware to be operated on the processor. The firmware may include one or more modules and a sensor layer. The sensor layer may be configured to receive, in the OS-absent environment, sensor data produced by a plurality of sensors. The sensor layer may be further configured to selectively provide the sensor data to the one or more modules via an interface of the sensor layer that abstracts the plurality of sensors. Other embodiments may be described and/or claimed.

Claims

1. A computing device for computing, comprising:

a processor; and

firmware to be operated by the processor that includes one or more modules and a sensor layer to;

receive, in an operating system (OS)-absent firmware environment, sensor data produced by a plurality of sensors, wherein the plurality of sensors is of the computing device or operatively coupled with the computing device; and

selectively provide the sensor data to the one or more modules via an interface of the sensor layer that abstracts the plurality of sensors.

2. The computing device of claim 1, further comprising an operating system to be instantiated on the computing device, wherein the firmware is independent of the operating system.

3. The computing device of claim 1, wherein the one or more modules includes an environmental factor boot module to:

receive a portion of sensor data from the sensor layer through the interface of the sensor layer; and

apply one or more policies based at least in part on the portion of sensor data, wherein the portion of sensor data is associated with one or more environmental factors defined by the one or more policies

4. The computing device of claim 3, wherein to apply one or more policies is to terminate a boot process, of the computing device, when a determination is made that the one or more policies are violated, based at least in part on the portion of sensor data associated with the one or more environmental factors.

5. The computing device of claim 3, wherein to apply one or more policies is to selectively instantiate one or more drivers based at least in part on the portion of sensor data associated with the environmental factors.

6. The computing device of claim 3, wherein the environmental factors include one or more of temperature, moisture, humidity, altitude, sound pressure level, audio frequency, vibration, velocity, acceleration, or lighting.

7. The computing device of claim 1, wherein the computing device is independent of an operating system and the OS-absent firmware environment is part of a boot process to result in the computing device achieving an OS-absent operational state.

8. The computing device of claim 1, wherein one or more sensors of the plurality of sensors are disposed on the computing device, and operatively coupled with the processor via a bus interface.

9. The computing device of claim 1, wherein one or more sensors of the plurality of sensors are communicatively coupled with the computing device via a human interface device, HID, driver.

10. The computing device of any one of claim 1, wherein the computing device is an internet of things edge device comprising the plurality of sensors.

11. The computing device of claim 1, wherein the computing device is selected from a group consisting of a laptop, a netbook, a notebook, an ultrabook, a smartphone, a tablet, a personal digital assistant, an ultra-mobile personal computer, a mobile phone, a desktop computer, a server, or a set-top box.

12. A method for computing, comprising:

instantiating, by an operating system(OS)-absent firmware environment of a computing device, a sensor layer having an interface that provides an abstraction of a plurality of sensors;

receiving, by the sensor layer in the OS-absent firmware environment, sensor data produced by a plurality of sensors; and

selectively providing, by the sensor layer, the sensor data to one or more firmware modules via the interface of the sensor layer.

13. The method of claim 12, wherein the one or more firmware modules include an environmental factor boot module and further comprising:

receiving, by the environmental factor boot module, a portion of sensor data from the sensor layer through the interface of the sensor layer; and

applying, by the environmental factor boot module, one or more policies based at least in part on the portion of sensor data, wherein the portion of sensor data is associated with one or more environmental factors defined by the one or more policies

14. The method of claim 12, wherein the one or more firmware modules include a sensor calibration module and further comprising:

validating, by the sensor calibration module, a sensor of the plurality of sensors based at least in part on the sensor data produced by the sensor;

or

calibrating, by the sensor calibration module, a sensor of the plurality of sensors based at least in part on the sensor data produced by the sensor.

15. The method of claim 14, wherein validating a sensor of the plurality of sensors further comprises verifying to an operating system of the computing device the validity of the sensor data produced by the sensor.

16. The method of claim 14, wherein calibrating the sensor of the plurality of sensors further comprises:

interacting with the sensor layer to cause the sensor data produced by the sensor to match a reference value;

or

manipulating the sensor data to cause the sensor data to match the reference value.

17. The method of claim 12, further comprising wherein the OS-absent firmware environment is a unified extensible firmware interface (UEFI) environment of a boot process.

18. The method of claim 17, wherein the OS-absent firmware environment is a driver execution environment (DXE) of the UEFI environment.

19. One or more computer-readable media having a plurality of instructions stored thereon, the plurality of instructions, when executed by a processor of a computing device, provide the computing device with a firmware environment that includes one or more modules and a sensor layer, the sensor layer to:

receive, in an operating system (OS)-absent firmware environment, sensor data produced by a plurality of sensors, wherein the plurality of sensors is of the computing device or operatively coupled with the computing device; and

selectively provide the sensor data to the one or more modules via an interface of the sensor layer that abstracts the plurality of sensors.

20. The computer-readable media of claim 19, wherein the one or more modules includes a data security module to:

receive data to be encrypted;

generate an encryption key based at least in part on sensor local information received from the sensor layer;

encrypt the data utilizing the encryption key; and

persist the sensor local information in a memory of the computing device as encryption information.

21. The computer-readable media of claim 20, wherein the data security module is to further:

receive a request to decrypt the data;

receive additional sensor local information from the sensor layer;

retrieve the encryption information;

generate a decryption key based at least in part on the additional sensor local information when the additional sensor local information matches the encryption information; and

decrypt the data utilizing the decryption key.

22. The computer-readable media of claim 20, wherein the sensor local information includes one or more of sensor readings, sensor state, or sensor calibration.

26. The computer-readable media of claim 19, wherein the one or more modules includes an environmental factor boot module to:

receive a portion of sensor data from the sensor layer through the interface of the sensor layer; and

apply one or more policies based at least in part on the portion of sensor data, wherein the portion of sensor data is associated with one or more environmental factors defined by the one or more policies

27. The computer-readable media of claim 26, wherein to apply one or more policies is to terminate a boot process, of the computing device, when a determination is made that the one or more policies are violated, based at least in part on the portion of sensor data associated with the one or more environmental factors.

28. The computer-readable media of claim 26, wherein to apply one or more policies is to selectively instantiate one or more drivers based at least in part on the portion of sensor data associated with the environmental factors.

23. (canceled)

24. (canceled)

25. (canceled)