Apparatus and method for enabling fingerprint-based secure access to a user-authenticated operational state of an information handling system
A computer-implemented method provides power to a fingerprint reader while the remaining components of the information handling system are held in a low power, non-operating state. Placement of a finger across the fingerprint reader is detected with the information handling system in the non-operating state. A fingerprint is read and a corresponding fingerprint image is generated. The fingerprint image is buffered and an embedded controller is triggered to start an authentication device having a secure storage. The fingerprint image is compared to a fingerprint template contained in the secure storage. In response to the fingerprint image matching the fingerprint template, the authentication device signals the embedded controller to activate a user authenticated wake-up cycle to provide power to the other components of the information handling system such that the information handling system activates an operating system and enters a fully powered and user authenticated, operational state.
1. A computer implemented method to activate an information handling system having a fingerprint reader, an embedded controller, and a secure storage for enabling fingerprint-based secure access to a user-authenticated operational state of the information handling system, the method comprising:
providing power to the fingerprint reader while remaining components of the information handling system are held in a low power, non-operating state in which the information handling system is not functional;
in response to detecting placement of a finger across a surface of the fingerprint reader while the information handling system is in the low power, non-operating state:
reading a fingerprint from the finger and generating a corresponding fingerprint image;
buffering the fingerprint image;
triggering an embedded controller to start operation of an authentication device having secure storage, wherein triggering the embedded controller to activate the user authenticated wake-up cycle further comprises:
triggering a basic input output system to load a power on authentication application and launch the operating system in response to the embedded controller activating a user authenticated wake-up cycle rather than a regular wake up cycle;
transmitting a payload stored in the secure storage from the authentication device to the operating system, wherein the payload is required for full operation of and accessibility to the operating system; and
triggering an operating system environment to be fully accessible on the information handling system in response to receipt of the payload;
comparing the fingerprint image to a previously-established fingerprint template contained in the secure storage; and
in response to the fingerprint image matching the fingerprint template, the authentication device signaling the embedded controller to activate a user authenticated wake-up cycle to provide power to processing and other components of the information handling system such that the information handling system activates an operating system and enters a fully powered-on and user authenticated, operational state.
2. The method of claim 1 , further comprising:
in response to the fingerprint image matching the fingerprint template, the authentication device establishing a universal serial bus communication channel to the fingerprint reader.
3. The method of claim 1 , further comprising:
in response to a successful match of the fingerprint image to the fingerprint template, illuminating a light emitting diode to indicate the successful match.
4. The method of claim 1 , further comprising:
in response to the fingerprint image not matching the fingerprint template, triggering the embedded controller to return the computer system to the low power, non-operating state that provides power only to the fingerprint reader; and
discontinuing communication between the fingerprint reader and the authentication device.
5. The method of claim 4 , further comprising:
illuminating a light emitting diode to indicate an unsuccessful match of the fingerprint image to the fingerprint template.
6. The method of claim 1 , further comprising:
while the system is in the operational state, enabling creation of a fingerprint template for use as an authentication mechanism by:
prompting for placement of a finger scan across the fingerprint reader;
scanning a fingerprint from the finger placed across the fingerprint reader;
generating a fingerprint image from the fingerprint;
generating a fingerprint template corresponding to the fingerprint image using the authentication device; and
storing the fingerprint template to the secure storage.
7. The method of claim 1 , wherein detecting placement of the finger across the surface of the fingerprint reader further comprises sensing a swipe of the finger across the fingerprint reader.
8. The method of claim 1 , wherein the low power, non-operating state is a hibernation state in which the embedded controller, the authentication device, the processors and the remaining components, other than the fingerprint reader, of the information handling system are not functional.
9. A computer implemented method to activate an information handling system having a fingerprint reader, an embedded controller, and a secure storage for enabling fingerprint-based secure access to a user-authenticated operational state of the information handling system, the method comprising:
providing power to the fingerprint reader while remaining components of the information handling system are held in a low power, non-operating state in which the information handling system is not functional;
in response to detecting placement of a finger across a surface of the fingerprint reader while the information handling system is in the low power, non-operating state:
reading a fingerprint from the finger and generating a corresponding fingerprint image;
buffering the fingerprint image;
triggering an embedded controller to start operation of an authentication device having secure storage;
comparing the fingerprint image to a previously-established fingerprint template contained in the secure storage; and
in response to the fingerprint image matching the fingerprint template, the authentication device signaling the embedded controller to activate a user authenticated wake-up cycle to provide power to processing and other components of the information handling system such that the information handling system activates an operating system and enters a fully powered-on and user authenticated, operational state;
wherein activating the user authenticated wake-up cycle further comprises:
in response to the fingerprint image matching the fingerprint template, the secure storage signaling the embedded controller to activate and to by-pass a power on authentication application;
triggering a basic input output system to load;
detecting bypassing of the power on authentication application; and
transmitting a key stored in the secure storage from the authentication device to the basic input output system, wherein the key is required for continued booting of the information handling system without requiring further user authentication.
10. An information handling system (IHS) comprising:
a processor;
a memory coupled to the processor via a system interconnect;
an authentication sub-system communicatively coupled to the system interconnect, the authentication sub-system including a fingerprint reader, an embedded controller, and a secure storage, the authentication sub-system having firmware executing thereon to enable fingerprint-based secure access to a user-authenticated operational state of the information handling system, wherein the firmware configures the authentication sub-system to:
provide power to the fingerprint reader while remaining components of the information handling system are held in a low power, non-operating state in which the information handling system is not functional;
in response to detecting placement of a finger across a surface of the fingerprint reader while the information handling system is in the low power, non-operating state:
read a fingerprint from the finger and generating a corresponding fingerprint image;
buffer the fingerprint image;
trigger an embedded controller to start operation of an authentication device having a secure storage, wherein triggering the embedded controller to activate the user authenticated wake-up cycle comprises the firmware further configuring the authentication sub-system to:
trigger a basic input output system to load a power on authentication application and launch the operating system in response to the embedded discontinue communication between the fingerprint reader and the authentication device.
11. The information handling system of claim 10 , wherein the firmware further configures the authentication sub-system to:
in response to the fingerprint image matching the fingerprint template, the authentication device establishing a universal serial bus communication channel to the fingerprint reader.
12. The information handling system of claim 10 , wherein the firmware further configures the authentication sub-system to:
in response to a successful match of the fingerprint image to the fingerprint template, illuminate a light emitting diode to indicate the successful match.
13. The information handling system of claim 10 , wherein the firmware further configures the authentication sub-system to:
in response to the fingerprint image not matching the fingerprint template, trigger the embedded controller to return the computer system to the low power, non-operating state that provides power to only the fingerprint reader; and
read a fingerprint from the finger and generating a corresponding fingerprint image;
buffer the fingerprint image;
trigger an embedded controller to start operation of an authentication device having a secure storage;
compare the fingerprint image to a previously-established fingerprint template contained in the secure storage; and
in response to the fingerprint image matching the fingerprint template, the authentication device signaling the embedded controller to activate a user authenticated wake-up cycle to provide power to processing and other components of the information handling system such that the information handling system activates an operating system and enters a fully powered-on and user authenticated, operational state
wherein activating the user authenticated wake-up cycle comprises the firmware further configuring the authentication sub-system to:
in response to the fingerprint image matching the fingerprint template, the secure storage signals the embedded controller to activate and to by-pass a power on authentication application;
trigger a basic input output system to load;
detect bypassing of the power on authentication application; and
transmit a key stored in the secure storage from the authentication device to the basic input output system, wherein the key is required for continued booting of the information handling system without requiring further user authentication.
14. The information handling system of claim 13 , wherein the firmware further configures the authentication sub-system to:
illuminate a light emitting diode to indicate an unsuccessful match of the fingerprint image to the fingerprint template.
15. The information handling system of claim 10 , wherein the firmware further configures the authentication sub-system to:
while the system is in the operational state, enable creation of a fingerprint template for use as an authentication mechanism by:
prompting for placement of a finger scan across the fingerprint reader;
scanning a fingerprint from the finger placed across the fingerprint reader;
generating a fingerprint image from the fingerprint;
generating a fingerprint template corresponding to the fingerprint image using the authentication device; and
storing the fingerprint template to the secure storage.
16. The information handling system of claim 10 , wherein the fingerprint reader is positioned on an external surface of the information handling system.
17. The information handling system of claim 10 , wherein detecting placement of the finger across the surface of the fingerprint reader further comprises sensing a swipe of the finger across the fingerprint reader.
18. The information handling system of claim 10 , wherein the low power, non-operating state is a hibernation state in which the embedded controller, the authentication device, the processors and the remaining components, other than the fingerprint reader, of the information handling system are not functional.
19. An information handling system (IHS) comprising:
a processor;
a memory coupled to the processor via a system interconnect;
an authentication sub-system communicatively coupled to the system interconnect, the authentication sub-system including a fingerprint reader, an embedded controller, and a secure storage, the authentication sub-system having firmware executing thereon to enable fingerprint-based secure access to a user-authenticated operational state of the information handling system, wherein the firmware configures the authentication sub-system to:
provide power to the fingerprint reader while remaining components of the information handling system are held in a low power, non-operating state in which the information handling system is not functional;
in response to detecting placement of a finger across a surface of the fingerprint reader while the information handling system is in the low power, non-operating state:
controller activating a user authenticated wake-up cycle rather than a regular wake up cycle;
transmit a payload stored in the secure storage from the authentication device to the operating system, wherein the payload is required for full operation of and accessibility to the operating system; and
trigger an operating system environment to be fully accessible on the information handling system in response to receipt of the payload;
compare the fingerprint image to a previously-established fingerprint template contained in the secure storage; and
in response to the fingerprint image matching the fingerprint template, the authentication device signaling the embedded controller to activate a user authenticated wake-up cycle to provide power to processing and other components of the information handling system such that the information handling system activates an operating system and enters a fully powered-on and user authenticated, operational state.