Secure device for bypassing operating system (OS) security
A portable device having a key is interfaced to a host computing device. The host computing device detects the key on the portable device and authenticates a user for using the key. A boot is forced of the host computing device and during the boot a customized image of an Operating System (OS) for the host computing device is loaded into volatile memory of the host computing device and customized security settings are applied to the OS based on a value of the key.
1. A method, comprising:
detecting, on a device, a key located on an interfaced device, wherein detecting further includes detecting the key when the device is in a normal operational state and not associated with any boot process while the device is fully accessible to a user;
forcing a boot of the device based on a presence of the key;
loading, by an Operating System (OS) loader of the device, a customized image of an OS with custom security settings to complete the boot based on the key; and
processing, on the device, the detecting, the forcing, and the loading while the device lacks network connectivity.
2. The method of claim 1 , wherein detecting further includes authenticating the user for performing the boot and using the key on the device.
3. The method of claim 2 , wherein authenticating further includes writing the key to one of:
a non-volatile secure memory location on the device and a secure hard drive storage location on the device.
4. The method of claim 3 , wherein forcing further includes checking for the key in the non-volatile secure memory location or the secure hard drive storage location during the boot and before loading of the OS on the device.
5. The method of claim 4 , wherein loading further includes selecting the customized image of the OS from a plurality of images for the OS based on the key.
6. The method of claim 1 , wherein loading further includes selecting the customized image of the OS as a base image for the OS.
7. The method of claim 6 , wherein loading further includes starting native services within the OS for availability within the OS post boot.
8. The method of claim 1 , wherein loading further includes selecting the customized security settings based on the key.
9. The method of claim 8 , wherein selecting further includes providing the customized security settings as increased access from what is available during a safe boot of the OS.
10. The method of claim 1 further comprising, providing access to an executing instance of the OS on the device post boot with the customized security settings being enforced by the OS.
11. A system, comprising:
a device; and
a portable device;
wherein the device is configured to: (i) detect a key present on the portable device when the portable device is interfaced to the device when the device is in a normal operational state and not associated with any boot process while the device is fully accessible to a user, (ii) authenticat the user for using the key, (iii) force a boot of the device, and (iv) load, by an Operating System (OS) loader of the device, a customized OS with customized security settings into volatile memory of the OS for execution on the device based on a value for the key to complete the boot, wherein (i), (ii), (iii), and (iv) are processed by the device while the device lacks network connectivity.
12. The system of claim 11 , wherein the portable device is a Universal Serial Bus (USB) device, and wherein the device is one of: a Self-Service Terminal (SST), an Automated Teller Machine (ATM), a kiosk, and a Point-of-Sale (POS) terminal.
13. The system of claim 11 , wherein the device is further configured, in (ii), to: write the key to one of: a secure memory location and a secure hard drive storage location for detection during the boot of the device.