Systems and methods for detecting hardware tampering using airflow sensors
In one embodiment, a method includes receiving airflow data from an airflow sensor installed inside of a hardware device and determining an airflow value from the airflow data. The method also includes determining that the airflow value exceeds a predetermined threshold. The method further includes determining a potential tampering event associated with the hardware device.
1 . A network element, comprising:
one or more processors; and
one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions that, when executed by the one or more processors, cause the network element to perform operations comprising:
receiving airflow data from an airflow sensor installed inside of a hardware device;
determining an airflow value from the airflow data;
determining that the airflow value exceeds a predetermined threshold;
determining a potential tampering event associated with the hardware device;
receiving test airflow data when the hardware device is powered on and when the hardware device is powered off;
analyzing the test airflow data to determine airflow patterns when the hardware device is powered on and when the hardware device is powered off; and
determining the predetermined threshold based on the airflow patterns.
2 . The network element of claim 1 , wherein:
the airflow value is a value above zero; and
the predetermined threshold is a value of zero.
3 . The network element of claim 1 , wherein determining the potential tampering event of the hardware device occurs while the hardware device is powered off, the operations further comprising:
storing information associated with the potential tampering event on a storage unit; and
communicating a notification to a cloud controller when the hardware device is powered on, the notification comprising the information associated with the potential tampering event.
4 . The network element of claim 1 , wherein:
the airflow sensor installed inside of the hardware device is enclosed by a shield; and
the shield is integrated into a cover of the hardware device.
5 . The network element of claim 1 , wherein:
the airflow sensor communicates the airflow data to a microcontroller unit (MCU) located inside of the hardware device;
the MCU communicates information associated with the potential tampering event to a storage unit located inside of the hardware device; and
the MCU, the airflow sensor, and the storage unit are powered by a battery located inside of the hardware device.
6 . The network element of claim 1 , the operations further comprising:
determining, at a current time of day, a current timestamp associated with the hardware device, wherein the current timestamp is stored in a storage unit coupled to the airflow sensor;
comparing the current timestamp to the current time of day; and
determining, in response to comparing the current timestamp to the current time of day, whether a potential battery tampering event associated with a battery coupled to the airflow sensor has occurred.
7 . A method, comprising:
receiving airflow data from an airflow sensor installed inside of a hardware device;
determining an airflow value from the airflow data;
determining that the airflow value exceeds a predetermined threshold;
determining a potential tampering event associated with the hardware device;
receiving test airflow data when the hardware device is powered on and when the hardware device is powered off;
analyzing the test airflow data to determine airflow patterns when the hardware device is powered on and when the hardware device is powered off; and
determining the predetermined threshold based on the airflow patterns.
8 . The method of claim 7 , wherein:
the airflow value is a value above zero; and
the predetermined threshold is a value of zero.
9 . The method of claim 7 , wherein determining the potential tampering event of the hardware device occurs while the hardware device is powered off, further comprising:
storing information associated with the potential tampering event on a storage unit; and
communicating a notification to a cloud controller when the hardware device is powered on, the notification comprising the information associated with the potential tampering event.
10 . The method of claim 7 , wherein:
the airflow sensor installed inside of the hardware device is enclosed by a shield; and
the shield is integrated into a cover of the hardware device.
11 . The method of claim 7 , wherein:
the airflow sensor communicates the airflow data to a microcontroller unit (MCU) located inside of the hardware device;
the MCU communicates information associated with the potential tampering event to a storage unit located inside of the hardware device; and
the MCU, the airflow sensor, and the storage unit are powered by a battery located inside of the hardware device.
12 . The method of claim 7 , further comprising:
determining, at a current time of day, a current timestamp associated with the hardware device, wherein the current timestamp is stored in a storage unit coupled to the airflow sensor;
comparing the current timestamp to the current time of day; and
determining, in response to comparing the current timestamp to the current time of day, whether a potential battery tampering event associated with a battery coupled to the airflow sensor has occurred.
13 . One or more computer-readable non-transitory storage media embodying instructions that, when executed by a processor, cause the processor to perform operations comprising:
receiving airflow data from an airflow sensor installed inside of a hardware device;
determining an airflow value from the airflow data;
determining that the airflow value exceeds a predetermined threshold;
determining a potential tampering event associated with the hardware device;
receiving test airflow data when the hardware device is powered on and when the hardware device is powered off;
analyzing the test airflow data to determine airflow patterns when the hardware device is powered on and when the hardware device is powered off; and
determining the predetermined threshold based on the airflow patterns.
14 . The one or more computer-readable non-transitory storage media of claim 13 , wherein:
the airflow value is a value above zero; and
the predetermined threshold is a value of zero.
15 . The one or more computer-readable non-transitory storage media of claim 13 , wherein determining the potential tampering event of the hardware device occurs while the hardware device is powered off, the operations further comprising:
storing information associated with the potential tampering event on a storage unit; and
communicating a notification to a cloud controller when the hardware device is powered on, the notification comprising the information associated with the potential tampering event.
16 . The one or more computer-readable non-transitory storage media of claim 13 , wherein:
the airflow sensor installed inside of the hardware device is enclosed by a shield; and
the shield is integrated into a cover of the hardware device.
17 . The one or more computer-readable non-transitory storage media of claim 13 , wherein:
the airflow sensor communicates the airflow data to a microcontroller unit (MCU) located inside of the hardware device;
the MCU communicates information associated with the potential tampering event to a storage unit located inside of the hardware device; and
the MCU, the airflow sensor, and the storage unit are powered by a battery located inside of the hardware device.