System and method of detecting tampering of an information handling system
In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may: provide a first chip select signal to a chip of an information handling system (IHS), which stores at least a portion of IHS firmware, while at least one processor of the IHS is executing processor instructions; determine that a second chip select signal is provided to the chip; provide, to an embedded controller of the IHS, a signal that indicates that the second chip select signal has been provided to the chip; receive a signal to boot the IHS; determine if the embedded controller has received the signal that indicates that the second chip select signal has been provided to the chip; if so, prevent the IHS from booting; and if not, permit the IHS to boot utilizing the at least the portion of the IHS firmware stored by the chip.
1. An information handling system, comprising:
at least one processor;
a platform controller hub communicatively coupled to the at least one processor;
an embedded controller communicatively coupled to the at least one processor;
a chip that stores at least a portion of information handling system firmware, which is executable by the at least one processor, communicatively coupled to the at least one processor, wherein the chip includes a serial peripheral interface (SPI) that is configured to communicate data with a SPI bus of the information handling system; and
a circuit communicatively coupled to the embedded controller and to a chip select input of the chip;
wherein the platform controller hub is configured to provide a first chip select signal to the chip in accordance with a SPI specification while the at least one processor is executing processor instructions;
wherein the chip receives the first chip select signal from the platform controller hub in accordance with the SPI specification;
wherein the circuit is configured to:
determine that a second chip select signal is provided to the chip; and
provide, to the embedded controller, a signal that indicates that the second chip select signal has been provided to the chip; and
wherein the embedded controller is configured to:
receive the signal that indicates that the second chip select signal has been provided to the chip;
receive a signal to boot the information handling system;
determine if the embedded controller has received the signal that indicates that the second chip select signal has been provided to the chip;
if the embedded controller has received the signal that indicates that the second chip select signal has been provided to the chip, prevent the information handling system from booting; and
if the embedded controller has not received the signal that indicates that the second chip select signal has been provided to the chip, permit the information handling system to boot utilizing the at least the portion of the information handling system firmware stored by the chip.
2. The information handling system of claim 1 , wherein the circuit includes an exclusive-OR (XOR) circuit that is configured to determine that the second chip select signal is provided to the chip.
3. The information handling system of claim 2 ,
wherein the XOR circuit includes a metal oxide semiconductor field effect transistor (MOSFET); and
wherein an input to the XOR circuit, which receives the first chip select signal, is coupled to a gate of the MOSFET.
4. The information handling system of claim 2 ,
wherein the XOR circuit includes a bipolar junction transistor (BJT); and
wherein an input, which receives the first chip select signal, to the XOR circuit is coupled to a base of the BJT.
5. The information handling system of claim 4 , wherein the BJT is a Darlington transistor that includes a plurality of bipolar junction transistors (BJTs).
6. The information handling system of claim 5 , wherein the input to the XOR circuit is coupled to a base of a first BJT of the Darlington transistor.
7. The information handling system of claim 1 , wherein the information handling system firmware is compliant with at least a portion of a Unified Extensible Firmware Interface (UEFI) and is compliant with at least a portion of an Advanced Configuration and Power Interface (ACPI).
8. The information handling system of claim 1 , wherein the circuit and the chip are mounted to a printed circuit board of the information handling system.
9. The information handling system of claim 1 ,
wherein the embedded controller is further configured to store information associated with the signal that indicates that the second chip select signal has been provided to the chip; and
wherein, to determine if the embedded controller has received the signal that indicates that the second chip select signal has been provided to the chip, the embedded controller is further configured to:
retrieve the information associated with the signal that indicates that the second chip select signal has been provided to the chip; and
determine if the embedded controller has received the signal that indicates that the second chip select signal has been provided to the chip based at least on the information associated with the signal that indicates that the second chip select signal has been provided to the chip.
10. A method, comprising:
providing a first chip select signal to a chip of an information handling system, which store at least a portion of information handling system firmware, while a processor of the information handling system is executing processor instructions;
determining, by a circuit of the information handling system, that a second chip select signal is provided to the chip;
providing, by the circuit to an embedded controller of the information handling system, a signal that indicates that the second chip select signal has been provided to the chip;
receiving, by the embedded controller, the signal that indicates that the second chip select signal has been provided to the chip;
receiving, by the information handling system, a signal to boot the information handling system;
determining, by the embedded controller, if the embedded controller the embedded controller has received the signal that indicates that the second chip select signal has been provided to the chip;
if the embedded controller has received the signal that indicates that the second chip select signal has been provided to the chip, preventing, by the embedded controller, the information handling system from booting; and
if the embedded controller has not received the signal that indicates that the second chip select signal has been provided to the chip, permitting, by the embedded controller, the information handling system to boot utilizing the at least the portion of the information handling system firmware stored by the chip;
wherein the chip includes a serial peripheral interface (SPI) that is configured to communicate data with a SPI bus of the information handling system; and
wherein the chip receives the first chip select signal in accordance with a SPI specification.
11. The method of claim 10 , wherein the circuit includes an exclusive-OR (XOR) circuit that is configured to determine that the second chip select signal is provided to the chip.
12. The method of claim 11 ,
wherein the XOR circuit includes a metal oxide semiconductor field effect transistor (MOSFET); and
wherein an input to the XOR circuit, which receives the first chip select signal, is coupled to a gate of the MOSFET.
13. The method of claim 11 ,
wherein the XOR circuit includes a bipolar junction transistor (BJT); and
wherein an input, which receives the first chip select signal, to the XOR circuit is coupled to a base of the BJT.
14. The method of claim 13 , wherein the BJT is a Darlington transistor that includes a plurality of bipolar junction transistors (BJTs).
15. The method of claim 14 , wherein the input to the XOR circuit is coupled to a base of a first BJT of the Darlington transistor.
16. The method of claim 10 , wherein the information handling system firmware is compliant with at least a portion of a Unified Extensible Firmware Interface (UEFI) and is compliant with at least a portion of an Advanced Configuration and Power Interface (ACPI).
17. The method of claim 10 , wherein the circuit and the chip are mounted to a printed circuit board of the information handling system.
18. The method of claim 10 , wherein the receiving, by the information handling system, the signal to boot the information handling system includes receiving, by the embedded controller, the signal to boot the information handling system.