Authors:
Saturn Tsai, Edward Lee, Merrick Wang, Hawaii Xuan
Abstract:
This disclosure proposes a password protected USB flash drive to improve security accessing a TGCS POS system while being able to leave the USB port turned on. Given there is a key security feature in TGCS POS systems - On/Off USB ports. We are now using the power on / off to enable/disable the USB ports. The end user will not be able to access the USB ports if they set it OFF.
Background:
The current implementation of TGCS POS of the USB port security feature is to turn ON/OFF the power of the USB ports.
If you set the USB port off, the hardware circuit will cut the power off and vise versa if you set it ON, the USB port will have the power supplied.
The drawback is that the USB port will be still accessible if you use a self-power device such as a battery supplied USB flash drive or adapter powered Hard Disk.
Description:
Our idea is to offer a comprehensive solution on both the host system and device sides.
Host system - should have a USB filter driver that can interact with the USB flash drive (read the hidden password from the USB flash drive)
Device Side - the hidden password enabled USB flash drive that supports the dedicated command.
Once you plug the "normal" USB flash drive into the TGCS POS systems, (without the hidden password enabled), the host system will deny the access from it.
Once you plug the hidden password enabled device into TGCS POS systems, it will grant the access from it.
The hidden password enabled device will still be functional in any normal host systems as a normal USB flash drive.
Example of the art is that we may implement 5 PCAP sensors on the USB flash drive, it will detect how you hold the USB flash drive once you plugged into the USB port. You may configure that 3 of them should be touched within 3 seconds while plugging. It's the hidden password concept that any other person will not know that you hold the flash drive in a particular way on purpose. Even if the Flash Drive is stolen and plugged into a TGCS system, it will not pass the hidden password. The flash drive will still be functional if it's not trying to access a TGCS POS system, but will not work in any TGCS systems.
TGCS Reference 2092
