English:
[0001] In commercial and other settings, computers and computer systems may be subject to tampering. For example, a desktop computer, server or other computer system might be opened illicitly so that a valuable internal component may be removed entirely or replaced by a lesser component. This may be most likely to occur when the computer in question is not being used or is turned off in the hope that the illicit access will go undetected for some period of time.
[0002] The accompanying drawings illustrate various implementations of the principles described herein and are a part of the specification. The illustrated implementations are merely examples and do not limit the scope of the claims.
[0003] Fig. 1 is a block diagram of an example intrusion detection system consistent with disclosed implementations.
[0004] Fig. 2 is another block diagram of an example intrusion detection system consistent with disclosed implementations.
[0005] Fig. 3 is another block diagram of an example intrusion detection system consistent with disclosed implementations.
[0006] Fig. 4 is a block diagram of an example intrusion detection system within a monitored computer consistent with disclosed implementations.
[0007] Fig. 5 is a diagram of an example ambient light sensor system for an intrusion detection system consistent with disclosed implementations.
[0008] Fig. 6 is a flowchart of an example method for intrusion detection in a computer system consistent with disclosed implementations.
[0009] Fig. 7 is a flowchart of another example method for intrusion detection in a computer system consistent with disclosed implementations.
[0010] Fig. 8 is a flowchart of another example method for intrusion detection in a computer system consistent with disclosed implementations.
[0011] Throughout the drawings, identical reference numbers designate similar, but not necessarily identical, elements.
[0012] As noted above, in various settings, computers and computer systems may be subject to tampering. For example, a desktop computer, server or other computer system might be opened illicitly so that a valuable internal component may be removed entirely or replaced by a lesser component. This may be most likely to occur when the computer in question is not being used or is turned off in the hope that the illicit access will go undetected for some period of time.
[0013] Consequently, the present specification describes, for example, an intrusion detection system for a computer that includes: an ambient light sensor to detect an increase in ambient light indicative of a housing of the computer being opened; and a super input/output integrated circuit (SIO) to receive a signal from the ambient light sensor indicating that the housing of the computer has been opened.
[0014] In another example, an intrusion detection system for a computer includes: an ambient light sensor to detect an increase in ambient light indicative of a housing of the computer being opened; a super input/output (I/O) integrated circuit to receive a signal from the ambient light sensor indicating that the housing of the computer has been opened, where the S!O stores identification data for some of the components of the computer; and a Basic Input Output System (BIOS) to communicate with the SIO when the computer is booted to determine whether the housing of the computer has been opened, the BIOS further to verify the presence of the components of the computer using the identification data stored in the SIO, in response to an indication that the housing of the computer was opened prior to the computer being booted.
[0015] In another example, the present specification describes a method for intrusion detection in a computer by: detecting opening of a housing of the computer with an ambient light sensor internal to the housing; and, in response to detection of an opening of the housing, electronically conducting an inventory of components of the computer internal to the housing using identification data stored in the computer that is associated with the components.
[0016] As used herein and in the following claims, the term "super input/output integrated circuit" (SIO) refers to an integrated circuit, usually on a computer motherboard, that handles the slower and less prominent input/output devices of a computer system such as a keyboard and mouse, parallel and serial ports and the real-time clock.
[0017] As used herein and in the following claims, the term "Basic Input/Output System" (BIOS) refers to firmware and associated processing resources used to perform hardware initialization during the booting process when a computer is powered upon startup.
[0018] As used herein and in the following claims, the term "Inter- Integrated Circuit" (I2C) refers to a serial computer bus used for attaching lower-speed peripheral ICs to processors and microcontrollers in short- distance, intra-board communication.
[0019] Fig. 1 is a biock diagram of an example intrusion detection system consistent with disclosed implementations. As shown in Fig. 1 , the intrusion detection system 100 includes an ambient light sensor 102 that is in communication with a super input/output integrated circuit (SIO).
[0020] The ambient light sensor 102 measures the level of ambient light. If the ambient light sensor 102 is disposed internal to a computer housing, the light reaching the sensor may be very limited. However, if the housing of the computer is opened, there will typically be a significant increase in the level of ambient light. This will be true even in a dark room if the person opening the computer housing is using a flashlight or other light source in order to see to open the housing.
[0021] By detecting any such increase in the level of ambient light, the ambient light sensor 102 can indicate when the computer housing has been opened. Consequently, the ambient light sensor 102 provides intrusion detection.
[0022] The ambient light sensor 102 may be an integrated circuit such as a single chip lux meter, measuring the intensity of light as visible to the human eye. Such devices can have a precise spectral response and strong infra-red (IR) rejection, which helps the sensor accurately meter the intensity of light as seen by the human eye regardless of the light source. It is presumed that, in the event of an intrusion into the housing, the intruder will be using some light visible to the human eye in order to work.
[0023] The strong !R rejection also helps maintain high accuracy when the sensor is mounted, for example, under dark glass for aesthetics. The ambient light sensor may 102 have a measurement capability ranging from 0,01 lux up to 83k lux without manually selecting full-scale ranges by using a built-in, full-scale setting feature.
[0024] Additionally, the ambient light sensor may have very low power consumption (e.g., 1.8μΑ) and a low power-supply voltage (e.g., 1 .6 to 3.6V). This low power requirement and a small size (e.g., 2mm x 2mm) suits the ambient light sensor well for use in an efficient and inexpensive intrusion detection system.
[0025] As shown in Fig. 1 , when the ambient light sensor 102 detects an intrusion event indicated by an increase the ambient light level, the ambient light sensor 102 will signal the SIO 104. As will be described in further detail below, the SIO 104 will have power even if the computer system is generally in a powered down or turned-off state. Consequently, the SIO 104 can record intrusion events detected by the ambient light sensor 102 even when the computer or computer system being monitored is powered down.
[0026] Fig. 2 is another block diagram of an example intrusion detection system consistent with disclosed implementations. As shown in Fig. 2, an ambient light sensor 212 may include a photodiode 202 that receives ambient light through an optical filter 200. The optical filter 200 may be tuned, as described above, to admit light specifically within the range of human vision.
[0027] The photodiode 202 will output an electrical signal indicative of the level of ambient light received, as discussed above. This signal is provided to an amplifier 204 and analog-to-digital converter 206.
[0028] The ambient light sensor 212 is connected to the S!O 210 by an I2C bus. Consequently, the ambient light sensor 212 includes an I2C interface 208 to the bus connecting to the SIO 210. The I2C bus includes a clock line (SCL), a data line (SDA), and an interrupt (INT) line. The INT line connects to a General Purpose Input/Output (GPIO) input of the S!O. The address line (ADDR) of the I2C interface may be connected to ground (GND) as shown in Fig. 2.
[0029] Measurements from the ambient light sensor 212 can be either continuous or single-shot. The control and interrupt system of the I2C interface 208 with the SIO 210 features autonomous operation, allowing the main processor of the computer or system being monitored to sleep or be powered down while the sensor 212 searches for appropriate wake-up events to report via the interrupt pin (INT). The digital output from the ADC 206 is reported over the I2C compatible, two-wire serial interface of the SCL and SDA lines.
[0030] Any time the computer housing is opened removed, for example, by having a cover removed, the ambient light sensor 212 detects this condition via exposure to ambient light and asserts the interrupt signal (INT) to the SIO 210. With the clock and data lines (SCL, SDA), the SIO 210 can determine different events signaled by the ambient light sensor 212. Consequently, the SIO 210 can detect and count multiple intrusion events that may occur during a period of time the computer being monitored is powered down.
[0031] As shown in Fig. 2, the ambient light sensor 212 draws power (VDD) from a Real Time Clock power rail (RTC) which is active even when the computer monitored is generally powered down. For example, the RTC may derive its power from a coin battery of the system.
[0032] Fig. 3 is another block diagram of an example intrusion detection system consistent with disclosed implementations. As shown in Fig. 3, the instruction detection system 150 includes an ambient light sensor 102 and SIO 104 as described above.
[0033] As also shown in Fig. 3, the system includes the BIOS 108 of the computer being monitored. The function of the BIOS is to initialize the computer system components upon startup until the operating system is launched and takes control of the machine.
[0034] In this example, the BIOS 106 is configured to, upon startup for example, query the SIO 104 to determine whether there were any intrusion events detected since the computer was last started. As noted above, the SIO 104 can inform the BIOS 106 whether any intrusion was detected and, if there were multiple intrusions, the number and timing of the intrusions. The BIOS 106 can then report this information to a user, as will be described in further detail below.
[0035] Thus, Fig. 3 shows an intrusion detection system 150 for a computer that includes: an ambient light sensor 102 to detect an increase in ambient light indicative of a housing of the computer being opened; a super input/output (I/O) integrated circuit 104 to receive a signal from the ambient light sensor indicating that the housing of the computer has been opened, where the S!O stores identification data for some of the components of the computer; and a Basic Input Output System (BIOS) 106 to communicate with the SIO when the computer is booted to determine whether the housing of the computer has been opened and to verify the presence of the components of the computer using the identification data stored in the SIO, in response to an indication that the housing of the computer was opened prior to the computer being booted.
[0036] Fig. 4 is a block diagram of an example intrusion detection system within a monitored computer consistent with disclosed implementations. As shown in Fig. 4, the instruction detection system 160 includes an ambient light sensor 102 and S!O 104 as described above.
[0037] The ambient light sensor 102 may include high-limit and low- limit registers 161 to provide control over what detected light levels are considered to indicate an intrusion event as opposed to, for example, a device malfunction or other source of an erroneous signal.
[0038] As described above, when an intrusion event occurs, the ambient light sensor 102 asserts the interrupt to the SIO 104. The interrupt event conditions are controlled by the high-limit and low-limit registers 161 , as well as by a configuration register latch and fault count fields. The results of comparing the result register with the high-limit register and low-limit register are referred to as fault events. While such an event may occur when the monitored computer is powered down, upon power up the SIO 104 will be able to read the status of the interrupt which is latched into the ambient light sensor device register to determine that an intrusion event has occurred.
[0039] In this example, the SIO 104 stores component identifications 1 10 for some components of the computer system being monitored. These components may include the components that are Iikely to be stolen or illicitly swapped out of the computer or computer system during an unauthorized intrusion. Examples include a processor, memory module, storage (both hard drive and solid state drive) and network interface components such as a WLAN, WiFi or BlueTooth module. The component identifications 1 10 may include manufacturer identification codes, device identification, serial number, revision number, date codes or other identifying information for any of the components to be monitored.
[0040] Upon startup, the BIOS 106 can access the component identifications 1 10 in the S!O 104. The BIOS 106 may only do this when the SIO 104 has recorded an intrusion event. The BIOS 106 can the query the corresponding components (shown generally at 120) which will also have stored thereon their respective component identifications 1 10. In this way, the BIOS 106 can determined whether any component is now missing or has been replaced by a different, perhaps lesser, component.
[0041] The BIOS 106 will also have access to the user interface 122 of the computer being monitored. The BIOS 106 can use the user interface 122, for example, to display a report 124 indicating the existence and/or number of intrusions detected. The report 124 may also include a listing of any components that are now missing or replaced, as determined from the component identifications 1 10.
[0042] Alternatively, the BIOS 106 may transmit the report via other means to a user or administrator. For example, the BIOS 106 may send the report by email, instant message, Simple Message Service (SMS), voicemail, text or any other communication type.
[0043] Fig. 5 is a diagram of an example ambient light sensor system for an intrusion detection system consistent with disclosed implementations. As shown in Fig. 5, the ambient light sensor 102 is mounted on a printed circuit board (PCB) 502. Within the sensor 102 is the active sensor area 504. The active sensor area 504 will be connected, through the PCB 502 to the other components described above, for example, the amplifier and DAC shown in Fig. 2.
[0045] Fig. 6 is a flowchart of an example method for intrusion detection in a computer system consistent with disclosed implementations. As shown in Fig. 6, a method for intrusion detection in a computer includes: detecting 802 opening of a housing of the computer with an ambient light sensor internal to the housing; and, in response to detection of an opening of the housing, electronically conducting 604 an inventory of components of the computer internal to the housing using identification data for some of components of the computer that is stored in the computer.
[0046] Fig. 7 is a flowchart of another example method for intrusion detection in a computer system consistent with disclosed implementations. As shown in Fig. 7, the method includes detecting 702 opening of a housing of the computer with an ambient light sensor internal to the housing, and counting 704 a number of times the ambient light sensor indicates the housing of the computer has been opened during a time that the computer is powered down.
[0047] Fig. 8 is a flowchart of another example method for intrusion detection in a computer system consistent with disclosed implementations. As shown in Fig. 8, the method includes, in response to booting of the computer, determining 802 with BIOS whether opening of the housing of the computer was indicated to the SIO by an ambient light sensor internal to the housing; and, in response to detection of an opening of the housing, electronically conducting 804 with the BIOS an inventory of components of the computer internal to the housing using identification data for some of components of the computer that is stored in the computer. As described above, this may include providing a report indicating any components found to be missing or replaced.
[0048] The preceding description has been presented only to illustrate and describe examples of the principles described. This description is not intended to be exhaustive or to limit these principles to any precise form disclosed. Many modifications and variations are possible in light of the above teaching.

中文:
[0001]在商业和其它环境中,计算机和计算机系统可经受篡改。例如,台式计算机、服务器或其它计算机系统可能被不正当地打开,使得有价值的内部组件可被完全移除或被次要的组件替换。当讨论中的计算机没有在被使用或被关闭、希望不正当的访问将在某个时间段内不被检测到的时候,这也许最可能发生。
[0002]附图图示了本文中描述的原理的各种实现方式并且是说明书的一部分。所图示的实现方式仅仅是示例,并且不限制权利要求的范围。
[0003]图1是与所公开的实现方式一致的示例侵入检测系统的框图。
[0004]图2是与所公开的实现方式一致的示例侵入检测系统的另一个框图。
[0005]图3是与所公开的实现方式一致的示例侵入检测系统的另一个框图。
[0006]图4是与所公开的实现方式一致的所监视的计算机内的示例侵入检测系统的框图。
[0007]图5是与所公开的实现方式一致的用于侵入检测系统的示例环境光传感器系统的图解。
[0008]图6是与所公开的实现方式一致的用于计算机系统中的侵入检测的示例方法的流程图。
[0009]图7是与所公开的实现方式一致的用于计算机系统中的侵入检测的另一个示例方法的流程图。
[0010]图8是与所公开的实现方式一致的用于计算机系统中的侵入检测的另一个示例方法的流程图。
[0011]贯穿附图,相同的参考标号指明类似的但不一定完全相同的元素。
[0012]如以上所指出的,在各种环境中,计算机和计算机系统可经受篡改。例如,台式计算机、服务器或其它计算机系统可能被不正当地打开,使得有价值的内部组件可被完全移除或被次要的组件替换。当讨论中的计算机没有在被使用或被关闭、希望不正当的访问将在某个时间段内不被检测到的时候,这也许最可能发生。
[0013]因此,本说明书描述了例如一种用于计算机的侵入检测系统,其包括:环境光传感器,其用于检测对计算机的外壳被打开进行指示的环境光方面的增大;以及超级输入/输出集成电路(SIO),其用于从环境光传感器接收信号,所述信号指示计算机的外壳已被打开。
[0014]在另一个示例中,一种用于计算机的侵入检测系统包括:环境光传感器,其用于检测对计算机的外壳被打开进行指示的环境光方面的增大;超级输入/输出(I/O)集成电路,其用于从环境光传感器接收信号,所述信号指示计算机的外壳已被打开,其中所述SIO存储针对计算机的某些组件的标识数据;以及基本输入输出系统(BIOS),其用于当计算机被引导时与SIO通信以确定计算机的外壳是否已被打开,所述BIOS还用于响应于在计算机被引导之前计算机的外壳被打开的指示,通过使用被存储在SIO中的标识数据来验证计算机的组件的存在。
[0015]在另一个示例中,本说明书描述了一种用于计算机中的侵入检测的方法,其通过:利用在外壳内部的环境光传感器来检测计算机的外壳的打开;以及响应于检测到外壳的打开,通过使用被存储在计算机中的与组件相关联的标识数据来电子地传导在外壳内部的计算机的组件的清单。
[0016]如在本文中以及在以下权利要求中所使用的,术语“超级输入/输出集成电路”(SIO)是指一种集成电路,其通常在计算机母板上,操纵计算机系统的较慢和较不突出的输入/输出设备,诸如键盘和鼠标、并行和串行端口以及实时时钟。
[0017]如在本文中以及在以下权利要求中所使用的,术语“基本输入/输出系统”(BIOS)是指固件和相关联的处理资源,其用于当在启动时为计算机供电的时候在引导过程期间执行硬件初始化。
[0018]如在本文中以及在以下权利要求中所使用的,术语“集成电路间”(I2C)是指一种串行计算机总线,其用于用短距离、板内通信中将较低速外围IC附连到处理器和微控制器。
[0019]图1是与所公开的实现方式一致的示例侵入检测系统的框图。如图1中所示,侵入检测系统100包括环境光传感器102,所述环境光传感器102与超级输入/输出集成电路(SIO)通信。
[0020]环境光传感器102测量环境光的水平。如果环境光传感器102被布置在计算机外壳内部,则到达传感器的光可能非常有限。然而,如果计算机的外壳被打开,那么将典型地存在环境光水平方面的显著增大。甚至在暗室中,如果打开计算机外壳的人员在使用闪光灯或其它光源以便查看从而打开外壳,这将成立。
[0021]通过检测环境光的水平方面的任何这样的增大,环境光传感器102可以指示何时已经打开了计算机外壳。因此,环境光传感器102提供侵入检测。
[0022]环境光传感器102可以是集成电路,诸如单芯片照度计,其测量如对于人眼可见的光的强度。这样的设备可具有精确的光谱响应和强红外(IR)拒绝,其帮助传感器准确地用仪表测量如由人眼所见的光的强度,而无论光源如何。假定在侵入到外壳中的情况下,侵入者将使用对于人眼可见的某种光以便于工作。
[0023]当传感器被装配例如在用于美学的深色玻璃下时,强IR拒绝还有助于维持高准确性。在不通过使用内置、全尺度设置特征来手动选择全尺度范围的情况下,环境光传感器可102具有范围从0.01勒克斯直到83k勒克斯的测量能力。
[0024]另外,环境光传感器可具有非常低的功耗(例如1.8μA)以及低功率供给电压(例如1.6到3.6V)。该低功率要求和小尺寸(例如2mm x2mm)使环境光传感器很好地适合用于使用在高效且不昂贵的侵入检测系统中。
[0025]如图1中所示,当环境光传感器102检测到通过环境光水平的增大所指示的侵入事件时,环境光传感器102将用信号通知SIO 104。如以下将更详细地描述的,SIO 104将有功率,即使计算机系统一般处于掉电或关闭状态中。因此,SIO 104可以记录通过环境光传感器102检测的侵入事件,甚至当在被监视的计算机或计算机系统掉电时。
[0026]图2是与所公开的实现方式一致的示例侵入检测系统的另一个框图。如图2中所示,环境光传感器212可以包括光电二极管202,所述光电二极管202通过光学过滤器200来接收环境光。光学过滤器200可以被调谐,如上所述,以准许特定地在人类视觉范围内的光进入。
[0027]光电二极管202将输出电信号,所述电信号指示所接收的环境光的水平,如以上所讨论的。该信号被提供到放大器204以及模数转换器206。
[0028]环境光传感器212通过I2C总线被连接到SIO 210。因此,环境光传感器212包括对于连接到SIO 210的总线的I2C接口208。I2C总线包括时钟线(SCL)、数据线(SDA)以及中断(INT)线。INT线连接到SIO的通用输入/输出(GPIO)输入。I2C接口的地址线(ADDR)可以被连接到接地(GND),如图2中所示。
[0029]来自环境光传感器212的测量可以是连续的或单发的。与SIO 210的I2C接口208的控制和中断系统以自主操作为特征,从而允许在被监视的计算机或系统的主处理器睡眠或掉电,而同时传感器212搜索适当的唤醒事件以经由中断引脚(INT)报告。来自ADC 206的数字输出通过SCL和SDA线的I2C兼容的、双线串行接口来报告。
[0030]在计算机外壳被打开移除、例如通过使封盖被移除的任何时候,环境光传感器212经由对环境光的暴露来检测该状况,并且将中断信号(INT)断言给SIO 210。利用时钟和数据线(SCL、SDA),SIO 210可以确定由环境光传感器212用信号通知的不同事件。因此,SIO210可以检测在被监视的计算机掉电的时间段期间可发生的多个侵入事件并且对其进行计数。
[0031]如图2中所示,环境光传感器212从实时时钟功率轨(RTC)汲取功率(VDD),所述实时时钟功率轨(RTC)甚至当所监视的计算机一般掉电的时候也是活动的。例如,RTC可以从系统的钱币型电池得到其功率。
[0032]图3是与所公开的实现方式一致的示例侵入检测系统的另一个框图。如图3中所示,侵入检测系统150包括环境光传感器102和SIO 104,如上所述。
[0033]如还在图3中所示,所述系统包括在被监视的计算机的BIOS 106。BIOS的功能是在启动时初始化计算机系统组件,直到操作系统被发动并且取得对机器的控制为止。
[0034]在该示例中,BIOS 106被配置成例如在启动时查询SIO 104,以确定自计算机上一次被启动以来是否检测到任何侵入事件。如以上所指出的,SIO 104可以告知BIOS 106是否检测到任何侵入,并且如果存在多个侵入,则告知侵入的数目和定时。BIOS 106然后可以将该信息报告给用户,如将在以下更详细地描述的。
[0035]因而,图3示出了用于计算机的侵入检测系统150,其包括:环境光传感器102,其用于检测对计算机外壳被打开进行指示的环境光方面的增大;超级输入/输出(I/O)集成电路104,其用于从环境光传感器接收信号,所述信号指示计算机的外壳已被打开,其中所述SIO存储针对计算机的某些组件的标识数据;以及基本输入输出系统(BIOS)106,其用于在计算机被引导的时候与SIO通信以确定计算机的外壳是否已经被打开,并且用于响应于在计算机被引导之前打开了计算机的外壳的指示而通过使用在SIO中所存储的标识数据来验证计算机的组件的存在。
[0036]图4是与所公开的实现方式一致的所监视的计算机内的示例侵入检测系统的框图。如图4中所示,侵入检测系统160包括环境光传感器102和SIO 104,如上所述。
[0037]环境光传感器102可以包括上限和下限寄存器161,用于提供对于什么样的所检测的光水平被视为指示侵入事件的控制,如相对于例如设备失灵或错误信号的其它起源。
[0038]如上所述,当发生侵入事件的时候,环境光传感器102将中断断言给SIO 104。中断事件状况受上限和下限寄存器161、以及受配置寄存器锁存和故障计数字段控制。将结果寄存器与上限寄存器和下限寄存器比较的结果被称为故障事件。虽然当所监视的计算机掉电的时候可发生这样的事件,但是在上电时,SIO 104将能够读取被锁存到环境光传感器设备寄存器中的中断的状态以确定已发生侵入事件。
[0039]在该示例中,SIO 104存储针对在被监视的计算机系统的一些组件的组件标识110。这些组件可以包括在未经授权的侵入期间计算机或计算机系统的很可能被窃取或不正当地被换出的组件。示例包括处理器、存储器模块、存储装置(硬驱动器和固态驱动器二者)以及网络接口组件,诸如WLAN、WiFi或蓝牙模块。组件标识110可以包括制造商标识码、设备标识、序列号、修订号、日期代码、或针对待监视的任何组件的其它标识信息。
[0040]在启动时,BIOS 106可以访问SIO 104中的组件标识110。BIOS 106可以仅在SIO104已经记录了侵入事件时这样做。BIOS 106可以查询对应的组件(一般在120处被示出),所述对应的组件将也已经在其上存储了它们相应的组件标识110。以此方式,BIOS 106可以确定任何组件是否现在缺失或已经被不同的、也许次要的组件替换。
[0041]BIOS 106将也能访问被监视的计算机的用户接口122。BIOS 106可以使用用户接口122,例如用于显示报告124,所述报告124指示被检测到的侵入的存在和/或数目。报告124还可以包括现在缺失或被替换的任何组件的列表,如根据组件标识110所确定的。
[0042]可替换地,BIOS 106可以经由其它手段来将报告传送给用户或管理员。例如,BIOS106可以通过电子邮件、即时消息、短消息服务(SMS)、语音邮件、文本或任何其它通信类型来发送报告。
[0043]图5是与所公开的实现方式一致的用于侵入检测系统的示例环境光传感器系统的图解。如图5中所示,环境光传感器102被装配在印刷电路板(PCB)502上。在传感器102内是有源传感器区域504。有源传感器区域504将通过PCB 502被连接到上述其它组件,例如图2中所示的放大器和DAC。
[0045]图6是与所公开的实现方式一致的用于计算机系统中的侵入检测的示例方法的流程图。如图6中所示,一种用于计算机中的侵入检测的方法包括:利用在外壳内部的环境光传感器来检测602计算机的外壳的打开;以及响应于检测到外壳的打开,通过使用被存储在计算机中的针对计算机的某些组件的标识数据来电子地传导604在外壳内部的计算机的组件的清单。
[0046]图7是与所公开的实现方式一致的用于计算机系统中的侵入检测的另一个示例方法的流程图。如图7中所示,所述方法包括:利用在外壳内部的环境光传感器来检测702计算机的外壳的打开,以及对环境光传感器指示在计算机掉电的时间期间计算机的外壳已被打开的次数进行计数704。
[0047]图8是与所公开的实现方式一致的用于计算机系统中的侵入检测的另一个示例方法的流程图。如图8中所示,所述方法包括:响应于计算机的引导,利用BIOS来确定802计算机的外壳的打开是否通过在外壳内部的环境光传感器被指示给SIO;以及响应于检测到外壳的打开,通过使用被存储在计算机中的针对计算机的某些组件的标识数据来利用BIOS电子地传导804在外壳内部的计算机的组件的清单。如上所述,这可以包括提供报告,所述报告指示被发现缺失或被替换的任何组件。
[0048]在前的描述已经被呈现以仅仅说明和描述所述原理的示例。该描述不意在是穷举的或者将这些原理限制于所公开的任何确切形式。鉴于以上教导,许多修改和变型是可能的。