Keeping Smart Boards Secure: A USB Key-Based Lock System
One of the most valuable devices in a school classroom is often the interactive smart board. Yet in many schools, these devices remain powered on, unattended, and unprotected throughout the day.
A game can be launched during a break, system settings can be changed, or an accidental action can leave the board unusable just before a lesson begins.
An educational institution approached us with exactly this problem:
Keep the smart board locked and allow only authorized users to unlock it — without making teachers enter a password every time.
Based on this requirement, we developed a solution that allows the smart board to be controlled using a physical USB key.
Why a USB Key?
A password-protected lock screen was the obvious first option. However, for a teacher who needs to unlock the board several times throughout the day, entering a password repeatedly can quickly become inconvenient.
In practice, passwords can also end up being written down somewhere or shared with others.
Instead, we chose a physical key:
When the teacher's USB key is connected, the board can be used. When the USB key is removed, the board is automatically locked.
This keeps the daily experience simple and requires no additional hardware.
The USB drive contains a unique encrypted key file used by the application to verify authorization.
There is also an important distinction in the security approach.
We did not design this system as a high-security product intended to withstand determined attackers. Instead, it was designed as a practical protection layer for everyday risks in a school environment.
The goal is to prevent students from changing system settings, launching unauthorized applications, or otherwise interfering with the board during breaks.
What Happens If the USB Key Is Lost?
As with any physical key, we also had to consider the possibility of the USB drive being lost.
For this reason, the system supports two different levels of access.
Board Password
Provides an alternative way for an authorized person to unlock the board when the USB key is unavailable.
Program Password
Provides access to administrative settings, key management, and system logs.
This separation keeps everyday usage and administrative access independent from each other.
For example, a teacher can unlock the board when necessary without being given access to system configuration settings.
An Important Security Lesson: Don't Lock Yourself Out
One of the most important lessons from the project was that improving security should not accidentally make the system unusable.
Initially, the application had a fixed emergency password. From a security perspective, we decided that keeping a universal password was not the right approach and removed it.
However, another scenario became apparent:
What happens if the system is configured without setting any password, while the USB key is also unavailable?
The result would be a completely locked system with no valid way to unlock it.
We therefore introduced two simple rules:
- Protection cannot be enabled until the required passwords are configured.
- Whenever protection is active, there must always be a valid way to unlock the system.
This project reinforced an important principle: Security is not only about locking a system. It is also about ensuring that the system can be safely and intentionally unlocked when needed.
Simple for Teachers, Controlled for Administrators
We designed the everyday experience to be as simple as possible.
For teachers, the main interaction is simply using the USB key.
Authorized personnel can manage the system through the administration interface.
We also added a temporary password-based session for IT staff who need to access the board without having the USB key.
This session automatically expires after a configurable period, with 30 minutes as the default.
This means that even if an IT staff member forgets to manually re-enable the protection after completing their work, the board will automatically return to its locked state.
Smaller Updates for Schools
We also considered the network conditions commonly found in schools.
Not every school computer has a fast or reliable internet connection, so downloading the entire application package for every update was not practical.
Instead, the system can use smaller update packages containing only the files that have changed.
In practice, a full update package is around 75 MB, while a typical differential update can be approximately 0.5 MB.
This becomes especially valuable when the application needs to be maintained across a large number of school computers.
A Smaller Installation Package
During development, we also looked at the overall size of the application.
The initial installation package was around 77 MB.
By removing unnecessary components and optimizing the distribution, we reduced it to approximately 54 MB.
The goal was not simply to reduce the file size. We wanted the application to remain easy to deploy on school computers without relying on an additional internet connection or separate runtime installation.
What Did We Learn?
The most time-consuming parts of this project were not necessarily the major architectural decisions.
Often, the real challenges came from small details: an unexpected operating system behavior, a seemingly minor usage scenario, or a recovery case that had not initially been considered.
The biggest lesson was especially clear on the security side:
Locking a system is easy. Designing a system that can always be unlocked safely and intentionally is the real challenge.
Security solutions for physical devices such as smart boards also need to consider the user experience.
A system that requires teachers to perform complicated steps before every lesson may be secure, but it will not be sustainable in everyday use.
With this project, our goal was to bring together security, simplicity, and administrative control in a single solution.
A More Secure Approach to Smart Boards
Interactive smart boards have become an important part of modern education. However, securing these devices involves more than antivirus software or user passwords.
Preventing unauthorized access, keeping the teacher experience simple, and allowing administrators to intervene when necessary all need to be considered together.
Our USB key-based lock system was developed as one solution to this specific challenge.
If your organization needs a similar solution for smart boards, kiosks, or other Windows-based devices, feel free to contact us.
Arasix Smart Board Lock Program
Download v.1.0.3