Embed type platform guiding of credible mechanism

Abstract

The invention discloses an embedded platform guide on a creditable mechanism, i. e.: placing the embedded platform and a TPM together, and using the TPM to support safety and creditability of the embedded platform; In accordance with the creditability completeness measuring roots and prior to running of the CPU of the embedded platform, the TPM carries out completeness verification for the Bootloader and the operation system which are stored in the embedded platform to ensure that the software executable codes in the platform startup chain is not modified, and then permits the CPU of the embedded platform to read the Bootloader for startup; and the TPM controls the startup process and measures completeness and reliability of the appointed external devices as well as initializes the external devices. The invention is used for completeness measuring of the Bootloader executed at the platform in accordance with the creditability chain structure, ensuring good completeness of the Bootloader, and realizing a reporting mechanism in a creditable environment with a TPM monitoring.

Description

technical field [0001] The invention relates to an architecture for an embedded device to perform safety detection on external devices, especially storage type external devices, during the start-up phase. Background technique [0002] The traditional computer system has the following potential safety hazards: the computer software and hardware structure is simple, which leads to the arbitrary use of computer resources, especially the executable code can be modified, and malicious programs can be implanted; the virus program uses the computer operating system to execute code inconsistent Check for weaknesses, embed virus code into programs that execute code, achieve virus propagation, and more. Therefore, it is necessary to consider the transformation of the traditional computer software and hardware structure. [0003] TCG (Trust Computing Group, Trusted Computing Group) proposed the concepts of "trusted chain" and "trusted measurement", which include a series of trusted me...

AI Technical Summary

Problems solved by technology

[0007] Some current architectural improvement schemes, such as relying on USB key and smart card for identity authentication and integrity measurement, have the problem that the root of trust of the embedded system depends on the startup program Bootloader. If the Bootloader is maliciously tampered with, it can be bypassed. USB key and other authentication methods to start the system

The source code of the Linux driver layer must be greatly modified, which is difficult and the predictability of the modification result is poor

Images