Dependable computing system capable of protecting BIOS and method of use thereof

Abstract

The invention provides a trusted computer system for protecting BIOS and the application method thereof, belonging to the field of information security. The invention is characterized in the physical connective way of a trusted computing module and a BOOT ROM, wherein the trusted computing module is connected to a system mainboard, and the BOOT ROM is connected to the trusted computing module by a communication bus. The trusted computing module comprises a DMA controller, a FIFO unit and a security isolation unit; the DMA controller is used for reading BIOS code to the FIFO unit of the trusted computing module or reading the BIOS code from the FIFO unit to the I / O bus of the trusted computing module; the FIFO unit is used for temporally storing BIOS code to be processed; the security isolation unit is used for preventing vicious procedures outside the trusted computing module from reading confidential information in memory cell inside the trusted computing module. The read / write and update of BIOS code need the identity authentication and password authentication of a current user, ensuring the security of BIOS key code; the equipment access control is realized by hardware method, reaching the effect of active control of mainboard peripheral equipment.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method for realizing a hardware platform of a trusted computing system and protecting the security and credibility of the hardware platform. Background technique [0002] In recent years, trusted computing has become a new development direction in the field of information security, and more and more relevant research units have paid attention to it. The trusted computing system is mainly based on trusted security chips to establish a secure computing environment that users can expect to ensure that computing software and hardware resources will not be maliciously tampered with. [0003] The Trusted Computing Group (Trusted Computing Group, TCG) first proposed and specified the trusted computing industry standard. By introducing a security chip on the motherboard, a chain of trust is established step by step, and the security of the chain of trust is guaranteed, and finally ...

AI Technical Summary

Problems solved by technology

The disadvantage does not take into account the need for real-time update of the BIOS code

Images