Credible safety computer

Abstract

The invention discloses a reliable and safe computer, which comprises an IC card reader (4), and further comprises a safe main board platform (5), a safe hard disk (7), a safe U disk (8), an operating system security isolation module (12) and a user management module (13) which are connected in sequence. When the reliable and safe computer is started, an SOPC security chip drive unit (17), a safe hard disk authentication unit(14), a BIOS level user identification authentication unit (14), a BIOS level hardware integrity measuring unit (18), a BIOS level I / O interface control unit (16) and an operating system security loading unit(19) in a safe enhanced BIOS system (11) are loaded in sequence. After the safe enhanced BIOS system (11) finishes starting, each security control unit in the operating system security isolation module (12) is loaded. The reliable and safe computer can know, manage and control the security state of the entire system.

Description

technical field [0001] The invention relates to a computer, in particular to a trusted security computer. Background technique [0002] Trusted computers are an important basis for realizing the trustworthiness of terminals and network platforms. At present, many computer manufacturers at home and abroad have started the development of trusted computers and corresponding software systems. These trusted computers are similar to the trusted computers defined by the Trusted Computing Organization. That is, the TPM security chip is integrated on the general-purpose computer motherboard hardware platform, and the security protection capability of the computer terminal is enhanced through the security features provided by the TPM security chip. However, these trusted computers have the following deficiencies: the transmission rate of the TPM security chip based on the LPC bus is low, and it is impossible to realize real-time encrypted storage of large files; Information computing...

AI Technical Summary

Problems solved by technology

However, these trusted computers have the following deficiencies: the transmission rate of the TPM security chip based on the LPC bus is low, and it is impossible to realize real-time encrypted storage of large files; Information computing services; hard disk and other storage media have a low degree of coupling with the BIOS system; the emergency destruction function of key data is not integrated, which cannot prevent the leakage and theft of important data files and confidential information

From the perspective of the system as a whole, the existing trusted computer functions are limited to a single level of the system, such as secure BIOS, underlying hardware, secure hard drives, operating system security enhancements, and TPM security chips, ignoring traditional security protection functions and trusted computing. Reasonable division and organic integration of service functions

Images