Trusted platform module and its computer starting control method

Abstract

The invention provides a trusted platform module and a method for controlling computer starting by adopting the same. The novel trusted platform module with control function is formed by adding a starting control module into the prior trusted platform module to be combined with the prior trusted platform module. The novel trusted platform module is the first to be started when a computer is electrified and controls a starting flow so as to change the position that usually the trusted platform module is only slave equipment and ensure that the trusted platform module becomes main control equipment. The novel trusted platform module begins to work before the computer starts, provides bottom security, comprises a power supply for controlling a CPU of the computer and a data bus between the CPU of the computer and a storage of the computer, and performs integrity verification on a starting component of the computer. The trusted platform module and the method also use hardware to realize SMS4 symmetric cryptographic algorithm and remedy the advantages of the prior trusted platform module. The trusted platform module can fully control the starting flow of the computer, and has the advantages of high security, quick encryption / decryption operation, reliable operation and the like.

Description

technical field [0001] The invention belongs to the field of trusted computing platforms, and in particular relates to a trusted platform module and a computer startup control method realized by using the module. Background technique [0002] Only by taking security measures from the bottom layer of the hardware and software of the information system can the security of the information system be effectively ensured. Therefore, in order to solve the terminal problem, comprehensive measures must be taken from hardware such as chips and motherboards and underlying software such as BIOS and operating system to effectively improve its security. It is based on this idea that trusted computing technology was born. At present, trusted computing has become a new trend in the field of information security. [0003] The basic idea of ​​a trusted computing platform is to build a root of trust first, and the credibility of the root of trust is guaranteed by physical security and manage...

AI Technical Summary

Problems solved by technology

And if the host does not request these services from the TPM, the TPM cannot participate in the security management of the system.

It can be seen that this structure is only an enhancement of the security function of the computer, and the TPM has not really become the master controller of the system, so it is impossible to talk about the realization of basic security.

Images