BIOS-based computer security protection method and system

Abstract

The invention discloses a BIOS-based computer security protection method and a BIOS-based computer security protection system. The method comprises the following steps of: a, authenticating identity of a USBKEY after completing self-check of a computer and before loading an operation system; B, if the USBKEY passes the identity authentication, performing a step C, and if the USBKEY does not pass the identity authentication, stopping the subsequent operation; and C, judging whether to need managing BIOS-grade equipment or not, if so, loading the operation system after managing the BIOS-grade equipment, and otherwise, directly loading the operation system. The system comprises a USBKEY identity authentication module and an equipment management module, wherein the USBKEY identity authentication module is used for authenticating the identity of the USBKEY after completing the self-check of the computer and before loading the operation system; and the equipment management module is used formanaging the equipment after the identity authentication and before loading the operation system. The USBKEY identity authentication module and the equipment management module are embedded into a BIOS which has burning prevention function.

Description

technical field [0001] The invention belongs to the technical field of computer security, and in particular relates to a computer security protection method and system based on BIOS (Basic Input / Output System, Basic Input / Output System). Background technique [0002] With the popularity of computers and the improvement of the Internet, security is the first consideration for many computers and their systems. In many current computer systems, including many very confidential systems, the traditional identity authentication method is used for user identity authentication and access control, that is, the method of "user ID+password". In fact, there are some problems hidden in this scheme. Once the password is forgotten, stolen or cracked, it will bring trouble or even heavy loss to the user. The usual workaround is as follows: [0003] 1) The system prevents password theft by requiring users to change their passwords in time. The disadvantage of this method is that it increas...

AI Technical Summary

Problems solved by technology

However, the defect of this computer security protection method is that if an illegal user starts the system with other operating systems, the computer system still cannot be protected.

[0017] To sum up, although there are many methods of system identity authentication and access control, some of them are only protection methods at the operating system level, and some use frequent password changes to protect the system, which often does not work. really effective protection

Images