Creditability detection method of computer

Abstract

The invention relates to a creditability detection method of a computer. The method comprises the following steps of: building an annular trust chain, wherein the annular trust chain has end points which sequentially are a trusted cryptography module (TCM), a boot block of a basic input output system (BIOS), a main block, an operating system (OS) loader and an OS kernel; initializing integrity measurement from any one of the end points on the annular trust chain, and sequentially carrying out the integrity measurement along a clockwise direction or an anticlockwise direction of the annular trust chain until the measurement of all end points on the annular trust chain is finished; and after the measurement of the last end point which is subjected to the integrity measurement is finished, transmitting trust to the TCM, and finishing a final creditability report of a computer platform by the TCM. By the creditability detection method of the computer, the safety and validation flexibilityof the computer platform are improved, the maintenance updating cost of a computer system is reduced, and the expansion of the computer system can be facilitated.

Description

technical field [0001] The invention relates to the field of computers, in particular to a computer credibility detection method. Background technique [0002] In the information system based on network and data sharing, the most commonly used terminal computer system is a microcomputer. For the most commonly used microcomputers, only by comprehensively taking measures from chips, motherboards and other hardware, BIOS (Basic Input Output System), operating system and upper-layer application software, can its security be effectively improved. It is flawed to ensure the trustworthiness of software code dynamic running by security measurement, because the intruder can make the software in an untrusted state without destroying the static integrity of software code, so as to achieve the purpose of attack. It is based on this technical problem that the birth of trusted computing was born. The basic idea is to establish a trust in the computer system, and then pass the trust up th...

AI Technical Summary

Problems solved by technology

[0007] 1) In the existing chain of trust, if an endpoint on the link needs to be updated and maintained, all components under the endpoint need to be updated and adjusted, which greatly increases the maintenance and update cost of the system;

[0008] 2) The existing chain of trust is a one-way linear transfer process. Once an exception occurs at an endpoint on the link, the system may be paralyzed if there is no good exception handling mechanism;

[0009] 3) Once the traditional chain trust chain is established, the execution process must be strictly followed, and new components cannot be added dynamically, which is not convenient for system expansion

Images