Trusted Boot Method of Operating System Based on Reverse Integrity Verification

Abstract

The invention discloses a method for performing trusted boot on an operation system based on re verse integrity verification. The method comprises two steps of performing pre-measurement, namely, performing conventional boot by the operation system until the operation system starts to receive user input, and loading a pre-measurement program of the system, reading information of all system boot stages sequentially and performing first trusted measurement respectively by a system pre-measurement program and writing a result serving a trusted boot measurement value into a storage unit; and performing reverse integrity verification, namely, booting again by the operation system until the operation system starts to receive user input, and loading a reverse integrity verification module and the storage unit, reading trusted boot measurement values of all system boot stages by the reverse integrity verification module, reading information of all system boot stages sequentially and performing second trusted measurement, comparing the result and the trusted measurement values, and if the result is not equal to the trusted boot measurement values, setting the state of the system to be not trusted; and if the result is equal to the trusted boot measurement values, entering the next stage until the measurement is finished, and setting the operation system to be trusted. The method has the advantages of flexibility and usability.

Description

technical field [0001] The invention relates to the field of computer information security, in particular to a trusted guiding method for an operating system. Background technique [0002] With the increasingly prominent security issues in computer systems, especially end systems, computer systems in network environments are facing a serious crisis of trust. The main causes of security problems in information systems are: there are design loopholes in the software and hardware structure of the host; there is no strict authentication and authorization control for legitimate users, resulting in the abuse of resources; malicious programs use system weaknesses to destroy and so on. To completely solve these problems, in the final analysis, it is necessary to solve the security problems of the end system from the system structure and establish a trusted computing environment for the system. Trusted Computing Platform technology is born from this. The Trusted Computing Platform ...

AI Technical Summary

Problems solved by technology

However, there are not many computing devices equipped with TPM chips at present, which limits the application range of trusted computing technology.

Images