Trusted verification method and system for starting loader under full virtualization environment

Abstract

The invention discloses a trusted verification method and a system for starting a loader under a full virtualization environment. The method includes the following steps: step one, deploying and generating a trusted reference value linked list; step two, copying the linked list to a designated position of the memory of an unprivileged domain virtual machine when the unprivileged domain virtual machine is started; step three, verifying Stage 1 of GRUB of the unprivileged domain virtual machine in Rombios of the unprivileged domain virtual machine; step four, verifying Start of the GRUB of the unprivileged domain virtual machine through the Stage 1 of the GRUB of the unprivileged domain virtual machine; step five, verifying Stage1_5 of the GRUB of the unprivileged domain virtual machine through the Start of the GRUB of the unprivileged domain virtual machine; and step six, verifying Stage2 of the GRUB of the unprivileged domain virtual machine through the Stage1_5 of the GRUB of the unprivileged domain virtual machine, wherein the Stage1_5 and the Stage2 are starting stages of the GRUB.

Description

technical field [0001] The invention relates to trusted verification, in particular to a method for realizing trusted verification based on BIOS interrupt call in a full virtualization environment, and belongs to the field of trusted computing. Background technique [0002] Full Virtualization (Full Virtualization), also known as the original virtualization technology, this technology uses a virtual machine to coordinate the guest operating system and the original hardware, and some protected instructions are captured and processed by the virtual machine management program (Hypervisor). The operating speed of full virtualization is better than that of hardware simulation. The biggest feature is that the guest operating system does not need any modification, so all software based on the guest operating system can run in the full virtualization environment without modification. Based on this advantage, integrating trusted verification technology into the full virtualization en...

AI Technical Summary

Problems solved by technology

[0003] In a fully virtualized environment, first of all, the boot loader is also used to load the guest operating system when the virtual machine is started. However, how to verify the integrity of the boot loader itself needs to be solved urgently; secondly, the code of the boot loader itself is very delicate, for example, a A boot loader called GRUB has only 512 bytes of Stage1 and Start function code after compilation, and it is more difficult to perform integrity verification in such a delicately designed code

Images