Trusted verification method and system for boot loader in full virtualization environment

Abstract

The invention discloses a trusted verification method and a system for starting a loader under a full virtualization environment. The method includes the following steps: step one, deploying and generating a trusted reference value linked list; step two, copying the linked list to a designated position of the memory of an unprivileged domain virtual machine when the unprivileged domain virtual machine is started; step three, verifying Stage 1 of GRUB of the unprivileged domain virtual machine in Rombios of the unprivileged domain virtual machine; step four, verifying Start of the GRUB of the unprivileged domain virtual machine through the Stage 1 of the GRUB of the unprivileged domain virtual machine; step five, verifying Stage1_5 of the GRUB of the unprivileged domain virtual machine through the Start of the GRUB of the unprivileged domain virtual machine; and step six, verifying Stage2 of the GRUB of the unprivileged domain virtual machine through the Stage1_5 of the GRUB of the unprivileged domain virtual machine, wherein the Stage1_5 and the Stage2 are starting stages of the GRUB.

Description

Technical field [0001] The invention relates to credible verification, in particular to a method for realizing credible verification based on BIOS interrupt calling in a full virtualized environment, and belongs to the field of trusted computing. Background technique [0002] Full virtualization (Full Virtualization), also known as raw virtualization technology, uses virtual machines to coordinate guest operating systems and raw hardware. Some protected instructions are captured and processed by a hypervisor. The running speed of full virtualization is better than hardware simulation. The biggest feature is that the guest operating system does not need to be modified, so all the software based on the guest operating system can run in a fully virtualized environment without modification. Based on this advantage, integrating trusted verification technology into a fully virtualized environment is a key means to solve the security, integrity, and credibility of software operation in ...

AI Technical Summary

Problems solved by technology

[0003] In a fully virtualized environment, first of all, the boot loader is also used to load the guest operating system when the virtual machine is started. However, how to verify the integrity of the boot loader itself needs to be solved urgently; secondly, the code of the boot loader itself is very delicate, for example, a A boot loader called GRUB has only 512 bytes of Stage1 and Start function code after compilation, and it is more difficult to perform integrity verification in such a delicately designed code

Images