OS secure startup method and device

Abstract

The embodiment of the invention provides an OS secure startup method and device. The method includes the steps that signature verification is conducted on the UEFI BIOS, and signature verification is conducted on guidance programs of an OS if the UEFI BIOS passes the signature verification; the guidance programs, passing the signature verification, of the OS are measured through a secure hash algorithm, and the obtained measurement result serves as a trust root; the trust root serves as an initial value, and multiple configuration files of the OS are sequentially measured; the obtained final measurement result is compared with an expected secure value, and whether the OS is safely started or not is verified. By means of the OS secure startup method and device, security is verified through the method that the guidance programs of the OS pass the digital signature verification, the guidance programs, measured to be secure, of the OS generate the trust root, the OS is measured level by level according to the trust root, a trusted chain extends to the OS from the BIOS, and the problem that in the prior art, security of programs started after the Boot Loader can not be ensured is solved.

Description

technical field [0001] The embodiments of the present invention relate to the field of computer technology, and in particular, to a method and device for safely starting an operating system. Background technique [0002] In today's information age, protecting information security and providing a reliable computing environment has become an inevitable requirement of informatization. With the rapid evolution of malicious software, malicious software is taking Basic Input Output System (BIOS for short) as the preferred attack target. It is difficult to defend against viruses that attack the underlying firmware and startup programs. Therefore, protecting the computer startup process Credibility and security are particularly important. [0003] The BIOS is solidified in a Read-Only Memory (ROM) chip on the computer motherboard, which stores the most important basic input and output programs, power-on self-test programs, system self-start programs, and menu programs of the comput...

AI Technical Summary

Problems solved by technology

[0005] Embodiments of the present invention provide a method and device for safely starting an operating system to overcome the inability to guarantee the safety of the boot program after BootLoader in the prior art

Images