BIOS (Basic Input/Output System) self-updating protection system and BIOS self-updating protection method

Abstract

The invention discloses a BIOS (Basic Input / Output System) self-updating protection system and a BIOS self-updating protection method, belonging to the technical field of a computer system. The system comprises a CPU (central processing unit), a chip group matched with the CPU, a FLASH chip and a control module; a writing protection signal pin of the FLASH chip for storing the BIOS is connected with a control circuit pin, and whether the writing operation can be actuated or not is determined by a control circuit. When the updating operation is needed to be carried out on the BIOS, an updating marker register is rewritten, the writing protection signal pin is set to be a writable state by utilizing the control circuit, upgrading and updating is carried out in a BIOS layer after a computer is restarted, a signature verification mechanism is utilized in the updating process, and the legality of the updated BIOS is guaranteed. By utilizing the BIOS updating writing protection method, the access control of the BIOS is realized by virtue of a physical hardware way, the safety of the computer BIOS is guaranteed, the a BIOS code is prevented from being altered by a malicious virus, and the controllability of the computer system is improved.

Description

technical field [0001] The invention relates to the field of computer systems, in particular to a system and method for BIOS security update and tamper-proof protection. Background technique [0002] BIOS (Basic Input / Output System) is the basic component of the computer system. After the computer is powered on, the CPU and chipset are initialized through the BIOS, and the operating system is guided to provide users with normal use. [0003] The development of computing technology and application requirements have led to the widespread use of Flash chips for chips that store BIOS system firmware. The use of the Flash chip brings two prominent changes to the BIOS system: (1) the chip capacity for storing the BIOS increases; (2) the BIOS can be read and written in a pure software mode under the operating system environment. On the one hand, these two changes facilitate the online update and upgrade of the BIOS; on the other hand, the technology for attacking the BIOS system h...

AI Technical Summary

Problems solved by technology

On the one hand, these two changes facilitate the online update and upgrade of the BIOS; on the other hand, the technology for attacking the BIOS system has gradually matured, making it possible for third-party malicious actors to implant malicious codes, viruses, Trojan horses, etc. into the BIOS, posing a threat to computer security.

Mebromi in 2011 is a new rootkit for BIOS. It infects the BIOS chip of the computer motherboard and the MBR (Master Boot Region) of the hard disk, and then controls Windows system files to load malicious codes, so that the victimized user can reinstall the system or format the hard disk. Not even replacing the hard drive can completely erase it

The hardware design and implementation method of these two patents are all more complicated, and the implementation method of BIOS protection is all independent outside BIOS own code, has very big difference with hardware and software implementation method of the present invention

Images