UEFI (Unified Extensible Firmware Interface)-based software whole-process protection system and UEFI-based software whole-process protection method

Abstract

The invention relates to a UEFI (Unified Extensible Firmware Interface)-based software whole-process protection system and a UEFI-based software whole-process protection method, and belongs to the technical field of computer security. The system comprises a drive module, a client end main program and a server end. The method comprises the following steps of at the phase of starting up, detecting the client end main program in an operating system by the drive module in a firmware layer, and if the client end main program is tampered or deleted, recovering the client end main program; at the run phase of the operating system, protecting a protected program by the client end main program; during the run phase of the operating system, starting a downloader submodule in the operating system to detect whether the client end main program exists; if the client end main program does not exist, downloading and starting; then detecting whether the protected software exists or not, and if the protected software does not exist, downloading and starting. The system and the method can solve the problems that the protected program cannot be recovered and the protected software cannot be dynamically bound under the condition that storage spaces such as a hard disk and Flash are exchanged.

Description

technical field [0001] The invention belongs to the technical field of computer security, and relates to a UEFI-based firmware, a system and a method for protecting software during the process from booting to operating system operation. Background technique [0002] At present, in the field of computer security, the method of protecting software or processes is mainly to detect whether the protected software is in a legal running state through a daemon process running in an operating system. At present, there is also a method of receiving the verification data sent by the protected software in the operating system through peripheral devices to detect whether it is in a legal running state. [0003] In the operating system, protecting specific applications through software methods has the following disadvantages, mainly including: [0004] (1) After the computing device replaces the hard disk, Flash and other devices storing the protected program, it will not be able to auto...

AI Technical Summary

Problems solved by technology

[0013] The purpose of the present invention is to overcome the defects of the prior art, and propose a UEFI-based software whole-process protection system and method, which can solve the problem that the protected program and dynamic binding cannot be restored when the hard disk, Flash and other storage spaces are replaced. Problems with protected software

Images