Trustworthy measurement apparatus and method

Abstract

The invention provides a trustworthy measurement apparatus and method. The apparatus comprises a security management control unit and a trusted chip, wherein the security management control unit is connected with the trusted chip as well as a complex programmable logic device (CPLD) and a basic input output system flash read only memory (BIOS Flash ROM) on an external mainboard, and is used for sending a first power-on time sequence control instruction to the CPLD for preventing a CPU from being powered on after a trustworthy server is powered on, reading a BIOS Boot Block code in the BIOS Flash ROM, measuring the BIOS Boot Block code, sending a measurement result to the trusted chip, receiving a judgment result of the trusted chip and sending a corresponding second power-on time sequence control instruction to the CPLD; and the trusted chip is used for receiving the measurement result sent by the security management control unit, judging whether the BIOS Boot Block code is tampered, and sending the judgment result to the security management control unit. According to the scheme, the security of the trustworthy server can be improved.

Description

technical field [0001] The invention relates to the field of computer security, in particular to a trusted measurement device and method. Background technique [0002] A trusted server is a server established by building a trust chain from hardware to software, from the bottom layer to the top layer in order to provide users with safe and reliable computing services. Through the trust chain, the trust relationship can be extended to the entire computer platform. It The root of trust is based on the fact that only by ensuring the trustworthiness of the root of trust can the trustworthiness of other levels be guaranteed. The trust chain can obtain various data that affect the credibility of the platform through the trusted measurement mechanism, and judge the credibility of the platform by comparing these data with the expected data, so as to ensure the security and reliability of the trusted platform , to ensure that the user's business is running in a safe environment, and ...

AI Technical Summary

Problems solved by technology

[0004] The trust chain construction mechanism of passive measurement, through the passive measurement method, is characterized in that the trusted chip is passively invoked, and the first executed code in the BIOS is used as the trusted measurement root core (CRTM), and the trusted chip is passively invoked. The trust relationship is extended to other levels through the trusted measurement root core. The trusted measurement root core is stored in the BIOSFlashROM, and the BIOSFlashROM is a flash memory device, which is rewritable. Therefore, the trusted measurement root core may be tampered with. If the measurement root core is tampered with, the entire server is in an untrusted state. Therefore, through this trusted measurement method, the security of the trusted server is low

Images