A version verification method, device and terminal equipment

Abstract

A version check method, apparatus and terminal device, used for preventing an attacker from using versions having security vulnerabilities to carry out security attacks so as to improve system security. In the method, a version number of each version has a corresponding check bit, and forbidden information and available information of a version are indicated by means of the bits; when acquiring a first version, a check bit corresponding to a version number is first determined according to the version number of the version; if the check bit corresponding to the version number of the version is a first numerical value, the version is determined to be forbidden and the check has not passed; and if the check bit corresponding to the version number of the version is a second numerical value, then the version is determined to be available and the check has passed. By means of said method, a security check may be conducted on the versions, and versions which do not pass the check may not be used, thus an attacker may be prevented from using versions having security vulnerabilities to carry out security attacks.

Description

technical field [0001] The present invention relates to the field of computers, in particular to a version checking method, device and terminal equipment. Background technique [0002] System security is a set of software and hardware solutions to support secure boot and ensure the system runs in a trusted environment. A system security solution based on the ARM architecture is usually combined with Secure Boot and Trust Zone technologies. Secure Boot is the basis of system security and is responsible for the initialization process of the entire security system. According to the trusted integrity theory, the secure boot of the system is the root of trust for the security of the entire system. Only when the security of the system boot is guaranteed can the security of other components of the system be guaranteed. [0003] When the system is safely started, the system adopts a step-by-step authentication signature, and after the authentication is passed, the subsequent proces...

AI Technical Summary

Problems solved by technology

[0004] If the off-chip security version has security holes, it needs to be upgraded. Suppose the version with security holes is VerX, the upgraded version is VerY, and VerX has security holes. After the upgrade, the attacker can roll back the version to VerX and exploit the holes. Conduct security attacks, so there is a system security risk

Images