Hardware trust measurement method implemented based on BMC chip
A BMC chip, reliability technology, applied in the field of information security, can solve the problems of inability to verify hardware components, inability to monitor the security of hardware components, etc., to achieve the effect of ensuring integrity and improving security
Inactive Publication Date: 2017-12-08
DATANG GAOHONG XINAN ZHEJIANG INFORMATION TECH CO LTD
View PDF3 Cites 5 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0002] In the field of trusted computing, the current hardware integrity measurement is completed through the BIOS or the operating system. The integrity of each hardware component can only be verified after the system is powered on or after entering the operating system. In the system startup interval between the system startup and the system startup, the integrity verification of the hardware components cannot be performed, and the security monitoring of the hardware components cannot be performed during the system startup interval.
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0017] The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments.
[0018] Such as figure 1 As shown, the hardware credibility measurement method based on the BMC chip disclosed in the present invention, through the power-on process of the BMC chip, the BMC chip performs integrity measurement on each hardware component, and realizes the security monitoring of each hardware component in the system startup interval . Specifically:
[0019] The BMC chip (which can also be stored in other storage units, and the BMC chip can be obtained from the storage unit) saves a hardware measurement whitelist, which includes the names of hardware components that need to be verified for integrity, and the corresponding hardware components. The benchmark value of , including the executable security policy that fails the validation.
[0020] The BMC chip is connected to each hardware component through a data line (serial data ...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a hardware trust measurement method implemented based on a BMC chip. During the electrifying and starting process of the BMC chip, the BMC chip performs integrity measurement on every hardware component, including acquisition of key information of every hardware information; if name of the acquired hardware component is not in a white list, or the acquired hardware component name is within the white list, the key information of the acquired hardware component is inconsistent with reference value corresponding to the hardware component in the white list, thus the integrity verification of the hardware component is not passed, and a safety strategy is executed. The method is started from the electrification of the BMC chip, performs the integrity verification on every hardware component by the BMC chip, and carries out the safety monitoring on the hardware component in a system starting zone; thus the safety of the system hardware is improved.
Description
technical field [0001] The invention relates to a hardware credibility measurement method realized based on a BMC chip, and belongs to the technical field of information security. Background technique [0002] In the field of trusted computing, the current hardware integrity measurement is completed through the BIOS or the operating system. The integrity of each hardware component can only be verified after the system is powered on or after entering the operating system. In the system startup interval between the system startup and the system startup, the integrity verification of the hardware components cannot be performed, and the hardware components cannot be safely monitored during the system startup interval. [0003] BMC (Baseboard Management Controller, Baseboard Management Controller) has functions such as local and remote diagnosis, console support, configuration management, hardware management, and troubleshooting. The characteristics of the BMC chip complete spec...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): G06F11/22
CPCG06F11/2205G06F11/2247G06F11/2273G06F11/2284
Inventor 郑驰梁思谦
Owner DATANG GAOHONG XINAN ZHEJIANG INFORMATION TECH CO LTD