Method, device, device and medium for secure booting of embedded devices

Abstract

The invention discloses a secure embedded equipment starting method and device, equipment and a medium, and aims at solving the problem that digital certificates in existing secure embedded equipmentstarting methods cannot be updated unless returning to factories. The secure starting method comprises the following steps of: starting a processor to obtain a digital certificate in a latest version;taking a storage area of the digital certificate and an equipment starting code in FLASH as a FLASH writing protection area, and triggering a self-lock circuit to lock the FLASH writing protection area; validating whether a kernel and an application of an operation system are integrated or not by adoption of the digital certificate in the FLASH writing protection area; and if both the kernel andthe application are integrated, starting embedded equipment. According to the method, the digital certification in the latest version is obtained after the processor is started, so that the problem that the digital certificate cannot be updated unless returning the factories; and the FLASH writing protection area is locked by utilizing the self-lock circuit, so that the aims of upgrading the digital certificate and preventing tamper are achieved and the starting security of the embedded equipment is improved.

Description

technical field [0001] The present invention relates to the technical field of secure boot, in particular to a secure boot method, device, device and medium for embedded devices. Background technique [0002] In the prior art, solutions related to secure booting of embedded devices include: [0003] Option 1: If figure 1 As shown, a processor (System-on-a-chip, SOC) includes a processor core and a security sub-module, and an external FLASH chip stores a device startup code (Bootloader), an operating system kernel, and a root file system. Its secure boot process is: when the processor is powered on, the processor core does not directly execute the Bootloader on the FLASH chip, but runs the security sub-module first; the security sub-module acts as the root of trust and verifies the root file through the digital signature algorithm System and operating system kernel; when the verification is passed, the processor core executes the Bootloader to start the embedded device, oth...

AI Technical Summary

Problems solved by technology

[0008] The present invention provides a method, device and equipment for securely starting an embedded device, which are used to solve the limitations in the scope of application of the method for securely starting an embedded device in the prior art, unstable embedded devices, and digital certificates except for returning to the factory. non-renewable problem

Images