Safe starting method and device and terminal

Abstract

The invention discloses a safe starting method. The safe starting method comprises the following steps: after a processor is electrified, controlling the processor to enter a resetting state by a programmable device; reading a to-be-loaded starting program and a to-be-loaded application program by the programmable device, and verifying whether the starting program and the application program are legal or not; if the starting program and the application program are legal, controlling the processor to enter a non-resetting state by the programmable device, and loading the starting program and the application program to begin to execute by the processor; and if at least one of the starting program and the application program is not legal, controlling the processor to maintain a resetting state by the programmable device. The invention further discloses a safe starting device and a terminal. The independent programmable device is used for verifying whether the to-be-loaded starting programand the to-be-loaded application program of the processor are legal or not, the verification and execution of codes of the processor are isolated completely, an independent data verifying channel isconstructed, and data integrity and safety in a terminal starting process are ensured.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular to a method and device for secure startup, and a terminal. Background technique [0002] Such as figure 1 As shown, in the power-on process of a traditional programmable logic controller (Programmable Logic Controller, PLC) processor, after the reset chip resets the processor, the processor directly reads from the non-volatile memory (usually flash memory (Flash) Chip) loads the startup program and executes the application program, and does not verify the legitimacy of these programs. This is a weak point in the integrity of information security. If the program code in Flash is tampered with in an unauthorized way, the PLC processor does not verify Under normal circumstances, loading and running will cause unexpected behavior, and in severe cases, the on-site production equipment will be in a dangerous operating state. [0003] In the application with the publ...

AI Technical Summary

Problems solved by technology

However, the secure boot verification function in this solution is implemented by the embedded processor executing the code in the external boot ROM, that is, the code in the external boot ROM is legal by default, created offline, and runs directly after power-on without further verification.

If the content in this ROM is tampered with or the ROM hardware is illegally replaced with ROM hardware containing illegal codes, the processor will still execute the codes in the ROM after power-on, which is a blind area for security verification

Images