Trusted booting method based on TrustZone system

Abstract

The invention discloses a trusted booting method based on a TrustZone system. The system is based on a system supporting a TrustZone technology, equipment of the system at least comprises memorizers,and the memorizers at least comprise an ROM and an RAM located in a security domain and a memorizer located in a generic domain. The method comprises the steps that S1, the system is started; S2, an ROM loading program located in the ROM is started; S3, loading verification is conducted on a bootstrap program of an operating system by the ROM loading program, and if the verification is passed, thebootstrap program of the operating system is started; S4, loading verification is conducted on a kernel program of the operating system by the bootstrap program of the operating system, and if the verification is passed, the kernel program of the operating system is started. According to the method, the trusted booted process of the system is deployed by using hardware technology characteristicsof a system on chip (SOC) of ARM, no additional trusted chip or trusted calculation module is needed, and cracked risks are reduced; the difficulty of circuit designing and the product cost are reduced.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a TrustZone-based system trusted startup method. Background technique [0002] In today's information age, protecting information security and providing a reliable computing environment has become an inevitable requirement of informatization. With the rapid evolution of malware, malware is using the underlying firmware and startup programs as the preferred attack targets. It is difficult to defend against viruses that attack the underlying firmware and startup programs. Therefore, it is particularly important to protect the credibility and security of the system startup process. [0003] Existing trusted boot technologies are basically based on an external trusted chip or trusted computing module to arm the entire trusted boot process. For example, the Chinese patent "Operating System Safe Startup Method and Device" with publication number CN 103927490 A...

AI Technical Summary

Problems solved by technology

On the one hand, the trusted chip or trusted computing module brings about an increase in cost. On the other hand, because it exists independently of the MCU, some external signals can be detected by related instruments, and there is a risk of being cracked.

Images