A method and device for controlling credible starting of a server

Abstract

The embodiment of the invention provides a method and device for controlling credible starting of a server. The method comprises the steps that if a BIOS integrity reference value of a target server exists in a BMC Flash of the target server, carrying out decryption operation on the reference value in the BMC Flash based on an SM4 symmetric cryptographic algorithm, and obtaining a decrypted reference value, Wherein the integrity reference value is obtained by measuring a complete code block of the BIOS in advance; Calculating a current execution code block of the BIOS in the target server based on an SM3 hash algorithm to obtain a metric value of the current execution code block; And if the metric value of the current execution code block is the same as the decrypted reference value, usingthe BMC in the target server to guide the BIOS to start. The method provided by the embodiment of the invention is simple, the credibility of the BIOS during starting can be effectively guaranteed, the original hardware structure of the BIOS can be kept unchanged without increasing any hardware cost, and the method has universal adaptability.

Description

technical field [0001] The embodiments of the present invention belong to the technical field of computer security, and more specifically, relate to a method and device for controlling trusted startup of a server. Background technique [0002] Today computer systems are widely used in people's daily life. The startup process of the computer is to run the BIOS (Basic Input Output System, Basic Input Output System) first, detect and configure the computer system, and then load the operating system and run the underlying firmware. The BIOS in a computer is usually stored in a non-volatile storage container such as flash memory, and the BIOS is often the target of viruses and hackers. At the same time, as a large computer, the server's BIOS is facing security issues. With the advent of big data and cloud computing, the security issues of BIOS are particularly prominent. [0003] BIOS security threats are divided into internal threats and external threats. Internal threats suc...

AI Technical Summary

Problems solved by technology

The protection of BIOS based on trusted metrics is mainly divided into protection based on hardware such as TPM (Trusted Platform Module, Trusted Platform Module), TCM (Trusted Cryptography Module, Trusted Cryptographic Module) or other trusted firmware. Call the cryptographic algorithm inside the hardware to verify the code inside the BIOS. This type of method relies on additional hardware modules during use, and additional trusted hardware modules need to be added, which will increase hardware overhead and cost, and even need to be modified The underlying architecture of the server increases the difficulty of development

Images