Trusted startup method for BMC firmware system security

Abstract

The invention discloses a trusted startup method for BMC firmware system security, belongs to the field of trusted startup, and is characterized in that trusted measurement is performed on a BMC without a trusted cryptographic module according to a file system, a bootstrap program and a kernel in sequence, and then trusted startup is performed on the BMC firmware system. The BMC processor is guided to measure and obtain an actual measurement reference value of the file system according to a trusted computing module preset in a nonvolatile storage area b and a factory file system standard reference value imported by a developer in advance by means of a repositionable function program arranged in the nonvolatile storage area a, if not, an alarm is given, and if yes, it is trustful; and verifying the bootstrap program and the kernel according to the same method, and once the bootstrap program and the kernel are credible, directly entering a starting stage of the BMC firmware. Based on the basic fact that the attack resistance of the kernel plug-in including a file system is weaker than that of a bootstrap program and a kernel, the potential safety hazard of system equipment caused by a method of starting while checking or checking after starting is overcome in advance.

Description

technical field [0001] The invention relates to the field of information security, in particular to a trusted startup method for BMC firmware system security. Background technique [0002] At present, the Baseboard Management Controller (BMC, hereinafter referred to as BMC) has become a key component of the server. It is a dedicated chip controller that does not depend on the server's processor, basic input and output The system (Basic Input Output System, BIOS, hereinafter referred to as BIOS) or operating system works. It has its own firmware, power supply, hardware address and network interface. It is an agentless management subsystem that runs independently in the server. As a platform management system, BMC has a series of monitoring and control functions, mainly by monitoring the server's temperature, voltage, fan, power supply, etc., and making corresponding adjustments to ensure that the server is in a healthy state. [0003] During the server startup process, the B...

AI Technical Summary

Problems solved by technology

[0007] The BMC trusted start-up scheme proposed in the above-mentioned patents either follows the idea of ​​measuring while starting, and cannot detect the problem in advance; or follows the idea of ​​starting first and then measuring, but compared with the idea of ​​measuring first and then starting, the credibility cannot be achieved. Guaranteed; or requires an additional trusted cryptographic module, which is difficult to apply to ordinary servers that do not have a trusted cryptographic module

Images