Multi-CPU trusted platform and starting method thereof

Abstract

The invention provides a multi-channel CPU trusted platform and a starting method thereof, relates to the field of trusted computers, and solves the problem that the starting time of the trusted platform is multiplied along with the increase of the number of channels of CPUs in a current multi-channel CPU measurement method. The multi-channel CPU trusted platform is provided with a trusted measurement control circuit which is connected with a TCM and a CPLD. A trusted measurement control program is also arranged in the platform and works on the TCM and the CPLD; when the multi-channel CPU trusted platform is reset and starts to start, the program keeps the states of the BIOSs consistent, controls the CPLD to collect and compare the BIOS firmware data of the BIOSs, calls the trusted measurement service of the TCM to implement trusted measurement on the BIOS firmware of the BIOSs after the BIOS firmware data of the BIOSs are consistent, and performs channel gating through the CPLD after the measurement succeeds to finish the starting of the platform; according to the method, the measurement time of the trusted platform can be shortened and the user experience can be effectively improved on the premise of ensuring the security of the platform.

Description

Technical Field

[0001] The present invention relates to the field of trusted computers and is applied to multi-way CPU scenarios, and in particular to a multi-way CPU trusted platform and a startup method thereof. Background Art

[0002] With the rapid development of information technology, the security of computer systems has become an increasingly important issue. In order to ensure the integrity and security of the system from startup to operation, trusted computing technology has emerged, among which Trusted Platform Module TPM and Trusted Computing Base TCB are widely used as key technologies. Trust measurement is one of the core links of trusted computing. It verifies the status of hardware and software to ensure that the system has not been modified or maliciously invaded by unauthorized means.

[0003] Traditional measurement processes usually rely on TPM or TCM (Trusted Computing Module), which is also a variant of the Trusted Platform Module. During the system startup process, the trusted measurement of key hardware information and operating system core files is initiated by executing the measurable core root CRTM stored in the Trusted Platform Module TCM. In systems with multi-way CPU architectures, implementing trusted measurement faces additional challenges. Traditional methods combine complex programmable logic devices (CPLDs) to measure the trusted firmware of multiple CPUs. This process involves measuring the BIOS firmware of each CPU separately to ensure that they have not been tampered with before startup.

[0004] In a typical multi-CPU trusted measurement solution, the TCM first reads the BIOS firmware data of the first CPU through the CPLD and performs measurement. Once the measurement is successful, the process will be repeated for each subsequent CPU until all BIOS firmware are verified to be correct. At this point, the TCM sends a signal to the CPLD to allow each CPU to access its corresponding BIOS firmware data, thereby starting the power-on startup process.

[0005] However, this method of measuring one by one has significant defects, especially when there are a large number of CPUs. As the number of CPU paths increases, the time cost of the entire measurement process rises sharply, significantly prolonging the system startup time, which not only reduces the user experience, but also may have an adverse impact on application scenarios with high real-time and high availability requirements.

[0006] Given the limitations of existing technologies, it is urgent to develop a new multi-CPU trust measurement method to solve the problem of long startup time while ensuring that the system's trustworthiness and security are not affected. The ideal method should be able to effectively shorten the measurement time and improve the overall system performance without sacrificing security. Summary of the invention

[0007] Based on the current status in the background technology, the purpose of the present invention is to solve the problem that the startup time of the trusted platform will increase exponentially with the increase of the number of CPUs in the current multi-channel CPU measurement method, and therefore a multi-channel CPU trusted platform and a startup method thereof are proposed. The present invention reads the BIOS firmware data corresponding to each CPU into the CPLD and performs a consistency comparison. If the comparison is successful, the BIOS firmware data is transmitted to the TCM for measurement. After the measurement is successful, each CPU starts accordingly. Through the solution of the present invention, the measurement time of the trusted platform can be shortened while ensuring the security of the platform, and the user experience can be effectively improved.

[0008] The present invention adopts the following technical solutions to achieve the purpose:

[0009] A multi-channel CPU trusted platform, the platform has a trusted measurement control circuit, the trusted measurement control circuit is connected to a trusted platform module TCM and a complex programmable logic device CPLD; the platform is also built with a trusted measurement control program, the trusted measurement control program works on the TCM and the CPLD; the trusted measurement control program is used to keep the BIOS states corresponding to each CPU consistent when the multi-channel CPU trusted platform is reset and starts to start, control the CPLD to collect and compare the BIOS firmware data corresponding to each CPU, call the trusted measurement service of the TCM to implement trusted measurement on one of the BIOS firmware after the comparison is consistent, and perform channel gating through the CPLD after the measurement is successful, so as to complete the startup of the multi-channel CPU trusted platform.

[0010] Specifically, the trusted platform module TCM is used to establish a computing platform task chain with the TCM chip as the trust root, and control the startup, I / O interface and system configuration of the computing platform through the TCM chip; the trusted platform module TCM is connected to the motherboard, trusted firmware and peripheral devices, and together provides trusted measurement, trusted storage and trusted reporting services for the system software and application software using the multi-channel CPU trusted platform.

[0011] Specifically, the trusted measurement control program is supported by multiple hardware modules, which are: CRTM module, CPLD driver module, BIOS firmware driver module, control signal generation module, logic control circuit driver module and programmable control circuit driver module.

[0012] Furthermore, the trusted measurement control program is used for: when the multi-CPU trusted platform is reset, TCM first executes CRTM, and sends a status unification instruction to the BIOS firmware through CPLD, so that the status of the BIOS firmware corresponding to each CPU is consistent; then, TCM sends an instruction to collect the BIOS firmware data corresponding to each CPU to CPLD, and CPLD performs data collection; after the data collection is completed, CPLD compares the BIOS firmware data corresponding to each CPU, if the comparison is consistent, TCM calls the trusted measurement service, implements trusted measurement on one of the BIOS firmware, and sends a channel selection instruction to CPLD after the measurement is successful, and starts the multi-CPU trusted platform.

[0013] The present invention also provides a method for starting a multi-channel CPU trusted platform, the hardware basis of the method is the aforementioned multi-channel CPU trusted platform; the method comprises the following steps:

[0014] S1. The multi-channel CPU trusted platform is powered on and started. The trusted measurement control circuit is used to maintain each CPU, so that the TCM is started first as the trusted root to obtain the trusted measurement right.

[0015] S2. TCM sends a reset signal to each CPU through CPLD. After receiving the reset signal, each CPU does not read the corresponding BIOS firmware data. At the same time, it sends a status unified instruction to the BIOS firmware to keep the status of the BIOS firmware corresponding to each CPU consistent.

[0016] S3, TCM sends a command to CPLD to collect BIOS firmware data corresponding to each CPU, and CPLD collects data. After the collection is completed, CPLD compares the BIOS firmware data corresponding to each CPU;

[0017] S4, obtaining the comparison result. When the BIOS firmware data corresponding to each CPU is consistent, the CPLD sends the BIOS firmware data corresponding to any CPU to the TCM, and the TCM measures the BIOS firmware data.

[0018] S5. Obtain the measurement result. When the measurement is successful, TCM sends a channel selection instruction to CPLD, and each CPU starts to read its corresponding BIOS firmware data. The trusted measurement right of TCM is passed to the BIOS firmware. The BIOS firmware completes the measurement work and starts the multi-CPU trusted platform.

[0019] In summary, due to the adoption of this technical solution, the beneficial effects of the present invention are as follows:

[0020] Under the premise of ensuring the security of the platform, the present invention can significantly shorten the measurement time of the trusted platform, especially for a multi-way CPU architecture with the same BIOS firmware. By performing data comparison in the CPLD, only the BIOS firmware of one CPU needs to be measured to confirm the security status of all CPUs, thereby avoiding redundant measurement of each CPU and significantly improving the startup speed.

[0021] The present invention shortens the startup time while maintaining the security and reliability of the measurement process. Once the data comparison in the CPLD fails, the abnormal information is immediately fed back to the trusted platform module TCM, and the TCM takes corresponding measures, such as shutting down the trusted platform to prevent potential security threats from entering the system, thereby ensuring the rigor and reliability of the entire measurement process.

[0022] By reducing the trusted measurement time, the present invention significantly improves the user experience on a multi-way CPU trusted computing platform with a high security level. The fast startup capability is particularly important for applications with high real-time and response speed requirements, such as financial transactions, cloud services, and large-scale data processing.

[0023] The method of the present invention effectively solves the problem of long startup time of multi-channel CPU trusted platform by optimizing the data comparison strategy in CPLD while keeping the existing TCM performance unchanged. This reduces the cost of technology upgrade and is easy to implement on the existing trusted computing infrastructure, while also providing flexible space for future technology evolution. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 It is a schematic diagram of a trust measurement control circuit of a multi-channel CPU trusted platform of the present invention;

[0025] Figure 2 It is a schematic block diagram of TCM of a multi-channel CPU trusted platform of the present invention;

[0026] Figure 3 It is a functional block diagram of the trusted measurement control program of the multi-channel CPU trusted platform of the present invention;

[0027] Figure 4 The figure is a schematic diagram of the multi-CPU trusted platform BIOS firmware measurement process in the method of the present invention. DETAILED DESCRIPTION

[0028] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the parts of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0029] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0030] Example 1

[0031] A multi-channel CPU trusted platform, the platform has a trusted measurement control circuit, which can be synchronously referenced Figure 1 Schematic diagram of the connection relationship; the trusted measurement control circuit is connected to the trusted platform module TCM and the complex programmable logic device CPLD; the platform also has a built-in trusted measurement control program, which works on the TCM and CPLD; the trusted measurement control program is used to keep the BIOS states corresponding to each CPU consistent when the multi-CPU trusted platform is reset and starts to start, control the CPLD to collect the BIOS firmware data corresponding to each CPU and compare them, call the trusted measurement service of the TCM to implement trusted measurement on one of the BIOS firmware after the comparison is consistent, and after the measurement is successful, perform channel selection through the CPLD to complete the startup of the multi-CPU trusted platform.

[0032] The Trusted Platform Module TCM is used to establish a computing platform task chain with the TCM chip as the trust root, and to control the startup, I / O interface and system configuration of the computing platform through the TCM chip; the Trusted Platform Module TCM is connected to the motherboard, trusted firmware and peripheral devices, and together provides trusted measurement, trusted storage and trusted reporting services for the system software and application software using the multi-channel CPU trusted platform.

[0033] In this embodiment, Figure 2 As shown, the trusted platform module TCM includes multiple functional components, namely: execution engine, control decision engine, non-volatile / volatile storage unit, true random number generator, algorithm engine, platform configuration register PCR and timer. The address space of each functional component is mapped by the input and output bridge unit.

[0034] Specifically, the execution engine is used by the multi-way CPU trusted platform to execute instructions issued by TCM; the control decision engine is used by the multi-way CPU trusted platform to judge requests to use TCM; the non-volatile / volatile storage unit is used to store data inside TCM; the true random number generator is used to generate random numbers inside TCM; the algorithm engine is used to execute algorithms inside TCM; the platform configuration register PCR is used by TCM to store measurement values ​​of the multi-way CPU trusted platform; and the timer is used for TCM timing.

[0035] In this embodiment, Figure 3 As shown, the trusted measurement control program is supported by multiple hardware modules, which are: CRTM module, CPLD driver module, BIOS firmware driver module, control signal generation module, logic control circuit driver module and programmable control circuit driver module.

[0036] Specifically, the CRTM module is used to provide an executable and measurable core root CRTM; the CPLD driver module is used for communication between TCM and CPLD; the BIOS firmware driver module is used for communication between CPLD and BIOS firmware; the control signal generation module is used to generate corresponding control signals according to specific instructions of TCM; the logic control circuit driver module is used for communication between TCM and the logic control circuit in the trusted measurement control circuit; the programmable control circuit driver module is used for communication between CPLD and the programmable control circuit in the trusted measurement control circuit.

[0037] The trusted measurement control program is the key to starting the multi-channel CPU trusted platform. When the multi-channel CPU trusted platform is reset, TCM first executes CRTM and sends a status unification instruction to the BIOS firmware through CPLD to keep the status of the BIOS firmware corresponding to each CPU consistent; then, TCM sends an instruction to collect the BIOS firmware data corresponding to each CPU to CPLD, and CPLD performs data collection; after the data collection is completed, CPLD compares the BIOS firmware data corresponding to each CPU. If the comparison is consistent, TCM calls the trusted measurement service and implements trusted measurement on one of the BIOS firmware. After the measurement is successful, it sends a channel selection instruction to CPLD to start the multi-channel CPU trusted platform.

[0038] For abnormal startup situations, this embodiment adopts the following solutions, all of which involve the application of a trusted measurement control program: after data collection is completed, the CPLD compares the BIOS firmware data corresponding to each CPU. If the number of inconsistencies in the comparison reaches a preset comparison threshold, the TCM shuts down the multi-CPU trusted platform; if there is an inconsistency in the comparison but the number does not reach the preset comparison threshold, the TCM performs a trusted recovery of the BIOS firmware and instructs the CPLD to re-collect data after the recovery is completed.

[0039] Moreover, after the comparison of the BIOS firmware data corresponding to each CPU is consistent, TCM calls the trusted measurement service. When implementing trusted measurement on one of the BIOS firmware, if the number of measurement failures reaches the preset measurement threshold, TCM shuts down the multi-CPU trusted platform; if there is a measurement failure but the number does not reach the preset measurement threshold, TCM performs trusted recovery of the BIOS firmware and instructs CPLD to re-collect data after the recovery is completed.

[0040] In this embodiment, the preset comparison threshold and measurement threshold are preferably set to 3 times.

[0041] Example 2

[0042] On the basis of Example 1, this example provides a method for starting a multi-way CPU trusted platform, and the hardware basis of the method is the multi-way CPU trusted platform in Example 1.

[0043] Can be combined Figure 4 The method comprises the following steps:

[0044] S1. The multi-channel CPU trusted platform is powered on and started. The trusted measurement control circuit is used to maintain each CPU, so that the TCM is started first as the trusted root to obtain the trusted measurement right.

[0045] S2. TCM sends a reset signal to each CPU through CPLD. After receiving the reset signal, each CPU does not read the corresponding BIOS firmware data. At the same time, it sends a status unified instruction to the BIOS firmware to keep the status of the BIOS firmware corresponding to each CPU consistent.

[0046] S3, TCM sends a command to CPLD to collect BIOS firmware data corresponding to each CPU, and CPLD collects data. After the collection is completed, CPLD compares the BIOS firmware data corresponding to each CPU;

[0047] S4, obtaining the comparison result. When the BIOS firmware data corresponding to each CPU is consistent, the CPLD sends the BIOS firmware data corresponding to any CPU to the TCM, and the TCM measures the BIOS firmware data.

[0048] S5. Obtain the measurement result. When the measurement is successful, TCM sends a channel selection instruction to CPLD, and each CPU starts to read its corresponding BIOS firmware data. The trusted measurement right of TCM is passed to the BIOS firmware. The BIOS firmware completes the measurement work and starts the multi-CPU trusted platform.

[0049] In step S4, when the number of inconsistencies in the BIOS firmware data comparisons corresponding to each CPU reaches the preset comparison threshold (3 times), the TCM shuts down the multi-CPU trusted platform; if there is an inconsistency in the comparison but the number does not reach the preset comparison threshold, the TCM performs a trusted recovery of the BIOS firmware, and returns to step S3 after the recovery is completed, instructing the CPLD to re-collect data.

[0050] In step S5, when the measurement fails, if the number of measurement failures reaches the preset measurement threshold (3 times), the TCM shuts down the multi-channel CPU trusted platform; if there is a measurement failure but the number of times does not reach the preset measurement threshold, the TCM performs a trusted recovery of the BIOS firmware and instructs the CPLD to re-collect data after the recovery is completed.

Claims

1. A multi-CPU trusted platform, characterized by: The platform has a trusted measurement control circuit, which is connected to a trusted platform module TCM and a complex programmable logic device CPLD; the platform also has a built-in trusted measurement control program, which works on the TCM and the CPLD; the trusted measurement control program is used to keep the BIOS states corresponding to each CPU consistent when the multi-CPU trusted platform is reset and starts to start, control the CPLD to collect and compare the BIOS firmware data corresponding to each CPU, call the trusted measurement service of the TCM to implement trusted measurement on one of the BIOS firmware after the comparison is consistent, and perform channel selection through the CPLD after the measurement is successful, so as to complete the startup of the multi-CPU trusted platform.

2. The multi-CPU trusted platform according to claim 1, characterized in that: The Trusted Platform Module (TCM) is used to establish a computing platform task chain with the TCM chip as the root of trust, and to control the startup, I / O interface, and system configuration of the computing platform through the TCM chip. The trusted platform module TCM is connected to the mainboard, trusted firmware and peripheral devices, and together provides trusted measurement, trusted storage and trusted reporting services for system software and application software using a multi-channel CPU trusted platform.

3. The multi-CPU trusted platform according to claim 2, characterized in that: The trusted platform module TCM includes multiple functional components, namely: execution engine, control decision engine, non-volatile / volatile storage unit, true random number generator, algorithm engine, platform configuration register PCR and timer. The address space of each functional component is mapped by the input and output bridge unit; Among them, the execution engine is used for the multi-way CPU trusted platform to execute the instructions issued by TCM; the control decision engine is used for the multi-way CPU trusted platform to judge the request to use TCM; the non-volatile / volatile storage unit is used to store the internal data of TCM; the true random number generator is used to generate random numbers inside TCM; the algorithm engine is used to execute the internal algorithm of TCM; the platform configuration register PCR is used by TCM to store the measurement value of the multi-way CPU trusted platform; the timer is used for TCM timing.

4. The multi-CPU trusted platform according to claim 1, characterized in that: The trusted measurement control program is supported by multiple hardware modules, including: CRTM module, CPLD driver module, BIOS firmware driver module, control signal generation module, logic control circuit driver module and programmable control circuit driver module. Among them, the CRTM module is used to provide an executable and measurable core root CRTM; the CPLD driver module is used for communication between TCM and CPLD; the BIOS firmware driver module is used for communication between CPLD and BIOS firmware; the control signal generation module is used to generate corresponding control signals according to specific instructions of TCM; the logic control circuit driver module is used for communication between TCM and the logic control circuit in the trusted measurement control circuit; the programmable control circuit driver module is used for communication between CPLD and the programmable control circuit in the trusted measurement control circuit.

5. The multi-CPU trusted platform according to claim 4, characterized in that: The trusted measurement control program is used for: when the multi-channel CPU trusted platform is reset, TCM first executes CRTM, and sends a state unification instruction to the BIOS firmware through CPLD, so that the state of the BIOS firmware corresponding to each CPU is consistent; then, TCM sends an instruction to collect the BIOS firmware data corresponding to each CPU to CPLD, and CPLD performs data collection; After data collection is completed, CPLD compares the BIOS firmware data corresponding to each CPU. If the comparison is consistent, TCM calls the trusted measurement service to implement trusted measurement on one of the BIOS firmware. After the measurement is successful, it sends a channel selection instruction to CPLD to start the multi-CPU trusted platform.

6. The multi-CPU trusted platform according to claim 5, characterized in that: The trusted measurement control program is also used for: after data collection is completed, CPLD compares the BIOS firmware data corresponding to each CPU. If the number of inconsistencies in the comparison reaches the preset comparison threshold, TCM shuts down the multi-CPU trusted platform; if there is an inconsistency in the comparison but the number does not reach the preset comparison threshold, TCM performs a trusted recovery of the BIOS firmware and instructs CPLD to re-collect data after the recovery is completed.

7. The multi-CPU trusted platform according to claim 5, characterized in that: The trusted measurement control program is also used to: after the BIOS firmware data corresponding to each CPU is compared and consistent, TCM calls the trusted measurement service, and when implementing trusted measurement on one of the BIOS firmwares, if the number of measurement failures reaches a preset measurement threshold, TCM shuts down the multi-CPU trusted platform; If there are measurement failures but the number of measurement failures does not reach the preset measurement threshold, the TCM performs a trusted recovery of the BIOS firmware and instructs the CPLD to re-collect data after the recovery is complete.

8. The multi-CPU trusted platform according to claim 1, characterized in that: The trusted measurement control circuit is composed of a logic control circuit connected to the TCM, a programmable control circuit connected to the CPLD, and an interface circuit on the mainboard connected to the TCM; both the TCM and the CPLD control the reset signal of each CPU and the data access channel of each CPU to the BIOS firmware through the trusted measurement control circuit, thereby controlling the entire trusted measurement process; when the BIOS firmware corresponding to any CPU is damaged or abnormal, the TCM controls the reset signal of the CPU to put it in a reset state, and controls the access channel of its BIOS firmware through the CPLD. At this time, the trusted measurement control circuit is used to control the entire trusted measurement process based on the control signal received from the TCM during the measurement process.

9. A method for starting a multi-CPU trusted platform, characterized in that: The hardware basis of the method is the multi-way CPU trusted platform as claimed in claim 1; the method comprises the following steps: S1. The multi-channel CPU trusted platform is powered on and started. The trusted measurement control circuit is used to maintain each CPU, so that the TCM is started first as the trusted root to obtain the trusted measurement right. S2. TCM sends a reset signal to each CPU through CPLD. After receiving the reset signal, each CPU does not read the corresponding BIOS firmware data. At the same time, it sends a status unified instruction to the BIOS firmware to keep the status of the BIOS firmware corresponding to each CPU consistent. S3, TCM sends a command to CPLD to collect BIOS firmware data corresponding to each CPU, and CPLD collects data. After the collection is completed, CPLD compares the BIOS firmware data corresponding to each CPU; S4, obtaining the comparison result. When the BIOS firmware data corresponding to each CPU is consistent, the CPLD sends the BIOS firmware data corresponding to any CPU to the TCM, and the TCM measures the BIOS firmware data. S5. Obtain the measurement result. When the measurement is successful, TCM sends a channel selection instruction to CPLD, and each CPU starts to read its corresponding BIOS firmware data. The trusted measurement right of TCM is passed to the BIOS firmware. The BIOS firmware completes the measurement work and starts the multi-CPU trusted platform.

10. The method for starting a multi-CPU trusted platform according to claim 9, characterized in that: In step S4, when the number of inconsistencies in the BIOS firmware data comparisons corresponding to each CPU reaches a preset comparison threshold, the TCM shuts down the multi-CPU trusted platform; if there is an inconsistency in the comparison but the number does not reach the preset comparison threshold, the TCM performs a trusted recovery of the BIOS firmware, and after the recovery is completed, returns to step S3 to instruct the CPLD to re-collect data; In step S5, when the measurement fails, if the number of measurement failures reaches a preset measurement threshold, the TCM shuts down the multi-CPU trusted platform; If there are measurement failures but the number of measurement failures does not reach the preset measurement threshold, the TCM performs a trusted recovery of the BIOS firmware and instructs the CPLD to re-collect data after the recovery is complete.

Images