Computer system of bottom identity identification and method therefor

Abstract

A computer system and method for the bottom identity authentication, it contains the trigger unit for the identity authentication of the users of EFI (21), The identification unit of the identity of the users of EFI (22), the certification unit of the identity of the users of EFI (23), and the management unit of the safety for the EFI. The trigger unit for the identity authentication of the users of EFI (21) will be started after the users has started the computer system and finished the initialization of the platform. It will judge the safe grade of the computer system and enter directly the start of the operation system or execute the next step according to the safe grade assigned. It will remind the users to execute the identity authentication, and the users must input information. And then the identification unit of the identity of the users of EFI (22) will be started to obtain the identification information of the users. The certification unit of the identity of the users of EFI (23) will be activated to verify the legitimacy of the identity information of the user. The operation system will be started if the users is legitimate, otherwise, the operation of the user will be refused and not to start the operation system. The method is easy and useful, and has some advantages, such as the supporting function and the applicability of it are very strong.

Description

technical field [0001] The invention relates to the field of computer applications, in particular to a bottom-layer identity authentication computer system and method. Background technique [0002] At present, computer network technology has widely affected all aspects of individuals and enterprises, and the demand for computer security has also been further improved. Among them, user identity authentication is one of the important mechanisms to realize computer security. User identity authentication, also known as user authentication, means that the user submits his identity certificate to the service system in a safe way, and the service system confirms whether the user's identity is true, and then allows the user to legally access the computer. Records, identity authentication usually adopts local authentication and remote authentication. In remote authentication, the database information that guarantees legal authentication is stored on a secure remote server. The "remot...

AI Technical Summary

Problems solved by technology

[0008] Defect 1: Does not support the network remote authentication function of the BIOS layer

[0009] Defect 2: In the traditional BIOS, the implementation method of adding hardware device interfaces is more complicated

Due to the historical principles of traditional BIOS, the scalability of network support was not considered at the beginning of its design, and the existing design framework and mechanism of BIOS make it very complicated to add network units to it. Therefore, it is more secure to achieve remote security authentication. It is difficult to implement the required network functions on the existing BIOS

(2) The non-openness of the existing BIOS makes it relatively complicated to add a hardware device interface. If we want to adopt a security authentication method supported by secure hardware, we need to expand the corresponding security hardware device interface on the BIOS. The workload is also relatively large. At the same time, due to the poor portability of the added security hardware device interface unit on the BIOS firmware provided by different BIOS manufacturers, it actually limits the identity of more secure and reliable hardware support on the traditional BIOS. Development of authentication methods

[0011] Based on the above reasons, there is currently no feasible design scheme to implement a relatively complete low-level remote BIOS user authentication method on a general-purpose BIOS.

Images