Method for verifying security of device, computer device and storage medium

Abstract

The application provides a device security verification method, a computer device and a storage medium. The device comprises a main controller, a secondary controller and a security integrated circuit connected with the main controller. The method comprises the following steps: the secondary controller acquires a verification result of the main controller from the security integrated circuit; the secondary controller determines whether to terminate the operation of the main controller according to the verification result; and when the secondary controller determines to terminate the operation of the main controller according to the verification result, the secondary controller terminates the operation of the main controller. The application realizes the security verification of the main controller through the security integrated circuit, and terminates the operation of the main controller through the secondary controller when the main controller fails to verify, thereby ensuring the security of the terminal device.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of security protection, and in particular to a device security verification method, a computer device and a storage medium. BACKGROUND

[0002] At present, the Internet of Things (IOT) terminal device on the market usually selects a simple controller for cost consideration. The simple controller cannot provide a complete self-protection mechanism, and the controller usually contains on-chip memory and flash memory and other storage spaces. Without other protection measures, an illegal person can easily obtain control of the IoT terminal device through debugging, reverse engineering, dumping flash, and brushing firmware, and even use some illegal programs to disturb or paralyze the network connected by the IoT terminal device, causing a safety accident.

[0003] Therefore, how to improve the security of the IoT terminal device has become a problem to be solved. SUMMARY

[0004] Therefore, the main purpose of the present application is to provide a device security verification method, a computer device and a storage medium, aiming to solve the technical problem of improving the security of the IoT terminal device.

[0005] The first aspect of the present application provides a device security verification method, the device comprising a main controller, a secondary controller connected with the main controller, and a security integrated circuit, the method comprising:

[0006] The secondary controller obtains the verification result of the main controller from the security integrated circuit;

[0007] The secondary controller determines whether to terminate the operation of the main controller according to the verification result;

[0008] When the secondary controller determines to terminate the operation of the main controller according to the verification result, the secondary controller terminates the operation of the main controller.

[0009] According to an optional embodiment of the present application, before the secondary controller obtains the verification result of the main controller from the security integrated circuit, the method further comprises:

[0010] The security integrated circuit accepts the boot request of the device;

[0011] The security integrated circuit obtains verification information of the main controller in response to the booting request, and obtains a verification result of the main controller according to the verification information.

[0012] According to an optional embodiment of the present application, the security integrated circuit obtains the verification information of the main controller in response to the booting request, including:

[0013] The security integrated circuit judges whether there is an external device meeting a preset device connection condition in response to the booting request, wherein the external device stores the verification information of the main controller;

[0014] When it is determined that there is an external device meeting a preset device connection condition, the verification information of the main controller is obtained from the external device.

[0015] According to an optional embodiment of the present application, the verification information includes signature information of the main controller, and the security integrated circuit obtains the verification result of the main controller according to the verification information, including:

[0016] The security integrated circuit judges whether the main controller is in an abnormal state according to the signature information of the main controller;

[0017] The verification result of the main controller is obtained according to the judgment result.

[0018] According to an optional embodiment of the present application, the secondary controller judges whether to terminate the running of the main controller according to the verification result, including:

[0019] When the verification result is abnormal, the secondary controller determines to terminate the running of the main controller; or

[0020] When the verification result is normal, the secondary controller determines not to terminate the running of the main controller. According to an optional embodiment of the present application, the method further includes:

[0021] The security integrated circuit obtains an update request of the main controller;

[0022] The security integrated circuit judges whether the main controller reaches a preset update condition according to the update request;

[0023] When the security integrated circuit determines that the main controller does not reach the update condition according to the update request, the main controller is prohibited from updating.

[0024] According to an optional embodiment of the present application, the update request includes signature information of the main controller, and the security integrated circuit judges whether the main controller reaches a preset update condition according to the update request, including:

[0025] determining that the main controller reaches the preset update condition when the security integrated circuit determines that the signature of the main controller is valid; or

[0026] determining that the main controller does not reach the preset update condition when the security integrated circuit determines that the signature of the main controller is invalid.

[0027] According to an optional embodiment of the present application, the method further comprises:

[0028] the main controller sends key information of the device to the security integrated circuit;

[0029] the security integrated circuit stores the key information;

[0030] when the security integrated circuit obtains a key operation request of the main controller, the security integrated circuit sends an encryption result and / or a decryption result of the key information to the main controller according to the key operation request.

[0031] A second aspect of the present application provides a computer device, which comprises a main controller, a secondary controller connected with the main controller, a security integrated circuit, a processor and a memory;

[0032] the memory is used for storing a computer program;

[0033] the processor is used for controlling the main controller, the secondary controller and the security integrated circuit to implement the method for verifying the security of the device when the computer program is executed.

[0034] A third aspect of the present application provides a computer readable storage medium, which stores a computer program, and the computer program is used for controlling a main controller, a secondary controller and a security integrated circuit to implement the method for verifying the security of the device when the computer program is executed by a processor.

[0035] As can be seen from the above technical solutions, the method for verifying the security of the device is applied to a device, which comprises a main controller, a secondary controller connected with the main controller and a security integrated circuit, and the method controls the main controller according to the verification result of the security integrated circuit on the main controller through the secondary controller, thereby increasing the external security control on the main controller and the self-protection mechanism of the terminal device, and improving the security of the IoT terminal device. BRIEF DESCRIPTION OF DRAWINGS

[0036] Figure 1 A flow chart of a method for verifying the security of a device according to an embodiment of the present application.

[0037] Figure 2 This is a flowchart illustrating another method for device security verification according to an embodiment of the present invention.

[0038] Figure 3 This is a flowchart illustrating another method for device security verification according to an embodiment of the present invention.

[0039] Figure 4 This is a schematic block diagram of the structure of a computer device provided in an embodiment of the present invention. Detailed Implementation

[0040] The following description will refer to the accompanying drawings for a more complete description of the invention. The drawings show exemplary embodiments of the invention. However, the invention can be embodied in many different forms and should not be construed as limited to the exemplary embodiments set forth herein. These exemplary embodiments are provided so that the invention will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. Similar reference numerals denote the same or similar components.

[0041] The terminology used herein is for the purpose of describing particular exemplary embodiments only and is not intended to limit the invention. As used herein, unless the context clearly indicates otherwise, the singular forms “a” and “an” are intended to also include the plural forms. Furthermore, when used herein, “comprising” and / or “including” or “including” or “having” and / or “having”, integers, steps, operations, components and / or components, but does not exclude the presence or addition of one or more other features, regions, integers, steps, operations, components, components and / or groups thereof.

[0042] Unless otherwise defined, all terms used herein (including technical and scientific terms) shall have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. Furthermore, unless expressly defined herein, terms such as those defined in a general dictionary shall be interpreted as having the same meaning as they have in the relevant art and in the context of this invention, and shall not be interpreted as having an idealized or overly formal meaning.

[0043] The following description, in conjunction with the accompanying drawings, illustrates exemplary embodiments. It should be noted that components depicted in the drawings are not necessarily shown to scale; and identical or similar components will be designated with the same or similar reference numerals or similar technical terms.

[0044] The embodiment of the present application provides a device security verification method, a computer device and a storage medium. The device security verification method is applied to an IoT terminal device, which can be a mobile phone, a tablet computer, a notebook computer, a desktop computer, a personal digital assistant, a wearable device, a smart refrigerator, a smart fan, a smart rice cooker, a smart range hood and a smart air conditioner. The IoT terminal device comprises a main controller, a secondary controller connected to the main controller and a security integrated circuit.

[0045] Specifically, the device security verification method comprises the following steps: the secondary controller obtains the verification result of the main controller from the security integrated circuit; the secondary controller determines whether to terminate the operation of the main controller according to the verification result; and when the secondary controller determines to terminate the operation of the main controller according to the verification result, the secondary controller terminates the operation of the main controller. The security integrated circuit is used to realize the security verification of the main controller, and the operation of the main controller is terminated by the secondary controller when the main controller fails to pass the verification, thereby ensuring the security of the terminal device.

[0046] Some embodiments of the present application will be described in detail below with reference to the accompanying drawings. The following embodiments and features in the embodiments can be combined with each other without conflict.

[0047] Please refer to Figure 1 , Figure 1 is a schematic flowchart of a device security verification method provided by the embodiment of the present application.

[0048] In step S11, the secondary controller obtains the verification result of the main controller from the security integrated circuit.

[0049] The security integrated circuit comprises a verification algorithm for the main controller. For example, when the security integrated circuit receives a verification instruction of the main controller, the security integrated circuit obtains verification information of the main controller from the main controller, and verifies the verification information based on the verification algorithm to obtain the verification result of the main controller. For example, after obtaining the verification result of the main controller, the security integrated circuit sends verification completion information to the secondary controller, so that the secondary controller obtains the verification result of the main controller from the security integrated circuit. The secondary controller can be a low-cost controller, thereby reducing the cost of the IoT terminal device.

[0050] In an optional embodiment, before the secondary controller obtains the verification result of the main controller from the security integrated circuit, the method further comprises the following steps:

[0051] The security integrated circuit receives a startup request of the device.

[0052] The secure integrated circuit obtains verification information of the main controller in response to the start-up request, and obtains a verification result of the main controller according to the verification information.

[0053] When the IoT terminal device is started up, a start-up request is sent to the secure integrated circuit, for example, the start-up request can be sent to the secure integrated circuit by the main controller. The secure integrated circuit accepts the start-up request, and verifies the main controller in response to the start-up request.

[0054] In an optional embodiment, the verification information includes signature information of the main controller, and the secure integrated circuit obtains the verification result of the main controller according to the verification information specifically includes the following steps:

[0055] The secure integrated circuit determines whether the main controller is in an abnormal state according to the signature information of the main controller, and generates a determination result.

[0056] The verification result of the main controller is obtained according to the determination result.

[0057] For example, the signature information includes a signature file, and the signature file includes a loader signature. When the secure integrated circuit obtains the signature file, the loader signature is read and corresponding operations such as hash operations are performed on the loader signature to obtain the signature of the main controller. Finally, according to the signature, it is determined whether the main controller is in an abnormal state, such as the signature being modified, and a determination result is generated. According to the determination result, the verification result of the main controller is obtained. For example, if the signature is valid, it is determined that the main controller is not in an abnormal state, and a normal determination result of the main controller is generated.

[0058] In an optional embodiment, the secure integrated circuit obtains the verification information of the main controller in response to the start-up request specifically includes the following steps:

[0059] The secure integrated circuit determines whether an external device meets a preset device connection condition in response to the start-up request, wherein the external device stores the verification information of the main controller.

[0060] When it is determined that the external device meets the preset device connection condition, the verification information of the main controller is obtained from the external device.

[0061] When the secure integrated circuit responds to the booting request, it is determined whether an external device meets a preset device connection condition. For example, signature information of the external device is obtained, and when it is verified that the signature information is valid, it is determined that the external device meets the preset device connection condition. The external device can be a storage device containing host controller authentication information, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, and the like.

[0062] Storing the authentication information of the host controller in the external device can effectively improve the security of the IoT terminal device. Meanwhile, determining whether the external device meets the preset device connection condition can avoid mistakenly trusting illegal external devices, find out security risks, and further improve the security of the IoT terminal device.

[0063] In step S12, the secondary controller determines whether to terminate the operation of the host controller according to the verification result.

[0064] For example, the secondary controller stores a judgment module, which can output an execution plan according to the verification result. For example, the verification result includes 0 and 1. When the verification result is 0, the execution plan output by the judgment module is to terminate the operation of the host controller. When the verification result is 1, the execution plan output by the judgment module is not to terminate the operation of the host controller.

[0065] In an optional embodiment, the secondary controller determining whether to terminate the operation of the host controller according to the verification result can specifically include:

[0066] When the verification result is abnormal, the secondary controller determines to terminate the operation of the host controller; or

[0067] When the verification result is normal, the secondary controller determines not to terminate the operation of the host controller.

[0068] The verification result includes abnormal and normal. When the verification result is abnormal, it is determined that the state of the host controller is abnormal, and the operation of the host controller needs to be terminated. When the verification result is normal, it is determined that the state of the host controller is normal, and the operation of the host controller does not need to be terminated.

[0069] In step S13, when the secondary controller determines to terminate the operation of the host controller according to the verification result, the secondary controller terminates the operation of the host controller.

[0070] When the sub-controller determines that the main controller is abnormal according to the verification result, the running of the main controller is terminated, and the safety of the terminal device is ensured.

[0071] In an optional embodiment, as shown in Figure 2 The device safety verification method can further include steps S21-S23.

[0072] In step S21, the secure integrated circuit acquires an update request of the main controller.

[0073] For example, before the main controller is updated, such as firmware update, the main controller sends an update request to the secure integrated circuit, that is, the main controller needs to pass the confirmation of the secure integrated circuit before updating, and after the confirmation of the secure integrated circuit, the main controller can be updated.

[0074] In step S22, the secure integrated circuit determines whether the main controller meets a preset update condition according to the update request.

[0075] For example, the secure integrated circuit determines whether the main controller meets a preset update condition by determining the state of the main controller through the update request of the main controller, such as determining whether the main controller meets a preset safety condition.

[0076] In an optional embodiment, the update request includes signature information of the main controller, and the secure integrated circuit determines whether the main controller meets a preset update condition according to the update request, specifically including the following steps:

[0077] When the secure integrated circuit determines that the signature of the main controller is valid, it is determined that the main controller meets the preset update condition; or

[0078] When the secure integrated circuit determines that the signature of the main controller is invalid, it is determined that the main controller does not meet the preset update condition.

[0079] According to the signature of the main controller, it is determined whether the main controller is in an abnormal state. When the signature of the main controller is abnormal, it indicates that the current main controller has certain risks and is not suitable for updating, and does not meet the preset update condition.

[0080] In step S23, when the secure integrated circuit determines that the main controller does not meet the update condition according to the update request, the main controller is prohibited from updating.

[0081] The security of the main controller can be improved, and the security of the terminal device is further ensured.

[0082] In an optional embodiment, as shown in Figure 3 The method for verifying the security of the device further includes steps S31 to S33.

[0083] In step S31, the main controller sends the key information of the device to the security integrated circuit.

[0084] When the main controller obtains the key information of the device, the key information is sent to the storage space of the security integrated circuit.

[0085] In step S32, the security integrated circuit stores the key information.

[0086] For example, the security integrated circuit can store the key information in a non-removable space in the security integrated circuit. For example, the information in the non-removable space cannot be read.

[0087] In step S33, when the security integrated circuit obtains the key operation request of the main controller, the security integrated circuit sends the encryption result and / or decryption result of the key information to the main controller according to the key operation request.

[0088] When the main controller needs to perform encryption and decryption operations, a key operation request is sent to the security integrated circuit. The security integrated circuit obtains the key operation request and sends the encryption result and / or decryption result of the key information to the main controller according to the key operation request.

[0089] Storing the key information in the non-removable space can ensure the security of the key information, avoid security incidents caused by leakage of key information, and further ensure the security of the terminal device.

[0090] The method for verifying the security of the device provided in the above embodiments is applied to a device including a main controller, a secondary controller connected to the main controller, and a security integrated circuit. The method for verifying the security of the device controls the main controller according to the verification result of the security integrated circuit, increases external security control of the main controller, increases the self-protection mechanism of the terminal device, and thus improves the security of the IoT terminal device.

[0091] Please refer to Figure 4 ,Figure 4 A structural schematic block diagram of a computer device is provided in the embodiments of the present application. The computer device can be a terminal device.

[0092] As shown in Figure 4 The computer device 400 includes a main controller 41, a secondary controller 42, a secure integrated circuit 43, a processor 44 and a memory 45 connected through a system bus, wherein the memory 45 can include a non-volatile storage medium and an internal memory.

[0093] The non-volatile storage medium can store an operating system and a computer program. The computer program includes program instructions which, when executed, can cause the main controller 41, the secondary controller 42 and the secure integrated circuit 43 to implement the device security verification method of any one of the embodiments.

[0094] The processor is configured to provide computing and control capabilities to support the operation of the entire computer device.

[0095] The internal memory provides an environment for the execution of the computer program in the non-volatile storage medium, which, when executed by the processor 44, can cause the main controller 41, the secondary controller 42 and the secure integrated circuit 43 to implement the device security verification method of any one of the embodiments.

[0096] In an embodiment, the computer device further includes a network interface configured to perform network communication, such as sending assigned tasks, etc. Those skilled in the art can understand that Figure 4 The structure shown in the above embodiment is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device can include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0097] It should be understood that the processor 44 is a central processing unit (CPU), and the processor can also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor.

[0098] In one embodiment, the processor is configured to run a computer program stored in the memory to implement the following steps:

[0099] The secondary controller obtains the verification result of the primary controller from the secure integrated circuit.

[0100] The secondary controller determines whether to terminate the operation of the primary controller according to the verification result.

[0101] When the secondary controller determines to terminate the operation of the primary controller according to the verification result, the secondary controller terminates the operation of the primary controller.

[0102] In one embodiment, before the secondary controller obtains the verification result of the primary controller from the secure integrated circuit, the processor is configured to implement the following steps:

[0103] The secure integrated circuit accepts a boot request of the device.

[0104] The secure integrated circuit obtains verification information of the primary controller in response to the boot request, and obtains the verification result of the primary controller according to the verification information.

[0105] In one embodiment, when the secure integrated circuit obtains the verification information of the primary controller in response to the boot request, the processor is configured to implement the following steps:

[0106] The secure integrated circuit determines whether an external device meets a preset device connection condition in response to the boot request, wherein the external device stores the verification information of the primary controller.

[0107] When it is determined that the external device meets the preset device connection condition, the secure integrated circuit obtains the verification information of the primary controller from the external device.

[0108] In one embodiment, the verification information includes signature information of the primary controller, and when the secure integrated circuit obtains the verification result of the primary controller according to the verification information, the processor is configured to implement the following steps:

[0109] The secure integrated circuit determines whether the primary controller is in an abnormal state according to the signature information of the primary controller.

[0110] The verification result of the primary controller is obtained according to the determination result.

[0111] In one embodiment, when the secondary controller determines whether to terminate the operation of the primary controller according to the verification result, the processor is configured to implement the following steps:

[0112] determining to terminate the running of the main controller when the verification result is abnormal; or

[0113] determining not to terminate the running of the main controller when the verification result is normal.

[0114] In an embodiment, the processor, when implementing the method for verifying the security of the device, is further configured to implement:

[0115] the secure integrated circuit acquires an update request of the main controller;

[0116] the secure integrated circuit determines whether the main controller reaches a preset update condition according to the update request;

[0117] the secure integrated circuit prohibits the main controller from updating when it is determined that the main controller does not reach the update condition according to the update request.

[0118] In an embodiment, the update request includes signature information of the main controller, and the processor, when implementing the secure integrated circuit determining whether the main controller reaches the preset update condition according to the update request, is further configured to implement:

[0119] determining that the main controller reaches the preset update condition when the secure integrated circuit determines that the signature of the main controller is valid; or

[0120] determining that the main controller does not reach the preset update condition when the secure integrated circuit determines that the signature of the main controller is invalid.

[0121] In an embodiment, the processor, when implementing the method for verifying the security of the device, is further configured to implement:

[0122] the main controller sends key information of the device to the secure integrated circuit;

[0123] the secure integrated circuit stores the key information;

[0124] the secure integrated circuit sends an encryption result and / or a decryption result of the key information to the main controller according to the key operation request of the main controller when the secure integrated circuit acquires the key operation request of the main controller.

[0125] Embodiments of the present application also provide a computer readable storage medium, which stores a computer program, and the computer program includes program instructions. The method implemented by the program instructions can refer to each embodiment of the method for verifying the security of the device.

[0126] The computer readable storage medium can be an internal storage unit of the computer device, for example, a hard disk or a memory of the computer device. The computer readable storage medium can also be an external storage device of the computer device, for example, a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, and the like.

[0127] The computer device and the computer readable storage medium provided by the foregoing embodiments increase external security control on the main controller, increase the self-protection mechanism of the terminal device, and thus improve the security of the IoT terminal device.

[0128] It should be understood that the terms used herein in the specification and the appended claims are merely used for the purpose of describing particular embodiments and are not intended to limit the present application. As used in the specification and the appended claims, the singular forms "a," "an" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.

[0129] It should also be understood that the term "and / or" as used herein in the specification and in the claims, is intended to mean an inclusive "or" such that any combination of any one of the listed items is a possible combination. It should be noted that, as used in the specification and in the appended claims, the terms "comprise" "comprising" or "comprises" are not used in a restrictive sense, but rather in an enabling sense to allow for items not explicitly listed to be present. Recitation of ranges of values herein are merely intended to serve as a shorthand method of referring individually to each separate value falling within the range, unless the context indicates otherwise. Unless otherwise indicated herein, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application pertains.

[0130] The above-mentioned serial numbers of the embodiments of the present application are only for description, and do not represent advantages or disadvantages of the embodiments. The above description is merely a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of various equivalent modifications or replacements within the technical scope disclosed by the present application, and these modifications or replacements should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A method of device security verification, the method comprising: The device comprises a main controller, a secondary controller and a security integrated circuit connected to the main controller, and the method comprises: The security integrated circuit accepts a startup request of the device; The security integrated circuit determines whether the external device meets the preset device connection condition by verifying the validity of the signature information of the external device in response to the startup request, wherein the external device stores the verification information of the main controller; when it is determined that the external device meets the preset device connection condition, the security integrated circuit obtains the verification information of the main controller from the external device, wherein the verification information comprises a signature file of the main controller; the security integrated circuit obtains the signature of the main controller based on the signature file, determines whether the main controller is in an abnormal state according to the signature, and obtains the verification result of the main controller; The secondary controller obtains the verification result of the main controller from the security integrated circuit; The secondary controller determines whether to terminate the operation of the main controller according to the verification result; When the secondary controller determines to terminate the operation of the main controller according to the verification result, the secondary controller terminates the operation of the main controller.

2. The method of device security verification of claim 1, wherein, The verification information comprises the signature information of the main controller, and the security integrated circuit obtains the verification result of the main controller according to the verification information, which comprises: The security integrated circuit determines whether the main controller is in an abnormal state according to the signature information of the main controller; The security integrated circuit obtains the verification result of the main controller according to the result of the determination.

3. The method of device security verification of any one of claims 1 to 2, wherein, The secondary controller determines whether to terminate the operation of the main controller according to the verification result, which comprises: When the verification result is abnormal, the secondary controller determines to terminate the operation of the main controller; or When the verification result is normal, the secondary controller determines not to terminate the operation of the main controller.

4. The method of device security verification of claim 1, wherein, The method further comprises: The security integrated circuit obtains an update request of the main controller; The security integrated circuit determines whether the main controller meets the preset update condition according to the update request; When the security integrated circuit determines that the main controller does not meet the update condition according to the update request, the security integrated circuit prohibits the main controller from updating.

5. The method of device security verification of claim 4, wherein, The update request comprises the signature information of the main controller, and the security integrated circuit determines whether the main controller meets the preset update condition according to the update request, which comprises: When the security integrated circuit determines that the signature of the main controller is valid, it is determined that the main controller meets the preset update condition; or When the security integrated circuit determines that the signature of the main controller is invalid, it is determined that the main controller does not meet the preset update condition.

6. The method of device security verification of claim 1, wherein, The method further comprises: The main controller sends key information of the device to the security integrated circuit; The security integrated circuit stores the key information; When the security integrated circuit obtains a key operation request of the main controller, the security integrated circuit sends an encryption result and / or a decryption result of the key information to the main controller according to the key operation request.

7. A computer device, comprising: The computer device comprises a main controller, a secondary controller connected with the main controller, a secure integrated circuit, a processor and a memory; The memory is configured to store a computer program; The processor is configured to control the main controller, the secondary controller and the secure integrated circuit to implement the method for verifying device security according to any one of claims 1 to 6 when the computer program is executed.

8. A computer-readable storage medium, characterized in that, The computer readable storage medium stores a computer program, and the computer program controls the main controller, the secondary controller and the secure integrated circuit to implement the method for verifying device security according to any one of claims 1 to 6 when executed by a processor.

Images