Chip security starting method and device, chip and computer readable storage medium

Abstract

Embodiments of the present application provide a chip security starting method and device, a chip and a computer readable storage medium, and relate to the field of chip security. The method is applied to a chip, and the chip is packaged with a power supply pin and a radio frequency module, the radio frequency module being used to supply power for the chip. When the power supply voltage of the radio frequency module reaches the verification voltage of the chip, the chip receives a check password sent by the radio frequency module, the check password being obtained by the radio frequency module according to a received radio frequency signal. When the check password is verified successfully, the power supply pin is enabled, so that the power supply pin supplies power for the chip when connected with an external power supply. The method can confirm the security of the starting of the chip through the check password verification, and then enable the power supply pin to supply power for the chip when connected with the external power supply, so that the chip runs normally, thereby improving the security of the starting of the chip.

Description

Technical Field

[0001] This application relates to the field of chip security, and more specifically, to a secure boot method, apparatus, chip, and computer-readable storage medium for a chip. Background Technology

[0002] Currently, chips can be powered on by an external power source; that is, when the chip's supply voltage reaches its startup voltage, the chip will directly start and enter the operating state. Clearly, the current chip startup method is relatively simple and easy to implement. However, this approach suffers from low security during chip startup. Summary of the Invention

[0003] In view of this, the purpose of this application is to provide a secure boot method, apparatus, chip, and computer-readable storage medium for chips, so as to solve the problem of low security in chip boot.

[0004] To achieve the above objectives, the technical solutions adopted in the embodiments of this application are as follows:

[0005] In a first aspect, this application provides a secure boot method for a chip, applied to a chip packaged with power supply pins and an radio frequency module, the radio frequency module being used to supply power to the chip, the method comprising:

[0006] When the power supply voltage of the radio frequency module reaches the verification voltage of the chip, the verification password sent by the radio frequency module is received; the verification password is obtained by the radio frequency module based on the received radio frequency signal.

[0007] If the verification password is successfully verified, the power supply pin is enabled, and when an external power supply is connected to the power supply pin, it supplies power to the chip.

[0008] In an optional implementation, enabling the power supply pin upon successful verification of the verification password includes:

[0009] The verification password is calculated according to the pre-stored verification formula to obtain the verification password;

[0010] If the verification password matches the pre-stored password data, the verification password is confirmed to be successful, and the power supply pin is enabled.

[0011] In an optional implementation, the method further includes:

[0012] When the power supply pin is enabled and the power supply pin is connected to the external power supply, the power supply to the RF module is disconnected so that when the power supply voltage at the power supply pin reaches the chip's startup voltage, the chip enters the operating state.

[0013] In an optional implementation, the method further includes:

[0014] When the chip is in operation, the verification password is acquired at preset intervals and the verification password is verified.

[0015] If the verification password is successfully verified, the system remains operational.

[0016] If the verification password fails, the power supply pin is turned off to cut off the power supply voltage at the power supply pin.

[0017] Secondly, this application provides a secure boot device for a chip, applied to a chip, wherein the chip is packaged with power supply pins and an radio frequency module, the radio frequency module being used to supply power to the chip, and the device comprising:

[0018] A receiving module is configured to receive a verification password sent by the radio frequency module when the power supply voltage of the radio frequency module reaches the verification voltage of the chip; the verification password is obtained by the radio frequency module based on the received radio frequency signal.

[0019] The verification module is used to enable the power supply pin when the verification password is successfully verified, so that the chip is powered by an external power supply when the external power supply pin is connected to the power supply pin.

[0020] In an optional implementation, the verification module is further configured to calculate the verification password according to a pre-stored verification formula to obtain a verification password; if the verification password matches the pre-stored password data, the verification password is determined to be successfully verified, and the power supply pin is enabled.

[0021] In an optional embodiment, the apparatus further includes:

[0022] The power supply disconnect module is used to disconnect the power supply to the radio frequency module when the power supply pin is enabled and the power supply pin is connected to the external power supply, so that the chip enters the operating state when the power supply voltage at the power supply pin reaches the chip's startup voltage.

[0023] In an optional implementation, the verification module is further configured to acquire the verification password at preset intervals and verify the verification password when the chip is in operation; maintain the operation state when the verification password is successfully verified; and shut down the power supply pin to cut off the power supply voltage at the power supply pin when the verification password fails to be verified.

[0024] Thirdly, this application provides a chip including a processor and a memory, wherein the memory stores machine-executable instructions that can be executed by the processor, and the processor can execute the machine-executable instructions to implement the method described in any of the foregoing embodiments.

[0025] Fourthly, this application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the method as described in any of the foregoing embodiments.

[0026] The secure startup method, apparatus, chip, and computer-readable storage medium provided in this application are applied to a chip, which is packaged with power supply pins and an radio frequency (RF) module. The RF module supplies power to the chip. When the supply voltage of the RF module reaches the chip's verification voltage, the chip enters a verification state. It receives a verification password obtained and sent by the RF module based on the received RF signal, and verifies the password. If the verification password is successfully verified, the power supply pin is enabled, allowing an external power supply to power the chip when connected to the pin. This method first confirms the chip's startup security through password verification. Only after confirming chip security is the power supply pin enabled, enabling it to supply power to the chip when connected to an external power source, thus improving the chip's startup security.

[0027] To make the above-mentioned objectives, features and advantages of this application more apparent and understandable, preferred embodiments are described below in detail with reference to the accompanying drawings. Attached Figure Description

[0028] To more clearly illustrate the technical solutions of the embodiments of this application, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of this application and should not be regarded as a limitation of the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0029] Figure 1 A block diagram of a chip provided in an embodiment of this application is shown;

[0030] Figure 2 This paper illustrates a flowchart of a secure boot method for a chip provided in an embodiment of this application.

[0031] Figure 3 A schematic diagram of the circuit board is shown;

[0032] Figure 4 This paper illustrates another flowchart of the secure boot method for a chip provided in an embodiment of this application.

[0033] Figure 5 This paper illustrates another flowchart of the secure boot method for a chip provided in an embodiment of this application.

[0034] Figure 6 This invention illustrates a functional block diagram of a secure boot device for a chip provided in an embodiment of this application;

[0035] Figure 7 This paper illustrates another functional block diagram of the secure boot device for the chip provided in an embodiment of this application.

[0036] Icons: 10-RF antenna; 20-Chip bonding line; 30-First control line; 40-Second control line; 100-Chip; 110-Memory; 120-Processor; 130-Communication module; 200-Receiver module; 210-Verification module; 220-Power disconnection module. Detailed Implementation

[0037] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. The components of the embodiments of this application described and shown in the accompanying drawings can be arranged and designed in various different configurations.

[0038] Therefore, the following detailed description of the embodiments of this application provided in the accompanying drawings is not intended to limit the scope of the claimed application, but merely to illustrate selected embodiments of the application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this application.

[0039] It should be noted that relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0040] Please refer to Figure 1This is a block diagram of chip 100. Chip 100 includes a memory 110, a processor 120, and a communication module 130. The memory 110, processor 120, and communication module 130 are electrically connected to each other directly or indirectly to realize data transmission or interaction. For example, these components can be electrically connected to each other through one or more communication buses or signal lines.

[0041] The memory 110 is used to store programs or data. The memory 110 may be, but is not limited to, random access memory (RAM), read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), etc.

[0042] The processor 120 is used to read / write data or programs stored in the memory 110 and to perform corresponding functions.

[0043] The communication module 130 is used to establish a communication connection between the chip 100 and other communication terminals through the network, and to send and receive data through the network.

[0044] Optionally, the chip 100 may be a packaged chip, which may also include power supply pins and an RF module.

[0045] Optionally, this power supply pin is used to supply power to the chip via an external power supply when it is in an enabled state and connected to an external power supply. In one example, this power supply pin may be the VCC pin.

[0046] Optionally, the radio frequency module may include a radio frequency antenna. This antenna converts the electromagnetic energy in the received electromagnetic wave signal into an induced voltage to power the chip and enable it to perform verification. Furthermore, the radio frequency antenna can also receive radio frequency signals and process these signals through a demodulation circuit to obtain communication data.

[0047] It should be understood that, Figure 1 The structure shown is only a schematic diagram of chip 100. Chip 100 may also include components that are larger than... Figure 1 The more or fewer components shown, or having the same Figure 1 The different configurations shown. Figure 1The components shown can be implemented using hardware, software, or a combination thereof.

[0048] This application also provides a computer-readable storage medium storing a computer program thereon, which, when executed by a processor, can implement the secure boot method for the chip provided in this application.

[0049] The following is based on the above. Figure 1 The chip 100 shown is the execution entity. The secure boot method for the chip provided in this application embodiment is illustrated with reference to the flowchart. Specifically, Figure 2 Please refer to the flowchart illustrating a secure boot method for a chip provided in this application embodiment. Figure 2 The method includes:

[0050] Step S20: When the power supply voltage of the RF module reaches the verification voltage of the chip, receive the verification password sent by the RF module.

[0051] The verification password is obtained by the radio frequency module based on the received radio frequency signal;

[0052] Optionally, the verification voltage can be the voltage at which the chip can enter the verification state.

[0053] Optionally, the radio frequency module in the chip can receive electromagnetic wave signals sent by the password verification device, thereby converting the electromagnetic wave signals into an induced voltage to power the chip.

[0054] Optionally, when the power supply voltage of the RF module reaches the verification voltage of the chip, the chip can enter the password verification state. At this time, the RF module can receive the RF signal sent by the password verification device and process the RF signal according to the demodulation circuit to obtain the verification password.

[0055] Optionally, the radio frequency module may send the verification password to the chip after obtaining the verification password, so that the chip can verify the verification password.

[0056] Optionally, the password verification device can be a device capable of transmitting electromagnetic wave signals and radio frequency signals. In one possible implementation, if the chip is soldered onto a circuit board, the password verification device can be the circuit board containing the chip; in another possible implementation, the password verification device can also be an RFID card reader.

[0057] Optionally, if the chip is soldered onto a circuit board and the password verification device is the circuit board on which the chip is located, then the circuit board may be equipped with a radio frequency antenna capable of transmitting electromagnetic wave signals and radio frequency signals.

[0058] Alternatively, the circuit board can be a PCB board.

[0059] In one example, see Figure 3 This is a schematic diagram of the circuit board containing the chip. The circuit board includes an RF antenna 10, a chip bonding line 20, a first control line 30, and a second control line 40. During chip soldering, the chip can be soldered inside the chip bonding line 20. When chip verification is required, electromagnetic wave signals and RF signals can be sent to the RF antenna 10 via the first control line 30 and the second control line 40. The RF antenna 10 then sends the electromagnetic wave signals to the RF module encapsulated in the chip. The RF module converts the electromagnetic wave signals into an induced voltage to power the chip. When the supply voltage of the RF module reaches the chip's detection voltage, the RF module encapsulated in the chip can receive the RF signals and process them through a demodulation circuit to obtain the verification code.

[0060] Step S21: If the verification password is successfully verified, enable the power supply pin so that the chip is powered when the external power supply is connected to the power supply pin.

[0061] Optionally, the power supply pin of this chip is in a disabled state by default. Understandably, when the power supply pin is in a disabled state, it cannot supply power to the chip even if it is connected to an external power source.

[0062] Optionally, if the verification password fails, it means that the chip may have been removed from the circuit board or RFID reader where it should be located, or the chip may have been placed in another circuit board or RFID reader. That is, the chip is removed from its set working range or binding platform. In this case, the chip can be considered to be in an insecure startup environment. Therefore, the power supply pin can be controlled to remain in an inactive state so that it cannot supply power to the chip.

[0063] Optionally, if the password verification is successful, it means that the chip is in a secure boot environment. Therefore, the power supply pin can be enabled to make it effective. In this case, if the power supply pin is connected to an external power supply, the chip can be powered by the external power supply so that the chip can start normally.

[0064] The secure startup method for a chip provided in this application allows the chip to enter a verification state when the power supply voltage of the radio frequency module reaches the chip's verification voltage. The chip receives a verification password from the radio frequency module based on the received radio frequency signal and verifies the password. If the verification password is successful, the power supply pin is enabled so that it can supply power to the chip when connected to an external power source. This method first confirms the chip's startup security through password verification. Only after confirming chip security is the power supply pin enabled, allowing it to supply power to the chip when connected to an external power source, thus improving the chip's startup security.

[0065] Optionally, the chip can pre-store a verification formula to verify the verification password. Specifically, in Figure 2 On this basis, Figure 4 For another flowchart illustrating the secure boot method for the chip provided in this application embodiment, please refer to [link / reference]. Figure 4 In step S21 above, enabling the power supply pin after successful verification of the verification password can also be achieved through the following steps:

[0066] Step S21-1: Calculate the verification password according to the pre-stored verification formula to obtain the verification password;

[0067] Step S21-2: If the verification password matches the pre-stored password data, then the password verification is successful, and the power supply pin is enabled.

[0068] Optionally, the verification password can be a string or a specific numerical value; the verification formula and the pre-stored password data can be stored in the chip beforehand.

[0069] In this embodiment, the chip can calculate the obtained verification password using a pre-stored verification formula to obtain the verification password, and then match the verification password with the pre-stored password data. If they match, the verification is successful, and the power supply pin can be enabled; if they do not match, the verification password verification fails, and the power supply pin remains in an inactive state.

[0070] In this embodiment, the password verification process can be performed before the power supply chip is connected to an external power source, or it can be performed when the power supply chip is connected to an external power source.

[0071] Optionally, if the password verification process is performed before the power supply chip is connected to an external power source, the power supply state of the RF module can be maintained after the password verification is successful, so that the power supply pin of the chip remains enabled. When it is connected to an external power source, the chip can be directly powered by the external power source, thereby enabling the chip to start normally.

[0072] Optionally, if the password verification process is performed when the power supply chip is connected to an external power source, then after the power supply pin is connected to the external power source, the chip needs to undergo password verification first. If the verification is successful, the power supply pin should be enabled and the power supply to the RF module should be disconnected, so that the power supply pin can supply power to the chip through the external power source, allowing the chip to start normally. Specifically, in Figure 2 On this basis, Figure 5 For another flowchart illustrating the secure boot method for the chip provided in this application embodiment, please refer to [link / reference]. Figure 5 The method also includes:

[0073] Step S10: With the power supply pin enabled and connected to an external power supply, disconnect the power supply to the RF module so that the chip enters the running state when the power supply voltage at the power supply pin reaches the chip's startup voltage.

[0074] In this embodiment, when the power supply pin of the chip is enabled and the power supply pin is connected to an external power supply, the power supply pin can supply power to the chip through the external power supply. In this case, the power supply of the RF module can be disconnected, and only the power supply pin can supply power, so that the chip enters the running state when the power supply voltage reaches the chip's start-up voltage.

[0075] Understandably, when the chip is in operation, it can run the corresponding program stored in its internal memory according to the user's settings.

[0076] Optionally, if the power supply to the RF module is interrupted during the period between successful chip verification and the connection of the power supply module to the external power supply, causing the chip to reset, the above verification password verification process needs to be performed again after the RF module resumes power supply in order to enable the power supply pin.

[0077] Optionally, to ensure the chip's security during operation, it can be verified periodically while in operation. Specifically, the method further includes:

[0078] When the chip is in operation, the verification password is obtained at preset intervals and the verification password is verified.

[0079] Optionally, the preset duration can be set in advance and saved in the chip according to user needs or specific application requirements of the chip, such as 30 minutes.

[0080] If the password verification is successful, the system will remain running.

[0081] If the password verification fails, turn off the power supply pin to cut off the power supply voltage at the power supply pin.

[0082] Optionally, if the verification password is successful, it means that the chip is still in a secure operating state and can continue to operate; if the verification password fails, it means that the chip is in an insecure operating state and should be shut down. In this case, the power supply pin can be turned off to disable it. Under these circumstances, the power supply pin will not be able to supply power to the chip and the chip will be in an unstarted state.

[0083] To perform the corresponding steps in the above embodiments and various possible methods, an implementation of a secure boot device for a chip is given below. Further, please refer to... Figure 6 , Figure 6This is a functional block diagram of a secure boot device for a chip provided in this application embodiment. It should be noted that the basic principle and technical effects of the secure boot device for the chip provided in this embodiment are the same as those in the above embodiments. For the sake of brevity, any parts not mentioned in this embodiment can be referred to the corresponding content in the above embodiments. The secure boot device for the chip includes: a receiving module 200 and a verification module 210.

[0084] The receiving module 200 is used to receive the verification password sent by the radio frequency module when the power supply voltage of the radio frequency module reaches the verification voltage of the chip; the verification password is obtained by the radio frequency module based on the received radio frequency signal.

[0085] Understandably, the receiving module 200 can be used to perform the above step S20;

[0086] The verification module 210 is used to enable the power supply pin when the verification password is successfully verified, so that when an external power supply is connected to the power supply pin, it can supply power to the chip.

[0087] Understandably, the verification module 210 can be used to perform the above step S21.

[0088] Optionally, the verification module 210 is also used to calculate the verification password according to the pre-stored verification formula to obtain the verification password; if the verification password matches the pre-stored password data, it is determined that the verification password has been successfully verified and the power supply pin is enabled.

[0089] Understandably, the verification module 210 can also be used to perform the above steps S21-1 to S21-2.

[0090] Optionally, in Figure 6 On this basis, Figure 7 For another functional block diagram of the secure boot device for the chip provided in this application embodiment, please refer to [link to relevant documentation]. Figure 7 The chip's safe startup device also includes a power disconnect module 220.

[0091] The power supply disconnect module 220 is used to disconnect the power supply of the RF module when the power supply pin is enabled and the power supply pin is connected to an external power supply, so that the chip enters the operating state when the power supply voltage at the power supply pin reaches the chip's startup voltage.

[0092] Understandably, the power disconnect module 220 can be used to perform the above step S10.

[0093] Optionally, the verification module 210 is also used to acquire a verification password at preset intervals and verify the verification password when the chip is in operation; maintain the operation state when the verification password is successfully verified; and turn off the power supply pin to cut off the power supply voltage at the power supply pin when the verification password fails to be verified.

[0094] The secure startup device for a chip provided in this application embodiment receives a verification password sent by the radio frequency (RF) module when the supply voltage of the RF module reaches the chip's verification voltage. The verification password is obtained by the RF module based on the received RF signal. Upon successful verification of the verification password, the verification module enables the power supply pin, allowing it to supply power to the chip when connected to an external power source. This device first verifies the chip's startup security through password verification. Only after confirming chip security does it enable the power supply pin, enabling it to supply power to the chip when connected to an external power source, thus ensuring the chip's normal operation and improving startup security.

[0095] Optionally, the above modules can be stored in the form of software or firmware. Figure 1 The memory shown is either stored in or embedded in the operating system (OS) of the chip 100, and can be accessed by... Figure 1 The processor executes the commands. Meanwhile, the data and program code required to execute these modules can be stored in memory.

[0096] In the several embodiments provided in this application, it should be understood that the disclosed apparatus and methods can also be implemented in other ways. The apparatus embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of apparatus, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks may occur in a different order than those marked in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram and / or flowchart, and combinations of blocks in block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions.

[0097] In addition, the functional modules in the various embodiments of this application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

[0098] If the aforementioned functions are implemented as software functional modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0099] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the protection scope of this application.

Claims

1. A secure boot method for a chip, characterized in that, Applied to a chip, the chip being packaged with power supply pins and an RF module, the RF module being used to power the chip, the method comprising: When the power supply voltage of the radio frequency module reaches the verification voltage of the chip, the verification password sent by the radio frequency module is received; the verification password is obtained by the radio frequency module based on the received radio frequency signal. If the verification password is successfully verified, the power supply pin is enabled, and when an external power supply is connected to the power supply pin, it supplies power to the chip. When the chip is in operation, the verification password is acquired at preset intervals and the verification password is verified. If the verification password is successfully verified, the system remains operational. If the verification password fails, the power supply pin is turned off to cut off the power supply voltage at the power supply pin. When the power supply pin is enabled and the power supply pin is connected to the external power supply, the power supply to the RF module is disconnected so that when the power supply voltage at the power supply pin reaches the chip's startup voltage, the chip enters the operating state.

2. The method according to claim 1, characterized in that, Enabling the power supply pin when the verification password is successfully verified includes: The verification password is calculated according to the pre-stored verification formula to obtain the verification password; If the verification password matches the pre-stored password data, the verification password is confirmed to be successful, and the power supply pin is enabled.

3. A secure boot device for a chip, characterized in that, Applied to a chip, the chip being packaged with power supply pins and an RF module, the RF module being used to power the chip, the device comprising: A receiving module is configured to receive a verification password sent by the radio frequency module when the power supply voltage of the radio frequency module reaches the verification voltage of the chip; the verification password is obtained by the radio frequency module based on the received radio frequency signal. The verification module is used to enable the power supply pin when the verification password is successfully verified, so that the external power supply can supply power to the chip when it is connected to the power supply pin; the verification module is also used to acquire the verification password at preset time intervals when the chip is in operation, and to verify the verification password; if the verification password is successfully verified, the chip remains in operation; if the verification password fails to be verified, the chip is turned off to cut off the power supply voltage at the power supply pin. The power supply disconnect module is used to disconnect the power supply to the radio frequency module when the power supply pin is enabled and the power supply pin is connected to the external power supply, so that the chip enters the operating state when the power supply voltage at the power supply pin reaches the chip's startup voltage.

4. The apparatus according to claim 3, characterized in that, The verification module is further configured to calculate the verification password according to the pre-stored verification formula to obtain the verification password; if the verification password matches the pre-stored password data, the verification password is determined to be successfully verified, and the power supply pin is enabled.

5. A chip, characterized in that, It includes a processor and a memory, the memory storing machine-executable instructions that can be executed by the processor to implement the method of any one of claims 1-2.

6. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the method as described in any one of claims 1-2.

Images