Secure boot function determination method and apparatus, computer device, and storage medium

Abstract

Embodiments of the present application provide a method and device for determining a secure boot function, a computer device and a storage medium. The method comprises: obtaining target modification information for a target partition in a device before the device is started; modifying target partition information of the target partition according to the target modification information to obtain modified partition information; after the device is started, if alarm information for the modified partition information is obtained, determining that the device has the secure boot function; and if the alarm information for the modified partition information is not obtained, determining that the device does not have the secure boot function. The embodiments of the present application can modify the target partition information of the target partition to obtain the modified partition information, so that whether the device has the secure boot function can be determined automatically based on whether the alarm information for the modified partition information can be obtained after the device is started, thereby improving the test efficiency of the secure boot function of the device.

Description

Technical Field

[0001] This application relates to the field of Internet of Things (IoT) technology, specifically to a method, apparatus, computer device, and storage medium for determining a secure boot function, wherein the storage medium is a computer-readable storage medium. Background Technology

[0002] With the development of IoT technology, IoT devices are becoming increasingly widespread, and their security performance has become a key concern for users. Security performance includes whether an IoT device has a secure boot function. A secure boot function refers to the ability of an IoT device to activate its own security protection features upon startup.

[0003] Before leaving the factory, IoT devices need to undergo secure boot testing. Currently, this testing is typically done manually. However, manual testing is inefficient, especially as IoT device production volumes increase, where the inefficiency becomes particularly pronounced.

[0004] In summary, existing methods for testing the secure boot function of IoT devices suffer from low efficiency. Summary of the Invention

[0005] This application provides a method, apparatus, computer device, and storage medium for determining secure boot functionality, which can improve the efficiency of testing the secure boot functionality of devices.

[0006] A method for determining a secure boot function, comprising:

[0007] Before the device starts up, obtain the target modification information for the target partition in the device;

[0008] Based on the target modification information, modify the target partition information of the target partition to obtain the modified partition information;

[0009] If an alarm message is received regarding the modified partition information after the device is started, it is determined that the device has a secure boot function.

[0010] If no alarm information is received regarding the modified partition information, it is determined that the device does not have a secure boot function.

[0011] Accordingly, embodiments of this application provide a secure startup function determination device, including:

[0012] The first acquisition unit can be used to acquire target modification information for a target partition in the device before the device starts up;

[0013] The modification unit can be used to modify the target partition information of the target partition according to the target modification information, so as to obtain the modified partition information;

[0014] The first determining unit can be used to determine that the device has a safe boot function if an alarm message for the modified partition information is obtained after the device is started.

[0015] The second determining unit can be used to determine that the device does not have a secure boot function if no alarm information for the modified partition information is obtained.

[0016] In some embodiments, the first acquisition unit may be specifically used to acquire a modification instruction for a target partition in the device, the modification instruction indicating that the target partition information of the target partition is modified; and to extract the target modification information for the target partition in the device from the modification instruction.

[0017] In some embodiments, the first acquisition unit may be specifically used to extract at least one candidate modification information from the modification instruction; and to extract target modification information corresponding to the target partition in the device from the candidate modification information.

[0018] In some embodiments, the modification unit may be specifically used to replace the target partition information of the target partition according to the target modification information to obtain the replaced partition information; and to determine the modified partition information according to the replaced partition information.

[0019] In some embodiments, the target modification information includes first target modification information and second target modification information, and the target partition information includes first target partition information corresponding to the first target partition and second target partition information corresponding to the second target partition; the modification unit can be specifically used to modify the first target partition information of the first target partition according to the first target partition information to obtain first modified partition information; and to modify the second target partition information of the second target partition according to the second target partition information to obtain second modified partition information.

[0020] In some embodiments, the secure boot function determination device further includes a second acquisition unit, which can be specifically used to acquire boot logs for the modified partition information after the device is started; if the boot logs are abnormal, then acquire alarm information for the modified partition information.

[0021] In some embodiments, the secure boot function determination device further includes a sending unit, which can be used to send boot logs to a tester, which is used to test the secure boot function of the device.

[0022] Correspondingly, the first determining unit can be used to send alarm information to the cloud so that the cloud can send the alarm message to the tester; if the tester determines that the startup log and alarm message meet the preset rules, then it is determined that the device has a safe startup function.

[0023] Furthermore, embodiments of this application also provide a computer device, including a memory and a processor; the memory stores a computer program, and the processor is used to run the computer program in the memory to execute any of the secure boot function determination methods provided in embodiments of this application.

[0024] Furthermore, embodiments of this application also provide a computer-readable storage medium storing a computer program adapted for loading by a processor to execute any of the secure boot function determination methods provided in embodiments of this application.

[0025] Furthermore, this application also provides a computer program product, including a computer program, which, when executed by a processor, implements any of the secure boot function determination methods provided in this application.

[0026] Furthermore, this application also provides a computer program product, including a computer program, which, when executed by a processor, implements any of the secure boot function determination methods provided in this application.

[0027] This application embodiment can obtain target modification information for a target partition in the device before device startup; modify the target partition information based on the target modification information to obtain modified partition information; after device startup, if an alarm message for the modified partition information is obtained, it is determined that the device has a secure boot function; if no alarm message for the modified partition information is obtained, it is determined that the device does not have a secure boot function. Since this application embodiment can modify the target partition information of the target partition to obtain modified partition information, it is possible to automatically determine whether the device has a secure boot function after device startup based on whether an alarm message for the modified partition information can be obtained, thereby improving the testing efficiency of the secure boot function of the device. Attached Figure Description

[0028] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0029] Figure 1 This is a schematic diagram of a scenario for the secure startup function determination method provided in an embodiment of this application;

[0030] Figure 2 This is a flowchart illustrating the secure startup function determination method provided in an embodiment of this application;

[0031] Figure 3 These are two schematic flowcharts illustrating the secure startup function determination method provided in this application embodiment;

[0032] Figure 4 This is a schematic diagram of the structure of the safe startup function determination device provided in the embodiments of this application;

[0033] Figure 5 This is a schematic diagram of the structure of the computer device provided in the embodiments of this application. Detailed Implementation

[0034] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0035] This application provides a method, apparatus, computer device, and computer-readable storage medium for determining a secure boot function. The secure boot function determination apparatus can be integrated into a computer device, which may be a server or a terminal, etc.

[0036] The server can be a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content delivery network (CDN), and big data and artificial intelligence platforms. The terminal can be a smartphone, tablet, laptop, desktop computer, smart speaker, smartwatch, etc., but is not limited to these. The terminal and server can be directly or indirectly connected via wired or wireless communication, which is not limited herein.

[0037] For example, see Figure 1Taking the secure boot function determination device integrated into a computer device as an example, before the computer device starts up, target modification information for a target partition in the computer device is obtained; based on the target modification information, the target partition information of the target partition is modified to obtain the modified partition information; after the computer device starts up, if alarm information for the modified partition information is obtained, it is determined that the computer device has a secure boot function; if no alarm information for the modified partition information is obtained, it is determined that the computer device does not have a secure boot function.

[0038] Among them, the target modification information can be information used to modify the target partition information of the target partition.

[0039] Secure Boot is a feature that provides security protection for computer devices when they are powered on.

[0040] The following sections provide detailed descriptions of each example. It should be noted that the order in which the embodiments are described is not intended to limit the preferred order of the embodiments.

[0041] This embodiment will be described from the perspective of a secure boot function determination device, which can be integrated into a computer device, such as a server or a terminal. The terminal can include tablet computers, laptop computers, personal computers (PCs), wearable devices, virtual reality devices, or other smart devices that can acquire data.

[0042] The embodiments of this application can be applied to home and office scenarios, but are not limited to these scenarios. Figure 2 As shown, the specific process of this secure boot function determination method is as follows: steps S101 to S104:

[0043] S101. Before the device starts up, obtain the target modification information for the target partition in the device.

[0044] S102. Based on the target modification information, modify the target partition information of the target partition to obtain the modified partition information.

[0045] S103. If an alarm message is received after the device starts up for the modified partition information, it is determined that the device has a safe boot function.

[0046] S104. If no alarm information is received regarding the modified partition information, it is determined that the device does not have a secure boot function.

[0047] This application embodiment can obtain target modification information for a target partition in the device before device startup; modify the target partition information based on the target modification information to obtain modified partition information; after device startup, if an alarm message for the modified partition information is obtained, it is determined that the device has a secure boot function; if no alarm message for the modified partition information is obtained, it is determined that the device does not have a secure boot function. Since this application embodiment can modify the target partition information of the target partition to obtain modified partition information, it is possible to automatically determine whether the device has a secure boot function after device startup based on whether an alarm message for the modified partition information can be obtained, thereby improving the testing efficiency of the secure boot function of the device.

[0048] Based on the method described in the above embodiments, the following examples will provide further detailed explanations.

[0049] In this embodiment, the secure boot function determination device is specifically integrated into a computer device, which can be a server or a terminal. It should be noted that the device in this embodiment can refer to a computer device.

[0050] like Figure 2 As shown, the specific process of this secure boot function determination method is as follows: steps S101 to S104:

[0051] S101. Before the device starts up, obtain the target modification information for the target partition in the device.

[0052] Among them, the target modification information can be information used to modify the target partition information of the target partition.

[0053] The target partition information can be the information of the target partition itself, specifically, the address information of the target partition. Based on this, the target modification information can be information that modifies the address information of the target partition. For example, the target modification information can be used to change the target partition information to another address; or, for example, the target modification information can be used to modify the content information of the target partition itself, changing the target partition information into a representation that is not address information, such as changing the target partition information to 0.

[0054] In this embodiment of the application, the method for obtaining target modification information for a target partition in the device may be: obtaining a modification instruction for a target partition in the device, wherein the modification instruction indicates that the target partition information of the target partition is modified; and extracting the target modification information for the target partition in the device from the modification instruction.

[0055] In this embodiment of the application, the method for obtaining modification instructions for a target partition in the device can be as follows: in response to a modification operation on the target partition, the modification instructions for the target partition in the device are obtained. In this embodiment of the application, the modification operation on the target partition can be performed on a modification page displayed on the device's display screen.

[0056] Based on the above, the method for extracting target modification information for a target partition in the device from the modification instruction in this application embodiment can be: extracting at least one candidate modification information from the modification instruction; and extracting the target modification information corresponding to the target partition in the device from the candidate modification information.

[0057] The modification instruction may carry at least one candidate modification information. This application embodiment can modify at least one partition in the device, wherein the target partition is a partition, and therefore, each partition has corresponding candidate modification information.

[0058] In this embodiment, candidate modification information and the partition identifier of the partition corresponding to the candidate modification information can be bound together. Based on this, this embodiment can extract target modification information corresponding to the target partition in the device from the candidate modification information based on the partition identifier of the target partition.

[0059] Alternatively, in embodiments of this application, a target candidate information may be randomly extracted from at least one candidate modification information as the target modification information corresponding to the target partition in the device.

[0060] S102. Based on the target modification information, modify the target partition information of the target partition to obtain the modified partition information.

[0061] In this embodiment of the application, the target partition information of the target partition is modified according to the target modification information, and the modified partition information is obtained by: replacing the target partition information of the target partition according to the target modification information to obtain the replaced partition information; and determining the modified partition information according to the replaced partition information.

[0062] In this embodiment of the application, the replaced partition information can be used as the modified partition information.

[0063] In addition to the above methods, the embodiments of this application modify the target partition information of the target partition according to the target modification information to obtain the modified partition information. The method can be: to fuse the target modification information and the target partition information to obtain the fused partition information; and to use the fused partition information as the modified partition information.

[0064] In this embodiment, both the target modification information and the target partition information can exist in the form of characters. Based on this, this embodiment can concatenate the target modification information and the target partition information to perform fusion processing.

[0065] In this embodiment, the target partition may include a first target partition and a second target partition. For example, the first target partition may be a user partition, and the second target partition may be a system partition. The user partition may refer to a storage area that stores user data, including user operation data and user-stored data. The system partition may refer to a storage area that stores the boot files of the device's operating system.

[0066] Based on the above, embodiments of this application can modify different target partitions. The target modification information includes first target modification information and second target modification information, and the target partition information includes first target partition information corresponding to the first target partition and second target partition information corresponding to the second target partition. Therefore, embodiments of this application modify the target partition information of a target partition according to the target modification information to obtain the modified partition information in the following ways: Based on the first target partition information, modify the first target partition information of the first target partition to obtain first modified partition information; based on the second target partition information, modify the second target partition information of the second target partition to obtain second modified partition information.

[0067] Of course, in the embodiments of this application, modifying the target partition information of the target partition according to the target modification information to obtain the modified partition information can be a modification of either the first target partition or the second target partition. For example, modifying the first target partition information of the first target partition according to the first target partition information to obtain the first modified partition information; or modifying the second target partition information of the second target partition according to the second target partition information to obtain the second modified partition information.

[0068] S103. If an alarm message is received after the device starts up for the modified partition information, it is determined that the device has a safe boot function.

[0069] Secure Boot is a feature that provides security protection for computer devices when they are powered on.

[0070] It should be noted that the embodiments of this application essentially simulate a hacker tampering with the target partition information of the target partition. Whether the target partition information is normal is a way to evaluate whether the device has a secure boot function. Based on this, in the embodiments of this application, if an alarm message can be obtained after the device starts up, it can be said that the device has a secure boot function; if no alarm message can be obtained, it can be said that the device does not have a secure boot function.

[0071] In this embodiment of the application, before determining that the device has a secure boot function if an alarm message for the modified partition information is obtained after the device starts up, the method further includes: obtaining a boot log for the modified partition information after the device starts up; if the boot log is abnormal, obtaining an alarm message for the modified partition information.

[0072] In this embodiment of the application, the startup log can refer to the startup record of the device during the startup process. The startup log includes information about the device during the startup process and various parameters of the device itself.

[0073] Based on the above, after obtaining the boot log for the modified partition information after the device starts up, the method in this embodiment of the application further includes: sending the boot log to a tester, which is used to test the secure boot function of the device.

[0074] In the embodiments of this application, the tester can be a test executor, such as pytest.

[0075] Correspondingly, determining that the device has a secure boot function includes: sending alarm information to the cloud so that the cloud sends the alarm message to the tester; if the tester determines that the boot log and alarm message meet the preset rules, then it is determined that the device has a secure boot function.

[0076] In this embodiment of the application, when the tester determines that the exception code of the startup log is the same as the preset exception code, and the alarm code of the alarm message is the same as the preset alarm code, this situation can be said to be that the startup log and the alarm message conform to the preset rules.

[0077] S104. If no alarm information is received regarding the modified partition information, it is determined that the device does not have a secure boot function.

[0078] Here, in this embodiment, after the device starts up, a startup log for the modified partition information can be obtained; if the startup log is normal, no alarm information for the modified partition information can be obtained. In this embodiment, the startup log can be compared with a preset log. If the modified partition information in the startup log is different from the unmodified partition information in the preset log, it indicates that the startup log is abnormal; if the modified partition information in the startup log is the same as the unmodified partition information in the preset log, it indicates that the startup log is normal.

[0079] In the embodiments of this application, steps S103 and S104 can be placed before or after any step following step S102.

[0080] Based on the above, the embodiments of this application are further described. The embodiments of this application are illustrated using a target partition including a user partition and a system partition, and a smart TV as the computer device. It should be noted that in this implementation, the smart TV has a user partition and a system partition. The user partition may include a first user partition and a second user partition, and the system partition may include a first system partition, a second system partition, a third system partition, a fourth system partition, and a fifth system partition, as shown in Table 1:

[0081] First system partition 0x0000 Second system partition 0x1000 Third System Partition 0x2000 Fourth system partition 0x3000 Fifth System Partition 0x4000 First User Partition 0x18000 Second user partition 0x118000

[0082] Table 1

[0083] like Figure 3 As shown, for the user partition, before the device starts up, this embodiment of the application sends the code corresponding to the modification instruction to the firmware burning device through the test executor; the firmware burning device receives the code and sends the code to the smart TV, so that the smart TV receives the code. In this way, the smart TV can extract the target modification information for the target partition in the smart TV based on the modification instruction in the code.

[0084] Then, the smart TV modifies the target partition information according to the target modification information to obtain the modified partition information. For example, the address of the user partition is modified to any partition address after 0x18000. Further, for example, the target partition information is address A, and the candidate modification information includes any address between address 0x18000 and address 0x18010. When the extracted target modification information is address 0x18001, address A is modified to 0x18001.

[0085] Then, the test executor sends the start code corresponding to the start command to the smart TV. Upon receiving the start code, the smart TV powers on to turn on.

[0086] Next, in this embodiment, the smart TV's startup log for the modified partition information is read via a log recording device connected to the smart TV. The smart TV can then determine if the startup log is abnormal. If the startup log is abnormal, the smart TV obtains alarm information regarding the modified partition information. Based on this, the smart TV can report the alarm message to the cloud.

[0087] Based on the above, the embodiments of this application can read the exception code of the startup log from the log recording device through the test executor, and read the alarm code of the alarm message from the cloud through the test executor.

[0088] Based on the above, the test executor looks up the exception code and alarm code in the table. If it is determined that the exception code in the startup log is the same as the preset exception code, and the alarm code in the alarm message is the same as the preset alarm code, the preset exception code is 0x00x1 and the preset alarm code is 0x10x1. Thus, it can be determined that the smart TV has a safe startup function.

[0089] If the abnormal code is different from the preset abnormal code, or the alarm code of the alarm message is different from the preset alarm code, or the abnormal code is different from the preset abnormal code and the alarm code of the alarm message is different from the preset alarm code, then it can be determined that the smart TV does not have a safe startup function.

[0090] Regarding system partitions, the embodiments of this application can be specifically referred to in the above-described process for determining whether a smart TV has a secure boot function based on user partitions.

[0091] Unlike user partitions, for system partitions, the address of the system partition is modified to any partition address between 0x1000 and 0x2000. Further, for example, if the target partition information is address B, and the candidate modification information includes any address between 0x1000 and 0x2000, then when the extracted target modification information is address 0x1000, address B is modified to 0x1000. It should be noted that in this embodiment, the target partition information of the system partition or the target partition information of the user partition can also be modified to 0 or other characters.

[0092] For system partitions, the default exception code in this application embodiment is 0x00x9, and the default alarm code is 0x10x9.

[0093] For details on the implementation of each of the above operations, please refer to the previous examples, which will not be repeated here.

[0094] This application embodiment can obtain target modification information for a target partition in the device before device startup; modify the target partition information based on the target modification information to obtain modified partition information; after device startup, if an alarm message for the modified partition information is obtained, it is determined that the device has a secure boot function; if no alarm message for the modified partition information is obtained, it is determined that the device does not have a secure boot function. Since this application embodiment can modify the target partition information of the target partition to obtain modified partition information, it is possible to automatically determine whether the device has a secure boot function after device startup based on whether an alarm message for the modified partition information can be obtained, thereby improving the testing efficiency of the secure boot function of the device.

[0095] To better implement the above methods, this application also provides a secure boot function determination device, which can be integrated into a computer device, such as a server or terminal. The terminal may include a tablet computer, a laptop computer, and / or a personal computer.

[0096] For example, such as Figure 4 As shown, the secure startup function determining device may include a first acquisition unit 301, a modification unit 302, a first determining unit 303, a second determining unit 304, a second acquisition unit 305, and a sending unit 306, as follows:

[0097] (1) First acquisition unit 301;

[0098] The first acquisition unit 301 can be used to acquire target modification information for a target partition in the device before the device starts up.

[0099] In some embodiments, the first acquisition unit 301 can be used to acquire a modification instruction for a target partition in the device, the modification instruction indicating that the target partition information of the target partition is modified; and extract the target modification information for the target partition in the device from the modification instruction.

[0100] In some embodiments, the first acquisition unit 301 may be used to extract at least one candidate modification information from the modification instruction; and to extract target modification information corresponding to the target partition in the device from the candidate modification information.

[0101] (2) Modify unit 302;

[0102] Modification unit 302 can be used to modify the target partition information of the target partition according to the target modification information to obtain the modified partition information.

[0103] In some embodiments, the target modification information includes first target modification information and second target modification information, and the target partition information includes first target partition information corresponding to the first target partition and second target partition information corresponding to the second target partition; the modification unit 302 can be used to modify the first target partition information of the first target partition according to the first target partition information to obtain first modified partition information; and modify the second target partition information of the second target partition according to the second target partition information to obtain second modified partition information.

[0104] (3) First determining unit 303;

[0105] The first determining unit 303 can be used to determine that the device has a safe boot function if an alarm message for the modified partition information is obtained after the device is started.

[0106] In some embodiments, the first determining unit 303 may be specifically used to send the startup log to a tester, which is used to test the secure startup function of the device; send alarm information to the cloud so that the cloud sends alarm messages to the tester; if the tester determines that the startup log and alarm messages meet preset rules, then it is determined that the device has a secure startup function.

[0107] (4) Second determining unit 304;

[0108] The second determining unit 304 can be used to determine that the device does not have a safe boot function if no alarm information for the modified partition information is obtained.

[0109] (5) Second acquisition unit 305;

[0110] In some embodiments, the second acquisition unit 305 can be used to acquire a startup log for the modified partition information after the device is started; if the startup log is abnormal, then acquire alarm information for the modified partition information.

[0111] As can be seen from the above, the first acquisition unit 301 of this application embodiment can be used to acquire target modification information for a target partition in the device before the device starts up; the modification unit 302 can be used to modify the target partition information of the target partition according to the target modification information to obtain the modified partition information; the first determination unit 303 can be used to determine that the device has a secure boot function if an alarm message for the modified partition information is acquired after the device starts up; the second determination unit 304 can be used to determine that the device does not have a secure boot function if no alarm message for the modified partition information is acquired. Since this application embodiment can modify the target partition information of the target partition to obtain the modified partition information, it is possible to automatically determine whether the device has a secure boot function after the device starts up based on whether an alarm message for the modified partition information can be acquired, thereby improving the testing efficiency of the secure boot function of the device.

[0112] This application also provides a computer device, such as... Figure 5 As shown, it illustrates a structural schematic diagram of the computer device involved in the embodiments of this application, specifically:

[0113] The computer device may include components such as a processor 401 with one or more processing cores, a memory 402 with one or more computer-readable storage media, a power supply 403, and an input unit 404. Those skilled in the art will understand that... Figure 5 The computer device structure shown does not constitute a limitation on the computer device and may include more or fewer components than shown, or combine certain components, or have different component arrangements. Wherein:

[0114] The processor 401 is the control center of the computer device, connecting various parts of the computer device through various interfaces and lines. It performs various functions and processes data by running or executing software programs and / or modules stored in the memory 402, and by calling data stored in the memory 402. Optionally, the processor 401 may include one or more processing cores; preferably, the processor 401 may integrate an application processor and a modem processor, wherein the application processor mainly handles the operating system, user interface, and computer programs, and the modem processor mainly handles wireless communication. It is understood that the modem processor may not be integrated into the processor 401.

[0115] The memory 402 can be used to store software programs and modules. The processor 401 executes various functional applications and data processing by running the software programs and modules stored in the memory 402. The memory 402 may mainly include a program storage area and a data storage area. The program storage area may store the operating system, computer programs required for at least one function (such as sound playback function, image playback function, etc.), etc.; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 402 may include high-speed random access memory, and may also include non-volatile memory, such as at least one disk storage device, flash memory device, or other volatile solid-state storage device. Accordingly, the memory 402 may also include a memory controller to provide the processor 401 with access to the memory 402.

[0116] The computer device also includes a power supply 403 that supplies power to the various components. Preferably, the power supply 403 can be logically connected to the processor 401 through a power management system, thereby enabling functions such as charging, discharging, and power consumption management through the power management system. The power supply 403 may also include one or more DC or AC power supplies, recharging systems, power fault detection circuits, power converters or inverters, power status indicators, and other arbitrary components.

[0117] The computer device may also include an input unit 404, which can be used to receive input digital or character information communication, and to generate keyboard, mouse, joystick, optical or trackball signal inputs related to user settings and function control.

[0118] Although not shown, the computer device may also include a display unit, etc., which will not be described in detail here. Specifically, in this embodiment, the processor 401 in the computer device loads the executable files corresponding to the processes of one or more computer programs into the memory 402 according to the following instructions, and the processor 401 runs the computer programs stored in the memory 402 to realize various functions, as follows:

[0119] Before the device starts, target modification information for the target partition in the device is obtained; based on the target modification information, the target partition information of the target partition is modified to obtain the modified partition information; after the device starts, if alarm information for the modified partition information is obtained, it is determined that the device has a secure boot function; if no alarm information for the modified partition information is obtained, it is determined that the device does not have a secure boot function.

[0120] For details on the implementation of each of the above operations, please refer to the previous examples, which will not be repeated here.

[0121] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be performed by a computer program, or by a computer program controlling related hardware. The computer program can be stored in a computer-readable storage medium and loaded and executed by a processor.

[0122] Therefore, embodiments of this application provide a computer-readable storage medium storing a computer program that can be loaded by a processor to execute any of the secure boot function determination methods provided in embodiments of this application.

[0123] For details on the implementation of each of the above operations, please refer to the previous examples, which will not be repeated here.

[0124] The computer-readable storage medium may include: read-only memory (ROM), random access memory (RAM), disk or optical disk, etc.

[0125] Since the instructions stored in the computer-readable storage medium can execute the steps in any of the secure boot function determination methods provided in the embodiments of this application, the beneficial effects that any of the secure boot function determination methods provided in the embodiments of this application can achieve can be realized. For details, please refer to the previous embodiments, which will not be repeated here.

[0126] According to one aspect of this application, a computer program product or computer program is provided, comprising computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the computer device to perform the methods provided in the various optional implementations of the above embodiments.

[0127] The foregoing has provided a detailed description of a secure boot function determination method, apparatus, computer device, and computer-readable storage medium provided in the embodiments of this application. Specific examples have been used to illustrate the principles and implementation methods of this application. The descriptions of the above embodiments are only for the purpose of helping to understand the method and core ideas of this application. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of this application. Therefore, the content of this specification should not be construed as a limitation of this application.

Claims

1. A method for determining a secure startup function, characterized in that, include: Before the device starts up, obtain the target modification information for the target partition in the device; Based on the target modification information, the target partition information of the target partition is modified to obtain the modified partition information; If an alarm message is received regarding the modified partition information after the device is started, it is determined that the device has a secure boot function. If no alarm information is received regarding the modified partition information, it is determined that the device does not have a secure boot function.

2. The method for determining the secure startup function according to claim 1, characterized in that, The step of obtaining target modification information for a target partition in the device includes: Obtain a modification instruction for a target partition in the device, the modification instruction indicating that the target partition information of the target partition be modified; Extract the target modification information for the target partition in the device from the modification instructions.

3. The method for determining the secure startup function according to claim 2, characterized in that, Extracting target modification information for the target partition in the device from the modification instruction includes: Extract at least one candidate modification information from the modification instruction; Extract the target modification information corresponding to the target partition in the device from the candidate modification information.

4. The method for determining the secure startup function according to claim 1, characterized in that, The step of modifying the target partition information of the target partition according to the target modification information to obtain the modified partition information includes: Based on the target modification information, the target partition information of the target partition is replaced to obtain the replaced partition information; The modified partition information is determined based on the replaced partition information.

5. The method for determining the secure startup function according to claim 1, characterized in that, The target modification information includes first target modification information and second target modification information, and the target partition information includes first target partition information corresponding to the first target partition and second target partition information corresponding to the second target partition. The step of modifying the target partition information of the target partition according to the target modification information to obtain the modified partition information includes: Based on the first target partition information, the first target partition information of the first target partition is modified to obtain the first modified partition information; Based on the second target partition information, the second target partition information of the second target partition is modified to obtain the second modified partition information.

6. The method for determining the secure startup function according to claim 1, characterized in that, Before determining that the device has a secure boot function after the device has started up, if an alarm message for the modified partition information is obtained, the method further includes: After the device starts up, obtain the startup log for the modified partition information; If the startup log is abnormal, then obtain alarm information regarding the modified partition information.

7. The method for determining the secure startup function according to claim 6, characterized in that, After obtaining the boot log for the modified partition information after the device starts up, the method further includes: The boot log is sent to a tester, which is used to test the secure boot function of the device. The step of determining that the device has a secure boot function includes: sending the alarm information to the cloud so that the cloud sends the alarm message to the tester; If the tester determines that the startup log and the alarm message conform to preset rules, then it is determined that the device has a secure startup function.

8. A safety start function determination device, characterized in that, include: The first acquisition unit is used to acquire target modification information for a target partition in the device before the device starts up. The modification unit is used to modify the target partition information of the target partition according to the target modification information to obtain the modified partition information; The first determining unit is configured to determine that the device has a secure boot function if an alarm message for the modified partition information is obtained after the device is started. The second determining unit is used to determine that the device does not have a secure boot function if no alarm information for the modified partition information is obtained.

9. A computer device, characterized in that, It includes a memory and a processor; the memory stores a computer program, and the processor is used to run the computer program in the memory to perform the secure boot function determination method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program adapted for loading by a processor to perform the secure boot function determination method according to any one of claims 1 to 7.

11. A computer program product, characterized in that, The computer program product stores a computer program adapted for loading by a processor to execute the secure boot function determination method according to any one of claims 1 to 7.

Images