Trusted firmware upgrading method and system based on trusted computing system

Abstract

The invention provides a trusted firmware upgrading method and system based on a trusted computing system. The method comprises the steps that a trusted computing management system signs a trusted firmware upgrading package and pushes the trusted firmware upgrading package to a software store; the software store verifies the signature of the upgrade package, if the signature verification succeeds, the Hash value H1 of the upgrade package is calculated, and an upgrade instruction is sent; the trusted BIOS receives the upgrading instruction, calculates a hash value H2, compares the hash value H2 with the hash value H1, and performs upgrading if the comparison succeeds; after upgrading is completed, the trusted BIOS sends an expected value collection instruction to the TCM module, the TCM module reads data of the trusted BIOS and calculates a hash value H3 after restarting and electrifying, the hash value H3 is compared with the hash value H1, if comparison succeeds, collection and backup are conducted, and trusted firmware upgrading is completed. According to the method, the security risk control of the trusted equipment can be effectively improved, the trusted operation of the information system is ensured, meanwhile, the firmware upgrading efficiency and operability are enhanced, and the user experience is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of trusted computing systems, and in particular to a trusted firmware upgrade method and system based on a trusted computing system. Background Art

[0002] Trusted firmware is a crucial link in the trust chain of the trusted computing system, ensuring the trusted operation of the device during the startup process. The upgrade of trusted firmware is particularly important. If there is an attack vulnerability at this stage, it may cause the trust chain to be broken, affecting the trusted operation of the device. The current mainstream trusted firmware update method is completed by the trusted platform module (TCM) and the trusted BIOS. The main idea is to upgrade the trusted BIOS, inform the TCM module to collect and backup after the upgrade is completed, and the TCM module collects and backs up at the next power-on to complete the upgrade of the trusted firmware. The specific method is: first, select the uploaded firmware update package for update through the BIOS management page, and send a re-collection expected value instruction to the TCM module after the update is completed. Then, after receiving the collection instruction, the TCM reads the trusted firmware chip data when restarting and powering on, and re-collects and backs up. However, this method has some problems: currently, no effective verification is performed during the upgrade and backup process, and the credibility of the firmware package is difficult to guarantee, which may lead to upgrade and backup errors that are difficult to detect, and may cause information equipment to be paralyzed or lose trust and be unable to recover after being attacked during the upgrade and backup; at the same time, the existing trusted firmware upgrade method is inefficient and not convenient for batch equipment upgrades. For example, if the wrong firmware upgrade package is selected for upgrade, or if the trusted firmware is tampered with or destroyed during the process of collecting expected values ​​after the upgrade is completed, it may directly lead to the collapse or even loss of trust of the trust chain, paralyzing the trusted operation of the information device. Considering the above factors, the existing trusted firmware upgrade technology has security risks and is vulnerable to malicious attacks. Therefore, it is urgent to study a new trusted firmware upgrade technology to ensure the credibility and security of the firmware during the update process to ensure the normal operation of the trusted trust chain. Summary of the invention

[0003] The present invention aims to provide a trusted firmware upgrade method and system based on a trusted computing system to solve the above-mentioned problems existing in the current trusted firmware upgrade.

[0004] The present invention provides a trusted firmware upgrade method based on a trusted computing system, comprising the following steps:

[0005] Step 1: The trusted computing management system signs the trusted firmware upgrade package and pushes the trusted firmware upgrade package to the software store;

[0006] Step 2: The software store verifies the signature of the trusted firmware upgrade package. If the signature verification succeeds, the hash value H1 of the trusted firmware upgrade package is calculated and stored in the TCM module, and an upgrade instruction is sent to the trusted BIOS; if the signature verification fails, the upgrade is stopped and reported to the trusted computing management system;

[0007] Step 3: The trusted BIOS receives the upgrade instruction, calculates the hash value H2 of the trusted firmware upgrade package, and compares it with the hash value H1 calculated by the software store in step 2. If the comparison is successful, the upgrade is performed; if the comparison fails, the upgrade is stopped and reported to the trusted computing management system;

[0008] Step 4: After the upgrade is completed, the trusted BIOS sends an expected value collection instruction to the TCM module and automatically restarts. After restarting and powering on, the TCM module reads the trusted BIOS data and calculates the hash value H3, which is compared with the hash value H1 calculated by the software store in step 2. If the comparison is successful, the data is collected and backed up. If the comparison fails, trusted recovery is performed and reported to the trusted computing management system.

[0009] Step 5: If the collection and backup are completed in step 4, the trusted firmware upgrade is completed and the trusted trust chain runs normally.

[0010] The present invention also provides a trusted firmware upgrade system based on a trusted computing system, which is used to implement the trusted firmware upgrade method based on a trusted computing system as claimed in claim 1;

[0011] The trusted firmware system based on the trusted computing system includes a TCM module, a trusted BIOS, a software store and a trusted control circuit;

[0012] The trusted BIOS forms a trust link with the TCM module and the software store to form a trusted computing system, wherein the TCM module interacts with the trusted BIOS through a trusted control circuit and controls the CPU, and the trusted BIOS and the TCM module transmit data through a communication interface;

[0013] The software store and the trusted computing management system are connected via a network for data transmission;

[0014] The software store communicates with the TCM module and the trusted BIOS through a driver.

[0015] Furthermore, the functional components of the TCM module include an execution engine, a control decision engine, a non-volatile storage unit, a volatile storage unit, a true random number generator, an algorithm engine, a platform configuration register PCR and a timer; each functional component is mapped to an address space by an input-output bridge unit.

[0016] Furthermore, the software store provides software downloading, installation, uninstallation, and management, can receive software distribution from the trusted computing management system server, and perform legality verification on the software.

[0017] Furthermore, the trusted control circuit is composed of a logic control circuit and related interface circuits on the main board; the TCM module controls the CPU reset signal and the CPU's data access channel to the trusted firmware through the logic control circuit to achieve control over the trusted firmware upgrade.

[0018] Furthermore, if the TCM module detects that the trusted firmware upgrade is normal, the SPI access channel between the trusted firmware and the TCM module is opened, the trusted firmware is backed up to the trusted firmware backup FLASH, and then the CPU reset signal is released, the trusted BIOS access channel is switched to the CPU, and the device is started normally; and when the TCM module detects that the upgraded trusted firmware is damaged, the TCM module first controls the CPU reset signal to put it in a reset state, and at the same time opens the SPI access channel between the trusted firmware and the TCM module to restore the data of the trusted firmware backup FLASH.

[0019] In summary, due to the adoption of the above technical solution, the beneficial effects of the present invention are:

[0020] In a trusted computing system, a trusted platform module (TCM), a trusted BIOS, and a trusted software base (TSB) form a trust chain. With TCM as a trusted root, trust is transferred through trust metrics step by step to ensure the trusted operation of the information system. Based on a trusted computing system, the present invention introduces the idea of ​​trust link transfer into the trusted firmware upgrade. Through the linkage of each level of the TCM module, the trusted BIOS, the software store, and the trusted computing management system, the update of the trusted firmware is monitored, inspected, and transmitted at each level to ensure the integrity, credibility, and security of the trusted firmware update. It can effectively avoid malicious attacks during the trusted firmware upgrade process, ensure the trusted operation of the information device, and realize the one-click upgrade of the trusted firmware, which greatly increases the efficiency while improving the security. Therefore, the present invention has security detection and emergency response measures, which can effectively improve the security risk control of the trusted device and ensure the trusted operation of the information system. At the same time, the efficiency and ease of operation of the firmware upgrade are enhanced to improve the user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 The figure is an architecture diagram of a trusted firmware upgrade system based on a trusted computing system in an embodiment of the present invention.

[0022] Figure 2 4 is a principle block diagram of a TCM module in an embodiment of the present invention.

[0023] Figure 3 It is a principle block diagram of the software store and the communication between the software store, the TCM module and the trusted BIOS in an embodiment of the present invention.

[0024] Figure 4 It is a principle block diagram of the trusted control circuit and the interaction between the trusted control circuit and the CPU, TCM module and trusted BIOS in an embodiment of the present invention.

[0025] Figure 5 The figure is a flow chart of a trusted firmware upgrade method based on a trusted computing system in an embodiment of the present invention. DETAILED DESCRIPTION

[0026] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0027] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0028] Example

[0029] The current trusted firmware upgrade method is to upgrade through the trusted BIOS, and after the upgrade, the TCM module collects and backs up the data. However, no effective verification is currently performed during the upgrade and backup process, and the credibility of the firmware package is difficult to guarantee, which may lead to upgrade and backup errors that are difficult to detect, and may cause information equipment to be paralyzed or lose credibility after being attacked during the upgrade and backup, and cannot be restored; at the same time, the existing trusted firmware upgrade method is inefficient and not convenient for batch equipment upgrades.

[0030] In response to the current problems of trusted firmware upgrades, this embodiment proposes a trusted firmware upgrade method and system based on a trusted computing system. Based on the trusted computing system and a nationally produced trusted computer, the method and system realize the function of securely upgrading the trusted firmware through step-by-step verification and transmission of the TCM module, trusted BIOS, software store, and trusted computing management system, combined with the trusted control circuit in the platform motherboard.

[0031] like Figure 1As shown, the trusted firmware upgrade system based on the trusted computing system is combined with the existing trusted computing management system, and the trusted firmware upgrade function is completed by the TCM module, the trusted BIOS, the software store and the trusted control circuit. Therefore, the trusted firmware upgrade system based on the trusted computing system includes the TCM module, the trusted BIOS, the software store and the trusted control circuit.

[0032] 1. TCM module

[0033] As a trusted root, TCM is the lowest level of the trusted computing system. Figure 2 As shown in the figure, the TCM module includes functional components such as execution engine, control decision engine, non-volatile storage unit, volatile storage unit, true random number generator, algorithm engine, platform configuration register PCR and timer. Each functional component is mapped to the address space by the input and output bridge unit. The TCM module interacts with the trusted BIOS through the trusted control circuit and controls the CPU. In the trusted firmware update process, as the last layer of protection, the integrity of the trusted firmware is measured and the collection backup or trusted recovery is performed.

[0034] 2. Trusted BIOS

[0035] Trusted BIOS is a customized and trusted development based on the general BIOS. It forms a trust link with the TCM module and the software store to form a trusted computing system. It initializes each hardware device and boots the system during the startup process. Trusted BIOS and the TCM module transmit data through the communication interface, and can interact during the trusted firmware upgrade process to complete the monitoring and verification of the trusted firmware upgrade.

[0036] 3. Software Store

[0037] like Figure 3 As shown in the figure, the software store mainly provides functions such as software download, installation, uninstallation, and management. The software store and the trusted computing management system are connected through the network to transmit data, receive software issued by the trusted computing management system server, and verify the legality of the software. At the same time, the software store communicates with the TCM module and trusted BIOS through the driver, calls cryptographic algorithms, storage and other functions, and realizes the inspection and delivery of trusted firmware update packages.

[0038] 4. Trusted control circuit

[0039] like Figure 4As shown, the trusted control circuit is composed of a logic control circuit and related interface circuits on the mainboard. The TCM module controls the CPU reset signal and the CPU's data access channel to the trusted firmware through the logic control circuit to control the trusted firmware upgrade. If the TCM module detects that the trusted firmware upgrade is normal, it opens the SPI access channel between the trusted firmware and the TCM module, backs up the trusted firmware to the trusted firmware backup FLASH, then releases the CPU reset signal, switches the trusted BIOS access channel to the CPU, and starts the device normally. When the TCM module detects that the upgraded trusted firmware is damaged, the TCM module first controls the CPU reset signal to put it in a reset state, and at the same time opens the SPI access channel between the trusted firmware and the TCM module to restore the data of the trusted firmware backup FLASH.

[0040] Therefore, the trusted firmware upgrade method based on the trusted computing system is as follows: Figure 5 As shown, the following steps are included:

[0041] Step 1: The trusted computing management system signs the trusted firmware upgrade package and pushes the trusted firmware upgrade package to the software store;

[0042] Step 2: The software store verifies the signature of the trusted firmware upgrade package. If the signature verification succeeds, the hash value H1 of the trusted firmware upgrade package is calculated and stored in the TCM module, and an upgrade instruction is sent to the trusted BIOS; if the signature verification fails, the upgrade is stopped and reported to the trusted computing management system;

[0043] Step 3: The trusted BIOS receives the upgrade instruction, calculates the hash value H2 of the trusted firmware upgrade package, and compares it with the hash value H1 calculated by the software store in step 2. If the comparison is successful, the upgrade is performed; if the comparison fails, the upgrade is stopped and reported to the trusted computing management system;

[0044] Step 4. After the upgrade is completed, the trusted BIOS sends an instruction to collect expected values ​​to the TCM module and automatically restarts. After restarting and powering on, the TCM module reads the trusted BIOS data and calculates the hash value H3, which is compared with the hash value H1 calculated by the software store in step 2. If the comparison is successful, collection and backup are performed. If the comparison fails, trusted recovery is performed and reported to the trusted computing management system. The specific process of backup and trusted recovery can refer to the description of the trusted control circuit part of the module above, and will not be repeated here.

[0045] Step 5: If the collection and backup are completed in step 4, the trusted firmware upgrade is completed and the trusted trust chain runs normally.

[0046] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A trusted firmware upgrade method based on a trusted computing system, characterized in that: The steps include: Step 1: The trusted computing management system signs the trusted firmware upgrade package and pushes the trusted firmware upgrade package to the software store; Step 2: The software store verifies the signature of the trusted firmware upgrade package. If the signature verification succeeds, the hash value H1 of the trusted firmware upgrade package is calculated and stored in the TCM module, and an upgrade instruction is sent to the trusted BIOS. If the signature verification fails, the upgrade will be stopped and reported to the trusted computing management system; Step 3: The trusted BIOS receives the upgrade instruction, calculates the hash value H2 of the trusted firmware upgrade package, and compares it with the hash value H1 calculated by the software store in step 2. If the comparison is successful, the upgrade is performed; if the comparison fails, the upgrade is stopped and reported to the trusted computing management system; Step 4: After the upgrade is completed, the trusted BIOS sends an expected value collection instruction to the TCM module and automatically restarts. After restarting and powering on, the TCM module reads the trusted BIOS data and calculates the hash value H3, which is compared with the hash value H1 calculated by the software store in step 2. If the comparison is successful, the data is collected and backed up. If the comparison fails, trusted recovery is performed and reported to the trusted computing management system. Step 5: If the collection and backup are completed in step 4, the trusted firmware upgrade is completed and the trusted trust chain runs normally.

2. A trusted firmware upgrade system based on a trusted computing system, characterized in that: Used to implement the trusted firmware upgrade method based on the trusted computing system as claimed in claim 1; The trusted firmware system based on the trusted computing system includes a TCM module, a trusted BIOS, a software store and a trusted control circuit; The trusted BIOS forms a trust link with the TCM module and the software store to form a trusted computing system, wherein the TCM module interacts with the trusted BIOS through a trusted control circuit and controls the CPU, and the trusted BIOS and the TCM module transmit data through a communication interface; The software store and the trusted computing management system are connected via a network for data transmission; The software store communicates with the TCM module and the trusted BIOS through a driver.

3. The trusted firmware upgrade system based on the trusted computing system according to claim 2, characterized in that: The functional components of the TCM module include an execution engine, a control decision engine, a non-volatile storage unit, a volatile storage unit, a true random number generator, an algorithm engine, a platform configuration register PCR and a timer; each functional component is mapped to an address space by an input-output bridge unit.

4. The trusted firmware upgrade system based on the trusted computing system according to claim 2, characterized in that: The software store provides software downloading, installation, uninstallation, and management, can receive software distribution from the trusted computing management system server, and perform legality checks on the software.

5. The trusted firmware upgrade system based on the trusted computing system according to claim 2, characterized in that: The trusted control circuit is composed of a logic control circuit and related interface circuits on the mainboard; the TCM module controls the CPU reset signal and the CPU's data access channel to the trusted firmware through the logic control circuit to achieve control over the trusted firmware upgrade.

6. The trusted firmware upgrade system based on the trusted computing system according to claim 5, characterized in that: If the TCM module detects that the trusted firmware upgrade is normal, it opens the SPI access channel between the trusted firmware and the TCM module, backs up the trusted firmware to the trusted firmware backup FLASH, then releases the CPU reset signal, switches the trusted BIOS access channel to the CPU, and starts the device normally; When the TCM module detects that the upgraded trusted firmware is damaged, the TCM module first controls the CPU reset signal to put it in a reset state, and at the same time opens the SPI access channel between the trusted firmware and the TCM module to restore the data of the trusted firmware backup FLASH.

Images