Secure starting system and method based on embedded computer system

Abstract

The invention discloses a secure starting system based on an embedded computer system, which comprises an authorization system and a secure computer, and is characterized in that the authorization system comprises an authorization server used for deciding whether to authorize according to the application content of the secure computer; the authorization terminal is used for connecting the security computer and the authorization server and providing a human-computer interface for an operator; the secure computer comprises a processor used for operating software and realizing expected functions of a system; the nonvolatile memory is used for storing authorization information; the power supply and reset module is used for providing power supplies with various voltages for the processor; and the security monitoring module is used for storing a unique hardware serial number which cannot be rewritten, verifying software and hardware information, time and authorization information, and controlling the power supply and the reset module to provide correct, reset and power-down time sequences for the processor. The invention further discloses a safe starting method based on the embedded computer system. And the software and hardware completeness and possible software and hardware copyright problems of the system are ensured.

Description

Technical Field

[0001] The invention relates to a safe starting system and method based on an embedded computer system. Background Art

[0002] Common secure boot methods usually include: setting a login password, software-system image encryption, activating a license, hardware dongle, etc. These security measures have some shortcomings or cracking methods and are not completely suitable for embedded computer systems.

[0003] The login password setting method is easy to be peeped, copied, and forgotten. Especially the method that requires manual password input conflicts with the feature that the embedded system needs to run automatically after power-on.

[0004] Although image encryption can ensure the integrity of software and data, it is easy to be copied by attackers. If the attacker copies both the hardware circuit and the image, the copy will also run normally.

[0005] There is a similar problem with the way licenses are activated. If the license is duplicated, multiple duplicate computer systems will be able to operate the same system.

[0006] Hardware dongles are a common licensing method for commercial software. However, hardware dongles are easy to lose or damage. If they are lost, customers must repurchase the software copyright, which is unreasonable. Moreover, dongles often represent the right to use the software. The same dongle can be used on multiple devices. It only protects the software, not the hardware.

[0007] Therefore, in order to solve the above problems, a secure boot system and method based on an embedded computer system is provided. Summary of the invention

[0008] The purpose of the present invention is to overcome the existing defects and provide a secure boot system and method based on an embedded computer system to prevent attackers from obtaining sensitive information and tampering with the functions of the embedded computer system, thereby ensuring the system's software and hardware integrity and possible software and hardware copyright issues.

[0009] The technical solution to achieve the above purpose is:

[0010] A secure boot system based on an embedded computer system, comprising: an authorization system and a secure computer,

[0011] The authorization system includes:

[0012] An authorization server, used to determine whether to authorize based on the application content of the secure computer;

[0013] An authorization terminal, used to connect the security computer and the authorization server to provide a human-machine interface for the operator;

[0014] The secure computer comprises:

[0015] Processor, used to run software and realize the expected functions of the system;

[0016] A non-volatile memory for storing authorization information;

[0017] A power supply and reset module, used for providing power supplies of various voltages to the processor;

[0018] The security monitoring module is used to store a unique, non-rewritable hardware serial number, and is also used to verify software and hardware information, time and authorization information, and is also used to control the power supply and reset module to provide the processor with correct reset and power-off timing, wherein the hardware serial numbers of any two security monitoring modules are different.

[0019] Preferably, the authorization server contains a database for storing authorization information and authorization history information preset by the authorizer, wherein the authorization information includes a software version number, a unique hardware serial number and authorization time limit information, wherein the software version number refers to the version number of the trusted software that is allowed to run, and other versions of the software or other software will not be started by the secure computer, the unique hardware serial number refers to the security monitoring module serial number that represents the uniqueness of the hardware system, and the authorization time limit information refers to the period during which the authorization is valid. After the time limit expires, the system needs to be re-authorized before it can be safely started.

[0020] Preferably, the authorization terminal is connected to the security computer via a local area network and connected to the authorization server via the Internet.

[0021] A second security boot method based on an embedded computer system of the present invention includes: an authorization process and a security boot process;

[0022] The authorization process includes:

[0023] Step S1, the authorization terminal sends a query request to the security computer;

[0024] Step S2, the processor reads the software version number and the hardware serial number in the security monitoring module, and encrypts and sends them to the authorization terminal;

[0025] Step S3, the authorization terminal forwards the data packet to the authorization server and requests authorization;

[0026] Step S4, the authorization server decrypts and verifies the received data;

[0027] Step S5, if the data verification passes, the authorization server will query the authorization information in the database according to the hardware serial number;

[0028] Step S6, if the authorization server finds the pre-authorization information of the security computer, it will generate an encrypted authorization string according to the pre-authorization information and send it to the security computer for storage, thereby completing the authorization process;

[0029] After obtaining the authorization information, the secure computer then performs a secure boot process;

[0030] The secure boot process includes:

[0031] Step S7, the security monitoring module sends an authentication request to the processor;

[0032] Step S8, if the security monitoring module obtains a response from the processor, it will send a random key to the processor, and the subsequent communication process will use the random key to encrypt the communication content;

[0033] Step S9, the processor reads the software version number, time, and authorization information, encrypts them and sends them to the security monitoring module;

[0034] Step S10, the security monitoring module decrypts the data and checks whether the software version number and hardware serial number match and whether the time is expired;

[0035] Step S11, if the authentication is passed, the security monitoring module notifies the processor to run the trusted software, and the system security startup is completed.

[0036] Preferably, in step S4, if the verification fails, the authorization terminal is notified of data error, and the operator tries to apply for authorization again.

[0037] Preferably, in step S5, if no authorization information is found, the authorization terminal is notified that the hardware serial number has no authority, and the operator should contact the authorization party to confirm the specific authorization status of the secure computer.

[0038] Preferably, in step S7, if the processor does not respond, the security monitoring module will execute a power-off sequence after notifying the processor, at which time the operator can check the problem or try to restart.

[0039] Preferably, in step S10, if the authentication fails, the security monitoring module will perform a power-off operation after notifying the processor.

[0040] The beneficial effects of the present invention are as follows: the present invention takes into account the protection of software and hardware, the authorization information includes software version information and hardware serial number, the scheme not only protects software, prevents the startup of untrustworthy and unsafe software, but also increases the protection of hardware, even if the attacker copies the full set of software, hardware and authorization information, because the authorization information is bound to the unique hardware serial number, the copy cannot pass the authorization verification, nor can it be started and run; the secure computer system has high software and hardware fit, good security, and is difficult to forcibly crack, the security monitoring module provides the processor with power-on timing and reset function, so it cannot be shielded, the processor provides authorization information, the security monitoring module verifies, the security monitoring module notifies the processor of the verification, and the system can be safely started, the secure startup process is a two-way verification of the software and the security monitoring module, which can ensure the integrity of the system, the communication content between the processor and the security monitoring module is encrypted with random numbers, which is difficult to forcibly crack or copy and deceive; and the startup speed is fast, the system reliability is good, and the startup process does not require manual intervention. The authorization information is stored internally, and there is no need to wait for the password to be entered. The security monitoring module is built-in, and there is no problem of loss, damage, and connection reliability. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 It is a module diagram of a secure boot system based on an embedded computer system of the present invention;

[0042] Figure 2 It is an authorization flow chart of a secure startup method based on an embedded computer system of the present invention;

[0043] Figure 3 The present invention is a safe startup flow chart of a safe startup method based on an embedded computer system. DETAILED DESCRIPTION

[0044] The technical solution of the present invention will be described clearly and completely below in conjunction with the accompanying drawings. In the description of the present invention, it should be noted that the terms "center", "up", "down", "left", "right", "vertical", "horizontal", "inside", "outside" and the like indicate directions or positional relationships based on the directions or positional relationships shown in the accompanying drawings, which are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific direction, be constructed and operated in a specific direction, and therefore cannot be understood as a limitation on the present invention. In addition, the terms "first", "second", and "third" are used for descriptive purposes only and cannot be understood as indicating or implying relative importance.

[0045] The present invention will be further described below in conjunction with the accompanying drawings.

[0046] like Figure 1As shown, a secure boot system based on an embedded computer system includes: an authorization system 1 and a secure computer 2.

[0047] The authorization system 1 is a personal computer with authorization tool software installed, and the security computer 2 is usually an embedded computer with specific functions and purposes, which usually does not have input and output devices such as a display screen and a mouse and keyboard.

[0048] The authorization system 1 includes: an authorization server 11 and an authorization terminal 12. The authorization server 11 is used to determine whether to authorize based on the application content of the security computer 2; the authorization terminal 12 is used to connect the security computer 2 and the authorization server 11 to provide a human-machine interface for the operator.

[0049] In the embodiment, the authorization server 11 contains a database for storing the authorization information and authorization history information preset by the authorizer. When a secure computer 2 initiates an authorization application, the authorization server 11 decides whether to authorize based on the database content. The authorization server 11 accesses the database through the public network IP, wherein the authorization information includes the software version number, the unique hardware serial number and the authorization time limit information, wherein the software version number refers to the version number of the trusted software allowed to run, and other versions of the software or other software will not be started by the secure computer 2. The unique hardware serial number refers to the serial number of the security monitoring module 24 representing the uniqueness of the hardware system. The authorization time limit information refers to the period during which the authorization is valid. After the time limit expires, the system needs to be re-authorized before it can be safely started.

[0050] In the embodiment, the authorization terminal 12 is connected to the security computer 2 via a local area network and is connected to the authorization server 11 via the Internet.

[0051] In another embodiment, the authorization terminal 12 is connected to the security computer 2 via USB or RS232 communication.

[0052] The security computer 2 includes: a processor 21, a non-volatile memory 22, a power supply and reset module 23 and a security monitoring module 24. The processor 21 is used to run the software to realize the expected functions of the system; the non-volatile memory 22 is used to save the authorization information to prevent it from being easily stolen; the power supply and reset module 23 is used to provide power of various voltages to the processor 21; the security monitoring module 24 is used to save a unique, non-rewritable hardware serial number, and is also used to verify the software and hardware information, time and authorization information, and is also used to control the power supply and reset module 23 to provide the processor 21 with the correct, reset, and power-off timing, wherein the hardware serial numbers of any two security monitoring modules 24 are different, and the security monitoring module 24 is a 32-bit MCU (single-chip microcomputer) with a unique hardware serial number.

[0053] like Figure 2 , 3As shown, a secure boot method based on an embedded computer system includes: an authorization process and a secure boot process;

[0054] The authorization process includes:

[0055] Step S1 : the authorization terminal 12 sends a query request to the security computer 2 .

[0056] In step S2 , the processor 21 reads the software version number and the hardware serial number in the security monitoring module 24 , and encrypts and sends them to the authorization terminal 12 .

[0057] Step S3: the authorization terminal 12 forwards the data packet to the authorization server 11 and requests authorization.

[0058] Step S4: the authorization server 11 decrypts and verifies the received data.

[0059] In the embodiment, if the verification fails, the authorization terminal 12 is notified of the data error and the operator tries to apply for authorization again.

[0060] Step S5: If the data verification passes, the authorization server 11 will query the authorization information in the database according to the hardware serial number.

[0061] In the embodiment, if the authorization information cannot be found, the authorization terminal 12 is notified that the hardware serial number has no authorization. At this time, the operator should contact the authorization party to confirm the specific authorization status of the secure computer 2.

[0062] Step S6: If the authorization server 11 finds the pre-authorization information of the security computer, it will generate an encrypted authorization string according to the pre-authorization information and send it to the security computer 2 for storage, thereby completing the authorization process.

[0063] After obtaining the authorization information, the secure computer 2 performs a secure boot process.

[0064] The secure boot process includes:

[0065] Step S7 : the security monitoring module 24 sends an authentication request to the processor 21 .

[0066] In an embodiment, if the processor 21 does not respond, the security monitoring module 24 will execute a power-off sequence after notifying the processor 21. At this time, the operator can check the problem or try to restart.

[0067] Step S8: If the security monitoring module 24 obtains a response from the processor 21, it will send a random number key to the processor 21, and the subsequent communication process will use the random number key to encrypt the communication content.

[0068] In step S9 , the processor 21 reads the software version number, time, and authorization information, encrypts them, and sends them to the security monitoring module 24 .

[0069] Step S10, the security monitoring module 24 decrypts the data and checks whether the software version number and hardware serial number match and whether the time is expired.

[0070] In an embodiment, if the authentication fails, the security monitoring module 24 will perform a power-off operation after notifying the processor 21 .

[0071] Step S11, if the authentication is successful, the security monitoring module 24 notifies the processor 21 to run the trusted software, and the system security startup is now completed.

[0072] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that the technical solutions described in the above embodiments may still be modified, or some or all of the technical features may be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A secure boot system based on an embedded computer system, characterized in that: include: Authorization systems and secure computers, The authorization system includes: An authorization server, used to determine whether to authorize based on the application content of the secure computer; An authorization terminal, used to connect the security computer and the authorization server to provide a human-machine interface for the operator; The secure computer comprises: Processor, used to run software and realize the expected functions of the system; A non-volatile memory for storing authorization information; A power supply and reset module, used for providing power supplies of various voltages to the processor; The security monitoring module is used to store a unique, non-rewritable hardware serial number, and is also used to verify software and hardware information, time and authorization information, and is also used to control the power supply and reset module to provide the processor with correct reset and power-off timing, wherein the hardware serial numbers of any two security monitoring modules are different.

2. A secure boot system based on an embedded computer system according to claim 1, characterized in that: The authorization server contains a database for storing authorization information and authorization history information preset by the authorizer, wherein the authorization information includes software version number, unique hardware serial number and authorization time limit information, wherein the software version number refers to the version number of the trusted software allowed to run, and other versions of the software or other software will not be started by the secure computer, the unique hardware serial number refers to the security monitoring module serial number representing the uniqueness of the hardware system, and the authorization time limit information refers to the period during which the authorization is valid. After the time limit expires, the system needs to be re-authorized before it can be safely started.

3. A secure boot system based on an embedded computer system according to claim 1, characterized in that: The authorization terminal is connected to the security computer via a local area network and is connected to the authorization server via the Internet.

4. A secure boot method based on an embedded computer system, characterized in that: include: Authorization process and secure boot process; The authorization process includes: Step S1, the authorization terminal sends a query request to the security computer; Step S2, the processor reads the software version number and the hardware serial number in the security monitoring module, and encrypts and sends them to the authorization terminal; Step S3, the authorization terminal forwards the data packet to the authorization server and requests authorization; Step S4, the authorization server decrypts and verifies the received data; Step S5, if the data verification passes, the authorization server will query the authorization information in the database according to the hardware serial number; Step S6, if the authorization server finds the pre-authorization information of the security computer, it will generate an encrypted authorization string according to the pre-authorization information and send it to the security computer for storage, thereby completing the authorization process; After obtaining the authorization information, the secure computer then performs a secure boot process; The secure boot process includes: Step S7, the security monitoring module sends an authentication request to the processor; Step S8, if the security monitoring module obtains a response from the processor, it will send a random key to the processor, and the subsequent communication process will use the random key to encrypt the communication content; Step S9, the processor reads the software version number, time, and authorization information, encrypts them and sends them to the security monitoring module; Step S10, the security monitoring module decrypts the data and checks whether the software version number and hardware serial number match and whether the time is expired; Step S11, if the authentication is passed, the security monitoring module notifies the processor to run the trusted software, and the system security startup is completed.

5. A secure boot method based on an embedded computer system according to claim 4, characterized in that: In step S4, if the verification fails, the authorization terminal is notified of the data error and the operator tries to apply for authorization again.

6. A secure boot method based on an embedded computer system according to claim 4, characterized in that: In step S5, if no authorization information is found, the authorization terminal is notified that the hardware serial number has no authorization. At this time, the operator should contact the authorization party to confirm the specific authorization status of the secure computer.

7. A secure boot method based on an embedded computer system according to claim 4, characterized in that: In step S7, if the processor does not respond, the security monitoring module will execute a power-off sequence after notifying the processor. At this time, the operator can check the problem or try to restart.

8. A secure boot method based on an embedded computer system according to claim 4, characterized in that: In the step S10, if the authentication fails, the security monitoring module will perform a power-off operation after notifying the processor.

Images