Trusted computing mainboard based on PANGUM900 processor

Through the trusted computing motherboard design based on the PANGUM900 processor, the embedded controller and trusted module work together to achieve hardware-level proactive protection, solving the problem of the root of trust not being deeply bound, providing a highly secure and high-performance trusted computing environment, and supporting flexible compliance and remote verification.

CN121935922APending Publication Date: 2026-04-28BEIJING KAIDE DATA TECHNOLOGY CO LTD
0 Cites 0 Cited by

Patent Information

Application Number
CN202610070430.3
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-01-20
Publication Date
2026-04-28

AI Technical Summary

Technical Problem

Existing technologies for secure startup of computing devices suffer from several drawbacks. The establishment of the root of trust is not deeply bound to the power-on timing and physical state of the hardware, and there is a lack of hardware-level configuration mechanisms that cannot be easily tampered with. This allows attackers to inject malicious code before or during the verification process, and it is difficult to balance high-security design with high-performance hardware implementation.

Method used

The system adopts a trusted computing motherboard design based on the PANGUM900 processor. Through the collaboration of the embedded controller and trusted modules, it achieves hardware-level active immune protection. It uses EC to execute a fine-grained secure power sequence to power only the minimum trust root components. Combined with TPM/TCM as the hardware trust root for cryptographic verification, it forms an immutable hardware trust chain and improves system security through a remote proof mechanism.

Benefits of technology

It cuts off attack paths from the source of system startup, provides unbreakable startup security, supports flexible compliance requirements, ensures stable operation with high performance and low power consumption, and provides verifiable hardware trust anchors for cloud-edge-device collaborative scenarios, thereby improving the overall security level in complex environments.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention relates to a trusted computing mainboard based on a PANGUM900 processor, which belongs to the technical field of computer hardware security, and comprises a PANGUM900 processor, a memory module, a trusted module, a BIOS (Basic Input / Output System) storage unit, an embedded controller, a power management module and a peripheral interface unit. The method is characterized in that a safe power source sequence is executed through an embedded controller, power is only supplied to a processor core, a trusted module and a BIOS storage when a system is powered on, and a pure verification environment with hardware isolation is established. And the processor then calls the trusted module to carry out cryptographic verification on the BIOS firmware, after verification succeeds, the controller powers on other components, and the subsequent boot component is verified step by step by the verified code, so that a complete hardware trust chain is formed. The trusted module can be configured into a TPM mode or a TCM mode through hardware pins. According to the method, active security protection starting from a hardware source is realized, bottom layer malicious code attacks are effectively resisted, and meanwhile, system performance, configurability and compliance requirements are considered.
Need to check novelty before this filing date? Find Prior Art