Trusted starting method and device of computing platform

Trusted starting method and device of computing platform

  • CN 109,241,745 B
  • Filed: 08/28/2018
  • Issued: 08/13/2021
  • Est. Priority Date: 08/28/2018
  • Status: Active Grant
First Claim
Patent Images

1. A trusted boot method for a computing platform, comprising:

  • controlling a processor of an operating system to be started to be in a reset state;

    calling a bootstrap program of the operating system to be started, and carrying out bootstrap program measurement on the bootstrap program to generate a first measurement result;

    when the first measurement result is that the measurement is passed, canceling the control of the processor in a reset state, and controlling the processor to load and start the bootstrap program;

    when the first measurement result is that the measurement is failed, replacing the bootstrap program with a pre-stored backup bootstrap program;

    performing bootstrap measurement again according to the backup bootstrap to generate a new first measurement result;

    calling a to-be-run system kernel of the to-be-started operating system, and performing system kernel measurement on the to-be-run system kernel to generate a second measurement result;

    when the second measurement result is that the measurement is passed, operating the system kernel to be operated;

    when the second measurement result is that the measurement is not passed, replacing the system kernel to be operated by using a pre-stored backup system kernel;

    performing system kernel measurement on the backup system kernel to generate a fourth measurement result;

    when the fourth measurement result is measurement passing, returning to the step of controlling the processor of the operating system to be started to be in a reset state;

    when the fourth measurement result is that the measurement does not pass, controlling the operating system to be started to finish starting, and generating a to-be-repaired reminding message;

    calling the system and the application program of the operating system to be started, and carrying out system and application program measurement on the system and the application program to generate a third measurement result;

    when the third measurement result is measurement passing, controlling the trusted start of the operating system to be started; and

    when the third measurement result is that the measurement does not pass, controlling the operating system to be started to finish starting, and generating the repair reminding information of the personnel to be started.

View all claims
    ×
    ×

    Thank you for your feedback

    ×
    ×