TWI403895B - Automatic testing system and a method of computer therefore - Google Patents

Abstract

A automatic testing system and a method of computer therefore, checking the computer whether acknowledge or not according to the a software and a hardware, and performing corresponded a testing means. The automatic testing system comprises of a computer and a testing means. The computer has a collection information means, utilizes to correct the hardware information and the software information of the computer for generating a acknowledge information. A trust platform module performs a encryption means for the acknowledge information, and generating a encryption information. The checking device couples to the computer. The checking device searches a device lookup table according to the encryption information. The checking device utilizes to check the identify of the computer, and performing the testing means for the computer.

Description

Computer automatic test system and test method thereof

A computer automatic test system and method thereof, in particular to an automatic test system and method for using a trusted platform module for a computer.

With the popularity of computers, many manufacturers are also launching many corresponding products. Each product includes many different hardware components (such as: central processing unit, memory chip, north bridge chipset, south bridge chipset, display chip, storage device or network chip), if it is for various hardware It is a heavy burden for the manufacturer to check the components one by one. Moreover, during the installation process of the production line, the computer may fail to pass the detection because the driver of the hardware component is not installed or the hardware component is disabled.

At present, most of the manufacturer's testing procedures are detected by computer identification data (for example, System ID or Subsystem ID). These identification materials are stored in the basic input and output system of the computer. Therefore, people who are interested can deceive the detection program by modifying the identification data of the basic input/output system, thereby performing other procedures (for example, installing a back door, destroying the system, or implanting a Trojan). If the company's internal inspection software is outflowing, then people who are interested can modify the computer of different manufacturers by modifying this detection software.

In view of the above problems, the main object of the present invention is to provide an automatic test system for a computer, which is used to verify whether a computer is legal according to various hardware components connected to a computer, and to perform a corresponding detection procedure on a legitimate computer.

To achieve the above objective, an automatic test system for a computer disclosed by the present invention includes: a computer to be tested and a detecting device. The computer to be tested includes: at least one hardware component and a trusted platform module; each device has a set of device information in each hardware component; the trusted platform module is electrically connected to the hardware component, and the platform module is trusted to collect The device information generates the authentication information, and the platform module trusts the authentication information to encrypt the program, so as to generate the encrypted information; the detecting device is connected to the computer to be tested, and the detecting device searches the device according to the encrypted information to find the matching computer. And the detection program is executed to the computer to be tested.

From another aspect of the present invention, the present invention provides an automatic test method for a computer, which is based on various hardware components connected to a computer for verifying whether a computer is legal and performing a corresponding detection procedure on a legitimate computer.

To achieve the above objective, an automatic test method for a computer disclosed by the present invention includes the following steps: starting a trusted platform module of a computer to be tested; obtaining device information of a hardware component of the computer to be tested by the trusted platform module; The encrypted information is generated; the device lookup table of the detecting device is searched to determine whether the device lookup table contains the encrypted information; and if the device lookup table contains the encrypted information, the detecting device executes the detecting program to the computer to be tested.

The present invention provides a system and method for automatic verification and testing. The detection device can verify the computer to be tested without causing the driver of the hardware component to be installed. And the detection program run by the detection device can achieve the requirement of complete confidentiality. Even if other vendors get this test, but there is no corresponding hardware architecture, other vendors still can't start the test. The features and implementations of the present invention are described in detail below with reference to the preferred embodiments.

Please refer to "Figure 1" for a schematic diagram of the architecture of the present invention. The automatic test system 100 of the computer of the present invention includes a detecting device 110 and a computer to be tested 120. The detecting device 110 includes an arithmetic unit 111 and a storage unit 112. The storage unit 112 is configured to store the device lookup table 113 and the detection program 114 of each computer 120 to be tested. The device lookup table 113 is to record encrypted information of different types of computers. Among them, the acquisition of the encrypted information can be generated by the manufacturer and then recorded separately (for the generation process, please refer to the following). The detecting device 110 may be built in the computer to be tested 120 or may be implemented by using a separate computer. If the detecting device 110 is a computer with a single profit, the detecting device 110 can be electrically connected to the computer 120 to be tested through a network or a cable.

The type of computer 120 to be tested may be a notebook computer, a personal computer or a server. The computer under test 120 includes at least one hardware component 121, an encryption program 122, a software and hardware information collection program 123, and a trust platform module 124. The hardware component 121 can be a central processing unit, a memory, a south bridge wafer, a north bridge wafer, a display chip group, a sound effect chip set, or a network chip set. Each piece of hardware component 121 has a device information, and the device information further includes hardware information and corresponding software information. The hardware information can be a Global Unique Identifier (GUID). The software information is the driver or firmware version of the corresponding hardware. When the software to be tested 120 runs the software and hardware information collecting program 123, the software and hardware information of all the connected hardware components 121 of the computer 120 to be tested are collected, and generated as one authentication information according to all the device information.

The Trusted Platform Module (124) chip is a microchip designed to provide basic security-related functions (mainly related to encryption keys). The trusted platform module 124 is typically mounted on the motherboard of the computer and communicates with other systems using a hardware bus. The computer with the trusted platform module 124 can establish an encrypted compilation key and encryption, and only the trusted platform module 124 can decrypt the keys. This handler is often referred to as a wrapper key to avoid key leaks. Each trusted platform module 124 has a primary package key stored in the trusted platform module 124 itself. The private portion of the key established in the trusted platform module 124 is never disclosed to any other component, software, handler, or individual. The computer incorporated into the Trusted Platform Module 124 can also create a packaged key and link the key to a particular platform measurement. Only when the key is established, those platforms measure the same value to unpack the key. This processing procedure is referred to as processing of the seal key to the trusted platform module 124. The process of decrypting the key is called unpacking. The trusted platform module 124 can also seal and unpack the data generated outside of the trusted platform module 124.

Therefore, the computer to be tested 120 encrypts the authentication information through the trusted platform module 124. To further explain the operational flow of the present invention, please also refer to "Figure 2". The embodiment of the present invention includes the following steps: Step S210: connecting the detecting device to the computer to be tested; Step S220: The computer to be tested executes a software and hardware information collecting program, and collects the computer to be tested through the trusted platform module. And the corresponding software information, generating an authentication information; step S230: the computer to be tested performs an encryption process for converting the authentication information into the encrypted information; step S240: searching the device lookup table of the detecting device, determining the device searching Whether the encrypted information is included in the table; step S250: if the device lookup table contains the encrypted information, the detecting device executes the detecting program to the computer to be tested; and step S260: if the device lookup table does not have the encrypted information, The detection device directly ends the verification process.

When the connection between the detecting device 110 and the computer to be tested 120 is completed, the detecting device 110 starts to verify the computer 120 to be tested. The computer to be tested 120 retrieves the device information of the connected hardware components 121. The device information can be retrieved through the Basic Input/Output System (BIOS) to the hardware components during the Power-On Self-Test (POST) process of the computer under test 120. 121 captures the hardware information, and the computer to be tested 120 retrieves the software information from each hardware component 121 through the operating system after the booting is completed.

The computer under test 120 performs an encryption process 122 on the authentication information through the trusted platform module 124 to generate an encrypted information. The encryption program 122 is an RSA (Rivest Shamir Adleman) encryption program, an Advanced Encryption Standard (AES) program, or an elliptical encryption program. The computer under test 120 then transmits the encrypted information to the detecting device 110.

Next, the detecting device 110 compares the received encrypted information with the encrypted information in the device lookup table 113 one by one, and determines whether the device lookup table 113 contains the encrypted information. Since the encrypted information generated by the trusted platform module 124 is irreversible information, the encrypted information generated by each computer 120 of the same model to be tested is unique.

If there is encrypted information of the computer to be detected in the device lookup table 113, the detecting device 110 selects the detection program 114 corresponding to the computer 120 to be tested and performs subsequent testing. If the device has no encrypted information in the device lookup table 113, it means that the computer 120 to be tested is not a legitimate computer. Therefore, the detecting device 110 does not perform the detecting program 114 on the computer 120 to be tested.

In order to clearly illustrate the spirit of the present invention, the following examples are taken as an illustration. Please refer to FIG. 3, which is a schematic diagram of the hardware component 121 in the computer 120 to be tested. For example, the encrypted information is generated by the central processing unit of the computer 120 to be tested, the memory and the hard disk drive.

First, the computer 120 to be tested is started. And the computer 120 to be tested further retrieves the device information of the central processing unit, the memory and the hard disk drive when performing the power self-test. For example, the device information of the central processing unit is: Brand ID, floating-point unit (FPU), Hyper-Threading Technology, SSE2, SSE3, EM64T technology, FSB, front-end sequence bus (Frontier Serial Bus, FSB), processor speed, L1, L2, and L3 Cache capacity, Processor ID, CPU Vendor ID, CPU Family Level, CPU Stepping Level, and CPU Model Level. The memory is the device information including the lower field: Capacity, Bank Label, Form Factor, Speed, Module Name, Memory Type, Module Width, Serial Number, Module Voltage, Manufacture Name and Manufacture Date. The device information of the hard disk drive includes: manufacturer, total magnetic column, magnetic track, magnetic area and capacity.

Then, the trusted platform module 124 of the computer 120 to be tested performs the encryption process 122 on the device information, and generates a set of encrypted information corresponding to the computer 120 to be tested. In addition, a plurality of pieces of encrypted information are also stored in the detecting device 110, and each piece of encrypted information corresponds to a computer of the same model. Since the encrypted information generated by the trusted platform module 124 is irreversible information, the encrypted information in the light detecting device 110 cannot be inferred from which hardware components 121. Finally, when the detecting device 110 passes the verification of the computer 120 to be tested, the detecting device 110 starts the detecting process 114 for the computer 120 to be tested.

The present invention provides a system and method for automatic verification and testing. The detecting device 110 can verify the computer 120 to be tested without causing the driver of the hardware component 121 to be installed. And the detection program 114 run by the detection device 110 can reach the requirement of complete confidentiality. Even if another manufacturer obtains this detection program 114, but does not have its corresponding hardware architecture, other vendors still cannot start the detection program 114.

While the present invention has been described above in terms of the preferred embodiments thereof, it is not intended to limit the invention, and the invention may be modified and modified without departing from the spirit and scope of the invention. The patent protection scope of the invention is subject to the definition of the scope of the patent application attached to the specification.

100‧‧‧Automatic test system

110‧‧‧Detection device

111‧‧‧ arithmetic unit

112‧‧‧storage unit

113‧‧‧Device lookup table

114‧‧‧Test procedures

120‧‧‧Computer under test

121‧‧‧ hardware components

122‧‧‧Encryption procedures

123‧‧‧Software and hardware information collection procedures

124‧‧‧trust platform module

Figure 1 is a schematic diagram of the architecture of the present invention.

Figure 2 is a schematic diagram of the operational flow of the present invention.

Figure 3 is a schematic view of the hardware components of the computer to be tested of the present invention.

Claims (10)

An automatic test system for a computer, which is based on device information of a hardware component connected to a computer to be tested, to verify whether the computer to be tested is legal, and to perform corresponding detection on the legal computer to be tested. The test system comprises: a trusted platform module, which is run in the computer to be tested, and the software to be tested has a software and hardware information collecting program for collecting the hardware of the computer to be tested and the corresponding software information generation. a certification information, the trusted platform module performs an encryption process on the authentication information to generate an encrypted information; and a detecting device connected to the computer to be tested, the detecting device searching for a device according to the encrypted information The detecting device is configured to perform identity verification on the computer to be tested, and perform a detection procedure on the computer to be tested verified by the identity. The automatic test system of the computer of claim 1, wherein the device information includes a software information and a hardware information. The automatic test system of the computer of claim 2, wherein the hardware information is a Global Unique Identifier (GUID). The automatic test system of the computer of claim 1, wherein the computer to be tested comprises a notebook computer, a personal computer or a server. The automatic test system of the computer of claim 1, wherein the hardware component comprises a central processing unit, a memory, a south bridge chip, a north bridge chip, a display chip group, an audio chip set, or a network. Road chip set. The automatic test system of the computer of claim 1, wherein the computer to be tested The device information is retrieved from the hardware component through a basic input/output system. The automatic test system of the computer of claim 1, wherein the detecting device further comprises a storage unit, wherein the storage unit is configured to store the encrypted information of each computer to be tested, the device lookup table and the detection programs. . An automatic test method for a computer, which is based on device information of a hardware component connected to a computer to be tested, to verify whether the computer to be tested is legal, and performs a corresponding detection procedure on the legal computer to be tested. The test method includes: obtaining a piece of hardware information and a corresponding piece of software information of a hardware component of the computer to be tested through a trusted platform module of the computer to be tested, thereby generating an encrypted information; and searching for a detecting device A device lookup table determines whether the encrypted lookup information is included in the device lookup table; and if the device lookup table includes the encrypted information, the detecting device executes the detection procedure to the computer to be tested. The automatic test method of the computer of claim 8, wherein the computer to be tested collects the device information for the hardware components during the over-power self-test. The method of claim 8, wherein the computer to be tested retrieves the device information from the hardware components through an operation system.