TWI778320B - Method and system of automatically launch a secure of the operating system - Google Patents

Abstract

The present invention provides a system of automatically launch a secure of the operating system. The system is applied in a host electronic device that has a first hard drive and at least one second hard drive, wherein the first hard drive is installed with an operating system that is a predetermined main operating system of the host electronic device, and the second hard drive is installed with a backup operating system. The system of the present invention comprises: a memory unit storing with a boot certificate of operating system, a watchdog unit and a control unit. During a boot procedure of the host electronic device, the control unit conducts a method of safety launching operating system to determine whether the immediate main operating system of the host electronic device is trustable or not, so as to set the backup operating system to be the main operating system of the host electronic device in case of the immediate main operating system of the host electronic device is detected to be trustless, thereby guaranteeing that the host electronic device can be successfully booted.

Description

Start-up method with automatic start-up safe operating system and start-up system thereof

The present invention relates to a method for detecting security startup of a host device, in particular to a startup method and startup system with automatic startup of a secure operating system.

Generally speaking, the Basic Input Output System (BIOS) is mainly stored in the flash memory and pre-installed on the motherboard. It is indispensable for performing hardware initialization and providing the operating system during the boot phase of the host. The firmware of the BIOS is related to the hardware of the operating system. If the hardware of the operating system is changed, the host cannot be turned on smoothly.

However, with the development of information technology, systems with different functions have different definitions of the normal security of their own systems. The BIOS of the system must manually change the settings to control the settings of the central processing unit (CPU) and related peripheral devices.

Therefore, considering that the operating system generates different BIOSes due to different devices, the inventor of this case has made great efforts to research and create, and finally developed a startup method and a startup system with automatic startup of a secure operating system of the present invention.

The present invention provides a startup system with an automatic startup safety operating system, which is applied to a host device. Wherein, the host device has a first hard disk and at least one second hard disk, the first hard disk is installed with an operating system that is preferably used as the current operating system, and the second hard disk is installed with a backup operating system. The startup system of the present invention includes: a memory unit, a monitoring unit and a control unit, wherein the memory unit stores an operating system startup certificate. Wherein, in the process of the host device performing the booting procedure, the control unit detects the current operating system of the host device according to a startup method designed by the present invention, so that when the current operating system is not trusted, the backup operating system is automatically Switch to the current operating system of the host device, so that the host device can be successfully powered on. .

Therefore, in order to achieve the above-mentioned object of the present invention, the inventor of this case proposes a startup method with automatic startup of a secure operating system, which includes: (1) a basic input/output system starts a current operation of a host device with a security certificate according to a system The system performs an operating system startup verification; (2) confirms whether the operating system startup verification is passed, and if so, executes step (4), if otherwise, executes step (3); (3) the basic I/O system is changed to a standby operating system As the current operating system of the host device, the step (1) is then repeatedly performed; (4) in the case that the operating system startup verification is passed, a monitoring unit is enabled to perform boot timing, and when the current operating system is started, performing a self-security check based on a security credential; (5) Start the current operating system and confirm whether the self-security check is passed and whether the startup is completed within the time limit, if so, execute step (7), otherwise, the monitoring unit executes step (6) after the timeout; (6) ) BIOS changes to make a standby operating system as the current operating system of the host device and restarts the host device, and then repeats the steps (1); and (7) completes the process of the host device and the current operating system Start-up procedure, the current operating system stops the start-up timing of the monitoring unit.

In order to achieve the above-mentioned purpose of the present invention, the inventor of this case further proposes a startup system with an automatic startup security operating system, which is used in a host device, and includes: a memory unit for storing a system startup security certificate; a monitoring unit; and a control unit, which is coupled to the memory unit and the monitoring unit, and the control unit executes the startup method with automatic startup of the security operating system as described in claim 1, so that the host device completes booting.

<The present invention>

2: Host device

21: The first hard disk

211: Operating System

22: Second hard drive

221: Alternate operating system

23: The third hard drive

231: Alternate Operating System

11: BIOS chip

14: Monitoring unit

15: Control unit

S1~S7: Method steps

FIG. 1 is a schematic diagram of a startup system with an automatic startup of a secure operating system according to the present invention; and FIGS. 2A and 2B are flowcharts of a startup method with an automatic startup of a secure operating system according to the present invention.

In order to more clearly describe a startup method with an automatic startup of a safe operating system and a startup system thereof proposed by the present invention, the preferred embodiments of the present invention will be described in detail below with reference to the drawings.

Please refer to FIG. 1 . FIG. 1 is a schematic diagram of a startup system having an automatic startup of a secure operating system according to the present invention. As shown in FIG. 1 , the booting system with automatic booting of the secure operating system is used for a host device 2 , wherein an operating system 211 is installed on a first hard disk 21 of the host device 2 , and the host device 2 has at least An alternate operating system. For example, FIG. 1 shows that a second hard disk 22 of the host device 2 is installed with an alternate operating system 221 , and a third hard disk 23 of the host device 2 is installed with an alternate operating system 231 .

It should be understood that the Basic Input Output System (BIOS), translated as the basic input input system, is mainly used for the initialization and detection of various hardware devices during the booting process of the computer host, which is commonly referred to as hardware booting. For example, the user can set the hardware boot order in the BIOS as 1. floppy disk drive, 2. optical disk drive, 3. hard disk. With the evolution of data storage technology, most of the current computer mainframes are not equipped with floppy disk drives and CD-ROM drives. Therefore, the BIOS settings have added a USB flash drive to boot. In other words, the user can set the hardware boot sequence in the BIOS as 1.USB flash drive, 2.hard drive. Therefore, as shown in FIG. 1 , the host device 2 has a BIOS chip 11 for implementing a basic input output system. In particular, the startup system of the present invention is implemented in the BIOS chip 11, so that the BIOS chip 11 includes a storage unit 122, a monitoring unit 14, and a control unit 15, wherein the storage unit 122 stores an operation System startup credentials. In addition, a security certificate is included in the operating system 211 , the standby operating system 221 and the standby operating system 231 .

According to the normal boot procedure, during initialization and detection of the BIOS chip device, the control unit 15 (also known as the BIOS chip 11 ) of the BIOS chip 11 (ie, the basic input/output system) is executed according to the operating system boot certificate stored in the storage unit 122 . It may be referred to as a verification unit) to perform an operating system boot verification on the operating system 211 installed on the first hard disk 21. When the operating system passes the verification of the operating system boot certificate, the hardware boot is completed, and then the Enter the startup program of the operating system (OS).

When the above-mentioned control unit 15 verifies the operating system 211 of the first hard disk 21, if the operating system is not an operating system trusted by the operating system startup certificate, or becomes untrustworthy due to virus infection or some reasons, The operating system startup verification fails. At this time, the control unit 15 will first change the boot sequence setting of the BIOS chip 11 . Wherein, changing the boot sequence setting is used to set the BIOS chip 11 to enter the OS boot process with the standby operating system 221 installed on the second hard disk 22 after the hardware boot is completed, and simultaneously enable the monitoring unit (ie , watchdog) 14 to perform a boot timing. Continuingly, after rebooting, the control unit 15 performs the operating system startup verification on the standby operating system 221 installed on the second hard disk 22, and when the operating system startup verification of the standby operating system 221 confirms that the hardware startup is completed, Entering the operating system startup stage, the standby operating system 221 will perform self-security check according to the security certificate after startup to confirm whether the operating system startup meets the environmental conditions trusted by the security certificate. If the self-security check is confirmed to pass, the host device 2 is powered on, and the power-on timing of the monitoring unit is terminated.

It is worth noting that, in the process of the standby operating system 221 performing the self-security check, if the process exceeds a predetermined time and the operating system has not yet reached the security credentials If the trusted environmental condition is verified, the monitoring unit (ie, the watchdog) 14 will notify the BIOS chip 11 to perform the booting procedure of the host device 2 again. That is, when the security verification confirmation of the startup of the operating system fails, the operating system will not be able to complete the startup. Once the startup of the operating system times out, the monitoring unit (ie, the watchdog) 14 will notify the control unit 15 to change the The boot sequence of the BIOS chip 11 is set, so that the BIOS chip 11 enters the OS boot procedure with the standby operating system 231 installed on the third hard disk 23 after the hardware boot is completed, and is executed by the monitoring unit 14 at the same time as the OS is booted Start time.

Please refer to FIG. 1 , FIG. 2A and FIG. 2B at the same time, wherein FIG. 2A and FIG. 2B are flowcharts of the startup method with the automatic startup of the secure operating system according to the present invention. As shown in FIG. 1 , FIG. 2A and FIG. 2B , the control unit 15 executes the booting method with automatic booting of the secure operating system of the present invention to complete the booting of the host device 2 .

As shown in FIG. 2A and FIG. 2B , the booting method with automatic booting of the secure operating system includes the following steps: Step S1 : the BIOS starts a current operating system of a host device 2 according to a system boot security certificate (for example, installs Perform an operating system startup verification on the operating system 211) of the first hard disk 21; Step S2: confirm whether the operating system startup verification is passed, if so, go to Step S4, if not, go to Step S3; Step S3: Basic I/O system Change a backup operating system (for example: the backup operating system 221 installed on the second hard disk 22) as the current operating system of the host device, and then repeat the step S1; Step S4: In the case that the operating system startup verification is passed, a monitoring unit 14 is activated to perform power-on timing, and when the current operating system is started, an operating system self-security check is performed according to a security certificate; Step S5: current operation The system starts and confirms whether the self-security check is passed and whether the startup is completed within the time limit, if so, go to step S7, if not, go to step S6; step S6: the basic input and output system is changed to a standby operating system as the host device 2 and restart the host device 2, and then repeat the step S1; and step S7: complete the booting procedure of the host device 2 and the current operating system, and the current operating system stops the booting of the monitoring unit 14 timing.

In this way, the above has completely and clearly explained the structure and function of the startup method with automatic startup of the safe operating system and the startup system of the present invention; through the above, we can know that the present invention has the following technical features and advantages: The invention provides a booting system with automatic booting of a secure operating system, which is applied to a host device 2 . The host device 2 has a first hard disk 21 and at least one second hard disk 22. An operating system 211 is installed on the first hard disk 21 as the current operating system, and the second hard disk 22 is installed with a spare Operating System 221 . The startup system of the present invention includes: a memory unit 122 , a monitoring unit 14 and a control unit 15 , wherein the memory unit 122 stores an operating system startup certificate. During the process of the host device 2 booting up, the control unit 15 detects the current operating system of the host device 2 according to a startup method designed in the present invention, so as to automatically detect the current operating system when the current operating system is not trusted The standby operating system is switched to the current operating system of the host device 2, so that the host device 2 can be successfully powered on.

It must be emphasized that the above-mentioned detailed descriptions are for specific descriptions of feasible embodiments of the present invention, but the embodiments are not intended to limit the patent scope of the present invention. All should be included in the scope of the patent in this case.

2: Host device

21: The first hard disk

211: Operating System

22: Second hard drive

221: Alternate operating system

23: The third hard drive

231: Alternate Operating System

11: BIOS chip

14: Monitoring unit

15: Control unit

122: storage unit

Claims (6)

A startup method with automatic startup of a secure operating system, comprising the following steps: (1) a basic input/output system performs an operating system startup verification on a current operating system of a host device according to a system startup security credential; (2) confirms all Whether the operating system startup verification is passed, if so, go to step (4), if not, go to step (3); (3) The basic IO system changes a standby operating system as the current operating system of the host device, and then repeats the execution Steps (1); (4) In the case that the operating system startup verification is passed, a monitoring unit is enabled to perform boot timing, and when the current operating system is started, a self-security check is performed according to a security credential; (5) ) Start the current operating system and confirm whether the self-security check is passed and whether the startup is completed within the time limit, if so, execute step (7), if otherwise, the monitoring unit executes step (6) after the timeout; (6) Basic The I/O system changes a standby operating system as the current operating system of the host device and restarts the host device, and then repeats the steps (1); and (7) completes the boot process of the host device and the current operating system , the current operating system stops the start-up timing of the monitoring unit. The booting method with automatically booting a secure operating system according to claim 1, wherein the host device has a first hard disk and at least a second hard disk, the first hard disk An operating system is installed on the hard disk as the current operating system, and the second hard disk is installed with the standby operating system. The booting method with automatic booting of a secure operating system as claimed in claim 1, wherein the host device has a BIOS chip for implementing the basic input/output system, and the BIOS chip includes a storage unit, a control unit, and The monitoring unit, wherein the storage unit stores the system startup security certificate, so that the control unit performs the operating system startup verification on the current operating system according to the system startup security certificate. A startup system with an automatic startup security operating system is used for a host device, and includes: a memory unit, which stores a system startup security certificate; a monitoring unit; and a control unit, which is coupled to the memory unit and the monitoring unit , and the control unit executes the startup method with automatic startup of the secure operating system as described in claim 1, so that the host device completes the startup. The booting system with automatic booting of a secure operating system according to claim 4, wherein the host device has a first hard disk and at least a second hard disk, and an operating system is installed on the first hard disk as the current priority an operating system, and the second hard disk is installed with the standby operating system. The booting system with automatic booting of a secure operating system as described in claim 4, wherein after the monitoring unit is activated, the monitoring unit executes a boot timer.

Images