WO2014183643A1 - Check method and check device for chip having secure startup function - Google Patents

Abstract

The embodiments of the present invention disclose a check method and check device for a chip having a secure startup function. The method in the embodiments of the present invention comprises: after a chip having a secure startup function starts a user BOOT program, and after it is determined that the check of the user BOOT program has passed, a check device bearing the user BOOT program reading a chip key used for checking the chip having the secure startup function; according to the chip key, the check device checking whether the chip having the secure startup function is replaced or not; and if so, stopping operating the chip having the secure startup function, thereby preventing one board startup, so that a network cannot be illegally embezzled or an operator network cannot be attacked, so as to ensure the network security.

Description

 The verification method and the calibration device of the chip with the safe start function. The application request is the Chinese application number 201 310178685. 4 submitted on May 14, 2013, and the invention name is "the verification method of the chip with the safe start function" The priority of the Chinese application of the "verification device" is incorporated herein by reference. Technical field

 The present invention relates to the field of communications technologies, and in particular, to a verification method and a verification device for a chip having a safe start function. Background technique

 The traditional single board security boot technology is forward and executed sequentially. The core of the technology is a chip that contains a one-time programmable technology (English: Full Time Programmable, abbreviated as: OTP) storage space. Support for secure encryption algorithms.

 In the prior art, the secure boot procedure of the board is: Central Processing Unit (English full name:

The Central Processing Unit (CPU) starts its internal fixed user boot (English name: BOOT) program and initializes it, and after initialization, the CPU calls the public key (English full name: Public KEY, abbreviated as: PKEY) to verify The integrity of the user BOOT program, and after determining that the user BOOT program is complete, decrypt the user BOOT program and start the user BOOT program, and then the CPU calls BOOT KEY to verify the user operating system (English full name: Operation System, abbreviated as: OS) the integrity of the program, and after determining the integrity of the user OS program, decrypt the user OS program and start the user OS program, then the CPU will continue to call the secondary master key (English full name: secondary Master Encryption KEY, abbreviated as: SMEK) integrity check and decryption of the user software program, such that the program is integrity checked and decrypted at the first level until the integrity checksum of all programs running on the board The decryption is complete and the board is safely started.

However, in the prior art, it is used for integrity check of the user BOOT program. PKEY is fixed, easy to leak and cracked, and because BOOT KEY and SMEK are readable, if these three keys are hacked, the device becomes transparent to the hacker, and the hacker should crack the board on the board. The software and product software can be cloned and added only by replacing the chip with the fixed BOOT program, the user BOOT program, the PKEY, the BOOT KEY, and the SMEK with the original security function. A module of the hacking program, which illegally steals the network or attacks the carrier network. Therefore, the security startup program of the board in the prior art has serious security holes.

Invented content

 The embodiment of the invention provides a verification method and a verification device for a chip with a safe start function, which is used for starting a user BOOT program on a chip with a secure boot function on a single board, and determining that the user BOOT program passes the verification. After that, if the verification device that carries the user BOOT program verifies that the chip with the secure boot function is replaced, the chip with the secure boot function will be stopped to prevent the board from starting, so as to avoid the chip being replaced. Security issues.

 A first aspect of the present invention provides a verification method for a chip having a secure boot function, including:

 After the chip with the secure boot function starts the user booting BOOT program and determines that the user BOOT program passes the verification, the verifying device carrying the user BOOT program reads the chip for verifying the safe boot function. Chip key

 The verification device verifies whether the chip having the secure boot function is replaced according to the chip key;

 If so, the chip with the secure boot function is stopped.

 In a first possible implementation manner of the first aspect, the verifying device, according to the chip key, whether the chip with the secure boot function is replaced includes:

 Processing the chip key by using a preset algorithm to obtain a feature of the chip key;

 Determining whether a feature set of the chip key set in advance includes a feature of the processed chip key;

If not, determining that the chip with the secure boot function is replaced; If so, it is determined that the chip with the secure boot function is not replaced. With reference to the first aspect or the first possible implementation manner of the first aspect, in a second possible implementation manner, the verification device that carries the user BOOT program is configured to verify that the security startup function is The chip key of the chip includes:

 The verification device reads a chip key for verifying the chip having the secure boot function from a one-time programmable technology OTP memory space in the chip having the secure boot function.

 In combination with the first aspect or the first possible implementation of the first aspect, in a third possible implementation, the method further includes:

 The feature set of the preset chip key is read from the FLASH memory.

 A second aspect of the present invention provides a verification apparatus for a chip having a secure boot function, the verification apparatus carrying a user-guided BOOT program, the verification apparatus comprising:

 a reading unit, configured to: after starting a user BOOT program on a chip having a secure boot function and determining that the user BOOT program passes the verification, reading a chip key for verifying the chip with the secure boot function;

 a verification unit, configured to verify, after the reading unit reads the chip key, whether the chip with the secure boot function is replaced according to the chip key;

 And an execution unit, configured to stop running the chip with the secure boot function if the verification unit determines that the chip with the secure boot function is replaced.

 In a first possible implementation manner of the second aspect, the verifying unit includes: a calculating unit, configured to: after the reading unit reads the chip key, use the preset algorithm to The key is processed to obtain a feature of the chip key; the determining unit is configured to determine, after the computing unit calculates the feature of the chip key, whether the feature set of the chip key set in advance is included in the process The obtained characteristics of the chip key;

 a determining unit, configured to determine, when the determining unit determines that a feature set of the chip key obtained in the preset is not included, to determine that the chip with the secure boot function is replaced; And determining, when the determining unit determines that the feature set of the chip key set in advance is included, the feature of the chip key obtained by the processing, and determining that the chip with the secure boot function is not replaced.

Combining the second aspect or the first possible implementation manner of the second aspect, In an implementation manner, the reading unit is specifically configured to read, from the one-time programmable technology OTP storage space in the chip with the secure boot function, a chip for verifying the chip with the secure boot function. Key.

 In a third possible implementation manner of the second aspect, the verification unit further includes: a check code reading unit, configured to read the feature set of the preset chip key from the FLASH memory.

 It can be seen from the above technical solution that the embodiment of the present invention has the following advantages: After the chip with the secure boot function on the board starts the user BOOT program and determines that the user BOOT program passes the verification, the check of the user BOOT program is carried. The device reads a chip key for verifying the chip with the secure boot function, and verifies whether the chip with the secure boot function is replaced according to the chip key, and if so, stops the safe boot function The chip prevents the board from booting, making it impossible to illegally steal the network or attack the carrier network, ensuring network security. Attachment

 1 is a schematic diagram of a verification method of a chip with a secure boot function according to an embodiment of the present invention;

 2 is another schematic diagram of a verification method of a chip with a secure boot function according to an embodiment of the present invention;

 3 is a schematic diagram showing the structure of a verification device of a chip having a secure boot function according to an embodiment of the present invention;

 4 is another schematic diagram showing the structure of a verification device of a chip having a secure boot function according to an embodiment of the present invention;

 FIG. 5 is another schematic diagram showing the structure of a verifying device of a chip having a secure boot function according to an embodiment of the present invention. detailed description

The embodiment of the present invention provides a verification method and a verification device for a chip with a secure boot function, which is used to start a user BOOT program on a chip with a secure boot function on a board and determine that the user BOOT program passes the verification. The verification module that carries the user BOOT program stops running the device if it is verified that the chip with the secure boot function is replaced. A chip with a secure boot function prevents the board from booting and avoids security issues caused by the replacement of the chip.

 In the embodiment of the present invention, the chip control program with the secure boot function on the board mainly starts with three keys, namely PKEY, BOOT KEY, SMEK, wherein PKEY is used to verify the integrity of the user BOOT program. And under the condition that the user BOOT program is complete, the chip with the secure boot function decrypts and starts the user BOOT program, wherein the BOOT KEY is used to verify the integrity of the user OS program, and under the condition that the user OS program is complete, The chip of the secure boot function decrypts and starts the user OS program, wherein the SMEK is used to verify the integrity of the user software program, and under the condition that the user's software program is complete, the chip with the secure boot function decrypts and starts the user's software. program.

 In the embodiment of the present invention, in order to make the program startup on the board more secure and reliable, the verification device pair carrying the user BOOT program is started after the chip with the security startup function starts the user BOOT program and determines that the user BOOT program passes the verification. The validity of the chip with the secure boot function is verified to verify whether the chip with the secure boot function is replaced. For better understanding, please refer to FIG. 1 , which is a secure boot in the embodiment of the present invention. Embodiments of the verification method of the functional chip include:

 101. After the user BOOT program is started by the chip with the secure boot function and the user BOOT program verification is determined, the verification device carrying the user BOOT program reads the chip key for verifying the chip with the secure boot function;

 In the embodiment of the present invention, after the user BOOT program is started by the chip with the secure boot function and it is determined that the user BOOT program is verified, the verification device carrying the user BOOT program will read for verifying the safe boot function. Chip key for the chip.

 Wherein, the preset chip key is unique, and the chip key is a random value, which is a unique key for identifying the chip allocated by the chip during production, and the chip key can be stored in Any position in the OTP memory space of the chip.

 It should be noted that the chip having the secure boot function in the embodiment of the present invention may be a CPU having a secure boot function.

 102. The verification device verifies whether the chip with the secure boot function is replaced according to the chip key;

 In the embodiment of the present invention, the verification device can check whether the chip having the secure boot function is replaced according to the read chip key.

103. If yes, stop running the chip with the secure boot function. In the embodiment of the present invention, the verification module verifies whether the chip with the secure boot function is replaced according to the read chip key, and if it is determined that the chip with the secure boot function is replaced, the verification module will stop having security. Start the function of the chip to run.

 In the embodiment of the present invention, if the verification module determines that the chip with the secure boot function is not replaced, the step of verifying the user OS program by using the BOOT KEY is continued by the chip with the secure boot function, and is no longer Narration.

 In the embodiment of the present invention, after the chip with the secure boot function starts the user BOOT program and determines that the user BOOT program passes the verification, the verification device that carries the user BOOT program reads the chip for verifying the safe boot function. Chip key, and use the chip key to verify whether the chip with the secure boot function is replaced, and in the case that the chip with the secure boot function is replaced, the chip with the secure boot function will be stopped, Prevents the startup of programs on the board, avoids theft of the network or attacks on the carrier's network, and ensures network security.

 For a better understanding of the technical solution in the embodiment of the present invention, refer to FIG. 2, which is an embodiment of a verification method of a chip with a secure boot function according to an embodiment of the present invention, including:

201. After the user BOOT program is started by the chip with the secure boot function and the user BOOT program verification is determined, the verification device carrying the user BOOT program is read from the OTP storage space in the chip with the secure boot function for verification. Chip key of a chip with a secure boot function;

 In the embodiment of the present invention, a chip key for verifying the chip with the secure boot function is stored in the OTP storage space in the chip with the secure boot function on the board, and the chip key is unique. Uniquely identifies a chip, and the chip key can be stored anywhere on the OTP storage space. In addition, other information can be stored in the OTP storage space, such as: PKEY, BOOT KEY, SMEK, and so on.

 In the embodiment of the present invention, after the user BOOT program is started by the chip with the secure boot function and it is determined that the user BOOT check is passed, the check device carrying the user BOOT program will be from the OTP storage space in the chip with the secure boot function. Reading a chip key for verifying the chip with the secure boot function, the specific: the verifying device calculates the chip for verifying the chip with the safe boot function by using an embedded function corresponding to the user BOOT program The key is stored in the OTP storage space in the chip with the secure boot function, and the chip key is read according to the storage location.

202. Process the chip key by using a preset algorithm to obtain a chip key. Characteristic

 In the embodiment of the present invention, after obtaining the chip key, the verification device processes the chip key by using a preset algorithm to obtain a feature of the chip key, where the preset algorithm may be a hash algorithm. Or an algorithm that can process the chip key to obtain the feature of the chip key. In an actual application, the algorithm used may be set according to a specific situation, which is not limited herein. At least one of a length of a key, a checksum, a parity bit, a sequence of features, and the like.

 203. Read a feature set of the preset chip key from the FLASH memory. In the embodiment of the present invention, the verification device reads the feature set of the preset chip key from the FLASH memory.

 204. Determine whether the feature set of the chip key set in advance includes the feature of the processed chip key, if otherwise, execute step 205, and if yes, perform step 206; in the embodiment of the present invention, the verification device determines Whether the feature set of the processed chip key is included in the feature set of the preset chip key.

 205, determining that the chip with the secure boot function is replaced, and continuing to step 207;

206. Determine that the chip with the secure boot function is not replaced;

 207. Stop running the chip with safe boot function.

 In the embodiment of the present invention, if the verification device determines that the feature set of the chip key set in advance includes the feature of the obtained chip key, it is determined that the chip with the secure boot function is not replaced, and if the preset chip density is determined, If the feature set of the key does not contain the feature of the obtained chip key, it is determined that the chip with the secure boot function is replaced, not the original chip with the secure boot function on the board, and therefore, the verifying device will stop. Run the chip with the secure boot function.

 In the embodiment of the present invention, if the verification device determines that the chip with the secure boot function is not replaced, the verification and decryption processing of the program such as the user OS program will continue to be performed by the chip having the secure boot function. Narration.

 It should be noted that, in the embodiment of the present invention, the chip with the secure boot function may be a CPU with a secure boot function.

In the embodiment of the present invention, after the user BOOT program is started by the chip with the secure boot function and the user BOOT program is verified to pass the verification, the verification device carrying the user BOOT program can be stored from the OTP storage in the chip with the secure boot function. Reading a chip key for verifying a chip having a secure boot function in space, and using a preset algorithm The chip key is processed to obtain the feature of the chip key, and it is determined whether the feature set of the preset chip key includes the feature of the processed chip key, and if not, the chip with the secure boot function is determined. If it is replaced, the chip with the secure boot function will be stopped to prevent the startup of the program on the board, to avoid theft of the network or attacks on the carrier network, and to ensure network security.

 Referring to FIG. 3, an embodiment of a structure of a calibration apparatus for a chip with a secure boot function is provided in the embodiment of the present invention. The verification apparatus carries a user BOOT program, and includes: a reading unit 301, configured to have The chip of the secure boot function starts the user BOOT program and determines that the user BOOT program passes the check, and reads the chip key for verifying the chip with the secure boot function;

 a verifying unit 302, configured to verify, after the reading unit 301 reads the chip key, whether the chip having the secure boot function is replaced according to the chip key;

 The executing unit 303 is configured to stop running the chip with the secure boot function if the verifying unit 302 determines that the chip with the secure boot function is replaced.

 In the embodiment of the present invention, after the user BOOT program is started by the chip with the secure boot function and it is determined that the user BOOT program passes the verification, the reading unit 301 in the verification device that carries the user BOOT program reads for verification. The chip key of the chip of the secure boot function, next, the check unit 302 verifies whether the chip with the secure boot function is replaced according to the chip key, and if the check unit 302 determines that the chip with the secure boot function is replaced Then, the execution unit 303 stops running the chip with the secure boot function.

 It should be noted that, in the embodiment of the present invention, the chip with the secure boot function may be a CPU with a secure boot function on the board.

 In the embodiment of the present invention, after the chip with the secure boot function starts the user BOOT program and determines that the user BOOT program passes the verification, the verification device that carries the user BOOT program reads the chip for verifying the safe boot function. Chip key, and use the chip key to verify whether the chip with the secure boot function is replaced, and in the case that the chip with the secure boot function is replaced, the chip with the secure boot function will be stopped, Prevents the startup of programs on the board, avoids theft of the network or attacks on the carrier's network, and ensures network security.

For a better understanding of the verification device of the chip with the safe start function in the embodiment of the present invention, please refer to FIG. 4 , which is an embodiment of a structure of a verification device for a chip with a safe start function according to an embodiment of the present invention, including : The reading unit 301, the checking unit 302, and the executing unit 303 in the embodiment shown in FIG. 3 are similar to those described in the embodiment shown in FIG. 3, and details are not described herein again.

 In the embodiment of the present invention, the verification unit 302 includes:

 The calculating unit 401 is configured to: after the reading unit 301 reads the chip key, process the chip key by using a preset algorithm to obtain a feature of the chip key;

 The determining unit 402 is configured to determine, after the computing unit 401 calculates the feature of the chip key, whether the feature set of the chip key set in advance includes the feature of the processed chip key;

 a determining unit 403, configured to determine, when the determining unit 402 determines that the feature set of the chip key that is set in advance is not included in the processed feature of the chip key, to determine that the chip with the secure boot function is replaced; And determining, when the determining unit determines that the feature set of the chip key set in advance is included, the feature of the chip key obtained by the processing, and determining that the chip with the secure boot function is not replaced.

 In the embodiment of the present invention, the reading unit 301 is specifically configured to read a chip key for verifying a chip having a secure boot function from a one-time programmable technology OTP storage space in a chip having a secure boot function.

 In the embodiment of the present invention, the verification unit 302 further includes:

 The check code reading unit 404 is configured to read a feature set of the preset chip key from the FLASH memory.

In the embodiment of the present invention, after the user BOOT program is started by the chip with the secure boot function and it is determined that the user BOOT program passes the verification, the reading unit 301 in the verification device that carries the user BOOT program reads for verification. The chip key of the chip of the secure boot function, and then the computing unit 401 in the check unit 302 processes the chip key using a preset algorithm to calculate the feature of the chip key; and is verified by the check unit 302 The code reading unit 404 reads the feature set of the chip key set in advance from the FLASH memory, and then the determining unit 402 in the checking unit 302 determines whether the feature set in the preset chip key includes the processing. The feature of the chip key; if the determining unit 402 determines that the feature set of the chip key that is set in advance does not include the feature of the processed chip key, the determining unit 403 determines that the user BOOT program is replaced; The determining unit 402 determines that the feature set obtained by the calculation of the chip key set in advance includes the processed chip key The feature, the determination unit 403 determines that the user is not replaced BOOT program. And if the determining unit 403 determines that the chip with the secure boot function is replaced, Then, the execution unit 303 stops running the chip with the secure boot function.

 It should be noted that, in the embodiment of the present invention, the verification device of the chip with the secure boot function may be a CPU with a secure boot function on the board.

 In the embodiment of the present invention, after the user BOOT program is started by the chip with the secure boot function and the user BOOT program is verified to pass the verification, the verification device carrying the user BOOT program can be stored from the OTP storage in the chip with the secure boot function. The chip key for verifying the chip with the secure boot function is read in the space, and the chip key is processed by using a preset algorithm to obtain the feature of the chip key, and the preset chip key is determined. Whether the feature set contains the characteristics of the processed chip key, and if not, it is determined that the chip with the secure boot function is replaced, and the chip with the secure boot function is stopped to prevent the startup of the program on the board. To avoid theft of the network or attacks on the carrier's network, ensuring network security.

 Referring to FIG. 5, an embodiment of a structure of a verification device for a chip having a secure boot function according to an embodiment of the present invention includes:

 a processor 501, a transmitting device 502, a receiving device 503, a memory 504;

 Wherein, after the processor starts the user BOOT program on the chip with the secure boot function and determines that the user BOOT program passes the verification, reads the chip key for verifying the chip with the secure boot function; and according to the chip key Check if the chip with safe boot function is replaced; if the chip with safe boot function is replaced, stop the chip with safe boot function.

 A person skilled in the art can understand that all or part of the steps of implementing the above embodiments can be completed by a program to instruct related hardware, and the program can be stored in a computer readable storage medium, the above mentioned storage. The medium can be a read only memory, a magnetic disk or a compact disk or the like.

 The verification method and the calibration device of the chip with the safe start function provided by the present invention are described in detail above. For the person skilled in the art, according to the idea of the embodiment of the present invention, the specific implementation manner and the application range There is a change in the above, and the contents of the present specification should not be construed as limiting the invention.

Claims

Claim A method for verifying a chip with a secure boot function, comprising: after the user having the secure boot function starts a user boot BOOT program and determines that the user BOOT program passes the verification, carrying the a verification device of the user BOOT program reads a chip key for verifying the chip having the secure boot function;  The verification device verifies whether the chip with the secure boot function is replaced according to the chip key;  If so, the chip with the secure boot function is stopped.  2. The verification method according to claim 1, wherein the verification device verifies whether the chip having the secure boot function is replaced according to the chip key:  Processing the chip key by using a preset algorithm to obtain a feature of the chip key; determining whether the feature set of the chip key set in advance includes a feature of the processed chip key;  If not, determining that the chip with the secure boot function is replaced;  If so, it is determined that the chip with the secure boot function is not replaced.  The verification method according to claim 1 or 2, wherein the verification device that carries the user BOOT program reads a chip key for verifying the chip with the secure boot function, including :  The verification device reads a chip key for verifying the chip having the secure boot function from the one-time programmable technology OTP storage space in the chip having the secure boot function.  The verification method according to claim 1 or 2, wherein the method further comprises: reading the feature set of the chip key set in advance from the FLASH memory.  5. A calibration device for a chip having a secure boot function, wherein the verification device carries a user-guided BOOT program, the verification device comprising:  a reading unit, configured to: after activating the user BOOT program by the chip having the secure boot function and determining that the user BOOT program passes the verification, reading a chip key for verifying the chip with the secure boot function;  a verification unit, configured to verify, after the reading unit reads the chip key, whether the chip with the secure boot function is replaced according to the chip key; An execution unit, configured to: if the verification unit determines that the chip with the secure boot function is replaced, Then stop running the chip with the secure boot function.  The verification device according to claim 5, wherein the verification unit comprises: a calculation unit, configured to use a preset algorithm pair after the reading unit reads the chip key Processing the chip key to obtain a feature of the chip key;  a determining unit, configured to determine, after the computing unit calculates the feature of the chip key, whether a feature set of the chip key set in advance includes a feature of the processed chip key;  a determining unit, configured to determine, when the determining unit determines that a feature set of the chip key obtained in the preset is not included, to determine that the chip with the secure boot function is replaced; And determining, when the determining unit determines that the feature set of the chip key set in advance is included, the feature of the chip key obtained by the processing, and determining that the chip with the secure boot function is not replaced.  The verification device according to claim 5 or 6, wherein the reading unit is specifically configured to read from a one-time programmable technology OTP storage space in the chip with the secure boot function. The chip key of the chip with the secure boot function is verified.  The verification device according to claim 6, wherein the verification unit further comprises: a check code reading unit, configured to read the preset chip key from the FLASH memory Feature set.