CN100447763C - A security chip and an information security processing device and method based on the chip - Google Patents

Abstract

The present invention provides a safety chip which comprises a I/O interface module, a main processor module, a storage module and a cipher processor module. Meanwhile, the present invention also provides an information safety processing device and a method using the safety chip. The safety chip is used for checking the integrality of the current bottom layer firmware, the bottom layer firmware is used for checking the integrality of the current operating system, and the operating system is used for checking the integrality of an application module so as to ensure the safety of the information of the application module; thus, the information safety processing device has the functions of attack resistance, virus prevention, etc., and meanwhile, the present invention uses the unique identity cipher certificate information set in the safety chip, and realizes the functions of access control, identity identification, etc. The present invention can ensure the safety of the information of the information safety processing device.

Description

A security chip and an information security processing device and method based on the chip

technical field

The invention relates to the technical field of information security, in particular to a security chip and an information security processing device and method based on the chip.

Background technique

Currently, information processing devices have been widely used in people's daily life. Information processing equipment mainly refers to personal computers (PCs), notebook computers, handheld computers, mobile phones and other equipment. How to ensure the security of information in information processing equipment has become a matter of great concern to people. There are usually two solutions:

1) Protect information processing equipment based on security software.

Applying this method usually uses anti-virus software to prevent virus attacks, such as setting up anti-virus software and firewall software and starting its real-time monitoring program to prevent viruses from invading information processing equipment, and applying anti-virus software and firewall software to perform anti-virus operations on the system. Ensure the security of information in information processing equipment; or use file encryption software to protect files, such as applying hash algorithm, hash (HASH) algorithm, elliptic curve cryptographic algorithm, RSA algorithm, discrete logarithm algorithm, etc. to protect files Operations such as encryption calculation or integrity verification to ensure the security of information in information processing equipment; or use secure browser software and digital certificates to conduct e-commerce.

The defect of this method is that: since the security software and the operating system itself may also be attacked, all information on the terminal is threatened. Therefore, security software cannot guarantee the security of information on the computer terminal itself.

2) Protect information processing equipment based on hardware. Generally, the following two methods are used:

a. Attaching a circuit board composed of multiple modular units to the information processing device to ensure the safety of information in the information processing device. The additional circuit board includes an identity information input device interface, an information security management unit or a security module (ESM), a security control execution unit, a power-on circuit unit, a peripheral switch circuit unit and a main board unit. The method is mainly used for identity authentication at startup, and at the same time provides a high-speed cryptographic operation function.

The disadvantage of the above method is that it is impossible to verify whether the underlying firmware, operating system and application software in the information processing device are attacked, so that the absolute security of information in the information processing device cannot be guaranteed.

b. The hard disk and network interface components specially used for the external network are installed on the information processing equipment, so that when the information processing equipment works on the internal network and the external network, under the control of the same main board, different hard disks and network interfaces are used respectively components to achieve isolation between internal and external networks. The information processing device separates the state applied to the internal network and the state applied to the external network from the hardware, thereby preventing the information processing device from being attacked.

The disadvantage of the above method is that it is also impossible to verify whether the underlying firmware, operating system, and application software of the information processing device are under attack. Therefore, no matter whether the information processing device works in the external network or the internal network mode, the information security of the information processing device itself cannot be guaranteed. . At the same time, the cost of the information processing equipment is also increased due to the configuration of two sets of hard disks and network interface components.

Contents of the invention

In view of this, the purpose of the present invention is to provide a security chip and an information security processing device and method based on the chip, so that the information security processing device can verify the integrity of the system during the startup process, so as to ensure that the information security processing device Information Security.

For achieving the above object, technical scheme of the present invention is achieved in that way:

A security chip, the chip includes an I/O interface module, a main processor module, a memory module and a cryptographic processor module, and the above-mentioned modules are connected to each other through an internal bus, wherein,

The I/O interface module is connected to the external device, and the I/O interface module is controlled by the main processor module to receive the instructions of the external device, and return the operation result required by the external device to the external device;

The main processor module includes at least a CPU and peripheral circuits, which controls the cryptographic processor module according to the instructions received from the I/O interface module, stores the processed results in the memory module, or stores the processed results in the memory module according to the instructions. The result is compared with the secret information stored in the memory module, and the execution result of the instruction is transmitted to the I/O interface module; or, the secret information is directly taken out from the memory module and transmitted to the I/O interface module;

The cryptographic processor module generates a key under the control of the main processor module, and encrypts and decrypts the information received by the I/O interface module, and returns the processed result to the main processor module;

The memory module stores the secret information of the security chip itself including the integrity value of the underlying firmware, the secret information of the external device application module and the secret information generated by the cryptographic processor module.

The security chip has a chip operating system COS and is located in an information security processing device. When the information security processing device is started, the security chip verifies and calculates the integrity value of the bottom layer firmware of the information security processing device. When the integrity value of is consistent with the stored integrity value of the underlying firmware, the underlying firmware is started and then participates in verifying the integrity of the operating system of the information security processing device.

Preferably, the secret information is a key generated by the cryptographic processor module, identity verification information and integrity verification information including the integrity value of the underlying firmware.

Preferably, the cryptographic processor module includes at least a public key cryptographic processor module, a hash processor module and a random number generator module, wherein,

The random number generator module is controlled by the main processor module to generate random numbers, and the random numbers are sent to the main processor module;

The hash processor module performs hash operations on the information to be encrypted under the control of the main processor module, and transmits the operation results to the public key cryptographic processor module or the symmetric cryptographic processor module or the main processor module;

The public key cryptographic processor module, under the control of the main processor module, uses random numbers to generate a public-private key pair, and returns the result to the main processor module; applies the generated public-private key to the hash processor module. The result is encrypted and calculated to generate a data signature, or the received information to be decrypted is decrypted by using the public key, and the result is returned to the main processor module;

The symmetric cryptographic processor module, under the control of the main processor module, uses the random number as the symmetric key to encrypt or decrypt the information to be encrypted, and sends the result to the main processor module.

Preferably, the public key cryptographic processor module at least includes an elliptic curve public key cryptographic algorithm processing module, an RSA public key cryptographic algorithm processing module, and a discrete logarithmic cryptographic algorithm processing module.

Preferably, the main processor module of the chip further includes: a bus interface module and a bus controller module, wherein the bus interface module is connected to the internal high-speed bus of the main processor and the bus controller module, and the bus controller module connects the main processing The internal high-speed bus of the processor is handled as the main processor peripheral bus, and

The I/O interface module, the main processor module and the memory module are connected to the internal high-speed bus;

The public key cryptographic processor module, the symmetric cryptographic processor module, the random number generator module and the hash processor module are connected with the peripheral bus of the main processor.

Preferably, the memory module is random access memory (RAM), erasable read-only memory (EEPROM) or flash memory (FLASH).

Preferably, the I/O interface module at least includes an interface connected to an LPC (Low Pin Count Bus) bus or a USB (Universal Serial Bus) bus, or a synchronous serial port, or an asynchronous serial port, or an ISO7816 interface.

An information security processing device, at least including a motherboard, bottom firmware and an operating system, the device also includes at least the security chip, the security chip is connected to the motherboard, and receives the bottom firmware embedded in the motherboard or the device operating system The information sent, and according to the information sent by the underlying firmware, the integrity value of the underlying firmware of the information security processing device is calculated, and when the calculated integrity value of the underlying firmware is consistent with the stored integrity value of the underlying firmware, the underlying firmware is started. The operating system performs integrity verification; or the security chip generates corresponding calculation results according to the information sent by the operating system and returns them to the operating system, participating in the integrity verification of the operating system.

Preferably, the security chip is connected to the motherboard through an LPC (Low Pin Count Bus) bus interface, or a USB (Universal Serial Bus) bus interface, or a synchronous serial port, or an asynchronous serial port, or an ISO7816 interface.

A method for verifying information security processing equipment, the method comprising the following steps:

a. Install a security chip on the motherboard;

b. When the information security processing device is started, the security chip calculates the value of the integrity verification code of the current system bottom firmware, and judges the value of the integrity verification code of the current system bottom firmware and the integrity verification code of the saved bottom firmware Whether the values are equal, if yes, perform step c after completing normal system initialization, otherwise stop starting the information security processing device;

c. The security chip starts the underlying firmware to verify the integrity of the current operating system. If it is correct, the operating system will run normally; otherwise, the operating system will stop loading.

Preferably, the method further includes: setting an operating system security module in the operating system, the module is started by the operating system, and before starting an existing application module of the device, the operating system security module verifies the integrity of the current application module, If correct, run the application module normally, otherwise stop running the application module.

Preferably, the step a further includes: in a safe environment, storing the value of the integrity verification code of the underlying firmware in the security chip; storing the value of the integrity verification code of the operating system in the security chip or the security module of the underlying firmware In; save the value of the integrity verification code of the application module in the security chip or the security module of the operating system.

Preferably, the method further comprises setting a bottom layer firmware security module in the bottom layer firmware;

Verifying the integrity of the current operating system described in step c further includes the following steps:

The underlying firmware security module calculates the value of the integrity verification code of the current operating system, and judges whether the value of the integrity verification code of the current operating system is equal to the value of the saved integrity verification code of the operating system, and if so, continues to execute Next steps, otherwise stop loading the OS.

Preferably, the operating system security module is composed of a security chip driver module, a security service module and a security interface module.

Preferably, the security chip driver module sets the security chip as a device of the operating system, and sets each application module and the underlying security chip to share a pair of authentication keys, and the security chip driver module at least includes the following driving steps:

d. The security chip uses the shared authentication key to authenticate the application module; if the authentication is successful, execute step e, otherwise reject the service requested by the application module;

e. Establish a data communication channel and a control command communication channel between the application module and the security chip;

f. The security chip driver module converts the instructions issued by the upper application module into chip instructions that can be recognized by the security chip, and performs hash operations on the authentication result of step d, the shared authentication key and the chip instructions to generate this chip The authorization information of the instruction, and then send the chip instruction and the authorization information to the security chip;

g. Each time the security chip receives a chip instruction, it performs a hash operation on the authentication result of step d, the shared authentication key, and the currently received chip instruction to generate the authorization verification information of the current chip instruction, and verify the current authorization The information is compared with the authorization information carried by the received chip instruction. If they are consistent, the operation of the current chip instruction is executed; otherwise, the currently received chip instruction is refused to be executed.

Preferably, the verification of the integrity of the application module by the security service module includes the following steps:

j. The security service module first calculates the value of the current integrity verification code of the application module to be protected, and judges whether the value of the current integrity verification code is equal to the value of the saved integrity verification code. If they are equal, then After the application module to be protected is started, step k is executed; otherwise, the application module is prohibited from being enabled.

k. The security service module regularly verifies the integrity of the application module to be protected.

Preferably, the security service module stores any record of operations on the security chip, and stores the record as a log record in a local log database.

Preferably, the method further includes setting a unique identity code certificate on each security chip.

Preferably, the setting method is as follows: a third party sets a public key certificate and a private key certificate for each computer terminal, and after digitally signing the public and private key certificates, sets the private key certificate information as each computer terminal A cryptographic certificate that uniquely identifies the terminal.

Preferably, the private key certificate is stored in the security chip, and the public key certificate is provided to a verifier for computer terminal identity verification.

Preferably, the method for authenticating information security processing equipment further includes the following steps:

l. The application module transmits the information to be verified to the security chip, and the security chip calls its corresponding public key algorithm mechanism according to the private key certificate of the unique identity password certificate, digitally signs the information to be verified, and sends the signed result Return to the application module, and the application module sends the above-mentioned digital signature information to the verifier;

m. The verifier first verifies whether the signature of the third party on the public key certificate of the unique identity password certificate is correct, and if it is correct, execute step n, otherwise the verification fails;

n. Use the public key certificate to verify whether the digitally signed information sent by the application module is correct, and if it is correct, determine the security identity of the information processing device; otherwise, the verification fails.

Preferably, the setting method is as follows: a third party generates a serial number composed of random numbers for each computer terminal, and sets the serial number confirmed by the third party and digitally signed as the unique number of each computer terminal The cryptographic certificate for the identity.

Preferably, the method for authenticating information security processing equipment further includes the following steps:

p. The application module sends the unique identity password certificate of the information security processing device itself to the verifier;

q. The verifier verifies whether the signature information of the third party on the unique identity password certificate is correct, and if it is correct, then determines the security identity of the information security processing device; otherwise, the verification fails.

Preferably, the verification of the underlying firmware at least includes verification of modules used to complete the initialization of the mainboard hardware system, the microcode program of the CPU on the mainboard, the memory for storing configuration information on the mainboard, and the configuration information extension system (ESCD: Extended System Configuration Data) , CMOS (Complementary Metal-Oxide-Semiconductor Transistor), random access memory (NVRAM: non-volatile RAM) that retains data when power is off, and master boot sector (MBR: Master BootRecord).

By applying the present invention, the security chip is used to verify the integrity of the bottom firmware of the system during the startup process of the information security processing equipment, and the security module of the bottom firmware verifies the integrity of the operating system, thereby ensuring the security of the system information when the information security processing equipment starts; the operating system The security module verifies the integrity of the application module at startup and periodically verifies the integrity of the application module in operation, which ensures the security of the information of the application module, thus enabling the information security processing device to have functions such as anti-attack and anti-virus. At the same time, since the security chip is also provided with unique identity code certificate information, the information processing device can use the unique identity code certificate information to perform functions such as access control and identity authentication.

Description of drawings

Application of the present invention shown in Figure 1 is a schematic diagram inside the security chip;

Fig. 2 shows the general block diagram that the computer terminal that applies safety chip of the present invention carries out verification;

Fig. 3 shows the flow chart when applying the computer terminal of the present invention to start;

FIG. 4 is a schematic diagram of an operating system security module applying the present invention;

Fig. 5 shows the flowchart of applying the bottom security chip driver module of the present invention;

Fig. 6 is a flow chart showing the application of the present invention to ensure the integrity of the application module.

Detailed ways

In order to make the purpose, technical solution and effect of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments.

The idea of the present invention is: a security chip is pre-installed on the motherboard of the information security processing device, and the security chip has a chip operating system (COS). The integrity of the firmware, and then verify the integrity of the operating system, and finally verify the integrity of the application module to be applied, so as to achieve the purpose of ensuring the information security of the information security processing device itself. At the same time, since the security chip provides unique identification information for each information security processing device terminal, the information security processing device can also use the security chip to perform security services such as identity authentication, information encryption, and digital signature.

The application of the present invention shown in Fig. 1 is a schematic diagram inside the security chip. The chip includes an I/O interface module 101, a main processor module 102, a memory module 103 and a cryptographic processor module 110, and the above-mentioned modules are connected to each other through an internal bus, wherein the I/O interface module 101 is connected with external devices, and the I/O The interface module 101 is controlled by the main processor module 102 to receive instructions from the external device, and returns the operation result required by the outside to the external device; the main processor module 102 includes at least a CPU and peripheral circuits, and the COS completes the control of all modules in the chip. It controls the cryptographic processor module 110 according to the instructions received from the I/O interface module 101, and stores the processed results in the memory module 103, or stores the processed The result of the instruction is compared with the stored secret information in the memory module 103, and the execution result of the instruction is sent to the I/O interface module 101; or, the secret information is directly taken out from the memory module 103 and sent to the I/O interface module 101 The cryptographic processor module 110 generates a key under the control of the main processor module 102, and the information received by the I/O interface module 101 is encrypted and decrypted, and the processed result is returned to the main processor module 102; The memory module 103 is used to store the secret information of the COS, the security chip itself, the secret information of the external device application module, and the secret information generated by the cryptographic processor module. The secret information refers to the key generated by the security chip itself, which is used for identity verification information and an integrity verification code for integrity verification.

Wherein, the cryptographic processor module 110 includes a public key cryptographic processor module 106 , a symmetric cryptographic processor module 107 , a hash processor module 108 and a random number generator module 109 .

The random number generator module 109 is controlled by the main processor module 102 to generate a random number, and the random number is sent to the main processor module 102 .

The hash processor module 108 performs a hash operation on the information to be processed under the control of the main processor module 102 , and transmits the operation result to the public key cryptographic processor module 106 or the symmetric cryptographic processor module 107 or the main processor module 102 .

The public key cryptographic processor module 106, under the control of the main processor module 102, utilizes random numbers to generate public-private key pairs, and returns the result to the main processor module 102; The result transmitted from 108 is encrypted and calculated to generate a data signature, or the received information to be decrypted is decrypted by using the public key, and the obtained result is returned to the main processor module 102 .

The symmetric cryptographic processor module 107 , under the control of the main processor module 102 , uses the random number as a symmetric key to encrypt or decrypt the information to be encrypted, and sends the result to the main processor module 102 .

All of the above modules can be directly connected to the bus in the security chip, or the bus controller module 105 directly connected to the bus interface module 104 handles the main processor high-speed bus as the main processor peripheral bus, so that the I/O interface module 101, Main processor module 102 and memory module 103 are connected with internal high-speed bus; Make public key cryptographic processor module 106, symmetric cryptographic processor module 107, random number generator module 109 and hash processor module 108 and main processor peripheral bus connected.

The memory module 103 for secret information includes random access memory (RAM), erasable read-only memory (EEPROM) or flash memory (FLASH). The I/O interface module 101 at least includes an interface connected to an LPC (Low Pin Count Bus) bus or a USB (Universal Serial Bus) bus, or a synchronous serial port, or an asynchronous serial port, or an ISO7816 interface.

The public key cryptographic processor module may include an elliptic curve public key cryptographic algorithm processing module, an RSA public key algorithm processing module, a discrete logarithm algorithm processing module, and the like.

The security chip has the following two methods to generate an integrity verification code:

1) The main processor module 102 controls the hash processor module 108 to perform a hash operation on the information to be encrypted, and transmits the obtained digest to the public key cryptographic processor module 106; meanwhile, the main processor module 102 controls the random number generator module 109 generates a random number, and the public key cryptographic processor module 106 uses the random number to generate a public and private key, and applies the generated private key to encrypt and calculate the result transmitted by the hash processor module 108 to generate a data signature, or apply the public key The received information to be decrypted is decrypted, and the obtained result is returned to the main processor module 102 .

2) The main processor module 102 controls the hash processor module 108 to carry out hash operation on the information to be encrypted, and transmits the digest obtained to the symmetric cryptographic processor module 107; meanwhile, the main processor module 102 controls the random number generator module 109 generates a random number, and the main processor module 102 transmits the random number as a symmetric key to the symmetric cipher processor module 107; The encrypted information is encrypted or decrypted, and the result is returned to the main processor module 102 .

The following uses a computer terminal as an example to describe the application of the security chip in detail.

The security chip is connected to the ICH (I/O Controller Hub) module of the chipset through the LPC bus, or the security chip is connected to the motherboard in the computer terminal through the USB bus, or the security chip is connected by a synchronous serial port or an asynchronous serial port connection. Or the ISO7816 interface is connected with the motherboard in the computer terminal.

Fig. 2 is a general block diagram of verifying by a computer terminal applying the security chip of the present invention. The security chip 211 and the bottom layer firmware 212 are located on the motherboard 210 of the computer. The security chip 211 performs information interaction with the bottom layer firmware security module 213 and the operating system security module 221. The application module 230 performs information exchange with the security chip 211 through the operating system security module 221. interact. Among them, the underlying firmware also includes modules for completing the initialization of the motherboard hardware system, the microcode program of the CPU on the motherboard, the memory for storing configuration information on the motherboard, the configuration information extension system (ESCD: Extended System Configuration Data), CMOS (Complementary Metal-Oxide -Semiconductor Transistor), random access memory (NVRAM: non-volatile RAM) and master boot sector (MBR: Master Boot Record) that retain data when power is off.

Fig. 3 is a flow chart when the computer terminal applying the present invention is started.

Step 301, in an environment that ensures the security of the computer system, such as: on the production line, or when the user uses it for the first time, pre-generate the integrity verification code of the underlying firmware and the integrity verification code of the operating system, and convert the integrity verification code of the underlying firmware to The value of the integrity verification code is stored in the memory of the security chip, and the value of the integrity verification code of the operating system is stored in the underlying firmware security module or in the memory of the security chip;

Step 302, each time the computer is used, the motherboard on the computer terminal first activates the security chip, and applies the integrity verification code algorithm provided by the security chip to calculate the integrity value of the current system underlying firmware;

Step 303, judging whether the integrity value of the current bottom layer firmware is equal to the integrity value of the saved bottom layer firmware, if yes, then execute step 305, otherwise execute step 304;

Step 304, stop starting the computer terminal;

Step 305, after the underlying firmware completes normal system initialization, execute step 306;

Step 306, start the underlying firmware security module, and apply the integrity verification code algorithm provided by starting the underlying firmware security module to calculate the integrity value of the current operating system;

Step 307, judging whether the integrity value of the current operating system is equal to the integrity value of the saved operating system, if yes, then execute step 309, otherwise execute step 308;

Step 308, stop loading the operating system;

Step 309, after operating the operating system normally, execute step 310;

Step 310, start the security module in the operating system, and monitor the protected application module.

After each computer terminal starts and runs normally, it needs to pass its own identity verification before it can run the application module normally, and the security chip is required to provide security services such as information encryption and digital signature for the application module.

The security chip provides a uniquely identified password certificate for each computer terminal, and the uniquely identified password certificate is generated by the following two methods:

Method 1: A trusted third party (manufacturer or user) sets up a public key certificate and a private key certificate for each computer terminal, and digitally signs the public and private key certificates, and the signed private key certificates form the A cryptographic certificate for the unique identity of the terminal, wherein the private key certificate is stored in the memory of the security chip, and the public key certificate is provided to the verifying party for computer terminal identity verification.

The verification method for method 1 is as follows: the application module first transmits the information to be verified to the security chip, and the security chip invokes its corresponding public key algorithm mechanism according to the private key certificate of the unique identity password certificate, and the public key cryptographic processor module applies the After the public key algorithm mechanism digitally signs the information that needs to be verified, it returns the signed result to the application module, and the application module sends the above digital signature information to the verifier; Whether the signature of the third party on the public key certificate is correct, if correct, then use the public key certificate to verify whether the information sent by the identity verification application module is correct, so as to determine the security identity of the terminal.

Method 2: A trusted third party (manufacturer or user) generates a serial number composed of random numbers for each computer terminal, and ensures that the random serial numbers of different computer terminals are different, and the serial number is verified by a trusted third party. (manufacturer or user) confirmation and digital signature to form a password certificate for the unique identity of each computer terminal.

The verification method for method 2 is as follows: the application module sends the terminal’s unique identity password certificate information to the verifier through the identity authentication protocol; The security identity of this endpoint.

After the computer terminal is uniquely authenticated, the application module on the terminal can request the underlying security chip to provide security services such as information encryption and digital signature through the security module of the operating system.

FIG. 4 is a schematic diagram of an operating system security module applying the present invention. The security module of the operating system includes three parts: the driver module of the security chip, the security service module and the security interface module.

The security chip driver module is responsible for transmitting the instructions of the application module to the underlying security chip. At this time, the security chip driver module uses the security chip as a device of the operating system, and makes the application module and the underlying security chip share a pair of authentication keys. Before each application module interacts with the security chip, it must also pass the identity authentication and authorization agreement, that is, after passing the authentication of the security chip, it can use security services such as information encryption and digital signature provided by the security chip. The specific transmission process As shown in Figure 5:

Step 501, the security chip uses the shared authentication key to authenticate the upper layer application module that requires it to provide security services; if the authentication is successful, execute step 502, otherwise execute step 505, rejecting the application service requested by the application module;

Step 502, establishing a data communication channel and a control command communication channel between the application module and the security chip;

Step 503, converting the instruction issued by the application module into a chip instruction that can be recognized by the security chip, and performing a HASH operation on the authentication result in step 501, the shared authentication key, and the chip instruction to generate authorization information for this chip instruction, After that, send the chip instruction and the authorization information to the security chip;

Step 504: Each time the security chip receives a chip command, it first verifies the authorization information of the chip command, that is, performs a HASH operation on the authentication result of step 501, the shared authentication key and the currently received chip command to generate the authorization of the current chip command Verify the information, compare the current authorization verification information with the authorization information carried by the received chip instruction, if they are consistent, execute the operation of the current chip instruction; otherwise, refuse to execute the currently received chip instruction.

Referring to Figure 4, the operating system security module in Figure 4 includes an application module protection module 402e, which is mainly used to verify the integrity of the protected module 405, and its specific steps are as shown in Figure 6:

Step 601, under the environment of ensuring the security of the computer terminal, pre-generate the integrity verification code of the application module to be protected;

Step 602, saving the pre-generated integrity verification code of the application module to be protected in the memory of the security chip or in the security module of the operating system;

Step 603, when the system is about to apply the application module to be protected, the security service module first calculates the value of the integrity verification code of the current application module to be protected;

Step 604, judging whether the value of the currently calculated integrity verification code is equal to the value of the saved integrity verification code, if they are equal, then execute step 605, otherwise execute step 606;

Step 605, start the application module to be protected, and periodically verify the integrity of the application module to be protected;

In step 606, the application module is prohibited from being enabled.

Referring to FIG. 4, the operating system security module in FIG. 4 further includes an event audit module 402a, a log/event management module 402b, and a security policy management module 402d.

The event audit module 402a and the log/event management module 402b are mainly used to log any operation using a security chip, and write the log into a local log database, thereby completing log event management; and auditing the log database , providing security reports for system users or administrators, and alarming for abnormal events.

The key management module 402c is mainly used to manage various keys on the computer terminal, and provide information encryption and digital signature security services for application modules. When the operating system or application module uses information encryption and digital signature security services, it first transmits the information that needs to be encrypted or signed to the security chip; The result is sent to the application module that calls the security chip service.

The security policy management module 402d is mainly used to complete security policy management on computer terminals, such as generating or changing user passwords, or setting access control policies for system file resources and user file resources.

The security interface module in Fig. 4 provides interfaces of application security services for the operating system and application modules, such as application software development interface API, dynamic link library and so on.

The present invention is equally applicable to other information processing devices such as palmtop computers or mobile phones.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the scope of the present invention. within the scope of protection.

Claims (24)

1. A security chip, characterized in that the chip includes an I/O interface module, a main processor module, a memory module and a cryptographic processor module, and each of the above-mentioned modules is connected to each other by an internal bus, wherein, The I/O interface module is connected to the external device, and the I/O interface module is controlled by the main processor module to receive the instructions of the external device, and return the operation result required by the external device to the external device; The main processor module includes at least a CPU and peripheral circuits, which controls the cryptographic processor module according to the instructions received from the I/O interface module, stores the processed results in the memory module, or stores the processed results in the memory module according to the instructions. The result is compared with the secret information stored in the memory module, and the execution result of the instruction is transmitted to the I/O interface module; or, the secret information is directly taken out from the memory module and transmitted to the I/O interface module; The cryptographic processor module generates a key under the control of the main processor module, and encrypts and decrypts the information received by the I/O interface module, and returns the processed result to the main processor module; The memory module stores the secret information of the security chip itself including the integrity value of the underlying firmware, the secret information of the external device application module, and the secret information generated by the cryptographic processor module; The security chip has a chip operating system COS, which is located in an information security processing device. When the information security processing device is started, the security chip calculates the integrity value of the bottom layer firmware of the information security processing device, and the calculated value of the bottom layer firmware When the integrity value is consistent with the stored integrity value of the underlying firmware, the underlying firmware is started to verify the integrity of the operating system of the information security processing device. 2. The security chip according to claim 1, wherein the secret information is a key generated by the cryptographic processor module, identity verification information and integrity verification information including the integrity value of the underlying firmware. 3. The security chip according to claim 1, wherein the cryptographic processor module at least includes a public key cryptographic processor module, a hash processor module, a symmetric cryptographic processor module and a random number generator module, wherein, The random number generator module is controlled by the main processor module to generate random numbers, and the random numbers are sent to the main processor module; The hash processor module performs hash operations on the information to be processed under the control of the main processor module, and transmits the operation results to the public key cryptographic processor module or the symmetric cryptographic processor module or the main processor module; The public key cryptographic processor module, under the control of the main processor module, uses random numbers to generate public-private key pairs, and returns the result to the main processor module; applies the generated private key to the hash processor module transmitted The result is encrypted and calculated to generate a data signature, or the received information to be decrypted is decrypted by using the public key, and the result is returned to the main processor module; The symmetric cryptographic processor module, under the control of the main processor module, uses the random number as a symmetric key to encrypt or decrypt the information to be encrypted, and sends the result to the main processor module. 4. The security chip according to claim 3, wherein the public key cryptographic processor module at least includes an elliptic curve public key cryptographic algorithm processing module, an RSA public key cryptographic algorithm processing module, and a discrete logarithmic cryptographic algorithm processing module. 5. The security chip according to claim 1, characterized in that the main processor module of the chip further includes: a bus interface module and a bus controller module, wherein the bus interface module is connected to the internal high-speed bus of the main processor and the bus controller The module is connected, and the bus controller module handles the internal high-speed bus of the main processor as the peripheral bus of the main processor, and The I/O interface module, the main processor module and the memory module are connected to the internal high-speed bus; The public key cryptographic processor module, the symmetric cryptographic processor module, the random number generator module and the hash processor module are connected with the peripheral bus of the main processor. 6. The security chip according to claim 1, wherein the memory module is a random access memory (RAM), an electrically erasable read-only memory (EEPROM) or a flash memory (FLASH). 7. The security chip according to claim 1, wherein the I/O interface module at least includes an interface connected to an LPC bus or a USB bus, or a synchronous serial port, or an asynchronous serial port, or an ISO7816 interface. 8. An information security processing device, comprising at least a main board, underlying firmware and an operating system, characterized in that the device at least further includes a security chip as claimed in claim 1, the security chip is connected to the main board, and receives the main board The underlying firmware embedded in the device or the information sent by the operating system of the device, and according to the information sent by the underlying firmware, the integrity value of the underlying firmware of the information security processing device is calculated, and the calculated integrity value of the underlying firmware is compared with the stored underlying firmware. When the integrity values are consistent, start the underlying firmware to verify the integrity of the operating system; or the security chip generates corresponding calculation results according to the information sent by the operating system and returns them to the operating system to participate in the integrity verification of the operating system. 9. The device according to claim 8, wherein the security chip is connected to the main board through an LPC bus interface, or a USB bus interface, or a synchronous serial port, or an asynchronous serial port, or an ISO7816 interface. 10. A verification method for information security processing equipment, characterized in that the method comprises the following steps: a. Install a security chip on the motherboard of the information security processing device, and the security chip has a chip operating system COS that controls the security chip for integrity verification; b. When the information security processing device is started, the security chip calculates the value of the integrity verification code of the current system bottom firmware, and judges the value of the integrity verification code of the current system bottom firmware and the integrity verification code of the saved bottom firmware Whether the values are equal, if yes, perform step c after completing normal system initialization, otherwise stop starting the information security processing device; c. The security chip starts the underlying firmware to verify the integrity of the current operating system. If it is correct, the operating system will run normally; otherwise, the operating system will stop loading. 11. The method according to claim 10, characterized in that the method further comprises: setting an operating system security module in the operating system, the module is started by the operating system, and before starting the existing application modules of the device, the operating system The security module verifies the integrity of the current application module, and if it is correct, the application module will run normally, otherwise, the application module will stop running. 12. The method according to claim 10 or 11, characterized in that step a further comprises: in a secure environment, saving the value of the integrity verification code of the underlying firmware in the security chip; The value of the verification code is stored in the security chip or the underlying firmware; the value of the integrity verification code of the application module is stored in the security chip or the security module of the operating system. 13. The method according to claim 12, further comprising setting a security module of the underlying firmware in the underlying firmware; Verifying the integrity of the current operating system described in step c further includes the following steps: The underlying firmware security module calculates the value of the integrity verification code of the current operating system, and judges whether the value of the integrity verification code of the current operating system is equal to the value of the saved integrity verification code of the operating system, and if so, continues to execute Next steps, otherwise stop loading the OS. 14. The method according to claim 11, wherein the operating system security module is composed of a security chip driver module, a security service module and a security interface module. 15. The method according to claim 14, wherein the security chip driver module sets the security chip as a device of the operating system, and sets each application module and the underlying security chip to share a pair of authentication keys, the The security chip driver module includes at least the following driving steps: d. The security chip uses the shared authentication key to authenticate the application module; if the authentication is successful, execute step e, otherwise reject the service requested by the application module; e. Establish a data communication channel and a control command communication channel between the application module and the security chip; f. The security chip driver module converts the instructions issued by the upper application module into chip instructions that can be recognized by the security chip, and performs hash operations on the authentication result of step d, the shared authentication key and the chip instructions to generate this chip The authorization information of the instruction, and then send the chip instruction and the authorization information to the security chip; g. Each time the security chip receives a chip instruction, it performs a hash operation on the authentication result of step d, the shared authentication key, and the currently received chip instruction to generate the authorization verification information of the current chip instruction, and verify the current authorization The information is compared with the authorization information carried by the received chip instruction. If they are consistent, the operation of the current chip instruction is executed; otherwise, the currently received chip instruction is refused to be executed. 16. The method according to claim 14, wherein the verification of the integrity of the application module by the security service module comprises the following steps: j. The security service module first calculates the value of the current integrity verification code of the application module to be protected, and judges whether the value of the current integrity verification code is equal to the value of the saved integrity verification code. If they are equal, then After the application module to be protected is started, step k is executed; otherwise, the application module is prohibited from being activated. k. The security service module regularly verifies the integrity of the application module to be protected. 17. The method according to claim 14 or 16, wherein the security service module saves any record of operations on the security chip, and saves the record as a log record in a local log database. 18. The method according to claim 10, characterized in that the method further comprises setting a unique identity code certificate on each security chip. 19. The method according to claim 18, characterized in that, the setting method is: a third party sets a public key certificate and a private key certificate for each computer terminal, and digitally signs the public and private key certificates , and set the private key certificate information as the password certificate for the unique identification of each computer terminal. 20. The method according to claim 19, wherein the private key certificate is stored in the security chip, and the public key certificate is provided to a verifier for computer terminal identity verification. 21. The method according to claim 20, characterized in that the method for authenticating the information security processing device further comprises the following steps: l. The application module transmits the information to be verified to the security chip, and the security chip calls its corresponding public key algorithm mechanism according to the private key certificate of the unique identity password certificate, digitally signs the information to be verified, and sends the signed result Return to the application module, and the application module sends the above-mentioned digital signature information to the verifier; m. The verifier first verifies whether the signature of the third party on the public key certificate of the unique identity password certificate is correct, and if it is correct, execute step n, otherwise the verification fails; n. Use the public key certificate to verify whether the digitally signed information sent by the application module is correct, and if it is correct, determine the security identity of the information security processing device; otherwise, the verification fails. 22. The method according to claim 18, characterized in that the setting method is: a third party generates a serial number composed of random numbers for each computer terminal, and the third party confirms and digitally signs the serial number The post serial number is set as a password certificate for the unique identification of each computer terminal. 23. The method according to claim 22, characterized in that the method for authenticating the information security processing device further comprises the following steps: p. The application module sends the unique identity password certificate of the information security processing device itself to the verifier; q. The verifier verifies whether the signature information of the third party on the unique identity password certificate is correct, and if it is correct, then determines the security identity of the information security processing device; otherwise, the verification fails. 24. The method according to claim 10, wherein the verification of the underlying firmware includes at least verifying the modules used to complete the initialization of the mainboard hardware system, the microcode program of the CPU on the mainboard, the memory for storing configuration information on the mainboard, the configuration Information expansion system ESCD, CMOS, random access memory NVRAM and master boot sector MBR that retain data when power off.

Images