WO2023147744A1

WO2023147744A1 - Key state inspection method and apparatus, and device and medium

Info

Publication number: WO2023147744A1
Application number: PCT/CN2022/139391
Authority: WO
Inventors: 王治大
Original assignee: 浪潮(山东)计算机科技有限公司
Priority date: 2022-02-07
Filing date: 2022-12-15
Publication date: 2023-08-10
Also published as: CN114139221B; CN114139221A

Abstract

Disclosed in the present application are a key state inspection method and apparatus, and a device and a medium, which are applied to the field of hardware maintenance. The method comprises: reading a first key, which is stored in an encryption chip, and calculating, by using a preset secure encryption algorithm, a first key feature value corresponding to the first key; acquiring a second key feature value, which is stored in an electrically erasable programmable read only memory, and determining whether the first key feature value is consistent with the second key feature value; if it is determined that the first key feature value is not consistent with the second key feature value, reading a third key from a secure card again, and calculating, by using the preset secure encryption algorithm, a third key feature value corresponding to the third key; determining a legitimate target key on the basis of a comparison result between the first key feature value, the second key feature value and the third key feature value, such that the encryption chip performs corresponding data encryption and decryption processing using the target key after a system is powered on. By means of the solution, key state inspection is realized, thereby greatly avoiding data loss caused by a key failure.

Description

Key state detection method, device, equipment and medium

Cross References to Related Applications

This application claims the priority of the Chinese patent application with the application number 202210115395.4 and the application name "key state detection method, device, equipment and medium" submitted to the China Patent Office on February 07, 2022, the entire contents of which are incorporated by reference in this application.

technical field

The present application relates to the field of hardware maintenance, in particular to a key state detection method, device, equipment and medium.

Background technique

The current key transfer method of the computing device is that the security card generates the key after the system is turned on for the first time, and passes the key to the BIOS (Basic Input Output System, that is, the basic input and output system), and the BIOS passes the key to the encryption chip, so that The encryption chip stores the key and uses the key to perform corresponding data encryption and decryption processing after the system is turned on. However, in the process of actual use by users, some accidents often occur. When the key stored in the encryption chip changes, the encryption chip uses the invalid key to encrypt and decrypt the data and the data cannot be recovered; when the security card After the generated key is abnormal, the invalid key is transmitted to the encryption chip, causing the encryption chip to use the invalid key to encrypt and decrypt the corresponding data, resulting in data loss.

Contents of the invention

In view of this, the purpose of this application is to provide a key state detection method, device, equipment and medium, which can detect the key state, improve the reliability of the encryption chip to obtain a legal key, and avoid data loss due to key failure. Lost situation. The specific plan is as follows:

In the first aspect, the present application discloses a key state detection method applied to a basic input and output system, including:

Read the first key stored in the encryption chip, and calculate the first key characteristic value corresponding to the first key by using a preset security encryption algorithm;

Obtaining the characteristic value of the second key stored in the charged erasable programmable read-only memory, and judging whether the characteristic value of the first key is consistent with the characteristic value of the second key;

If it is determined that the characteristic value of the first key is inconsistent with the characteristic value of the second key, the third key is re-read from the security card, and the third key characteristic corresponding to the third key is calculated using a preset security encryption algorithm value;

Determine the legitimate target key based on the comparison results between the first key feature value, the second key feature value, and the third key feature value, so that the encryption chip can use the target key to perform corresponding data encryption after the system is powered on. Decryption processing.

In some embodiments, before reading the first key stored in the encryption chip and calculating the first key characteristic value corresponding to the first key using a preset security encryption algorithm, the method further includes:

If the system is turned on for the first time, the first key and the second key are obtained from the security card, and then the characteristic value of the second key corresponding to the second key is calculated by using a preset security encryption algorithm;

The characteristic values of the first key and the second key are respectively stored in the encryption chip and the charged erasable programmable read-only memory.

In some embodiments, calculating the characteristic value of the first key corresponding to the first key using a preset security encryption algorithm includes:

A first key feature value corresponding to the first key is calculated by using a message digest algorithm.

In some embodiments, after judging whether the characteristic value of the first key is consistent with the characteristic value of the second key, it further includes:

If it is determined that the characteristic value of the first key is consistent with the characteristic value of the second key, then the operating system is started, and the first key is determined as the target key, so that the encryption chip uses the target key to perform corresponding operations after the system is turned on. data encryption and decryption processing.

In some embodiments, determining the legitimate target key based on a comparison result between the first key characteristic value, the second key characteristic value, and the third key characteristic value includes:

Comparing the first key characteristic value, the second key characteristic value and the third key characteristic value;

If the characteristic value of the second key is the same as the characteristic value of the third key but different from the characteristic value of the first key, it is determined that the first key stored in the encryption chip is invalid, and the third key is determined as the target key;

If the characteristic value of the first key is the same as the characteristic value of the third key but different from the characteristic value of the second key, it is determined that the characteristic value of the second key stored in the charged erasable programmable read-only memory is invalid, and the first The key is identified as the target key.

In some embodiments, after determining the first key as the target key, the method further includes:

Determining the key characteristic value corresponding to the target key as a new second key characteristic value and saving it to the charged erasable programmable read-only memory to replace the expired second key in the charged erasable programmable read-only memory Eigenvalues.

In some embodiments, the legal target key is determined based on the comparison result between the first key feature value, the second key feature value, and the third key feature value, so that the encryption chip can use the target key key after the system is powered on. After the corresponding data encryption and decryption processing is performed on the key, it also includes:

Based on the preset time interval, the first key characteristic value stored in the encryption chip, the second key characteristic value stored in the charged erasable programmable read-only memory, and the third key characteristic value read from the security card Perform periodic detection to detect whether the first key characteristic value, the second key characteristic value and the third key characteristic value are consistent;

If not, a warning message is generated via the operating system interface.

In the second aspect, the present application discloses a key state detection device, which is applied to a basic input and output system, including:

The first key calculation module is used to read the first key stored in the encryption chip, and calculate the first key characteristic value corresponding to the first key by using a preset security encryption algorithm;

The second key calculation module is used to obtain the second key characteristic value stored in the charged erasable programmable read-only memory;

The first judging module is used to judge whether the characteristic value of the first key is consistent with the characteristic value of the second key;

The third key calculation module is used to re-read the third key from the safety card if it is determined that the characteristic value of the first key is inconsistent with the characteristic value of the second key, and use a preset security encryption algorithm to calculate the third key and the third key. The third key characteristic value corresponding to the key;

The key state determination module is used to compare the first key characteristic value, the second key characteristic value and the third key characteristic value, determine the key state and the target key based on the comparison result, and compare the The system starts up so that the encryption chip can use the target key to process data on the mechanical hard disk.

In a third aspect, the present application discloses an electronic device, comprising:

memory for storing computer programs;

A processor, configured to execute a computer program to implement the steps of the aforementioned public key state detection method.

In a fourth aspect, the present application discloses a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, the steps of the aforementioned public key state detection method are implemented.

It can be seen that the application first reads the first key stored in the encryption chip, and uses the preset security encryption algorithm to calculate the first key characteristic value corresponding to the first key; The second key characteristic value, and judge whether the first key characteristic value is consistent with the second key characteristic value; if it is judged that the first key characteristic value is inconsistent with the second key characteristic value, then read from the security card again Take the third key, and use the preset security encryption algorithm to calculate the third key characteristic value corresponding to the third key; based on the first key characteristic value, the second key characteristic value and the third key characteristic value The result of the comparison between them determines the legal target key, so that the encryption chip can use the target key to perform corresponding data encryption and decryption processing after the system is turned on. It can be seen that the present application obtains the second key characteristic value stored in the charged erasable programmable read-only memory every time the application is turned on, and uses the second key characteristic value as a reference point to compare with the first key characteristic value. Contrast, to detect the state of the first key stored in the encryption chip, to prevent the encryption chip from directly using the invalid first key to encrypt and decrypt the corresponding data, and improve reliability; when the first key characteristic value and the second encryption key When the characteristic values of the key are inconsistent, the third key re-read from the security card is calculated using the preset security encryption algorithm to obtain the third key characteristic value, and based on the ratio of the first, second and third key characteristic values As a result, it is possible to determine the legal target key, reduce the probability of the encryption chip using an invalid key, and greatly avoid data loss caused by key invalidation.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present application, and those skilled in the art can also obtain other drawings according to the provided drawings without creative work.

Fig. 1 is a flow chart of a key state detection method disclosed in the present application;

Fig. 2 is a flow chart of a specific key state detection method disclosed in the present application;

FIG. 3 is a flow chart of a specific key state detection method disclosed in the present application;

FIG. 4 is a flow chart of a specific key state detection method disclosed in the present application;

FIG. 5 is a schematic structural diagram of a key state detection device disclosed in the present application;

FIG. 6 is a schematic structural diagram of an electronic device disclosed in the present application.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the application with reference to the drawings in the embodiments of the application. Apparently, the described embodiments are only some of the embodiments of the application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.

The current key transfer method is that after the system is turned on for the first time, the security card generates a key and passes the key to the BIOS, and the BIOS passes the key to the encryption chip so that the encryption chip can store the key and use the key after the system is turned on Perform corresponding data encryption and decryption processing. However, in the process of actual use by the user, it may happen that the security card transmits an invalid key to the encryption chip, or an abnormality in the encryption chip causes the stored key to become invalid, and finally leads to the use of the invalid key to encrypt and decrypt data. data loss scenarios.

For this reason, the present application provides a corresponding key state detection scheme, which can detect the key state, improve the reliability of the encryption chip to obtain a legal key, and avoid data loss caused by key failure.

Referring to Figure 1, the embodiment of the present application discloses a key state detection method, which is applied to the basic input and output system, including:

Step S11: Read the first key stored in the encryption chip, and use the preset security encryption algorithm to calculate the first key characteristic value corresponding to the first key.

In some embodiments, before reading the first key stored in the encryption chip, and calculating the first key characteristic value corresponding to the first key by using the preset security encryption algorithm, it also specifically includes: if the system is the first first boot, obtain the first key and the second key from the security card, and then use the preset security encryption algorithm to calculate the second key characteristic value corresponding to the second key; combine the first key and the second key The characteristic value of the key is saved to the encrypted chip and the electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, namely EEPROM).

Step S12: Obtain the characteristic value of the second key stored in the charged erasable programmable read-only memory, and judge whether the characteristic value of the first key is consistent with the characteristic value of the second key.

It can be understood that, in some embodiments, after determining whether the characteristic value of the first key is consistent with the characteristic value of the second key, it specifically further includes: if it is determined that the characteristic value of the first key is consistent with the characteristic value of the second key, Then start the operating system, and determine the first key as the target key, so that the encryption chip can use the target key to perform corresponding data encryption and decryption processing after the system is powered on.

Step S13: If it is determined that the characteristic value of the first key is inconsistent with the characteristic value of the second key, read the third key from the security card again, and use the preset security encryption algorithm to calculate the third key corresponding to the third key. Key characteristic value.

In some embodiments, the characteristic value of the third key corresponding to the third key can be calculated using a preset security encryption algorithm, wherein the preset security encryption algorithm can be a symmetric encryption algorithm, an asymmetric encryption algorithm, a digest algorithm, a digital signature and any algorithm in the digital certificate.

Step S14: Determine the legitimate target key based on the comparison result between the first key characteristic value, the second key characteristic value and the third key characteristic value, so that the encryption chip can use the target key to perform corresponding data encryption and decryption processing.

In some embodiments, the legal target key is determined according to the comparison result. If the comparison result shows that the characteristic value of the first key in the encryption chip is inconsistent with the characteristic value of the second key and the characteristic value of the third key, then Determine that the first key is invalid, and determine the third key as the target key and save it in the encryption chip, prompting that hardware maintenance is required; if the comparison result shows that the second key stored in the charged erasable programmable read-only memory If the eigenvalue is inconsistent with the eigenvalue of the first key and the eigenvalue of the third key, it is determined that the second key corresponding to the eigenvalue of the second key is invalid, and the first key is determined as the target key, and the third key is determined as the target key. The characteristic value of the key replaces the characteristic value of the invalid second key, and then prompts that hardware maintenance is required.

Referring to FIG. 2 , the embodiment of the present application discloses a specific key state detection method. Compared with the previous embodiment, this embodiment further explains and optimizes the technical solution. specific:

Step S21: Read the first key stored in the encryption chip, and calculate the first key feature value corresponding to the first key by using a preset security encryption algorithm.

Step S22: Obtain the characteristic value of the second key stored in the charged erasable programmable read-only memory, and judge whether the characteristic value of the first key is consistent with the characteristic value of the second key.

Step S23: If it is determined that the characteristic value of the first key is inconsistent with the characteristic value of the second key, read the third key from the security card again, and use the preset security encryption algorithm to calculate the third key corresponding to the third key. Key characteristic value.

Step S24: Based on the comparison results between the first key characteristic value, the second key characteristic value and the third key characteristic value, determine the invalid key and the legitimate target key, and replace the invalid key with the target key , so that the encryption chip uses the target key to perform corresponding data encryption and decryption processing after the system is turned on.

In some embodiments, determining the legal target key based on a comparison result between the first key characteristic value, the second key characteristic value, and the third key characteristic value includes: determining the first key characteristic value, The characteristic value of the second key and the characteristic value of the third key are compared; if the characteristic value of the second key is the same as the characteristic value of the third key and different from the characteristic value of the first key, then it is determined that the value stored in the encryption chip is The first key is invalid, and the third key is determined as the target key; if the characteristic value of the first key is the same as the characteristic value of the third key, but different from the characteristic value of the second key, it is determined that the electrified erasable programmable The characteristic value of the second key stored in the read-only memory becomes invalid, and the first key is determined as the target key.

It can be understood that, in some embodiments, after determining the first key as the target key, it also includes: determining the key feature value corresponding to the target key as a new second key feature value and saving it to the charged Erasing the programmable read-only memory to replace the expired second key characteristic value in the charged erasable programmable read-only memory.

For the more specific working process of the above steps S21 , S22 and S23 , reference may be made to the corresponding content disclosed in the foregoing embodiments, which will not be repeated here.

It can be seen that after the present application determines that the characteristic value of the first key is inconsistent with the characteristic value of the second key, it detects the characteristic value of the first key and the characteristic value of the second key through the third key reacquired from the security card. The state of the value is used to determine the key with the problem, which can effectively avoid the problem of abnormal data encryption and decryption due to the failure of the key, ensure data security to the maximum extent, and improve the design stability of the system.

Referring to Figure 3, the embodiment of the present application discloses a key state detection method, which is applied to the basic input and output system, including:

Step S31: Read the first key stored in the encryption chip, and use the message digest algorithm to calculate the first key characteristic value corresponding to the first key.

In some embodiments, it can be understood that the message digest algorithm can be MD5 (Message-Digest Algorithm 5, message digest algorithm version 5), or a more secure algorithm.

Step S32: Obtain the characteristic value of the second key stored in the charged erasable programmable read-only memory, and judge whether the characteristic value of the first key is consistent with the characteristic value of the second key.

Step S33: If it is determined that the characteristic value of the first key is inconsistent with the characteristic value of the second key, read the third key from the security card again, and use the message digest algorithm to calculate the third key corresponding to the third key Eigenvalues.

Step S34: Determine the legal target key based on the comparison result between the first key characteristic value, the second key characteristic value and the third key characteristic value, so that the encryption chip can use the target key to perform corresponding data encryption and decryption processing.

In some embodiments, the legal target key is determined based on the comparison result between the first key feature value, the second key feature value, and the third key feature value, so that the encryption chip can use the target key key after the system is powered on. After performing the corresponding data encryption and decryption processing on the key, it also includes: based on the preset time interval, the feature value of the first key stored in the encryption chip, the feature value of the second key stored in the charged erasable programmable read-only memory, and from The third key characteristic value read in the security card is periodically detected to detect whether the first key characteristic value, the second key characteristic value and the third key characteristic value are consistent; if they are not consistent, the operating system The interface generates warning messages. For example, check whether the first key feature value, the second key feature value, and the third key feature value are consistent every 10 minutes. When the first key feature value is the same as the second key feature value, the third key feature value When they are all inconsistent, it is determined that the first key in the encryption chip is invalid, and the BIOS generates a warning message through the OS (Operating System Operating System) interface and sends it to the operating system to prompt the user that the encryption chip is abnormal, so that the user can replace the abnormal one in time. motherboard.

Wherein, for the more specific working process of the above steps S32 and S33, reference may be made to the corresponding content disclosed in the foregoing embodiments, which will not be repeated here.

It can be seen that, after the normal operation of the system in this application, the basic input and output system periodically checks whether the characteristic value of the first key, the characteristic value of the second key, and the characteristic value of the third key are consistent, so that the first and second , The abnormal state of the third key, and then prompts to replace the abnormal security card, encryption chip and charged erasable programmable read-only memory, effectively avoiding the situation that the data cannot be recovered due to key failure.

The technical solution in the present application will be described in detail below by taking FIG. 4 as an example. If the system is turned on for the first time, the BIOS obtains the first key and the second key from the security card, and then uses the MD5 algorithm to calculate the second key characteristic value corresponding to the second key; and the characteristic value of the second key are stored in the encrypted chip and the charged erasable programmable read-only memory (EEPROM) respectively. When starting up for the second time and every subsequent time, the BIOS first reads the first key stored in the encryption chip, and uses the MD5 algorithm to calculate the first key characteristic value corresponding to the first key; The characteristic value of the second key, and judge whether the characteristic value of the first key is consistent with the characteristic value of the second key. If it is determined that the characteristic value of the first key is consistent with the characteristic value of the second key, then the operating system is booted, and the first key is determined as the target key, so that the encryption chip uses the target key to pair the machine with the target key after the system is powered on. The corresponding data on the disk is encrypted and decrypted. If it is determined that the characteristic value of the first key is inconsistent with the characteristic value of the second key, the third key is re-read from the security card, and the third key characteristic corresponding to the third key is calculated using a preset security encryption algorithm value; compare the characteristic value of the first key, the characteristic value of the second key and the characteristic value of the third key; if the characteristic value of the second key is the same as the characteristic value of the third key, the If the values are different, it is determined that the first key stored in the encryption chip is invalid, and the third key is determined as the target key; if the characteristic value of the first key is the same as the characteristic value of the third key, the characteristic If the values are different, it is determined that the second key characteristic value stored in the EEPROM is invalid, and the first key is determined as the target key, and then the key characteristic value corresponding to the target key is determined as the new second key characteristic value The value is saved to the EEPROM to replace the expired second key characteristic value in the EEPROM. After the system is running normally, BIOS based on the preset time interval, the first key characteristic value stored in the encryption chip, the second key characteristic value stored in EEPROM and the third key characteristic value read from the security card Perform periodic detection to detect whether the first key characteristic value, the second key characteristic value and the third key characteristic value are consistent; if the third key characteristic value in the security card is consistent with the first key characteristic value, If the characteristic values of the second keys are inconsistent, a warning message is generated through the operating system interface to inform the user to replace the security card in time.

Referring to Figure 5, the embodiment of the present application discloses a key state detection device, including:

The first key calculation module 11 is used to read the first key stored in the encryption chip, and calculate the first key characteristic value corresponding to the first key by using a preset security encryption algorithm;

The second key calculation module 12 is used to obtain the second key characteristic value stored in the charged erasable programmable read-only memory;

The first judging module 13 is used to judge whether the characteristic value of the first key is consistent with the characteristic value of the second key;

The third key calculation module 14 is used to read the third key from the safety card again if it is determined that the characteristic value of the first key is inconsistent with the characteristic value of the second key, and use a preset security encryption algorithm to calculate the same key as the second key. The characteristic value of the third key corresponding to the three keys;

The key state determination module 15 is used to compare the first key characteristic value, the second key characteristic value and the third key characteristic value, and determine the key state and the target key based on the comparison result, and Start the system so that the encryption chip can use the target key to process data on the mechanical hard disk.

In some specific embodiments, the first key calculation module 11 includes:

The first key characteristic value calculation unit is configured to calculate the first key characteristic value corresponding to the first key by using a message digest algorithm.

The second key characteristic value calculation unit is used to obtain the first key and the second key from the safety card if the system is turned on for the first time, and then use the preset security encryption algorithm to calculate the value corresponding to the second key The second key characteristic value.

The saving unit is used to save the characteristic values of the first key and the second key in the encryption chip and the charged erasable programmable read-only memory respectively.

In some specific embodiments, the first judging module 13 includes:

The judging result consistent processing unit is used to start the operating system if it is determined that the characteristic value of the first key is consistent with the characteristic value of the second key, and determine the first key as the target key, so that the encryption chip can be used in the system After starting up, use the target key to perform corresponding data encryption and decryption processing.

In some specific embodiments, the key state determination module 15 includes:

The comparing unit is used for comparing the characteristic value of the first key, the characteristic value of the second key and the characteristic value of the third key.

The first comparison processing unit is used to determine that the first key stored in the encryption chip is invalid if the characteristic value of the second key is the same as the characteristic value of the third key and different from the characteristic value of the first key, and the second key is stored in the encryption chip. Three keys are determined as target keys.

The second comparison processing unit is used to determine if the characteristic value of the first key and the characteristic value of the third key are the same and different from the characteristic value of the second key, then determine whether the second key stored in the charged erasable programmable read-only memory The characteristic value of the key is invalid, and the first key is determined as the target key.

The key characteristic value replacement unit is used to determine the key characteristic value corresponding to the target key as a new second key characteristic value and save it to the charged erasable programmable read-only memory to replace the charged erasable programmable read-only The expired second key characteristic value in memory.

The period detection unit is used to check the characteristic value of the first key stored in the encryption chip, the characteristic value of the second key stored in the charged erasable programmable read-only memory, and the characteristic value of the key read from the security card based on the preset time interval. The characteristic value of the third key is checked periodically to detect whether the characteristic value of the first key, the characteristic value of the second key and the characteristic value of the third key are consistent.

The warning generating unit is configured to generate warning information through the operating system interface if inconsistent.

FIG. 6 is a schematic structural diagram of an electronic device provided by an embodiment of the present application. Specifically, it may include: at least one processor 21 , at least one memory 22 , a power supply 23 , a communication interface 24 , an input/output interface 25 and a communication bus 26 . Wherein, the memory 22 is used to store a computer program, and the computer program is loaded and executed by the processor 21 to implement relevant steps in the key state detection method performed by the computer device disclosed in any of the foregoing embodiments.

In some embodiments, the power supply 23 is used to provide operating voltage for each hardware device on the computer device 20; the communication interface 24 can create a data transmission channel between the computer device 20 and external devices, and the communication protocol it follows can be Any communication protocol applicable to the technical solution of the present application is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the external, and its specific interface type can be selected according to specific application needs. This is not specifically limited.

Wherein, the processor 21 may include one or more processing cores, such as a 4-core processor, an 8-core processor, and the like. Processor 21 can adopt at least one hardware form in DSP (Digital Signal Processing, digital signal processing), FPGA (Field-Programmable Gate Array, field programmable gate array), PLA (Programmable Logic Array, programmable logic array) accomplish. Processor 21 may also include a main processor and a coprocessor, the main processor is a processor for processing data in a wake-up state, also called CPU (Central Processing Unit, central processing unit); the coprocessor is Low-power processor for processing data in standby state. In some embodiments, the processor 21 may be integrated with a GPU (Graphics Processing Unit, image processor), and the GPU is used for rendering and drawing the content that needs to be displayed on the display screen. In some embodiments, the processor 21 may also include an AI (Artificial Intelligence, artificial intelligence) processor, and the AI processor is used to process computing operations related to machine learning.

In addition, the memory 22, as a resource storage carrier, can be a read-only memory, random access memory, magnetic disk or optical disk, etc., and the resources stored thereon include the operating system 221, computer program 222 and data 223, etc., and the storage method can be short-term storage or permanent storage.

Among them, the operating system 221 is used to manage and control each hardware device and computer program 222 on the computer device 20, so as to realize the operation and processing of the massive data 223 in the memory 22 by the processor 21, which can be Windows, Unix, Linux, etc. In addition to computer programs 222 that can be used to complete the key state detection method performed by the computer device 20 disclosed in any of the foregoing embodiments, the computer program 222 can further include computer programs that can be used to complete other specific tasks. The data 223 may not only include data received by the computer device and transmitted from an external device, but may also include data collected by its own input and output interface 25 and the like.

Further, the embodiment of the present application also discloses a storage medium, in which a computer program is stored, and when the computer program is loaded and executed by a processor, it can realize the key state detection process disclosed in any of the foregoing embodiments. Method steps.

Finally, it should also be noted that in this text, relational terms such as first and second etc. are only used to distinguish one entity or operation from another, and do not necessarily require or imply that these entities or operations, any such actual relationship or order exists. Furthermore, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also includes elements not expressly listed. other elements of or also include elements inherent in such a process, method, article, or device. Without further limitations, an element defined by the phrase "comprising a ..." does not preclude the presence of additional identical elements in the process, method, article, or apparatus that includes the element.

A key state detection method, device, equipment, and medium provided by the application have been introduced in detail above. In this paper, specific examples have been used to illustrate the principle and implementation of the application. The description of the above embodiments is only for To help understand the method and its core idea of this application; at the same time, for those of ordinary skill in the art, according to the idea of this application, there will be changes in the specific implementation and scope of application. In summary, the content of this specification should not understood as a limitation of the application.

Claims

A key state detection method, characterized in that it is applied to a basic input and output system, comprising:

Read the first key stored in the encryption chip, and use a preset security encryption algorithm to calculate the first key characteristic value corresponding to the first key;

Obtaining the second key characteristic value stored in the charged erasable programmable read-only memory, and judging whether the first key characteristic value is consistent with the second key characteristic value;

If it is determined that the characteristic value of the first key is inconsistent with the characteristic value of the second key, then re-read the third key from the security card, and use the preset security encryption algorithm to calculate the third key. The third key characteristic value corresponding to the key;

Based on the comparison result between the first key feature value, the second key feature value, and the third key feature value, determine the legal target key, so that the encryption chip can use the The target key performs corresponding data encryption and decryption processing.
The key state detection method according to claim 1, wherein the first key stored in the encryption chip is read, and the first key corresponding to the first key is calculated by using a preset security encryption algorithm. Before the key characteristic value, also include:

If the system is turned on for the first time, obtain the first key and the second key from the security card, and then use the preset security encryption algorithm to calculate the second key characteristic value corresponding to the second key;

The feature values of the first key and the second key are respectively stored in the encryption chip and the charged erasable programmable read-only memory.
The key state detection method according to claim 1, wherein the calculating the first key characteristic value corresponding to the first key by using a preset security encryption algorithm comprises:

A first key feature value corresponding to the first key is calculated by using a message digest algorithm.
The key state detection method according to claim 3, wherein the message digest algorithm is MD5.
The key state detection method according to claim 1, wherein after the judging whether the first key characteristic value is consistent with the second key characteristic value, further comprising:

If it is determined that the characteristic value of the first key is consistent with the characteristic value of the second key, the operating system is started, and the first key is determined as the target key, so that the encryption chip can be used in the system After starting up, use the target key to perform corresponding data encryption and decryption processing.
The key state detection method according to claim 1, wherein the method based on the ratio between the first key characteristic value, the second key characteristic value and the third key characteristic value Identify legitimate target keys for the results, including:

If the comparison result shows inconsistency, it is determined that the first key is invalid, and the third key is determined as the target key and stored in the encryption chip, and a reminder is required for hardware maintenance.
The key state detection method according to claim 1, wherein the method based on the ratio between the first key characteristic value, the second key characteristic value and the third key characteristic value Identify legitimate target keys for the results, including:

comparing the characteristic value of the first key, the characteristic value of the second key and the characteristic value of the third key;

If the characteristic value of the second key is the same as the characteristic value of the third key but different from the characteristic value of the first key, it is determined that the first key stored in the encryption chip is invalid, and The third key is determined as the target key.
The key state detection method according to claim 7, wherein said comparing said first key characteristic value, said second key characteristic value and said third key characteristic value After that, also include:

If the characteristic value of the first key is the same as the characteristic value of the third key but different from the characteristic value of the second key, it is determined that the second key stored in the charged erasable programmable read-only memory The characteristic value of the key becomes invalid, and the first key is determined as the target key.
The key state detection method according to claim 8, wherein after said determining the first key as the target key, further comprising:

replacing the invalid second key characteristic value with the third key characteristic value.
The key state detection method according to claim 8, wherein after said determining the first key as the target key, further comprising:

Indicates that hardware maintenance is required.
The key state detection method according to claim 8, wherein after said determining the first key as the target key, further comprising:

determining the key characteristic value corresponding to the target key as the new second key characteristic value and storing it in the charged erasable programmable read-only memory to replace the charged erasable programmable read-only memory The characteristic value of the second key that has expired in .
The key state detection method according to any one of claims 1 to 11, wherein the method based on the first key feature value, the second key feature value and the third key feature The comparison result between the values determines the legal target key, so that after the system is turned on, the encryption chip uses the target key to perform corresponding data encryption and decryption processing and further includes:

Based on a preset time interval, the first key feature value stored in the encryption chip, the second key feature value stored in the charged erasable programmable read-only memory, and the security card The characteristic value of the third key read in is periodically detected to detect whether the characteristic value of the first key, the characteristic value of the second key, and the characteristic value of the third key are consistent;

If not, a warning message is generated via the operating system interface.
The key state detection method according to any one of claims 1 to 11, wherein the calculating the first key characteristic value corresponding to the first key using a preset security encryption algorithm includes:

A symmetric encryption algorithm is used to calculate the first key characteristic value corresponding to the first key.
The key state detection method according to any one of claims 1 to 11, wherein the calculating the first key characteristic value corresponding to the first key using a preset security encryption algorithm includes:

A first key characteristic value corresponding to the first key is calculated by using an asymmetric encryption algorithm.
The key state detection method according to any one of claims 1 to 11, wherein the calculating the first key characteristic value corresponding to the first key using a preset security encryption algorithm includes:

A first key feature value corresponding to the first key is calculated by using the digital signature.
The key state detection method according to any one of claims 1 to 11, wherein the calculating the first key characteristic value corresponding to the first key using a preset security encryption algorithm includes:

A first key characteristic value corresponding to the first key is calculated by using the digital certificate.
A key state detection device is characterized in that it is applied to a basic input and output system, comprising:

The first key calculation module is used to read the first key stored in the encryption chip, and calculate the first key characteristic value corresponding to the first key by using a preset security encryption algorithm;

The second key calculation module is used to obtain the second key characteristic value stored in the charged erasable programmable read-only memory;

A first judging module, configured to judge whether the characteristic value of the first key is consistent with the characteristic value of the second key;

The third key calculation module is configured to read the third key from the security card again if it is determined that the characteristic value of the first key is inconsistent with the characteristic value of the second key, and use the preset security An encryption algorithm calculates a third key characteristic value corresponding to the third key;

A key state determination module, configured to compare the first key characteristic value, the second key characteristic value, and the third key characteristic value, and determine the key state and target key, and start the system, so that the encryption chip uses the target key to process data on the mechanical hard disk.
The key state detection device according to claim 17, wherein the first key calculation module includes:

The second key characteristic value calculation unit is used to obtain the first key and the second key from the security card if the system is turned on for the first time, and then use the preset security encryption algorithm to calculate the a second key characteristic value corresponding to the key;

A saving unit is configured to save the characteristic values of the first key and the second key in the encryption chip and the chargeable erasable programmable read-only memory, respectively.
An electronic device, characterized in that it comprises:

memory for storing computer programs;

A processor, configured to execute the computer program, so as to realize the steps of the key state detection method according to any one of claims 1 to 16.
A computer-readable storage medium, characterized by being used to store a computer program; wherein, when the computer program is executed by a processor, the steps of the key state detection method according to any one of claims 1 to 16 are realized.