CN103425932A - Signature calibration method and terminal device - Google Patents

Abstract

The present invention discloses a signature verification method and a terminal device, wherein the signature verification method includes: acquiring hardware information of the terminal device when the system is safely started, and the hardware information of the terminal device includes the terminal device At least one of the processor model, manufacturer information and device model or any combination thereof; the terminal device verifies whether the system software package is Legal, the N pieces of signature information are generated according to the original data of the system software package and different hardware information; N≥2. In the embodiment of the present invention, since the N pieces of signature information are generated according to the original data of the system software package and different hardware information, it can adapt to the secure startup of various types of hardware. When changing, the normal use of equipment such as startup, upgrade and maintenance will not be affected.

Description

Signature verification method and terminal equipment

technical field

The invention relates to the technical field of communication, in particular to a signature verification method and terminal equipment.

Background technique

Currently, the Qualcomm platform supports a secure boot solution (secureboot) based on fuse blowing technology. The secure boot solution is a secure boot solution provided according to different application requirements, and is used to protect boot and binary data used in some communications. The principle is: first use the dongle and digital certificate to perform signature verification processing on the original data and hardware information required for secure boot, and bind the generated signature information with the corresponding original data; then when the terminal device starts, The internal program of the chip in the terminal device verifies the loaded original data and signature information using the hardware information of the terminal device to ensure the legitimacy of the loaded original data, that is, to ensure the legitimacy of the loaded system software package.

With the existing signature verification technology of the Qualcomm platform, the terminal device needs to use the hardware information of the terminal device when verifying the loaded original data and signature information. When the hardware information of the terminal device changes, the hardware information may be changed. It is inconsistent with the hardware information used to generate the signature information, so the verification will fail and the terminal device will not be able to start.

Contents of the invention

The problem to be solved by the present invention is that when the hardware information changes in the existing signature verification technology, the normal use of the equipment is affected.

In view of this, in order to solve the above problems, in the first aspect, the present invention proposes a signature verification method, including:

In a state where the system is securely started, acquire hardware information of the terminal device, where the hardware information of the terminal device includes at least one of processor model, manufacturer information, and device model of the terminal device or any combination thereof;

The terminal device verifies whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device, and the N pieces of signature information are based on the original data and Generated with different hardware information; N ≥ 2.

With reference to the first aspect, in a first possible implementation manner, before acquiring the hardware information of the terminal device, the method further includes:

Using one of the N pieces of signature information as default signature information, and using other signature information of the N pieces of signature information except the default signature information as additional signature information;

Wherein, the default signature information is the signature information used for the first time when the terminal device performs verification every time; the default signature information is stored after the image data of the system software package, and the additional signature information is stored in After the default signature information; or, the default signature information is stored between the image header of the system software package and the image data, and the additional signature information is stored after the image data.

With reference to the first possible implementation manner of the first aspect, in a second possible implementation manner, the terminal device verifies the Whether the system package is legal, including:

The terminal device verifies whether the system software package is legal according to the default signature information in the system software package and the hardware information of the terminal device;

If verifying that the system software package is illegal according to the default signature information and the hardware information of the terminal device, then verifying the system software package sequentially according to the additional signature information and the hardware information of the terminal device Whether it is legal, until it is verified that the system software package is legal.

With reference to the second possible implementation manner of the first aspect, in a third possible implementation manner, the verification of whether the system software package is legal according to the additional signature information and the hardware information of the terminal device in sequence , until it is verified that the system software package is legal, the method further includes:

The signature information of the attachment used when the system software package is legal will be verified, and the default signature information will be replaced.

With reference to the first aspect or any of the above possible implementation manners, in a fourth possible implementation manner, the system software package includes original data that needs to be updated,

The terminal device verifies whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device, including:

In the process of updating the original data, the terminal device verifies whether the system software package is legal according to the N pieces of signature information and the hardware information of the terminal device;

The method also includes:

If the system software package is legal, then perform an update process of the original data of the system software package;

Otherwise, stop updating the original data of the system software package and report an error.

With reference to the first aspect or the first possible implementation manner or the second possible implementation manner or the third possible implementation manner, in a fifth possible implementation manner, the terminal device according to the N Signature information and the hardware information of the terminal device, verify whether the system software package is legal, including:

During the process of system security startup, the terminal device verifies whether the system software package is legal according to the N pieces of signature information and the hardware information of the terminal device;

The method also includes:

If the system software package is legal, execute the process of system startup;

Otherwise, stop executing the process started by the system and report an error.

In a second aspect, the present invention provides a terminal device, including:

An information acquisition module, configured to acquire hardware information of the terminal device when the system is securely started, where the hardware information of the terminal device includes at least one of the processor model, manufacturer information, and device model of the terminal device, or any of them combination;

The signature verification module is used to verify whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device, and the N pieces of signature information are based on the system software package. Generated from raw data and different hardware information; N ≥ 2.

With reference to the second aspect, in a first possible implementation manner, the terminal device further includes:

A signature processing module, configured to use one of the N pieces of signature information as default signature information, and use other signature information of the N pieces of signature information except the default signature information as additional signature information;

Wherein, the default signature information is the signature information used for the first time when the terminal device performs verification every time; the default signature information is stored after the image data of the system software package, and the additional signature information is stored in After the default signature information; or, the default signature information is stored between the image header of the system software package and the image data, and the additional signature information is stored after the image data.

With reference to the first possible implementation manner of the second aspect, in a second possible implementation manner, the signature verification module is specifically configured to: according to the default signature information in the system software package and the terminal The hardware information of the device, and verify whether the system software package is legal; if the system software package is verified to be illegal according to the default signature information and the hardware information of the terminal device, then according to the additional signature information and the The hardware information of the terminal device is used to verify whether the system software package is valid until the system software package is verified to be legal.

With reference to the second possible implementation manner of the second aspect, in a third possible implementation manner, the signature processing module is further configured to: in the signature verification module, according to the additional signature information and the terminal The hardware information of the device, verify whether the system software package is legal, until it is verified that the system software package is legal, then verify the attachment signature information used when the system software package is legal, and replace the default signature information.

With reference to the second aspect or any of the above possible implementation manners, in a fourth possible implementation manner, the system software package includes original data that needs to be updated, and the signature verification module includes:

A data update unit, configured to verify whether the system software package is legal according to the N pieces of signature information and the hardware information of the terminal device during the process of updating the original data; if the system software package is legal, Then execute the update process of the original data of the system software package; otherwise, stop the update of the original data of the system software package and report an error.

With reference to the second aspect or the first possible implementation manner or the second possible implementation manner or the third possible implementation manner, in a fifth possible implementation manner, the signature verification module includes:

A secure boot unit, configured to verify whether the system software package is legal according to the N pieces of signature information and the hardware information of the terminal device during the process of system security startup; if the system software package is legal, execute The process initiated by the system; otherwise, stop executing the process initiated by the system and report an error.

In the embodiment of the present invention, when the system is safely started, the terminal device can verify whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device. Since the N pieces of signature information are Generated according to the original data of the system software package and different hardware information, it can adapt to the safe startup of various types of hardware. When the hardware information such as processor model, manufacturer information or device model changes, the startup and upgrade of the device Normal use such as maintenance and maintenance will not be affected.

Description of drawings

The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate exemplary embodiments, features, and aspects of the invention and together with the description, serve to explain the principles of the invention.

FIG. 1 is a schematic flow diagram of a signature verification method according to Embodiment 1 of the present invention;

2a to 2d are schematic diagrams of signature information storage locations in the signature verification method according to Embodiment 2 of the present invention;

FIG. 2e is a schematic flowchart of a signature verification method according to Embodiment 2 of the present invention;

FIG. 3 is a schematic flowchart of a signature verification method according to Embodiment 3 of the present invention;

FIG. 4 is a structural block diagram of a terminal device according to Embodiment 4 of the present invention;

FIG. 5 is a structural block diagram of a terminal device according to Embodiment 5 of the present invention;

FIG. 6 is a structural block diagram of a terminal device according to Embodiment 6 of the present invention.

Detailed ways

Various exemplary embodiments, features, and aspects of the invention will be described in detail below with reference to the accompanying drawings. The same reference numbers in the figures indicate functionally identical or similar elements. While various aspects of the embodiments are shown in drawings, the drawings are not necessarily drawn to scale unless specifically indicated.

The word "exemplary" is used exclusively herein to mean "serving as an example, embodiment, or illustration." Any embodiment described herein as "exemplary" is not necessarily to be construed as superior or better than other embodiments.

In addition, in order to better illustrate the present invention, numerous specific details are given in the specific embodiments below. It will be understood by those skilled in the art that the present invention may be practiced without these specific details. In other instances, well-known methods, means, components and circuits are not described in detail so as to highlight the gist of the present invention.

FIG. 1 is a schematic flowchart of a signature verification method according to Embodiment 1 of the present invention. During the development process, different terminal devices such as mobile phones and PADs may have different types of processors, and the processor chips may be replaced with new ones during the use of the terminal device, so the processor types supported by the terminal device may vary. , in the process of image data upgrade or system security startup, it is necessary to use hardware information such as the processor of the terminal device to verify the signature of the system software package. As shown in Figure 1, the signature verification method may include the following steps:

Step 101. Acquire hardware information of a terminal device when the system is securely started. The hardware information of the terminal device includes at least one of processor model, manufacturer information, and device model of the terminal device or any combination thereof.

Specifically, the system of the terminal device can be in a secure boot state. For example, a terminal device using a Qualcomm platform is in a secureboot state. In the secure boot state, the terminal device needs to use the Hardware information of the terminal device itself. Wherein, each terminal device has its own hardware information, and the hardware information may generally include any one or several of processor model, manufacturer information, and device model.

Step 102, the terminal device verifies whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device, and the N pieces of signature information are the original data according to the system software package and different hardware information generated. N≥2.

Different terminal devices may have different hardware information, such as: different processor models, manufacturer information or device models; the same terminal device has different types of hardware information, for example: the processor model and manufacturer information of the same terminal device are Different Types. A piece of signature information can be generated according to the original data of the system software package and a piece of hardware information, and N pieces of signature information can be generated according to the original data of the system software package and N different pieces of hardware information; among them, N pieces of different hardware information can include attributes belonging to Different hardware information of the same terminal device may also include different hardware information belonging to different terminal devices. Specifically, before the system software package runs on the terminal device, the dongle and the digital certificate can be used to perform signature verification processing on the original data required for secure startup in the system software package and N different hardware information, and generate corresponding N pieces of signature information, and store the N pieces of signature information in the system software package; the signature information may include verification data (signaturedata) and certificate information (cert chain), etc. When the terminal device needs to verify the signature of the system software package, it can sequentially verify the signature of the system software package according to the N pieces of signature information and the hardware information of the terminal device. If the verification is passed, the verification process can be ended and processed according to the normal process. If all the signature information fails to make the verification of the system software package pass, the terminal device cannot support normal work such as running and updating of the system software package. Specifically, the process for the terminal device to verify the signature of the system software package according to a piece of signature information and the hardware information of the terminal device may include: the terminal device obtains its own hardware information and the original data of the system software package to be verified for signature , and then the verification program stored in the chip of the terminal device calculates a signature information based on the hardware information and original data, and then judges whether the obtained signature information matches the signature information in the system software package. If the signature verification of the software package passes, the system software package is legal. If it does not match, it means that the signature verification of the system software package fails.

Since the system software package includes signature information corresponding to a plurality of different hardware information, the system software package can pass the verification when running in multiple terminal devices with different hardware information.

In this embodiment, when the system is safely started, the terminal device can verify whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device. Since the N pieces of signature information are based on The original data of the system software package and different hardware information are generated, which can adapt to the safe startup of various types of hardware. When the hardware information such as processor model, manufacturer information or device model changes, the device startup, upgrade and Normal use such as maintenance will not be affected.

2a to 2d are schematic diagrams of signature information storage locations in the signature verification method according to Embodiment 2 of the present invention. On the basis of the above embodiments, there may be multiple storage locations for the N pieces of signature information, and they may all be stored in one place as a whole, or stored in multiple segments. In the embodiment of the present invention, a piece of signature information is taken as default signature information, and other signature information is additional signature information as an example for illustration.

One of the N pieces of signature information may be used as default signature information, and other signature information of the N pieces of signature information except the default signature information may be used as additional signature information. Wherein, the default signature information is the signature information used for the first time when the terminal device performs verification each time. The storage methods of default signature information and additional signature information can include any of the following:

Mode 1: The default signature information is stored after the image data of the system software package, and the additional signature information is stored after the default signature information.

The original data of the system software package can include the image header and image data, for example: as shown in Figure 2a, the image header is *hd.mbn and the image data is *sbl.mbn, and the default signature information can be stored in the image data as *sbl. After mbn. As shown in Figure 2b, after the default signature information, an overall header file of image signature can be saved first, and then the header file and additional signature information of each additional signature can be saved. If the default signature information is saved between the image header and the image data, the additional signature information may be saved behind the image data.

Mode 2: The default signature information is stored between the image header of the system software package and the image data, and the additional signature information is stored after the image data.

As shown in Figure 2c, the image header is elf_header and the image data is *.mbn, and the default signature information can be stored between the image header and the image data. In addition, if the default signature information is saved after the image data, the additional signature information may be saved after the default signature information. As shown in Figure 2d, after the image data, an overall image signature header file can be saved first, and then the header file and additional signature information of each additional signature can be saved.

Further, the terminal device verifies whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device, which may specifically include:

The terminal device verifies whether the system software package is legal according to the default signature information in the system software package and the hardware information of the terminal device;

If verifying that the system software package is illegal according to the default signature information and the hardware information of the terminal device, then verifying the system software package sequentially according to the additional signature information and the hardware information of the terminal device Whether it is legal, until it is verified that the system software package is legal.

Furthermore, the signature information that passes the verification may be different each time. If the default signature information stored in the system software package is the signature information that passes the verification, the default signature information can be preferentially used for each restart of the terminal device. The system software package is verified to reduce the verification time. Therefore, according to the additional signature information and the hardware information of the terminal device, verify whether the system software package is legal, until the system software package is verified to be legal, the signature verification method further includes:

The signature information of the attachment used when the system software package is legal will be verified, and the default signature information will be replaced.

Specifically, the default upgrade process of the system software package is generally as follows: after entering the update process, the terminal device checks the image integrity of the system software package, and updates the image data if the image data of the system software package is complete. In the embodiment of the present invention, the verification function of the system software package can be added in the default upgrade process. According to the process characteristics of the software update, when the system software package includes the original data that needs to be updated, the terminal device according to the system software The N pieces of signature information in the package and the hardware information of the terminal device are used to verify whether the system software package is legal, which may specifically include:

In the process of updating the original data, the terminal device verifies whether the system software package is legal according to the N pieces of signature information and the hardware information of the terminal device;

In this case, the method also includes:

If the system software package is valid, execute the update process of the original data of the system software package; otherwise, stop the update of the original data of the system software package and report an error.

Fig. 2e is a schematic flow chart of a signature verification method according to Embodiment 2 of the present invention. As shown in Fig. 2e, the signature verification method may include the following steps:

Step 201, the terminal device reads the default signature information in the default location;

Step 202, the terminal device judges whether the system software package to be upgraded is legal according to the default signature information, if yes, execute step 206; otherwise, execute step 203;

Specifically, the process for the terminal device to determine whether the system software package to be upgraded is legitimate according to the read signature information may be, for example:

The terminal device obtains its own hardware information and the original data in the system software package that needs to be upgraded. The chip of the terminal device stores a verification program. According to the verification program, the acquired hardware information and original data are verified and calculated to obtain a Signature information, and then judge whether the obtained signature information matches the signature information read by the terminal device. If they match, the system software package is legal; if they do not match, the system software package is illegal; among them, the terminal device , the process of judging whether the system software package is legal can refer to the verification process in the existing secure boot process;

Step 203, the terminal device judges whether there is a next piece of additional signature information, if yes, execute step 204, otherwise, execute step 207;

Step 204, the terminal device reads a piece of additional signature information;

Step 205, the terminal device judges whether the system software package to be upgraded is legal according to the read additional signature information, if yes, replace the default signature information with the matching additional signature information, and then execute step 206, otherwise return to execute step 203;

Step 206 , according to normal processing, the terminal device continues to update the original data of the system software package to complete the data update.

Step 207, the terminal device stops updating the original data of the system software package and reports an error. For example: when the user provides the wrong version of the image data upgrade package, the terminal device actively refuses to update the software and prompts the user for the cause of the error, so as to avoid the user's wrong update and cause the mobile phone to fail to start.

In this embodiment, when the system is safely started, the terminal device can verify whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device. Since the N pieces of signature information are based on The original data of the system software package and different hardware information are generated, which can adapt to the safe startup of various types of hardware. When the hardware information such as processor model, manufacturer information or device model changes, the device startup, upgrade and Normal use such as maintenance will not be affected. In addition, a system software package can be adapted to a variety of terminal devices using different types of processors, which can reduce the workload of R&D personnel, improve system compatibility, and improve user experience. Further, the signature verification method can also control the update of the system software package according to the verification result, so as to avoid updating the upgrade package by mistake. In addition, using the signature information that has passed the verification as the default signature information can reduce the number of times of verification when the system software package is updated, and improve the efficiency of verification.

FIG. 3 is a schematic flowchart of a signature verification method according to Embodiment 3 of the present invention. In this embodiment, signature verification can be performed when the terminal device performs secure startup. When the terminal device is started, first confirm whether it is safe to start. When confirming that it is safe to start, check whether the system software package in the terminal device is legal when starting. The verification process is the same as the verification of the software upgrade in the above-mentioned embodiment. The process is basically similar, the difference is that the trigger point of the verification process is different. Wherein, the verification process in the system software package update can be triggered when entering the system software package update process. The verification process during secure boot can be triggered when the system starts up and it is found that a secure boot is required. The difference between this embodiment and the embodiment shown in FIG. 2e is that the terminal device verifies whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device, including:

During the process of system security startup, the terminal device verifies whether the system software package is legal according to the N pieces of signature information and the hardware information of the terminal device;

In this case, the method also includes:

If the system software package is legal, execute the process of system startup;

Otherwise, stop executing the process started by the system and report an error.

It should be noted that the terminal device may be instructed to perform secure startup through various means. For example, blowing the fuse of a Qualcomm chip can be used to instruct the terminal device using the chip to perform a secure boot process when starting; The startup process is to verify whether the system software package is legal.

As shown in Figure 3, the signature verification method may include the following steps:

Step 301, the terminal device reads the default signature information in the default location;

Step 302, the terminal device judges whether the system software package is legal according to the default signature information, if yes, execute step 306; otherwise, execute step 303;

The method for specifically judging whether the system software package is legal can refer to the embodiment shown in FIG. 2e;

Step 303, the terminal device judges whether there is the next piece of additional signature information, if yes, execute step 304, otherwise, execute step 307;

Step 304, the terminal device reads a piece of additional signature information;

Step 305, the terminal device judges whether the system software package is legal according to the read additional signature information, and if so, replaces the default signature information with the matching additional signature information, that is, sets the matching additional signature information as the default signature information, and then executes Step 306, otherwise return to step 303;

Step 306, the terminal device allows the device to continue running, and executes the process of system startup.

Step 307, the terminal device stops executing the process of system startup and reports an error. This prevents booting via invalid system packages.

In this embodiment, when the system is safely started, the terminal device can verify whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device. Since the N pieces of signature information are based on The original data of the system software package and different hardware information are generated, which can adapt to the safe startup of various types of hardware. When the hardware information such as processor model, manufacturer information or device model changes, the device startup, upgrade and Normal use such as maintenance will not be affected. In addition, a system software package can be adapted to a variety of terminal devices using different types of processors, which can reduce the workload of R&D personnel, improve system compatibility, and improve user experience. Further, the signature verification method can also control whether to start the system according to the verification result. In addition, using the signature information that passes the verification as the default signature information of the verification data can reduce the number of times of verification when the terminal device is started, and improve the efficiency of verification.

FIG. 4 is a structural block diagram of a terminal device according to Embodiment 4 of the present invention. As shown in FIG. 4, the terminal device 40 may include:

The information acquisition module 41 is configured to acquire hardware information of the terminal device when the system is securely started, and the hardware information of the terminal device includes at least one of the processor model, manufacturer information, and device model of the terminal device or its random combination.

The signature verification module 43 is used to verify whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device, and the N pieces of signature information are based on the system software package generated from raw data and different hardware information; N≥2.

Specifically, the system of the terminal device can be in a secure boot state. For example, a terminal device using a Qualcomm platform is in a secureboot state. In the secure boot state, the terminal device needs to use the Hardware information of the terminal device itself. Wherein, each terminal device has its own hardware information, and the hardware information may generally include any one or several of processor model, manufacturer information, and device model.

Before the system software package runs on the terminal device, the dongle and digital certificate can be used to perform signature verification processing on the original data and N different hardware information required for secure startup in the system software package, and generate corresponding N pieces of signature information , and store the N pieces of signature information in the system software package; the signature information may include verification data (signature data) and certificate information (cert chain), etc. When the terminal device needs to perform signature verification on the system software package, the signature verification module 43 can perform signature verification on the system software package respectively according to the N pieces of signature information and the hardware information of the terminal device. If there is a piece of signature information that can make After the verification of the system software package is passed, the verification process can be ended and processed according to the normal process. If all the signature information fails to make the verification of the system software package pass, the terminal device cannot support normal work such as running and updating of the system software package.

The terminal device provided in this embodiment is used to execute the methods in the foregoing method embodiments. For specific working principles and workflows, reference may be made to the foregoing method embodiments.

In this embodiment, when the system is safely started, the information acquisition module of the terminal device can obtain the hardware information of the terminal device, and the signature verification module can, according to the N pieces of signature information in the system software package and the hardware information of the terminal device, Verify whether the system software package is legal. Since the N pieces of signature information are generated according to the original data of the system software package and different hardware information, it can adapt to the secure startup of various types of hardware. When the hardware information such as information and device model changes, the normal use of the device such as startup, upgrade and maintenance will not be affected.

FIG. 5 is a structural block diagram of a terminal device according to Embodiment 5 of the present invention. Components with the same numbers in FIG. 5 and in FIG. 4 have the same meanings. As shown in FIG. 5 , the main difference from the previous embodiment is that the terminal device 50 may also include: a signature processing module 51, configured to use one of the N pieces of signature information as default signature information, and use the N pieces of signature information A piece of signature information other than the default signature information as additional signature information;

Wherein, the default signature information is the signature information used for the first time when the terminal device performs verification every time; the default signature information is stored after the image data of the system software package, and the additional signature information is stored in After the default signature information; or, the default signature information is stored between the image header of the system software package and the image data, and the additional signature information is stored after the image data. For details, refer to FIG. 2a to FIG. 2d and their related descriptions in the signature verification method of the above embodiment.

The signature verification module 43 is specifically configured to: verify whether the system software package is legal according to the default signature information in the system software package and the hardware information of the terminal device; if according to the default signature information and the terminal device Verify that the system software package is illegal according to the hardware information of the device, then verify whether the system software package is legal according to the additional signature information and the hardware information of the terminal device in turn, until the system software package is verified The package is legal.

Further, the signature processing module 51 can also be used to: in the signature verification module 43, verify whether the system software package is legal according to the additional signature information and the hardware information of the terminal device in turn, until the verification of the After the system software package is legal, the attachment signature information used when the system software package is legal will be verified to replace the default signature information.

In a first possible implementation manner, the system software package includes original data that needs to be updated, and the signature verification module 43 may include:

A data update unit 53, configured to verify whether the system software package is legal according to the N pieces of signature information and the hardware information of the terminal device during the process of updating the original data; if the system software package is legal , execute the update process of the original data of the system software package; otherwise, stop the update of the original data of the system software package and report an error. For details, refer to FIG. 2e and related descriptions in the signature verification method of the above embodiment.

In another possible implementation manner, the signature verification module 43 may also include:

The secure boot unit 55 is configured to verify whether the system software package is legal according to the N pieces of signature information and the hardware information of the terminal device during the process of system security boot; if the system software package is legal, then Execute the process initiated by the system; otherwise, stop executing the process initiated by the system and report an error. For details, refer to FIG. 3 and related descriptions in the signature verification method of the foregoing embodiment.

In this embodiment, when the system is safely started, the information acquisition module of the terminal device can obtain the hardware information of the terminal device, and the signature verification module can, according to the N pieces of signature information in the system software package and the hardware information of the terminal device, Verify whether the system software package is legal. Since the N pieces of signature information are generated according to the original data of the system software package and different hardware information, it can adapt to the secure startup of various types of hardware. When hardware information such as information or device model changes, the normal use of the device such as startup, upgrade and maintenance will not be affected. In addition, a system software package can be adapted to a variety of terminal devices using different types of processors, which can reduce the workload of R&D personnel, improve system compatibility, and improve user experience. Furthermore, the terminal device can also control the update of the system software package or the system startup according to the verification result, so as to avoid wrong update of the upgrade package or illegal startup of the system. In addition, the terminal device uses the signature information that has passed the verification as the default signature information, which can reduce the number of subsequent verifications and improve the efficiency of verification.

FIG. 6 is a structural block diagram of a terminal device according to Embodiment 6 of the present invention. The terminal device 60 may be a host server with computing capabilities, a personal computer PC, or a portable portable computer or terminal. The specific embodiments of the present invention do not limit the specific implementation of the computing nodes. The terminal device 60 may be used to execute the methods in the foregoing method embodiments.

The terminal device 60 may include a processor (processor) 61, a communication interface (Communications Interface) 62, a memory (memory array) 63 and a bus 64. Wherein, the processor 61 , the communication interface 62 , and the memory 63 communicate with each other through the bus 64 .

The communication interface 62 is used for communicating with the outside.

The processor 61 is used to execute programs. The processor 61 may be a central processing unit CPU, or an Application Specific Integrated Circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention.

The memory 63 is used to store files and programs. The memory 63 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one magnetic disk memory. Memory 63 may also be a memory array. The memory 63 may also be divided into blocks, and the blocks may be combined into virtual volumes according to certain rules.

In a possible implementation manner, the above program may be a program code including computer operation instructions. Specifically, the program can be used for:

In a state where the system is securely started, acquire hardware information of the terminal device, where the hardware information of the terminal device includes at least one of processor model, manufacturer information, and device model of the terminal device or any combination thereof;

According to the N pieces of signature information in the system software package and the hardware information of the terminal device, verify whether the system software package is legal, and the N pieces of signature information are based on the original data and different hardware information of the system software package Generated; N≥2.

In a possible implementation manner, the program is further configured to: before acquiring the hardware information of the terminal device, use one of the N pieces of signature information as the default signature information, and use the N pieces of signature information except all Signature information other than the above-mentioned default signature information is used as additional signature information;

Wherein, the default signature information is the signature information used for the first time when the terminal device performs verification every time; the default signature information is stored after the image data of the system software package, and the additional signature information is stored in After the default signature information; or, the default signature information is stored between the image header of the system software package and the image data, and the additional signature information is stored after the image data.

In a possible implementation manner, verifying whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device includes:

Verifying whether the system software package is legal according to the default signature information in the system software package and the hardware information of the terminal device;

If verifying that the system software package is illegal according to the default signature information and the hardware information of the terminal device, then verifying the system software package sequentially according to the additional signature information and the hardware information of the terminal device Whether it is legal, until it is verified that the system software package is legal.

In a possible implementation manner, the program is further configured to: verify whether the system software package is legal according to the additional signature information and the hardware information of the terminal device in turn, until the verified After the system software package is legal, the attachment signature information used when the system software package is legal will be verified to replace the default signature information.

In a possible implementation manner, the system software package includes original data that needs to be updated, and the terminal device verifies the system Whether the package is legal, including:

In the process of updating the original data, the terminal device verifies whether the system software package is legal according to the N pieces of signature information and the hardware information of the terminal device;

The program is also used to:

If the system software package is legal, then perform an update process of the original data of the system software package;

Otherwise, stop updating the original data of the system software package and report an error.

In a possible implementation manner, the terminal device verifies whether the system software package is legal according to the N pieces of signature information in the system software package and the hardware information of the terminal device, including:

During the process of system security startup, the terminal device verifies whether the system software package is legal according to the N pieces of signature information and the hardware information of the terminal device;

The program is also used to:

If the system software package is legal, execute the process of system startup;

Otherwise, stop executing the process started by the system and report an error.

In this embodiment, when the system is safely started, the terminal device can obtain the hardware information of the terminal device, and according to the N pieces of signature information in the system software package and the hardware information of the terminal device, it can be verified whether the system software package is Legal, since the N pieces of signature information are generated based on the original data of the system software package and different hardware information, it can adapt to the secure boot of various types of hardware. When changing, the normal use of equipment such as startup, upgrade and maintenance will not be affected. In addition, a system software package can be adapted to a variety of terminal devices using different types of processors, which can reduce the workload of R&D personnel, improve system compatibility, and improve user experience. Further, the signature verification method can also control the update of the system software package or the system startup according to the verification result, so as to avoid wrong update of the upgrade package or illegal startup of the system. In addition, using the signature information that passes the verification as the default signature information can reduce the number of subsequent verifications and improve the efficiency of verification.

Those skilled in the art can appreciate that each exemplary unit and algorithm steps in the embodiments described herein can be realized by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in the form of hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may choose different methods to implement the described functions for specific applications, but this implementation should not be regarded as exceeding the scope of the present invention.

If the functions are implemented in the form of computer software and sold or used as an independent product, it can be considered that all or part of the technical solution of the present invention (such as the part that contributes to the prior art) is In the form of computer software products. The computer software product is usually stored in a computer-readable storage medium, and includes several instructions to enable a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the embodiments of the present invention. The aforementioned storage media include various media that can store program codes such as U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk.

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims (12)

1. a signature check method, is characterized in that, comprising:

Under the state of safety startup of system, obtain the hardware information of terminal device, the hardware information of described terminal device comprises at least one or its combination in any of the processor model of described terminal device, manufacturer's information and unit type;

Described terminal device is according to the N bar signing messages in system software package and the hardware information of described terminal device, whether the described system software package of verification is legal, and described N bar signing messages is to generate according to the raw data of described system software package and different hardware informations; N >=2.

2. signature check method according to claim 1, is characterized in that, before the described hardware information that obtains terminal device, described method also comprises:

Using one in described N bar signing messages as the acquiescence signing messages, using described N bar signing messages other signing messages except described acquiescence signing messages as attaching signature information;

Wherein, described acquiescence signing messages is the signing messages that described terminal device is used while carrying out verification at every turn for the first time; After described acquiescence signing messages is kept at the mirror image data of described system software package, after described attaching signature information is kept at described acquiescence signing messages; Or described acquiescence signing messages is kept between the mirror image head and mirror image data of described system software package, after described attaching signature information is kept at described mirror image data.

3. signature check method according to claim 2, is characterized in that, described terminal device is according to the N bar signing messages in system software package and the hardware information of described terminal device, and whether the described system software package of verification is legal, comprising:

Described terminal device is according to the described acquiescence signing messages in described system software package and the hardware information of described terminal device, and whether the described system software package of verification is legal;

If the hardware information according to described acquiescence signing messages and described terminal device, the described system software package of verification is illegal, successively according to the hardware information of described attaching signature information and described terminal device, whether the described system software package of verification is legal, until that verification goes out described system software package is legal.

4. signature check method according to claim 3, it is characterized in that, described successively according to the hardware information of described attaching signature information and described terminal device, whether the described system software package of verification is legal, until verification go out described system software package legal after, described method also comprises:

Verification is gone out to the annex signing messages that described system software package is used when legal, replace described acquiescence signing messages.

5. according to the described signature check method of any one in claim 1-4, it is characterized in that, described system software package comprises the raw data that needs upgrade,

Described terminal device is according to the N bar signing messages in system software package and the hardware information of described terminal device, and whether the described system software package of verification is legal, comprising:

In the process of upgrading described raw data, described terminal device is according to the hardware information of described N bar signing messages and described terminal device, and whether the described system software package of verification is legal;

Described method also comprises:

If described system software package is legal, carry out the more new technological process of the raw data of described system software package;

Otherwise, stop described system software package raw data renewal and report an error.

6. according to the described signature check method of any one in claim 1-4, it is characterized in that, described terminal device is according to the N bar signing messages in system software package and the hardware information of described terminal device, and whether the described system software package of verification is legal, comprising:

In the process of safety startup of system, described terminal device is according to the hardware information of described N bar signing messages and described terminal device, and whether the described system software package of verification is legal;

Described method also comprises:

If described system software package is legal, the flow process that executive system starts;

Otherwise, stop the flow process of executive system startup and report an error.

7. a terminal device, is characterized in that, comprising:

The acquisition of information module, under the state of safety startup of system, obtain the hardware information of terminal device, and the hardware information of described terminal device comprises at least one or its combination in any of the processor model of described terminal device, manufacturer's information and unit type;

The signature check module, be used for according to the N bar signing messages of system software package and the hardware information of described terminal device, whether the described system software package of verification is legal, and described N bar signing messages is to generate according to the raw data of described system software package and different hardware informations; N >=2.

8. terminal device according to claim 7, is characterized in that, also comprises:

The signature processing module, for using one of described N bar signing messages as giving tacit consent to signing messages, using described N bar signing messages other signing messages except described acquiescence signing messages as attaching signature information;

Wherein, described acquiescence signing messages is the signing messages that described terminal device is used while carrying out verification at every turn for the first time; After described acquiescence signing messages is kept at the mirror image data of described system software package, after described attaching signature information is kept at described acquiescence signing messages; Or described acquiescence signing messages is kept between the mirror image head and mirror image data of described system software package, after described attaching signature information is kept at described mirror image data.

9. terminal device according to claim 8, is characterized in that, described signature check module specifically for: according to the described acquiescence signing messages in described system software package and the hardware information of described terminal device, whether the described system software package of verification legal; If the hardware information according to described acquiescence signing messages and described terminal device, the described system software package of verification is illegal, successively according to the hardware information of described attaching signature information and described terminal device, whether the described system software package of verification is legal, until that verification goes out described system software package is legal.

10. terminal device according to claim 9, is characterized in that, described signature processing module also for:

In described signature check module successively according to the hardware information of described attaching signature information and described terminal device, whether the described system software package of verification is legal, until verification go out described system software package legal after, verification is gone out to the annex signing messages that described system software package is used when legal, replace described acquiescence signing messages.

11. according to the described terminal device of any one in claim 7-10, it is characterized in that, described system software package comprises the raw data that needs upgrade, described signature check module comprises:

Data updating unit, for the process upgrading described raw data, according to the hardware information of described N bar signing messages and described terminal device, whether the described system software package of verification is legal; If described system software package is legal, carry out the more new technological process of the raw data of described system software package; Otherwise, stop described system software package raw data renewal and report an error.

12. according to the described terminal device of any one in claim 7-10, it is characterized in that, described signature check module comprises:

The clean boot unit, for the process at safety startup of system, according to the hardware information of described N bar signing messages and described terminal device, whether the described system software package of verification is legal; If described system software package is legal, the flow process that executive system starts; Otherwise, stop the flow process of executive system startup and report an error.

Images