CN115720139A - Credible adjusting module, credible adjusting method and terminal - Google Patents
Credible adjusting module, credible adjusting method and terminal Download PDFInfo
- Publication number
- CN115720139A CN115720139A CN202211306973.9A CN202211306973A CN115720139A CN 115720139 A CN115720139 A CN 115720139A CN 202211306973 A CN202211306973 A CN 202211306973A CN 115720139 A CN115720139 A CN 115720139A
- Authority
- CN
- China
- Prior art keywords
- pin
- trusted
- unit
- module
- adjusting
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Stored Programmes (AREA)
Abstract
The embodiment of the invention provides a trusted adjusting module, a trusted adjusting method and a terminal, wherein the trusted adjusting module at least comprises a main control board, a key unit, an external connection unit, an interface adjusting unit and a light-emitting unit; the interface adjusting unit is used for determining different link connection modes according to different types of mainboard equipment; the light-emitting unit is used for lighting the display lamp when the type of the main board equipment is matched with the link connection mode of the interface adjusting unit, and when the main control boards are designed in different modes, the link connection mode of the credible adjusting module can be changed by changing the jump cap, so that the main control boards are suitable for different main control boards.
Description
Technical Field
The present invention relates to the field of circuit technologies, and in particular, to a trusted adjusting module, a trusted adjusting method, and a terminal.
Background
The trusted platform module is a device which can independently generate, encrypt and decrypt keys of a hard disk, files, a plug-in storage and the like of a computer (PC), and the trusted platform module is internally provided with an independent processor and a storage unit and can store the keys and characteristic data and provide encryption and security authentication for the PC. The TPM (Trusted Platform Module) security chip is both a key generator and a key management device, and also provides a uniform programming interface. The key is the only key for opening the encrypted file, and one important role of the TPM security chip is to strengthen the management of the key, the chip generates, stores and manages the key in hardware, and the TPM security chip can store the key in the non-volatile memory protected by the TPM controller. The hardware functions of a TPM include a number of features, including:
first, the key of the TPM security chip is randomly generated by hardware for encryption and decryption of the system to securely store and transfer confidential information. Because the operation is centralized in the TPM security chip, compared with the software generation of the key, the method can simultaneously improve the system performance and the encryption performance.
Secondly, the TPM security chip adopts a special algorithm to verify the credibility of software and hardware of the system. Any software and hardware changes of the computer are monitored, so that various software and hardware attacks are avoided.
Thirdly, the TPM security chip also provides and manages initialization functions, allowing legitimate users to enable or disable the chip, reinitialize the chip, and so on.
How to adapt the trusted platform module to different computers is a problem which needs to be solved urgently at present.
Disclosure of Invention
In view of the above problems, embodiments of the present invention are proposed to provide a trusted throttling module and a trusted throttling method that overcome the above problems or at least partially solve the above problems.
In a first aspect, an embodiment of the present invention provides a trusted adjusting module, where the trusted adjusting module at least includes a main control board, a key unit, an external connection unit, an interface adjusting unit, and a light emitting unit, where the key unit is connected to the main control board through the external connection unit, and the key unit is connected to the light emitting unit and the interface adjusting unit respectively;
the interface adjusting unit is used for determining different link connection modes according to different types of mainboard equipment;
and the light-emitting unit is used for lighting the display lamp when the type of the main board equipment is matched with the link connection mode of the interface adjusting unit.
Optionally, the interface adjusting unit includes at least a connection board and a jump cap, and the connection board includes a plurality of pins.
Optionally, the sixth pin of the key unit is connected to the TPM _ PWRDWN signal terminal of the main control board through a jump cap.
Optionally, when the jump cap is connected to the first pin and the second pin of the connection board, the sixth pin of the key unit is connected to a first end of a first resistor, a second end of the first resistor is connected to the second pin of the connection board, and the first pin of the connection board is connected to a 3.3V power supply terminal;
and if the jump cap is connected with the second pin and the third pin, the sixth pin of the key unit is connected with the first end of the first resistor, the second end of the first resistor is connected with the second pin of the connecting plate, and the third pin of the connecting plate is connected with the ground through the second resistor.
Optionally, the seventh pin of the key unit is connected with the TPM _ PWRDWN signal terminal of the main control board through a jump cap.
Optionally, when the jump cap is connected to the second pin and the third pin of the connection board, the seventh pin of the key unit is connected to the second pin of the connection board, and the third pin of the connection board is connected to the 3.3V power supply terminal through a third resistor;
and if the jump cap is connected with the first pin and the second pin of the connecting plate, the seventh pin of the key unit is connected with the second pin of the connecting plate, and the first pin of the connecting plate is connected with the ground through a fourth resistor.
Optionally, the key unit is an SLB 9665 tpm2.0 chip.
In a second aspect, an embodiment of the present invention provides a trusted adjustment method, which is applied to the trusted adjustment module in the first aspect, where the method includes:
under the condition that the trusted adjusting module is connected with the main control board equipment, verifying the integrity of the current bottom firmware;
if the current bottom firmware is complete, the bottom firmware sequentially verifies the integrity of the BIOS and the operating system;
by changing the connection mode of the hop cap, different keys are generated, and the application module is encrypted and decrypted.
Optionally, when the jumper cap is connected with the first pin and the second pin of the connection board, the pin of the trusted adjusting module is at a high level; and when the jump cap is connected with the second pin and the third pin, the pin of the credible adjusting module is at a low level.
Optionally, the encrypting and decrypting the application module by changing the connection manner of the hop cap to generate different keys includes:
when the version compatibility problem occurs, adjusting through a jump cap of the trusted adjusting module;
if the jump cap is connected with the second pin and the third pin, the trusted adjusting module is used for TPM2.0 encryption;
when the jump cap is connected with the first pin and the second pin of the connecting plate, the trusted adjusting module is used for TPM1.2 encryption.
In a third aspect, an embodiment of the present invention provides a trusted adjustment terminal, which includes the trusted adjustment apparatus described in the first aspect.
The embodiment of the invention has the following advantages:
the trusted adjusting module, the trusted adjusting method and the terminal provided by the embodiment of the invention at least comprise a main control board, a key unit, an external connection unit, an interface adjusting unit and a light-emitting unit, wherein the key unit is connected with the main control board through the external connection unit and is respectively connected with the light-emitting unit and the interface adjusting unit; the interface adjusting unit is used for determining different link connection modes according to different types of main board equipment; the light-emitting unit is used for lighting the display lamp when the type of the main board equipment is matched with the link connection mode of the interface adjusting unit, and when the main control boards are designed in different modes, the link connection mode of the credible adjusting module can be changed by changing the jump cap, so that the main control boards are suitable for different main control boards.
Drawings
FIG. 1 is a block diagram of an embodiment of a trusted reconciliation module according to an embodiment of the present invention;
FIG. 2 is a schematic diagram of the connection of an SLB 9665 TPM2.0 chip of the present invention;
FIG. 3 is a circuit schematic of the bus bar of the present invention;
FIG. 4 is a front view of the diving cap and pin header of the present invention;
FIG. 5 is a three-view illustration of the diving cap and pin header of the present invention;
fig. 6 is a perspective view of the diving cap and the pin header of the present invention.
Detailed Description
In order to make the aforementioned objects, features and advantages of the present invention comprehensible, embodiments accompanied with figures are described in further detail below.
An embodiment of the present invention provides a trusted adjusting module, which is adapted to different types of main control boards. Referring to fig. 1, a block diagram of a trusted adjusting module according to an embodiment of the present invention is shown, where the trusted adjusting module at least includes a main control board 103, a key unit 101, a connection external unit 104, an interface adjusting unit 102, and a light emitting unit 105, where the key unit 101 is connected to the main control board 103 through the connection external unit 104, and the key unit 101 is connected to the light emitting unit 105 and the interface adjusting unit 102 respectively;
the interface adjusting unit 102 is configured to determine different link connection modes according to different types of motherboard devices;
the light emitting unit 105 is configured to light up the display lamp when the type of the motherboard device matches the link connection mode of the interface adjusting unit.
The key unit 101 is used to generate a key and encrypt each application.
The light emitting unit may be an LED display lamp or other object that can emit light.
The main control board 103 is a main control board inside each computer.
Fig. 4 is a front view of the jumper cap and the pin header of the present invention, and as shown in fig. 4, alternatively, the interface adjusting unit includes at least a connection plate and the jumper cap, the connection plate including a plurality of pins. The jump cap is a device capable of selecting different positions to switch different states, for example, left and right in fig. 4. FIG. 5 is a three-dimensional view of the diving cap and pin header of the present invention; fig. 6 is a perspective view of the diving cap and the pin header of the present invention.
As shown in fig. 2-3, optionally, the sixth pin of the key unit is connected to the TPM _ PWRDWN signal terminal of the main control board through a jump cap.
Optionally, when the jumper cap is connected to the first pin and the second pin of the connection board, the sixth pin of the key unit is connected to the first end of the first resistor UR29, the second end of the first resistor is connected to the second pin of the connection board, and the first pin of the connection board is connected to the 3.3V power supply terminal through the resistor RL 53;
if the jump cap connects the second pin and the third pin, the sixth pin of the key unit is connected to the first end of the first resistor UR29, the second end of the first resistor UR29 is connected to the second pin of the connection board, and the third pin of the connection board is connected to ground through the second resistor RL 54.
Optionally, the seventh pin of the key unit is connected to the signal terminal of the main control board through a jump cap.
Optionally, when the jumper cap is connected with the second pin and the third pin of the connection board, the seventh pin of the key unit is connected with the second pin of the connection board, and the third pin of the connection board is connected with the 3.3V power supply end through a third resistor RL 51;
if the jump cap is connected with the first pin and the second pin of the connecting plate, the seventh pin of the key unit is connected with the second pin of the connecting plate, and the first pin of the connecting plate is connected with the ground through a fourth resistor RL 52.
Specifically, only one endorsement key of TPM1.2, namely EK, is pre-set in the chip by the manufacturer at the time of factory shipment. After the takeowner, an owner and a unique storage root key SRK can be generated, so that a storage system of the keys can be constructed.
In TPM2.0, EK belongs to privacy domain, there may be multiple, and different asymmetric algorithms may be supported; SRK belongs to a secure domain, and there may be multiple and supporting different algorithms. In fact, in all three control domains of TPM2.0, multiple keys and multiple algorithms are supported.
Optionally, the key unit is an SLB 9665 tpm2.0 chip.
Particularly, the trusted platform module can effectively protect the PC and prevent illegal user access. Through being connected with PCB mainboard TPM female head, check that confirming module and mainboard connection are accomplished after LED lights. The 6 th pin GPIO of the SLB 9665 TPM2.0 chip is connected with the TPM _ PWRDWN signal through a jump cap, the GPIO is high when the jump cap is 1-2 pins, otherwise, the GPIO is low when the jump cap is 2-3 pins, and the requirements are met through different design schemes of the mainboard. If the problem of version compatibility occurs, the problem can be adjusted by the 7 th pin external cap jump of the SLB 9665 TPM2.0 chip. TPM2.0 can be satisfied when jumping to 2-3 pins, and 1-2 pins can be adjusted to be downgraded to TPM1.2 when not. This module can select both on and off states in the BIOS (enter Security field to select Security chip, so that in the enabled/disabled state).
Specifically, the 6 th pin GPIO of the SLB 9665 TPM2.0 chip and the TPM _ PWRDWN signal are connected through a jump cap, the 1-2pin is pulled high externally, and the 1-2pin is pulled high because the signal is connected to +3.3VS when the 1-2pin is connected. 2-3pin is the external pull-down, because be connected to the ground for low, the GPIO also can change BIOS through the mainboard and accomplish to pull-up or pull-down, because different main control board states are different can not confirm the GPIO state, so can confirm TPM _ PWRDWN signal state (1-2 pin high/2-3 pin low) only through external hardware intervention control.
The embodiment of the invention provides a trusted adjusting method, which is applied to the trusted adjusting module and comprises the following steps:
under the condition that the trusted adjusting module is connected with the main control board equipment, verifying the integrity of the current bottom firmware;
if the current bottom firmware is complete, the bottom firmware sequentially verifies the integrity of a BIOS (Basic Input Output System) and an operating System;
by changing the connection mode of the hop cap, different keys are generated, and the application module is encrypted and decrypted.
Optionally, when the jump cap is connected with the first pin and the second pin of the connection board, the pin of the trusted adjusting module is at a high level; when the jump cap is connected with the second pin and the third pin, the pin of the credible adjusting module is at low level.
Optionally, the method of connecting the flip cap is changed to generate a different key, and the encrypting and decrypting the application module includes:
when the version compatibility problem occurs, adjusting through a jump cap of the trusted adjusting module;
if the jumping cap is connected with the second pin and the third pin, the trusted adjusting module is used for TPM2.0 encryption;
when the jump cap is connected with the first pin and the second pin of the connecting plate, the trusted adjusting module is used for TPM1.2 encryption.
Specifically, the trusted platform module firstly verifies the integrity of the current bottom firmware, and judges whether the bottom firmware, the mainboard and the external module work normally or not through the lighting of the LED and the like on the trusted platform module.
If the system is correct, normal system initialization is completed, then the integrity of the BIOS and the operating system is verified in sequence by the bottom firmware, and the verification of the integrity of the BIOS and the operating system is specifically carried out;
after BIOS sets up the interface, click "Advanced (Advanced mode)" and then click "SETTINGS" option on the left side, then choose "secure" option on the right side and then choose to enter "Trusted Computing" option, then set "secure Device Support" as "Enable" to save, verify whether the mainboard BIOS has TPM function.
If the operation system is correct, the operation system is normally operated, otherwise, the operation system is stopped. Various keys in the system are generated by utilizing an encryption module built in the TPM security chip, the application module is encrypted and decrypted, and a secure communication interface is provided upwards to ensure the security of the upper application module. Different pin pins are changed through the jump cap, and the effect that different platforms can be used is achieved.
The TPM _ PWRDWN signal (TPM _ PWRDWN) is processed differently for different platforms for the (6) th pin signal, in three different cases 1. No device 2 is connected, 3 is grounded through a resistor, and 3 is pulled up by a resistor. The three states can be realized through the jump cap, the jump cap is not suspended, 1-2 pins are pulled up, and 2-3 pins are grounded. There are 3 state options with different adaptations for different platforms.
The embodiment of the invention has the following advantages:
the trusted adjusting module, the trusted adjusting method and the terminal provided by the embodiment of the invention at least comprise a main control board, a key unit, an external connection unit, an interface adjusting unit and a light-emitting unit, wherein the key unit is connected with the main control board through the external connection unit and is respectively connected with the light-emitting unit and the interface adjusting unit; the interface adjusting unit is used for determining different link connection modes according to different types of mainboard equipment; the light-emitting unit is used for lighting the display lamp when the type of the main board equipment is matched with the link connection mode of the interface adjusting unit, and when the main control boards are designed in different modes, the link connection mode of the credible adjusting module can be changed by changing the jump cap, so that the main control boards are suitable for different main control boards.
The embodiments in the present specification are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other.
As will be appreciated by one of skill in the art, embodiments of the present invention may be provided as a method, apparatus, or computer program product. Accordingly, embodiments of the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, embodiments of the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
Embodiments of the present invention are described with reference to flowchart illustrations and/or block diagrams of methods, electronic devices (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing electronic device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing electronic device, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing electronic device to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing electronic device to cause a series of operational steps to be performed on the computer or other programmable electronic device to produce a computer implemented process such that the instructions which execute on the computer or other programmable electronic device provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While preferred embodiments of the present invention have been described, additional variations and modifications of these embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including the preferred embodiment and all changes and modifications that fall within the true scope of the embodiments of the present invention.
Finally, it should also be noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "include", "including" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article, or electronic device including a series of elements includes not only those elements but also other elements not explicitly listed or inherent to such process, method, article, or electronic device. Without further limitation, an element defined by the phrases "comprising a component of' 8230; \8230;" does not exclude the presence of additional like elements in the process, method, article, or electronic device in which the element is included.
The above details of a trusted adjusting module and a trusted adjusting method provided by the present invention are introduced, and a specific example is applied in the present document to explain the principle and the implementation of the present invention, and the description of the above embodiment is only used to help understand the method and the core idea of the present invention; meanwhile, for a person skilled in the art, according to the idea of the present invention, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present invention.
Claims (10)
1. A trusted adjusting module is characterized by at least comprising a main control board, a key unit, a connection external unit, an interface adjusting unit and a light-emitting unit, wherein the key unit is connected with the main control board through the connection external unit and is respectively connected with the light-emitting unit and the interface adjusting unit;
the interface adjusting unit is used for determining different link connection modes according to different types of mainboard equipment;
and the light-emitting unit is used for lighting the display lamp when the type of the main board equipment is matched with the link connection mode of the interface adjusting unit.
2. The trusted thunking module of claim 1, wherein the interface throttling unit includes at least a connection board and a jumper cap, the connection board including a plurality of pins.
3. The trusted adjusting module of claim 2, wherein the sixth pin of the key unit is connected to the TPM _ PWRDWN signal terminal of the main control board through a jump cap.
4. The trusted thunking module of claim 3, wherein when the jumper cap connects the first pin and the second pin of the connection board, the sixth pin of the key unit is connected to a first terminal of a first resistor, a second terminal of the first resistor is connected to the second pin of the connection board, and the first pin of the connection board is connected to a 3.3V power supply terminal;
and if the jump cap is connected with the second pin and the third pin, the sixth pin of the key unit is connected with the first end of the first resistor, the second end of the first resistor is connected with the second pin of the connecting plate, and the third pin of the connecting plate is connected with the ground through the second resistor.
5. The trusted adjustment module of claim 2, wherein a seventh pin of the key unit is connected to the TPM PWRDWN signal terminal of the main control board via a jumper cap.
6. The trusted adjustment module of claim 5,
when the jump cap is connected with the second pin and the third pin of the connecting plate, the seventh pin of the key unit is connected with the second pin of the connecting plate, and the third pin of the connecting plate is connected with a 3.3V power supply end through a third resistor;
and if the jump cap is connected with the first pin and the second pin of the connecting plate, the seventh pin of the key unit is connected with the second pin of the connecting plate, and the first pin of the connecting plate is connected with the ground through a fourth resistor.
7. A trusted adjustment method, applied to a trusted adjustment module according to any one of claims 1 to 6, the method comprising:
under the condition that the trusted adjusting module is connected with the main control board equipment, verifying the integrity of the current bottom firmware;
if the current bottom layer firmware is complete, the bottom layer firmware sequentially verifies the integrity of the BIOS and the operating system;
and generating different keys by changing the connection mode of the jump cap, and encrypting and decrypting the application module.
8. The method of claim 7, wherein when the jumper cap connects the first pin and the second pin of the connection board, the pin of the trusted regulating module is high; and when the jump cap is connected with the second pin and the third pin, the pin of the credible adjusting module is at a low level.
9. The method of claim 7, wherein encrypting and decrypting the application module by changing the connection mode of the flip cap to generate different keys comprises:
when the version compatibility problem occurs, adjusting through a jump cap of the trusted adjusting module;
if the jump cap is connected with the second pin and the third pin, the trusted adjusting module is used for TPM2.0 encryption;
when the jump cap is connected with the first pin and the second pin of the connecting plate, the trusted adjusting module is used for TPM1.2 encryption.
10. A trusted adjustment terminal, characterized in that it comprises a trusted adjustment unit according to any one of claims 1-6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211306973.9A CN115720139A (en) | 2022-10-25 | 2022-10-25 | Credible adjusting module, credible adjusting method and terminal |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211306973.9A CN115720139A (en) | 2022-10-25 | 2022-10-25 | Credible adjusting module, credible adjusting method and terminal |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN115720139A true CN115720139A (en) | 2023-02-28 |
Family
ID=85254337
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211306973.9A Pending CN115720139A (en) | 2022-10-25 | 2022-10-25 | Credible adjusting module, credible adjusting method and terminal |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115720139A (en) |
-
2022
- 2022-10-25 CN CN202211306973.9A patent/CN115720139A/en active Pending
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9742568B2 (en) | Trusted support processor authentication of host BIOS/UEFI | |
| US9602282B2 (en) | Secure software and hardware association technique | |
| US6907522B2 (en) | Use of hashing in a secure boot loader | |
| US8677144B2 (en) | Secure software and hardware association technique | |
| US9268971B2 (en) | Secure processor supporting multiple security functions | |
| US8898477B2 (en) | System and method for secure firmware update of a secure token having a flash memory controller and a smart card | |
| US8762714B2 (en) | Protecting against counterfeit electronics devices | |
| TW201807615A (en) | Device programming with system generation | |
| KR20130129170A (en) | Storage device and method for providing a partially-encrypted content file to a host device | |
| US20080072068A1 (en) | Methods and apparatuses for securing firmware image download and storage by distribution protection | |
| CN101968834A (en) | Encryption method and device for anti-copy plate of electronic product | |
| US20150095652A1 (en) | Encryption and decryption processing method, apparatus, and device | |
| JP2022536817A (en) | Secure verification of firmware | |
| US10256980B2 (en) | System and method for authentication for field replaceable units | |
| CN112955888A (en) | Protecting a group of nodes | |
| WO2023240866A1 (en) | Cipher card and root key protection method therefor, and computer readable storage medium | |
| CN103824005A (en) | Anti-copying system embedded with configurable IP core and anti-copying method | |
| CN105512574A (en) | Anti-clone encryption method and device for electronic product | |
| CN115720139A (en) | Credible adjusting module, credible adjusting method and terminal | |
| CN111125791B (en) | Memory data encryption method and device, CPU chip and server | |
| US9584327B2 (en) | System and method for authentication for transceivers | |
| KR101885146B1 (en) | Method and apparatus for protecting an application | |
| CN112131612B (en) | CF card data tamper-proof method, device, equipment and medium | |
| US20240129127A1 (en) | Systems and methods for dual hash rolling patch secure authentication | |
| US20240171392A1 (en) | Systems and methods for digital retirement of information handling systems |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |