CN115794240A - A CPLD-Based Computer BIOS Power-on Measuring Method - Google Patents

Abstract

The invention discloses a computer BIOS startup measurement method based on CPLD, which relates to the technical field of computer safety; according to the startup signal of the computer, the intercommunication mode between the BIOS and the CPLD is selected through the CPLD chip control chip of the mainboard, and the internal program of the BIOS is actively read According to the key sensitive field in the key sensitive field, the MD5 value is calculated according to the key sensitive field, and whether the MD5 value obtained by the verification calculation is consistent with the MD5 value of the BIOS stored in the CPLD chip. The intercommunication mode of the CPU, and control the power-on and start-up of the main board, otherwise, the computer alarm is controlled by the CPLD chip.

Description

A CPLD-Based Computer BIOS Power-on Measuring Method

technical field

The invention discloses a method, relates to the technical field of computer security, in particular to a CPLD-based computer BIOS startup measurement method.

Background technique

With the continuous development of information technology, the problem of information security has become increasingly prominent. How to ensure the security of information systems has become the focus of attention in the society. At present, the demand for data protection on computers is becoming more and more extensive, and the importance of BIOS as the basic input and output system of computer equipment is self-evident. There is already a method on the market to actively measure the BIOS through the PCIE SOC card and the onboard TCM chip, but its cost is high, and its implementation and use are relatively complicated.

Contents of the invention

Aiming at the problems in the prior art, the invention provides a CPLD-based computer BIOS start-up measurement method, which realizes simple and effective protection of BIOS security.

The concrete scheme that the present invention proposes is:

The invention provides a CPLD-based computer BIOS startup measurement method. According to the startup signal of the computer, the intercommunication mode between the BIOS and the CPLD is selected through the CPLD chip to control the one-of-two chip on the motherboard, and the key sensitive fields in the BIOS internal program are actively read. Calculate the MD5 value according to the key sensitive field,

Verify that the calculated MD5 value is consistent with the MD5 value of the BIOS stored in the CPLD chip. If it is consistent, the CPLD chip controls the chip to switch to the intercommunication mode between the BIOS and the CPU, and controls the main board to be powered on. Otherwise, it is controlled by the CPLD chip. Computer alarm.

Further, in the described a kind of CPLD-based computer BIOS start-up measurement method, the MD5 value that verification calculation obtains is consistent with the MD5 value of the BIOS stored in the CPLD chip, and then the intercommunication between the BIOS and the CPU is transferred by the control of the CPLD chip to select one of the chips Mode, control the CPU power-on through the CPLD chip, read the BIOS through the CPU and start the computer normally.

Further, in the described a kind of CPLD-based computer BIOS start-up measurement method, the MD5 value that verification calculation obtains is inconsistent with the MD5 value of the BIOS stored in the CPLD chip, then stop the CPU power-on by the CPLD chip, and control the buzzer to buzz alarm.

Further, according to the BIOS of the computer in the described a kind of CPLD-based computer BIOS start-up measurement method, the MD5 value written into the BIOS is solidified in the CPLD chip.

The present invention also provides a CPLD-based computer BIOS startup measurement system, including a control module, a calculation module and a measurement module,

According to the boot signal of the computer, the control module selects the intercommunication mode between BIOS and CPLD through the CPLD chip to control the one-of-two chip of the main board, actively reads the key sensitive fields in the BIOS internal program, and the calculation module calculates the MD5 value according to the key sensitive fields ,

The measurement module verifies whether the calculated MD5 value is consistent with the MD5 value of the BIOS stored in the CPLD chip. If it is consistent, the control module controls the one-of-two chip to switch to the intercommunication mode between the BIOS and the CPU through the CPLD chip, and controls the main board to be powered on, otherwise The control module controls the computer alarm through the CPLD chip.

Further, in the described a kind of CPLD-based computer BIOS start-up measurement system, the MD5 value obtained by the measurement module verification calculation is consistent with the MD5 value of the BIOS stored in the CPLD chip, and then the control module is controlled by the CPLD chip to select one chip and change to BIOS In the intercommunication mode with the CPU, the CPU is powered on through the CPLD chip, and the BIOS is read through the CPU to start the computer normally.

Further, in the described a kind of CPLD-based computer BIOS startup measurement system, the MD5 value obtained by the measurement module verification calculation is inconsistent with the MD5 value of the BIOS stored in the CPLD chip, then the control module stops the CPU power-on through the CPLD chip, and controls the bee Buzzer beeps for alarm.

The present invention also provides a computer-readable medium, and computer instructions are stored on the computer-readable medium, and when the computer instructions are executed by a processor, the processor is executed to perform the CPLD-based computer BIOS startup measurement method.

The benefits of the present invention are:

The present invention provides a CPLD-based computer BIOS start-up measurement method, which can use the CPLD chip originally used to control power-on on the computer motherboard to realize the measurement function of the key sensitive information of the motherboard BIOS, ensuring that the key sensitive information of the BIOS on the computer is not It has been tampered with and has good promotion and use value in the field of confidentiality.

Description of drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are For some embodiments of the present invention, those skilled in the art can also obtain other drawings based on these drawings without creative work.

Fig. 1 is a schematic flow chart of the method of the present invention.

Fig. 2 is a schematic diagram of the layout of the mainboard of the computer involved in the present invention.

Detailed ways

The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments, so that those skilled in the art can better understand the present invention and implement it, but the examples given are not intended to limit the present invention.

The invention provides a CPLD-based computer BIOS startup measurement method. According to the startup signal of the computer, the intercommunication mode between the BIOS and the CPLD is selected through the CPLD chip to control the one-of-two chip on the motherboard, and the key sensitive fields in the BIOS internal program are actively read. Calculate the MD5 value according to the key sensitive field,

Verify that the calculated MD5 value is consistent with the MD5 value of the BIOS stored in the CPLD chip. If it is consistent, the CPLD chip controls the chip to switch to the intercommunication mode between the BIOS and the CPU, and controls the main board to be powered on. Otherwise, it is controlled by the CPLD chip. Computer alarm.

The method of the invention adopts the CPLD chip to realize the measurement of the key sensitive information of the BIOS of the motherboard, so as to ensure that the key sensitive information of the BIOS on the computer is not tampered with.

In specific applications, in some embodiments of the inventive method, according to the boot signal of the computer, the intercommunication mode between the BIOS and the CPLD is selected by the two-choice chip of the CPLD chip control motherboard, and the key sensitive field in the BIOS internal program is actively read, Calculate the MD5 value according to the key sensitive field,

Verify that the calculated MD5 value is consistent with the MD5 value of the BIOS stored in the CPLD chip. According to the computer's BIOS, the MD5 value written into the BIOS is solidified in the CPLD chip,

If the MD5 value obtained by the verification calculation is consistent with the MD5 value of the BIOS stored in the CPLD chip, then the CPLD chip controls the one-of-two chip to switch to the intercommunication mode between the BIOS and the CPU, controls the power-on of the CPU through the CPLD chip, and reads the BIOS through the CPU and start the computer normally.

If the MD5 value obtained by the verification calculation is inconsistent with the MD5 value of the BIOS stored in the CPLD chip, stop the CPU from being powered on through the CPLD chip, and control the buzzer to sound an alarm.

The present invention also provides a CPLD-based computer BIOS startup measurement system, including a control module, a calculation module and a measurement module,

According to the boot signal of the computer, the control module selects the intercommunication mode between BIOS and CPLD through the CPLD chip to control the one-of-two chip of the main board, actively reads the key sensitive fields in the BIOS internal program, and the calculation module calculates the MD5 value according to the key sensitive fields ,

The measurement module verifies whether the calculated MD5 value is consistent with the MD5 value of the BIOS stored in the CPLD chip. If it is consistent, the control module controls the one-of-two chip to switch to the intercommunication mode between the BIOS and the CPU through the CPLD chip, and controls the main board to be powered on, otherwise The control module controls the computer alarm through the CPLD chip.

The information interaction and execution process among the various modules in the above system are based on the same concept as the method embodiment of the present invention, and the specific content can refer to the description in the method embodiment of the present invention, and will not be repeated here.

Similarly, the system of the present invention can utilize the CPLD chip originally used to control power-on on the computer main board to realize the measurement function of the key sensitive information of the main board BIOS, so as to ensure that the key sensitive information of the BIOS on the computer is not tampered with, and has a good performance in the field of security. promotional use value.

The present invention also provides a computer-readable medium, and computer instructions are stored on the computer-readable medium, and when the computer instructions are executed by a processor, the processor is executed to perform the CPLD-based computer BIOS startup measurement method. Specifically, a system or device equipped with a storage medium may be provided, on which a software program code for realizing the functions of any of the above embodiments is stored, and the computer (or CPU or MPU of the system or device) ) to read and execute the program code stored in the storage medium.

In this case, the program code itself read from the storage medium can realize the function of any one of the above-mentioned embodiments, so the program code and the storage medium storing the program code constitute a part of the present invention.

Examples of storage media for providing program code include floppy disks, hard disks, magneto-optical disks, optical disks (such as CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-RW, DVD+RW), Tape, non-volatile memory card, and ROM. Alternatively, the program code can be downloaded from a server computer via a communication network.

In addition, it should be clear that not only by executing the program code read by the computer, but also by making the operating system on the computer complete part or all of the actual operations through instructions based on the program code, so as to realize the function of any one of the embodiments.

In addition, it can be understood that the program code read from the storage medium is written into the memory provided in the expansion board inserted into the computer or written into the memory provided in the expansion unit connected to the computer, and then based on the program code The instruction causes the CPU installed on the expansion board or the expansion unit to perform some or all of the actual operations, so as to realize the functions of any one of the above-mentioned embodiments.

It should be noted that not all steps and modules in the above processes and system structures are necessary, and some steps or modules can be ignored according to actual needs. The execution order of each step is not fixed and can be adjusted as needed. The system structures described in the above embodiments may be physical structures or logical structures, that is, some modules may be realized by the same physical entity, or some modules may be realized by multiple physical entities, or may be realized by multiple Certain components in individual devices are implemented together.

The above-mentioned embodiments are only preferred embodiments for fully illustrating the present invention, and the protection scope of the present invention is not limited thereto. Equivalent substitutions or transformations made by those skilled in the art on the basis of the present invention are all within the protection scope of the present invention. The protection scope of the present invention shall be determined by the claims.

Claims (8)

1. A BIOS starting-up measuring method for computer based on CPLD is characterized by that according to the starting-up signal of computer, the alternative chip of CPLD chip control main board can be used to select the intercommunicating mode of BIOS and CPLD, and can actively read the key sensitive field in BIOS internal program, and according to the described key sensitive field can make MD5 value calculation,

and verifying whether the MD5 value obtained by calculation is consistent with the MD5 value of the BIOS stored in the CPLD chip, if so, controlling the alternative chip to be converted into an intercommunication mode of the BIOS and the CPU through the CPLD chip, and controlling the mainboard to be powered on and started, otherwise, controlling the computer to alarm through the CPLD chip.

2. The method according to claim 1, wherein the verification shows that the MD5 value obtained by the calculation is consistent with the MD5 value of the BIOS stored in the CPLD chip, the CPLD chip controls the alternative chip to switch to the intercommunication mode between the BIOS and the CPU, the CPLD chip controls the CPU to be powered on, and the CPU reads the BIOS and normally starts the computer.

3. The computer BIOS power-on measurement method based on CPLD of claim 1, wherein if the MD5 value obtained by verification calculation is inconsistent with the MD5 value of the BIOS stored in the CPLD chip, the CPU is stopped to power on by the CPLD chip, and the buzzer is controlled to alarm.

4. The method according to claim 1, wherein the MD5 value written into the BIOS is fixed in the CPLD chip according to the BIOS of the computer.

5. A computer BIOS starting measurement system based on CPLD is characterized by comprising a control module, a calculation module and a measurement module,

the control module selects the intercommunication mode of BIOS and CPLD through the alternative chip of CPLD chip control mainboard according to the startup signal of computer, actively reads the key sensitive field in BIOS internal program, the calculation module calculates MD5 value according to the key sensitive field,

the measuring module verifies whether the MD5 value obtained by calculation is consistent with the MD5 value of the BIOS stored in the CPLD chip, if so, the control module controls the alternative chip to be converted into the intercommunication mode of the BIOS and the CPU through the CPLD chip and controls the mainboard to be powered on and started, otherwise, the control module controls the computer to alarm through the CPLD chip.

6. The computer BIOS boot measurement system based on CPLD according to claim 5, wherein the measurement module verifies that the MD5 value obtained by calculation is consistent with the MD5 value of BIOS stored in the CPLD chip, the control module controls the alternative chip to switch to the intercommunication mode of BIOS and CPU through the CPLD chip, controls the CPU to be powered on through the CPLD chip, reads BIOS through the CPU and normally starts the computer.

7. The computer BIOS startup measurement system based on CPLD according to claim 5, wherein the measurement module verifies that the MD5 value obtained by calculation is inconsistent with the MD5 value of BIOS stored in the CPLD chip, and the control module stops CPU power-on through the CPLD chip and controls buzzer alarm.

8. Computer readable medium characterized in that said computer readable medium has stored thereon computer instructions which, when executed by a processor, cause said processor to execute a CPLD based computer BIOS boot measurement method as claimed in any one of claims 1 to 4.

Images