TW201025132A - BIOS for self-verifying option ROM and the verifying method thereof - Google Patents

BIOS for self-verifying option ROM and the verifying method thereof Download PDF

Info

Publication number
TW201025132A
TW201025132A TW97149140A TW97149140A TW201025132A TW 201025132 A TW201025132 A TW 201025132A TW 97149140 A TW97149140 A TW 97149140A TW 97149140 A TW97149140 A TW 97149140A TW 201025132 A TW201025132 A TW 201025132A
Authority
TW
Taiwan
Prior art keywords
memory
read
firmware
basic input
self
Prior art date
Application number
TW97149140A
Other languages
Chinese (zh)
Other versions
TWI467484B (en
Inventor
Wen-Woei Jih
Original Assignee
Universal Scient Ind Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Universal Scient Ind Co Ltd filed Critical Universal Scient Ind Co Ltd
Priority to TW97149140A priority Critical patent/TWI467484B/en
Publication of TW201025132A publication Critical patent/TW201025132A/en
Application granted granted Critical
Publication of TWI467484B publication Critical patent/TWI467484B/en

Links

Abstract

A BIOS for self-verifying option ROM and the verifying method thereof is provided, wherein the BIOS is loaded to a main memory for booting. The BIOS includes a device firmware block recording a practical device firmware, a verification code block recording a verification code, and a booting block for boot loading process. The method comprises steps of: the BIOS booting up; reading a verification code recording in the BIOS; calculating the checksum of a practical device firmware mapping to an option ROM of a main memory by an algorithm; comparing the checksum with the verification code to see if they are identical. The boot loading process continues if the checksum is identical to the verification code. Thus the validity of the device firmware mapping to the option ROM can be confirmed.

Description

201025132 六、發明說明: 【發明所屬之技術領域】 本發明係關於一種自我驗證選用唯讀記憶體之基本 輸出入系統及其驗證方法’尤其涉及一種檢查選用唯讀記 憶體之資料完整性的基本輸出入系統及其驗證方法。 【先前技術】201025132 VI. Description of the Invention: [Technical Field] The present invention relates to a basic input-output system for self-validation using read-only memory and a verification method thereof, in particular, a basic method for checking the data integrity of a read-only memory Input and output system and its verification method. [Prior Art]

一直以來,基本輸出入系統負責在電腦系統開機過程 中’進行開機自我測試(post)、初始化基本硬體設備及 載入作業系統等準備工作,然而隨著基本輸出入系統製造 商與各項硬體設備晶片製造商的分工越來越精細,主機板 上的基本輸出入系統製造商經常接收由不同的硬體設備製 造商所提供的特定硬體設備的韌體’也就是開機時映射 (Mapping )在主記憶體中的選用唯讀記憶體(〇pti〇n R〇M, OPROM)的資料,一併嵌入在基本輸出入系統内,使得基 本輸出入系統在電腦系統進入作業系統之前,能進行更多 的前置偵測、設定工作,對於整個電腦系統的研發提供了 實質的幫助。 ~ 但由於各製造商開發時程快慢不一,基本輸出入系統 製造^經常遇到接收太多不同設備、不同版本的硬體設備 轫體貧料’版本控管不易,可能發生記錄上係以第一版 韌體與基本輸出入系統整合,但 與基本輸出入系統整人,盡4 第一版本靭體 利載入或讀取正確的㈣致,造成開機時無法順 m 7早刃體對硬體設備進行設置。 在二的網;常將所開獅體更新槽案放置 下载,亦經常發生有使用者下戴 201025132 並修改檔案内容後,再度放置在公開網頁上,讓其他使用 者下載到被篡改過後的錯誤檔案,以錯誤檔案安裝到電腦 系統後,不但未能提升硬體設備的運作效能反而造成無 法開機、甚至硬體損毁的情形。All along, the basic input and output system is responsible for the preparation of the boot self-test (post), initialization of basic hardware devices and loading of the operating system during the booting process of the computer system, but with the basic output into the system manufacturer and various hard The division of labor for bulk device chip manufacturers is getting more and more detailed, and the basic input and output system manufacturers on the motherboard often receive the firmware of the specific hardware devices provided by different hardware device manufacturers, that is, the mapping at boot time. The data of the selected read-only memory (〇pti〇n R〇M, OPROM) in the main memory is embedded in the basic input and output system, so that the basic input and output system can be before the computer system enters the operating system. Carrying out more pre-detection and setting work has provided substantial help for the development of the entire computer system. ~ However, due to the different development schedules of various manufacturers, the basic input and output system manufacturing ^ often encounters receiving too many different devices, different versions of hardware devices, poor body materials, version control is not easy, may occur on the record The first version of the firmware is integrated with the basic input and output system, but with the basic input and output system, the first version of the firmware is loaded or read correctly (four), resulting in the failure to follow the m 7 early blade pair Hardware devices are set up. In the second network; often open the lion body update slot case download, it is also common for users to wear 201025132 and modify the file content, and then placed on the public page again, let other users download the error after being tampered with After the file was installed in the computer system with the wrong file, it not only failed to improve the operating efficiency of the hardware device, but also caused the situation that it could not be turned on or even damaged.

鲁 為了避免產生上述版本不一致、或韌體檔案被更改, 而造成無法順利開機、降低系統穩定性的問題,應設計一 種可認證觀唯讀記憶體正雜的手段,雜電腦系統開 機時得與正確的硬體設備韌體運作。 【發明内容】 本?明之目的’係為了提供―種自我驗證選用唯讀記 基轉出心統及其驗财法,解決制唯讀記憶 二二[基本輸出人系統整合時控管不易的問題,使選 ^讀雜體之㈣在__可麵赌,以確認其完 種自:二=的,根據本發明的-種方案,提供- 陶區::驗=;執行開機,其中包括:-裝 區塊記錄一應用理區塊,裝置韋刃體 Γ記憶體的選用准讀記憶:機時會映射 =石馬’開機管理區塊在_時以 法=則記錄- 區塊的應用裝置_進行計算:^映射到選用 並且項取該驗•與校驗值進行比對 生-校驗值, =同時,繼續執行開機。其中的驗係與驗證碼 對一初始裝置拿刀體進行計算所產生。 相同的演算法 201025132 此外,為了達成上述目的,根據本發明的—種方案, 再提供-種基本^人㈣自錢證制唯讀記憶體方 会。玄基本輸出入系統載入到__主記憶體以執行開,_ 括下列步驟.首先讀取記錄在該基本輸出人系統的-驗證 碼,再根據-演算&計算映射到該主記憶體之—選梦 用㈣體,以產生一校驗值;比對驗: ’、、、和技無值’判斯讀驗證碼與該校驗值是否相In order to avoid the inconsistency of the above versions, or the firmware files being changed, the problem that the system cannot be successfully booted and the stability of the system is reduced, a method for authenticating the memory of the read-only memory should be designed. The correct hardware device firmware works. [Summary of the Invention] The purpose of the present invention is to provide a kind of self-validation and select the only reading base to transfer the mind system and its wealth verification method, and to solve the problem of the system of reading only memory. (4) in the __ can be gambling in order to confirm that it is finished from: two =, according to the invention - provide a program - Tao District:: test =; perform boot, which includes: - Install block record, apply the block, install the device, read the memory, select the read memory: the machine will map = Shima 'boot management block in _ time = record - block application device _ Perform calculation: ^ Map to selection and item take the test • Compare with the check value - check value, = At the same time, continue to boot. The test system and verification code are generated by calculating the initial body of the tool body. The same algorithm 201025132 In addition, in order to achieve the above object, according to the present invention, a basic memory (only) self-money certificate read-only memory is provided. The basic input and output system is loaded into the __ main memory to perform the opening, and the following steps are performed. First, the verification code recorded in the basic output system is read, and then the calculation is mapped to the main memory according to the -calculation & - select the dream (four) body to produce a check value; compare test: ',,, and skill no value' judgment read code and whether the check value is

鲁 =繼續執行開機程序。其中的驗證碼係對於一初= 置初體’以相同的續算法計算所產生。 發明的功效’係可提供—種簡易而有效的方式,控 ::本輸出入系統中所整合的各種裝置韌體版本,並且: 朝體巾的參數遭篡改後造成硬體設備損壞 =護整合性基本知人祕的穩定性具有實f而重要^ jii, ° 【實施方式】 本發明係提供—種自我驗證選用唯讀記憶體之基本輸 =入糸統及其驗證方法,在基本輸m統執行開機作業 :驗證顧唯讀記憶體的_完整性,以達龍管勃體資 r ’防止祕無法開機或硬體損毁的效果。為了提供更詳 盡的說明與解釋’以下將配合示意圖及流程圖進行解說°, Μ便更為明確而清楚地揭露本發明所使用的技術及手段。 第-圖係為本發明所提供的一種自我驗證選用唯讀記 讀之基本輸出人系統實_之料結構㈣圖,本實施 =電«統啟動時的驗證為例,其中,基本輸出 10中包括-開機管理區塊搬、—驗證 6 201025132 =刃虹區塊1〇6,主記憶體2()中包括—選用唯讀記憶區塊 的各塊1〇2用於執行開機到載入作業系統之間 的各項則置作業;驗證碼區塊 Ϊ:區ΐ:二中記錄一應用巢置韋讀:當電腦系統電源啟 ==入統10會解壓縮到主記憶體20上執行 中真Ah 中的應用裝置勒體係映射到主記憶體20 中。為存放各種裝置之韋刀體的選用唯讀記憶區塊搬當 為^在應用裝置㈣開始執行與對應裝置的溝通作業 2其證應用裝置_資料的正確和完整性,以避 統Μ製造商研發、整合的過程中,散入 ;置議;:=本而,下載被⑽ 程序完成前,執行對映二會在開機自我測試 用裝餘體的驗證。】選用唯喊憶區塊202中的應 開機管理區塊102中 ⑽中所記錄的-驗證碼,此=^會讀取驗證碼區塊 基本輸出入系統10時,即一係可由製造商在製作 =_一 :上:== 唯讀:主記憶體2。的選用 用裝置在選时從m 取該應用裴置韌體的資 ο起始位址開始讀 、 且以—校驗和演算法 201025132 (Checksum Algorithm)計算應用裝置韌體資料,產生一 校驗值。以影像控制裝置的韌體(Video BIOS)資料例如: 顯示卡的韌體(VGA Option ROM)為例,由於其發展時 間較早’各製造商開發的標準較為統一,因此大部分顯示 卡韌體在選用唯讀記憶區塊202的位置都從記憶區段 C〇〇〇:〇〇〇〇開始(同時也是主記憶體2〇保留給選用唯讀記 憶區塊202的起始位置),韌體資料長度為65536位元組Lu = continue to execute the boot process. The verification code is generated for the same initial algorithm calculation for the same initial. The efficacy of the invention 'is available in a simple and effective way, control:: the output of the device into the system integrated version of the firmware, and: the body parameters of the body towel have been tampered to cause damage to the hardware equipment = protection integration The stability of the basic knowledge of human nature has a real f and is important ^ jii, ° [Embodiment] The present invention provides a self-validation selection of the basic input of the read-only memory and its verification method, in the basic system Perform the boot operation: verify the _ integrity of the memory of the read-only memory, to prevent the secret from being able to boot or hard-damage. In order to provide a more detailed description and explanation, the following description of the accompanying drawings and FIG. The first picture is a self-validation selected by the invention for the basic output system of the read-only reading system. (4) Figure, this implementation = the verification of the electricity system startup, for example, the basic output 10 Including - boot management block move, - verification 6 201025132 = blade block 1 〇 6, main memory 2 () includes - select each block of read-only memory block 1 〇 2 for boot-to-load operation The items between the systems are set to work; the verification code block Ϊ: area ΐ: the second record of an application nested Wei read: when the computer system power supply == system 10 will be decompressed to the main memory 20 execution The application device system in the real Ah is mapped to the main memory 20. In order to store the various types of devices, the selection of the read-only memory block is carried out as the application device (4) to start the communication with the corresponding device 2 the correctness and integrity of the information application device to avoid the manufacturer In the process of R&D and integration, it is arbitrarily discussed;:=This is the download, and the download is completed by (10) before the completion of the program, and the verification of the self-testing package is performed. 】Select the verification code recorded in (10) of the boot management block 102 in the block only 202, which will read the verification code block basic input and output into the system 10, that is, the system can be Production =_一:上:== Read only: main memory 2. The selection device starts to read from the start address of the application firmware of the application firmware at the time of selection, and calculates the firmware information of the application device by using the checksum algorithm 201025132 (Checksum Algorithm) to generate a checksum. value. For example, the video BIOS information of the video control device (such as the VGA Option ROM) is an example. Since the development time is earlier, the standards developed by various manufacturers are relatively uniform, so most of the display card firmware is The position where the read-only memory block 202 is selected starts from the memory segment C〇〇〇:〇〇〇〇 (also the main memory 2〇 is reserved for the start position of the selected read-only memory block 202), the firmware The data length is 65536 bytes.

(bytes)。開機管理區塊1〇2的開機程式即從(:000:0000 處開始讀取65536位元組長度的顯示卡韌體資料,根據一 種校驗和演算方法,計算出此韌體資料的校驗值。 驗證碼區塊104所記錄的驗證碼,係以同一種校驗和 肩异法,對製造商所欲整合在基本輸出入系統1〇的初始裝 f韌體進行計算所得,係可由初始裝置韌體的製造商提供 、’I基本輸出入系統10製造商、或由基本輸出入系統1〇製 垃商在整合初始裝置韌體之前運用校驗軟體計算,並且將 戶将知的驗證碼’例如··刑4,記錄到一個唯讀的驗證碼 區塊104當中,作為比對的基準、並且避免被修改。 埘汁鼻所產生的校驗值與讀取的驗證碼互相比對,判 2校驗值是否與驗證碼相同,若兩者相同,即代表载入到 =唯讀記憶區塊搬的應用裝置勃體,與原本應與基本 别出入系統1G2整合的初始裝置勒體版本相同、内容也相 機程式確認之後,即可繼續進行開機的程序,例如 床:完成其他關機自我測試,*不需再擔心接下來 2 ’交由應用裝置#刃體對該裝置進行初始化時, 版本或内容不符而無法開機的問題。 曰 但若校驗值與驗證碼輯之後,簡兩者並不相同 201025132 就基本輸出入系統ίο製造商在測試線的角度而言,代表其 所欲整合的初始裝置韌體版本與實際上嵌入基本輸出入系 統10的應用裝置韌體版本不一致;就使用者的角度而言, 代表其下載安裝的更新檔案内容可能是經過駭客篡改的版 本,造成無法通過驗證。此時若繼續允許電腦系統開機, 極有可能產生錯誤,例如應用裝置韌體無法正常與裝置連 線運作,或甚至造成硬體裝置的損壞,因此開機管理區塊 102之開機程式即發出一警示通知,通知製造商或使用者 處理裝置韌體不一致的問題,或是發出警示通知後直接停 止開機,將產生錯誤和損壞的風險降到最低。 上述的初始裝置韌體、及映射到選用唯讀記憶區塊 202中的應用裝置韌體,除了影像控制裝置的韌體之外, 也可能係為網路裝置韌體(LANOptionROM)、週邊控制 介面裝置韌體(PCI Option ROM)等。基本輸出入系統10 中所欲整合的裝置韌體也可能同時包括兩種以上,則在驗 證碼區塊104中分別記錄不同初始裝置韌體的驗證碼、裝 置韌體區塊106中分別記錄不同的應用裝置韌體,待載入 選用唯讀記憶區塊202後,開機管理區塊102的開機程式 再分別根據計算出驗證碼的相同演算法計算出校驗值,分 別進行比對和判斷,以確保各種整合在基本輸出入系統10 的應用裝置韌體資料皆可正常提供服務。 第二圖係為本發明所提供一種基本輸出入系統自我驗 證選用唯讀記憶體方法實施例之簡略流程圖,本實施例之 基本輸出入系統10會在電腦系統開機時解壓縮載入到一 主記憶體20執行開機程序。首先,當電腦系統開啟電源 後,基本輸出入系統10開始執行開機程序(S301),而基 201025132(bytes). The booting program of the boot management block 1〇2 reads the firmware of the display card of 65536 bytes from (:000:0000), and calculates the firmware data according to a checksum calculation method. The verification code recorded by the verification code block 104 is calculated by the same checksum shoulder method, and is calculated by the manufacturer to integrate the initial firmware of the basic input and output system. The manufacturer of the device firmware provides the 'I basic output system 10 manufacturer, or the basic output system 1 〇 垃 在 运用 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合 整合' For example, Criminal 4, recorded in a read-only verification code block 104 as a benchmark for comparison, and avoiding modification. The check value generated by the juice nose is compared with the read verification code. It is judged whether the 2 check value is the same as the verification code. If the two are the same, it means that the application device loaded into the = read-only memory block is the original device version that should be integrated with the basic access system 1G2. Same, content, camera After the confirmation, you can continue the boot process, such as bed: complete other shutdown self-test, * no need to worry about the next 2 'to the application device # blade body to initialize the device, the version or content does not match The problem of booting up. 曰 But if the check value and the verification code are compiled, the two are not the same. 201025132 Basic input and output system ίο The manufacturer represents the initial device firmware version that they want to integrate from the perspective of the test line. It is inconsistent with the firmware version of the application device that is actually embedded in the basic input/output system 10; from the user's point of view, the updated file content that is downloaded and installed on behalf of the user may be a version that has been tampered with by the hacker, and cannot be verified. Continue to allow the computer system to boot, which is highly likely to cause errors. For example, the application device firmware cannot be properly connected to the device, or even cause damage to the hardware device. Therefore, the booting program of the boot management block 102 issues a warning notice to notify The manufacturer or user handles the inconsistency of the device firmware or directly stops after issuing a warning notice. The risk of errors and damage is minimized. The initial device firmware described above, and the firmware of the application device mapped to the optional read-only memory block 202, may be in addition to the firmware of the image control device. It is a network device firmware (LANOptionROM), a peripheral control interface device firmware (PCI Option ROM), etc. The device firmware to be integrated in the basic input/output system 10 may also include more than two types at the same time, in the verification code block. In the 104, the verification code of the different initial device firmware is recorded, and the firmware of the application device is recorded in the device firmware block 106. After the selected read-only memory block 202 is loaded, the booting process of the boot management block 102 is performed. The check values are calculated according to the same algorithm for calculating the verification code, and the comparison and the judgment are respectively performed to ensure that the firmware of the application device integrated in the basic input/output system 10 can be normally provided. The second figure is a simplified flow chart of a method for selecting a read-only memory method for self-verification of a basic input-in system, and the basic input-output system 10 of the embodiment is decompressed and loaded into a computer system when booting. The main memory 20 executes a boot process. First, when the computer system is powered on, the basic input/output system 10 starts the boot process (S301), and the base 201025132

# 本輸出入系統U)中的開機管理區塊1〇2的 驗證碼區塊104中的驗證碼(S303 );接4么严式^ 5買取 2〇中的選用唯讀記憶區塊2〇2讀取應用裝1:住主記憶體 並以-演算法計算該應用裝錄體㈣資料’ (S305 );最後,當輯出該校驗值與該驗證^目·^= 機管理區塊腿的程式即判定應用I置勒體的版本及内ς 無誤,而繼續執行開機程序(S307)。本實施例中所述的驗 證碼,係與計算校驗值採用相同的演算法,對所欲整合在 基本輸出入系統10中的初始裝置韌體計算而得,並於基本 輸出入系統10整合各項裝置韌體時,一併記錄在一唯讀的 驗證碼區塊104,以避免該驗證碼被修改。 雖然第二圖僅係對一種應用裝置韌體的驗證為例,但 如同第一圖所示實施例的說明中所述,初始裝置韌體和可 映射到選用唯讀§己憶區塊202的應用裝置拿刃體不只一種, 更可包括網路裝置或週邊控制介面裝置等韌體,若有雨種 以上的裝置韌體需經過驗證,則可重複執行步驟s3〇3到 S305’依序將整合在基本輸出入系統1〇中的應用裝置韌體 一:驗證比對,直到從裝置韌體區塊106載入選用唯讀記 隐區塊202中的所有應用裝置韌體都經過驗證無誤後,再 繼績執行開機程序(S307)。 曰戶為了更具體說明上述的驗證流程,接下來請參閱第三 ^所不之實施例說明’第三圖係為本發明所提供一種基本 :入系統自我驗證選用唯讀記憶體方法實施例之詳細流 λ貫施例係以基本輸出入系統ίο中整合的影像控制 靭體為例說明:首先,啟動電源以驅動基本輸出入系 、、、(S401)’基本輸出入系統1〇自行解壓縮並載入主記 10 201025132 執T機程序(S4〇3);接著,基本輸出入系 ,V二丁汗機自我測試(S405),並在自我測試程序 t,先續紗證,塊⑽所記_影像 驗證碼(S407 ) ; a —+丄 w衣且手刀to〜 塊加,開始㈣ 容,並以-校驗和_ 位置讀取韋刃體内#本本入入入系的系统的验证的管理的块块1的 verification code block 104 in the verification code block (S303); 4 严严^^5 buy 2 选用 selected readable memory block 2〇 2 Read the application package 1: the main memory and calculate the application (4) data by the algorithm (S305); finally, when the verification value is compiled and the verification unit ^^= machine management block The program of the leg determines that the version of the application I is in the correct state and continues to execute the boot process (S307). The verification code described in this embodiment is calculated by using the same algorithm as the calculated check value, and is calculated for the initial device firmware integrated in the basic input/output system 10, and integrated in the basic input/output system 10. When the firmware of each device is recorded, it is recorded together in a read-only verification code block 104 to prevent the verification code from being modified. Although the second figure is merely an example of verification of an application device firmware, as described in the description of the embodiment shown in the first figure, the initial device firmware and the map can be mapped to the optional read only block 202. The application device has more than one type of blade body, and may include a firmware such as a network device or a peripheral control interface device. If the firmware of the device above the rain type needs to be verified, the steps s3〇3 to S305' may be repeatedly performed. The firmware of the application device integrated in the basic input and output system 1 : verification alignment, until all the application device firmware in the optional read-only block 202 is loaded from the device firmware block 106 and verified. Then, the boot process is executed (S307). In order to explain the above verification process more specifically, please refer to the description of the third embodiment. The third figure is a basic of the present invention: the method of selecting the read-only memory method for self-verification of the system The detailed flow λ example is based on the integrated image control firmware in the basic input and output system ίο. First, the power is turned on to drive the basic input and output system, and (S401) 'the basic input and output system 1 〇 self-decompressing And loaded into the main record 10 201025132 T machine program (S4 〇 3); then, the basic output into the system, V dibutyl sweat self-test (S405), and in the self-test program t, first renewal of the yarn certificate, block (10) _ _ image verification code (S407); a — + 丄 w clothing and hand knife to ~ block plus, start (four) capacity, and - checksum _ position read Wei blade body

«^^^7s4;9r ' 6553Mi^^M ❹ ❹ 斷兩去接著即以计异出來的校驗值比對驗證碼,判 =Γ:=11):若兩者相異,表示整合在基本輸 拿刃體資料太^像控制裝置物體資料與預設應整合的 絶1〆 付、或韌體内的參數經修改,此時即發出 或使用者,提示實際使用的裝獅 以保1、旦:後靭體不同’或立即停止接下來的開機程 1 經比較德農置及_系統(S413);反之,若兩 性得到驗% 5 &表影像控制裝置章刀體的正確性和完整 (S415),^\開機程式即可繼續執行後續的開機程序 另像㈣:^主控權轉移到選用唯讀記憶區塊202中的 ㈣體’讓使用者可以開始在顯示誉幕上看到 基本:出人錢1G進行硬體測試的影像晝面。 效地實施例之說明,本發明已提供一種簡單而有 :蒼租:车\、入選用唯讀記憶區塊的應用裝置韌_本及 、止HI、,’可幫助整合基本輸出入系統與襄置韋刃體的製 、二壯二正σ版本不一致的錯誤,同時也可防止駭客下載 =衣置fe體、篡改初始裝置拿刃體的參數内容後,讓使用 慎採用被修改過的拿刃體槽案而破壞基本輸出入系統 的運作、或產生硬體損壞的風險。 21 201025132 前述所列舉之項目僅為說本發明例示之實施手段,並 非用以限縮本發明所適用之範疇,如有其他符合本發明之 精神與未實質改變本發明之技術手段者,皆屬本發明所涵 蓋保護之範圍。 【圖式簡單說明】 第一圖:本發明所提供一種自我驗證選用唯讀記憶體之基 本輸出入糸統實施例之儲存結構不意圖; _ 第二圖:本發明所提供一種基本輸出入系統自我驗證選用 唯讀記憶體方法實施例之簡略流程圖;及 第三圖:本發明所提供一種基本輸出入系統自我驗證選用 唯讀記憶體方法實施例之詳細流程圖。 【主要元件符號說明】 ίο基本輸出入系統 102開機管理區塊 104驗證碼區塊 β 106裝置韌體區塊 20主記憶體 202選用唯讀記憶區塊 S301〜S307流程步驟 S401〜S415流程步驟 12«^^^7s4;9r ' 6553Mi^^M ❹ ❹ 两 去 去 去 去 去 两 两 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计 计The data of the blade body is too much like the control device and the object data and the preset should be integrated, or the parameters in the tough body are modified. At this time, the user or the user is prompted to use the lion for the actual use. Dan: After the firmware is different' or immediately stop the next boot process 1 Compare the De Nong and _ system (S413); conversely, if the two sexes are tested, the correctness and integrity of the image control device (S415), ^\ boot program can continue to execute the subsequent boot process. (4): ^ The master control is transferred to the (four) body selected in the read-only memory block 202 so that the user can start to see on the display screen. Basic: The image of the 1G hardware test. Illustrated by the embodiment of the invention, the present invention has provided a simple one: the renter: the car, and the application device for selecting the read-only memory block, the toughness, the HI, and the ' can help integrate the basic input and output system with襄 韦 刃 刃 的 、 、 二 二 二 二 二 二 二 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦 韦Take the blade body to destroy the basic output into the system, or the risk of hardware damage. 21 201025132 The foregoing items are merely illustrative of the embodiments of the present invention and are not intended to limit the scope of the present invention, and any other technical means that conforms to the spirit of the present invention and does not substantially alter the present invention are The scope of protection covered by the present invention. BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a schematic diagram of a storage structure of a basic input/output embodiment of a self-validation selected read-only memory according to the present invention; _ second diagram: a basic input/output system provided by the present invention A simplified flow chart of an embodiment of a self-verification selective read-only memory method; and a third figure: a detailed flow chart of an embodiment of a basic read-in system self-validation using a read-only memory method. [Main component symbol description] ίο basic input and output system 102 boot management block 104 verification code block β 106 device firmware block 20 main memory 202 selects read-only memory block S301~S307 process steps S401~S415 process step 12

Claims (1)

201025132 七、申請專利範圍: 1. 一種自我驗證選用唯讀記憶體之基本輸出入系統,該基本 輸出入系統載入到一主記憶體以執行開機,包括: 一裝置韌體區塊,記錄一應用裝置韌體,該應用裝置韌 體於開機時載入到該主記憶體中之一選用唯讀記憶 區塊; 一驗證碼區塊,記錄一驗證碼;及 一開機管理區塊,利用一開機程式以一演算法對映射到 該選用唯讀記憶區塊之該應用裝置韌體進行計算,以 產生一校驗值,並讀取該驗證碼比對該校驗值,於該 校驗值與該驗證碼相同時,繼續執行開機程序。 2. 如申請專利範圍第1項所述之自我驗證選用唯讀記憶體 之基本輸出入糸統,其中,該驗證碼係以相同之該演算法 計算一初始裝置韌體而產生。 3. 如申請專利範圍第2項所述之自我驗證選用唯讀記憶體 之基本輸出入系統,其中,該開機管理區塊於該校驗值與 該驗證碼不相同時,發出一警示通知,用以提示該應用裝 置韌體異於該初始裝置韌體。 4. 如申請專利範圍第3項所述之自我驗證選用唯讀記憶體 之基本輸出入系統,其中,該開機管理區塊於該校驗值與 該驗證碼不相同時,停止執行開機。 5. 如申請專利範圍第1項所述之自我驗證選用唯讀記憶體 之基本輸出入糸統’其中’該驗證碼區塊係為唯"t買區塊。 6. 如申請專利範圍第1項所述之自我驗證選用唯讀記憶體 之基本輸出入系統,其中,該演算法係為計算校驗和演算 法。 13 201025132 7. 如申請專利範圍第2項所述之自我驗證選用唯讀記憶體 之基本輸出入系統,其中,該應用裝置韌體及該初始裝置 韌體皆係為影像控制裝置韌體、網路裝置韌體、或週邊控 制介面裝置韌體。 8. —種基本輸出入糸統自我驗證選用唯言買記憶體方法,該基 本輸出入系統載入到一主記憶體以執行開機,包括: 該基本輸出入系統開始執行開機程序; 讀取記錄在該基本輸出入系統的一驗證碼; 根據一演算法,計算映射到該主記憶體中之一選用唯讀 記憶區塊的一應用裝置韌體,產生一校驗值;及 判斷該驗證碼與該校驗值是否相同,若相同即繼續執行 開機程序。 9. 如申請專利範圍第8項所述之基本輸出入系統自我驗證 選用唯讀記憶體方法,其中,該驗證碼係以相同之該演算 法計算一初始裝置韌體而產生。 10. 如申請專利範圍第8項所述之基本輸出入系統自我驗證 選用唯讀記憶體方法,其中.,該演算法係為計算校驗和演 算法。 11. 如申請專利範圍第10項所述之基本輸出入系統自我驗證 選用唯讀記憶體方法,其中,根據該演算法計算映射到該 主記憶體之該應用裝置韌體的步驟中,包括下列步驟: 根據該應用裝置韌體的資料長度,自該應用裝置韌體在 該選用唯讀記憶區塊中的起始位址讀取該應用裝置 韋刃體;及 計算所讀取之該應用裝置韌體的校驗和,以產生該校驗 值。 14 201025132 12. 如申請專利範圍第8項所述之基本輸出入系統自我驗證 選用唯讀記憶體方法,其中,該基本輸出入系統開始執行 開機程序之步驟中,包括下述步驟: 該基本輸出入系統開始執行開機自我檢測程序。 13. 如申請專利範圍第9項所述之基本輸出入系統自我驗證 選用唯讀記憶體方法,其中,判斷該驗證碼與該校驗值是 否相同之步驟中,包括下述步驟: 若該驗證碼與該校驗值不相同,則發出一警示通知,用 以提示該應用裝置韌體異於該初始裝置韌體。 14. 如申請專利範圍第13項所述之基本輸出入系統自我驗證 選用唯讀記憶體方法,其中,判斷該驗證碼與該校驗值不 相同之步驟後,更包括下述步驟: 停止執行開機程序。 15. 如申請專利範圍第9項所述之基本輸出入系統自我驗證 選用唯讀記憶體方法,其中,該應用裝置韌體及該初始裝 置韌體皆係為影像控制裝置韌體、網路裝置韌體、或週邊 控制介面裝置韌體。 15201025132 VII. Patent application scope: 1. A self-validation selects the basic input and output system of read-only memory. The basic input and output system is loaded into a main memory to perform booting, including: a device firmware block, record one Applying the firmware of the device, the firmware of the application device is loaded into the main memory at the time of booting, and selecting a read-only memory block; a verification code block, recording a verification code; and a boot management block, utilizing a The booting program calculates, by an algorithm, the firmware of the application device mapped to the selected read-only memory block to generate a check value, and reads the verification code to compare the check value to the check value. When the verification code is the same, the boot process is continued. 2. The self-validation described in item 1 of the patent application is based on the basic input/output system of the read-only memory, wherein the verification code is generated by calculating the initial device firmware by the same algorithm. 3. The self-validation as described in claim 2 of the patent application selects the basic input/output system of the read-only memory, wherein the boot management block issues a warning notice when the check value is different from the verification code. It is used to indicate that the application device firmware is different from the initial device firmware. 4. The self-validation as described in claim 3 of the patent application selects the basic input/output system of the read-only memory, wherein the boot management block stops booting when the check value is different from the verification code. 5. If the self-validation described in item 1 of the patent application scope selects the basic output of the read-only memory, the verification code block is the only "t buy block. 6. The self-validation described in item 1 of the scope of the patent application uses a basic input/output system of read-only memory, wherein the algorithm is a calculation checksum algorithm. 13 201025132 7. The self-validation as described in the second paragraph of the patent application selects the basic input/output system of the read-only memory, wherein the application device firmware and the initial device firmware are the image control device firmware and network. The device device firmware or the peripheral control interface device firmware. 8. A basic input and output self-verification selects the memory-only method, the basic input and output system is loaded into a main memory to perform booting, including: the basic input and output system starts to execute the booting process; a verification code of the basic input and output system; according to an algorithm, calculating an application device firmware mapped to one of the main memory and selecting a read-only memory block to generate a check value; and determining the verification code Whether it is the same as the check value, if it is the same, the boot process is continued. 9. The basic input-output system self-validation as described in claim 8 of the patent application selects the read-only memory method, wherein the verification code is generated by calculating the initial device firmware by the same calculation method. 10. The basic input-input system self-validation as described in item 8 of the patent application section uses the read-only memory method, where the algorithm is a computational checksum algorithm. 11. The basic input-output system self-validation according to claim 10, wherein the self-validation method selects a read-only memory method, wherein the step of calculating the firmware of the application device mapped to the main memory according to the algorithm includes the following Step: reading, according to the data length of the firmware of the application device, the application device firmware from the starting address in the selected read-only memory block; and calculating the applied device The checksum of the firmware to generate the check value. 14 201025132 12. The basic input-input system self-validation as described in claim 8 of the patent application selects the read-only memory method, wherein the basic input-output system starts the step of executing the boot process, and includes the following steps: The system starts to perform the boot self-test. 13. The basic input-output system self-validation method according to claim 9 of the invention claims to use the read-only memory method, wherein the step of determining whether the verification code is identical to the verification value comprises the following steps: If the code is different from the check value, an alert notification is sent to indicate that the application device firmware is different from the initial device firmware. 14. The basic input-output system self-validation method according to claim 13 is a read-only memory method, wherein after the step of determining that the verification code is different from the verification value, the following steps are further included: Boot program. 15. The basic input-input system self-validation according to the scope of claim 9 is a read-only memory method, wherein the application device firmware and the initial device firmware are image control device firmware and network device. Firmware, or peripheral control interface device firmware. 15
TW97149140A 2008-12-17 2008-12-17 Bios for self-verifying option rom and the verifying method thereof TWI467484B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
TW97149140A TWI467484B (en) 2008-12-17 2008-12-17 Bios for self-verifying option rom and the verifying method thereof

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
TW97149140A TWI467484B (en) 2008-12-17 2008-12-17 Bios for self-verifying option rom and the verifying method thereof

Publications (2)

Publication Number Publication Date
TW201025132A true TW201025132A (en) 2010-07-01
TWI467484B TWI467484B (en) 2015-01-01

Family

ID=44852463

Family Applications (1)

Application Number Title Priority Date Filing Date
TW97149140A TWI467484B (en) 2008-12-17 2008-12-17 Bios for self-verifying option rom and the verifying method thereof

Country Status (1)

Country Link
TW (1) TWI467484B (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103514399A (en) * 2012-06-19 2014-01-15 鸿富锦精密工业(深圳)有限公司 Firmware verification method and system
CN112579368A (en) * 2019-09-29 2021-03-30 佛山市顺德区顺达电脑厂有限公司 Power management chip detection system and method

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6711675B1 (en) * 2000-02-11 2004-03-23 Intel Corporation Protected boot flow
US7007159B2 (en) * 2002-05-10 2006-02-28 Intel Corporation System and method for loading and integrating a firmware extension onto executable base system firmware during initialization

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103514399A (en) * 2012-06-19 2014-01-15 鸿富锦精密工业(深圳)有限公司 Firmware verification method and system
CN112579368A (en) * 2019-09-29 2021-03-30 佛山市顺德区顺达电脑厂有限公司 Power management chip detection system and method

Also Published As

Publication number Publication date
TWI467484B (en) 2015-01-01

Similar Documents

Publication Publication Date Title
CN101807152B (en) Basic output and input system for self verification of selection read only memory and verification method thereof
US9389878B1 (en) Pre-boot management of drivers and programs
US9703635B2 (en) Method, computer program, and computer for restoring set of variables
US20100287363A1 (en) Method and system for secure software provisioning
TWI470420B (en) Dubugging method and computer system using the smae
CN103080904A (en) Providing a multi-phase lockstep integrity reporting mechanism
TW201243722A (en) Booting method and computer system
JP2006172376A (en) Information processing system, program, information processing method
US9582262B2 (en) Systems and methods for installing upgraded software on electronic devices
US9891862B2 (en) Forensic data acquisition apparatus and method for guaranteeing integrity of flash memory in smart device
BR112014014815B1 (en) COMPUTING DEVICE, METHOD AND STORAGE MEANS FOR PERFORMING FIRMWARE BACKUP COPY
CN103186434A (en) Method and system for recovering basic input/output system
CN110795738B (en) Computer starting method, controller, storage medium and system
JP6391439B2 (en) Information processing apparatus, server apparatus, information processing system, control method, and computer program
CN102298529A (en) Providing silicon integrated code for a system
JP2020126576A (en) Method and system for updating recovery of bios
WO2020037613A1 (en) Security upgrade method, apparatus and device for embedded program, and storage medium
CN104866768A (en) Startup control method and device for ATM (Automatic Teller Machine) operating system
CN105677409B (en) A kind of method for upgrading system and device
WO2022083046A1 (en) Smart electricity meter checking method and apparatus, smart electricity meter, and computer storage medium
CN110377468A (en) A kind of test method and relevant apparatus of CPU activation core number setting
TW201314574A (en) Method and device for updating BIOS program for computer system
CN101009888A (en) Secure booting method for a mobile terminal, computer readable recording medium and mobile terminal
JP4896225B2 (en) Information processing terminal and falsification verification method
TW200809489A (en) BIOS damage detection and repair method and the motherboard