WO2022261865A1

WO2022261865A1 - Chip secure starting method, and chip

Info

Publication number: WO2022261865A1
Application number: PCT/CN2021/100403
Authority: WO
Inventors: 王博
Original assignee: 华为技术有限公司
Priority date: 2021-06-16
Filing date: 2021-06-16
Publication date: 2022-12-22
Also published as: CN117480503A

Abstract

The present application provides a chip secure starting method, and a chip. The chip comprises a key generating module and a processing module; the key generating module is configured to generate a first key corresponding to the first starting phase; the first starting phase is any one of a plurality of starting phases of the chip; the first key is different from a key corresponding to the second starting phase, and the second starting phase is a starting phase other than the first starting phase in the plurality of starting phases; the processing module is configured to, in the first starting phase, decrypt a first encrypted file according to the first key to obtain a first mirror file, and start the first mirror file; the first encrypted file is encrypted using the first key. According to the chip provided in embodiments of the present application, in a chip starting process, a key can be generated in real time and there is no need to pre-store the key, thereby preventing leakage of the key; in addition, all starting phases no longer use a same key for decryption, thereby improving the security of chip starting.

Description

A chip security startup method and chip

technical field

The present application relates to the field of information technology, in particular to a method for securely starting a chip and the chip.

Background technique

The chip startup process includes multiple startup stages. For example, the system chip on the terminal device needs to go through multiple startup stages during the startup process of the terminal device. For example, the startup process of the system chip on the terminal device includes ONCHIPROM, FASHBOOT, TEEOS, etc. start-up phase. The image file needs to be started at each startup stage during the chip startup process. In order to ensure the security of the image file, the manufacturer usually stores the encrypted image file in the chip when producing the chip. Therefore, during the startup process of the chip, the encrypted image file needs to be decrypted before starting the image file.

At present, the more common chip startup method is: pre-store the key in the chip, read the key and decrypt the encrypted image file during the chip startup phase. In this method, multiple image files in multiple startup stages of the chip correspond to a fixed key, but the method of decrypting all image files with the same key in the chip startup stage is less secure. Once the key is leaked, all image files will be decrypted, causing security risks.

Contents of the invention

The present application provides a chip security startup method and a chip, which are used to improve the security of the chip startup process.

In the first aspect, the embodiment of the present application provides a chip, which includes a key generation module and a processing module; wherein, the key generation module is used to generate a first key corresponding to the first startup phase; the first startup The stage is any one of the multiple startup stages of the chip; the first key is different from the key corresponding to the second startup stage, and the second startup stage is one of the multiple startup stages except all A start-up phase other than the first start-up phase; the processing module is used to decrypt the first encrypted file according to the first key in the first start-up phase to obtain the first image file and start the first image file, wherein , the first encrypted file is encrypted using the first key.

In this way, the chip provided by the embodiment of the present application can generate a key for decrypting encrypted files in each startup phase during the startup process of the chip, and the corresponding keys for at least two startup phases are not used, so that the encryption key can be generated in real time when the chip starts up. The key does not need to be stored in advance to prevent key leakage; at the same time, the same key is no longer used for decryption in all startup stages, which further improves the security of chip startup.

In a possible design, the key generation module is specifically configured to: determine a first key parameter corresponding to the first startup phase, the first key parameter and a key corresponding to the second startup phase The parameters are different; the first key is generated according to the first key parameter.

Through this design, when the chip generates the first key in the first start-up phase, it first generates the first key parameters corresponding to the first start-up phase, and the key parameters corresponding to at least two start-up phases are different, so that it can be guaranteed that the After the keys are generated by key parameters, the keys corresponding to at least two start-up phases are different, which improves the security of the chip start-up process.

In a possible design, the key generation module is specifically configured to: perform calculations on the first key parameters and chip parameters of the chip according to a first calculation rule to obtain the first key.

In a possible design, the chip parameters include at least one of the following: a life cycle used to indicate the use cycle of the chip; a public key hash value used to indicate the chip manufacturer; the chip The application manufacturer identification of the chip; the application device identification of the chip; the register identification of the register contained in the chip.

Through the above equipment, when the chip generates the first key according to the first key parameter, the chip calculates the first key parameter of the chip and the chip parameter to obtain the first key, where the chip parameter can include life cycle, public key hash The chip value, the application manufacturer's identification and the application product identification, etc., so that the content of the chip parameters can be flexibly set to ensure that the keys corresponding to the chip are different when the chip is used in different stages of use or when the chip is applied to different manufacturers or products, which further ensures the security of the chip. Safe to use.

In a possible design, the key generation module is specifically configured to: when the first startup phase is the first startup phase among the multiple startup phases, generate The first key parameter; or when the first startup phase is a startup phase other than the first startup phase in the multiple startup phases, according to the encryption key corresponding to the previous startup phase of the first startup phase key parameter and a third operation rule to generate the first key parameter.

Through this design, when the chip generates key parameters during the multiple startup stages included in the startup process, it can generate key parameters for the first startup stage according to the pre-configured initial value, and for other startup stages except the first startup stage , the key parameters of the startup phase can be generated according to the key parameters of the previous startup phase, so that different key parameters corresponding to different startup phases can be obtained.

In a possible design, the processing module is further configured to: process the first key as an invalid key after starting the first image file;

The key generation module is further configured to: after the plurality of startup phases are over, when the first startup phase needs to be restarted, re-determine the key corresponding to the first startup phase according to the pre-configured target key parameters. said first key;

The processing module is further configured to: decrypt the first encrypted file according to the first key to obtain the first image file; restart the first image file.

Through this design, after the first image file is started, the first key is treated as an invalid key to prevent the first key from being leaked. After multiple startup stages are over, if the first startup stage needs to be restarted, the first key is re-determined according to the pre-configured target key parameters, so that when individual startup stages need to be restarted, the entire chip does not need to be restarted repeatedly. On the basis of ensuring the secure startup of the chip, the cost is saved.

In a second aspect, the embodiment of the present application provides a method for securely starting a chip, the method including:

Generate a first key corresponding to the first startup phase; wherein, the first startup phase is any one of the multiple startup phases of the chip; the first key is a key corresponding to the second startup phase Different, the second startup phase is one of the multiple startup phases except the first startup phase; in the first startup phase, the first encryption is performed according to the first key The file is decrypted to obtain a first image file; the first image file is started; wherein, the first encrypted file is encrypted using the first key.

In a possible design, the generating the first key corresponding to the first startup phase includes: determining the first key parameter corresponding to the first startup phase, the first key parameter being the same as the second Key parameters corresponding to the startup phase are different; and the first key is generated according to the first key parameter.

In a possible design, the generating the first key according to the first key parameter includes: performing an operation on the first key parameter and the chip parameter of the chip according to a first operation rule , to obtain the first key.

In a possible design, the determining the first key parameter corresponding to the first startup phase includes: when the first startup phase is the first startup phase in the multiple startup phases, according to the pre-configured The initial value and the second operation rule generate the first key parameter; or when the first startup phase is a startup phase other than the first startup phase in the multiple startup phases, according to the first startup phase The key parameter corresponding to the previous start-up phase of the stage and the third operation rule are used to generate the first key parameter.

In a possible design, the chip parameters include at least one of the following: a life cycle used to indicate the use cycle of the chip; a public key hash value used to indicate the chip manufacturer; the chip The application manufacturer identification of the chip; the application device identification of the chip; the identification of the register contained in the chip.

In a possible design, after starting the first image file, the method further includes: processing the first key as an invalid key;

After the multiple start-up phases are over, the method further includes: when the first start-up phase needs to be restarted, re-determine the first a key; decrypt the first encrypted file according to the first key to obtain the first image file; restart the first image file.

In a third aspect, an embodiment of the present application provides a computer-readable storage medium, including instructions, which, when run on a computer, cause the computer to execute the method described in any possible design of the above-mentioned second aspect.

In a fourth aspect, an embodiment of the present application provides a computer program product, which, when run on a computer, causes the computer to execute the method described in any possible design of the above second aspect.

Description of drawings

FIG. 1 is a schematic diagram of an exemplary chip structure;

FIG. 2 is a schematic structural diagram of a chip provided in an embodiment of the present application;

FIG. 3 is a schematic structural diagram of another chip provided in the embodiment of the present application;

FIG. 4 is a schematic structural diagram of a key parameter generation module provided by an embodiment of the present application;

FIG. 5 is a flow chart of a chip secure boot method provided by an embodiment of the present application.

detailed description

In order to facilitate the understanding of the embodiments of the present application, the terms related to the embodiments of the present application are introduced below:

(1) Mirror file is a file similar to rar or zip compressed file. A specific series of files are made into a single file in a certain format for users to download and use, such as operating system mirror, game mirror, mirror file Can be recognized by specific software and burned to CD.

The system image file contains operating system files, boot files, partition table information, etc., and is used for system installation and repair. The system image file can be understood as a clone file of all data on the entire system installation CD, such as the original Microsoft system, or it can be The backup file of the operating system partition, such as the ghost system image, usually has the suffix of .iso.

(2) Life cycle. The life cycle of a chip can be used to indicate the life cycle of the chip. For example, the life cycle can indicate that the chip is currently in the testing phase or the application phase. Put into the stage of electronic equipment application.

A chip is a semiconductor component of an integrated circuit, which is widely used in various smart devices, such as smart terminal devices, smart home devices, smart cars, etc. A chip usually consists of multiple intellectual property (intellectual property, IP) cores, and multiple IP cores are connected to the memory through a bus to perform program and data interaction. Each IP core can be regarded as a pre-designed circuit function module for realizing corresponding functions. Among them, the IP core can be a central processing unit (central processing unit, CPU), an application processor (application processor, AP), a graphics processing unit (graphics processing unit, GPU), a multimedia subsystem (video subsystem), a camera subsystem ( camera subsystem), wireless access module (modem), display subsystem (display subsystem), etc.

Exemplarily, the structure of a chip may be as shown in FIG. 1 . In Figure 1, the CPU, multimedia subsystem, camera subsystem, display subsystem, GPU and wireless access module are connected to the memory through a bus.

It can be seen from Figure 1 that the chip includes multiple IP cores, and the chip needs to go through multiple startup stages to complete the startup process of the chip. For example, the startup process of the system chip on the terminal device includes startup stages such as ONCHIPROM, FASHBOOT, and TEEOS. . In the chip startup process, the image file needs to be started at each startup stage. In order to ensure the security of the image file, the manufacturer usually stores the encrypted image file in the chip when producing the chip, for example, the encrypted image file is stored in the In the memory shown in FIG. 1 , therefore, in the chip startup process, the encrypted image file needs to be decrypted before starting the image file.

At present, the more common chip startup method is: pre-store the key in the chip, such as storing the key in the memory shown in Figure 1, read the key and decrypt the encrypted image file during the chip startup phase. Taking a system chip startup method as an example, in the chip encryption stage, a fixed key is burned into the system chip, and a programmable fuse of the system chip is blown, thereby storing the fixed key in the system chip. In the start-up phase of the system chip, the stored fixed key is read, multiple encrypted files are decrypted according to the fixed key, multiple image files are obtained, and the multiple image files are started to complete the start-up process of the chip. In this method, multiple encrypted files in multiple startup stages of the chip correspond to the same set of fixed keys, but the method of decrypting all encrypted files with the same key in the chip startup stage is relatively safe. Low, once the key is leaked, all encrypted files will be decrypted, causing security risks.

Based on the above problems, an embodiment of the present application provides a method for securely starting a chip and the chip. During multiple startup stages of the chip, a key for decrypting an encrypted file is generated. The keys corresponding to different startup stages may be different. Therefore, the security of the chip startup process is ensured.

The embodiment of the present application may be applicable to various possible scenarios, for example, in the chip testing stage or the chip application stage, the chip security startup method provided by the embodiment of the present application may be adopted. Optionally, in the design stage of the chip, a key generation module can be added to the chip, or a key generation function can be added to an existing module of the chip such as the CPU as a key generation module, and the key generation module is used for testing the chip. Or in multiple startup stages of the chip during chip application, the key used to decrypt the encrypted file is generated, where the keys in different startup stages can be different, so that the key can also be stored in the chip without storing the key in the chip startup process. Generate a key, which can decrypt encrypted files and ensure the security of chip startup.

From the above introduction, it can be seen that the chip startup process includes multiple startup stages. The chip startup method provided by the embodiment of the present application is further introduced below taking the first startup stage of the chip as an example, wherein the first startup stage is multiple startup stages of the chip. Any one of the start-up phases; .

FIG. 2 is a schematic structural diagram of a chip provided by an embodiment of the present application. Referring to FIG. 2 , the chip may include a key generation module and a processing module.

The key generation module is used to generate the first key corresponding to the first start-up phase; the first key is different from the key corresponding to the second start-up phase, and the second start-up phase is a plurality of start-up phases except the first start-up phase an initiation phase other than

The processing module is used to decrypt the first encrypted file according to the first key in the first startup phase to obtain the first image file; start the first image file; wherein, the first encrypted file uses the first key encrypted.

In any start-up phase of the chip, the image file corresponding to the start-up phase needs to be started. For example, the audio image file and the video image file need to be started during the start-up phase of the multimedia subsystem of the chip. In the first startup stage, the first encrypted file needs to be decrypted to obtain the image file that needs to be started in the first startup stage, wherein, in the chip encryption stage, the first encrypted file is encrypted with the first key and saved to the chip middle. Therefore, in the first startup phase, a first key needs to be generated to decrypt the first encrypted file.

It should be noted that, in the chip secure boot method provided in the embodiment of the present application, the keys corresponding to the encrypted files that need to be decrypted in different boot phases may be the same or different, but at least two keys corresponding to the boot phases are different. Specifically, the first key corresponding to the first start-up phase is different from the key corresponding to the second start-up phase, wherein the second start-up phase may be a start-up phase other than the first start-up phase among the multiple start-up phases of the chip, That is to say, in the chip secure boot method provided by the embodiment of the present application, a fixed key is not used to encrypt the image files that need to be started in all boot stages, so as to improve security.

In an optional implementation, in the chip encryption stage, different encryption keys can be used for multiple image files with higher confidentiality levels, and the same encryption key can be used for multiple image files with lower confidentiality levels. key to encrypt. In specific implementation, the key can be flexibly used to encrypt the image file according to the requirements of the image file to be encrypted by the chip and the startup time of each startup stage of the chip.

The following describes how the key generation module in the chip generates the first key in the chip secure boot method provided in the embodiment of the present application:

The key generation module generates the first key parameter corresponding to the first start-up phase. The first key parameter is used to form the first key. Different key parameters can form different keys, and then different keys can be generated by generating different keys. key parameter to get a different key.

Optionally, when the first start-up phase is the first start-up phase in multiple start-up phases, the first key parameter is generated according to a pre-configured initial value and a second operation rule, wherein the pre-configured initial value may be The chip is stored in the chip. For example, assuming that the pre-configured initial value is 001, assuming that the second operation rule is an accumulation operation, and the accumulation value is 1, then the first key parameter is 010.

When the first start-up phase is a start-up phase other than the first start-up phase among the multiple start-up phases, the first key parameter is generated according to the key parameter corresponding to the previous start-up phase of the first start-up phase and the third operation rule. For example, assuming that the key parameter corresponding to the previous start-up phase of the first start-up phase is 100, the third operation rule is an accumulation operation, and the accumulated value is 1, then the first key parameter is 101.

It should be noted that the second operation rule and the third operation rule may be the same, for example, both the second operation rule and the third operation rule are accumulation operations, but the multiple keys calculated according to the second operation rule and the third operation rule The same key parameter does not exist in the parameters.

Taking the second operation rule and the third operation rule and both of them are set operation rules as an example, the method of generating key parameters by the key generation module in the embodiment of this application is further introduced: the key generation module can be based on the pre-configured initial value and set operation rules to generate at least one key parameter. Optionally, the preconfigured initial value can be programmed into the fixed cache of the chip during chip production to prevent the initial value from being tampered with, for example, the preconfigured initial value can be programmed into the one-time programmable memory (EFUSE) middle. It should be noted that in order to ensure that at least one key parameter generated is different, the operation rule is set to an irreversible one-way calculation operation rule. For example, the operation rule can be set to accumulation operation, accumulation operation, exponential operation, etc. , but the set operation rule cannot be an operation rule in which the accumulation operation and the accumulation operation are alternately performed. Therefore, the key parameter generated according to the chip security boot method provided in the embodiment of the present application can also be called an irreversible factor, that is, the key parameter generated during the generation of the key During the process of key parameters, two identical key parameters will not be generated, and the key parameter generation process is irreversible.

For example, a 32-bit register in the key generation module can be used to generate key parameters, assuming that the pre-configured initial value is 0x00000001, the operation rule is set to accumulation operation, and the accumulation value is 1, then multiple In the startup phase, this register is enabled once, and a key parameter can be obtained. For example, the first key parameter generated is 0x00000002, the second key parameter is 0x00000003... and so on, this register can support the generated The last key parameter is 0xFFFFFFFF, that is to say, in order to ensure that any two generated key parameters are different, this register does not support flipping after accumulating 0xFFFFFFFF.

Optionally, after the key generation module obtains the first key parameter, it can perform calculations on the first key parameter and chip parameters according to the first operation rule to obtain the first key. Wherein, the first operation rule may be, for example, a bit splicing operation, a shift operation, and a combination of a shift operation and a bit splicing operation. Optionally, when calculating the first key parameter and the chip parameter, the calculation may be performed on all fields of the first key parameter and the chip parameter, or may be performed on some fields of the first key parameter and the chip parameter, to get the key parameters.

For example, when the first operation rule is a bit splicing operation, assuming that the first key parameter occupies 32 bits and the chip parameter occupies 16 bits, then a 48-bit first key.

For another example, when the first operation rule is a combination of shift operation and bit splicing operation, the first key parameter can be shifted by a set number of bits, and then the shifted first key parameter and chip parameter can be bit-shifted. stitching.

It can be understood that, in the embodiment of the present application, after the multiple key parameters and chip parameters are respectively calculated according to the first operation rule, the obtained multiple key parameters are all different, that is to say, the first operation rule cannot The same key parameter is obtained after different key parameters are operated with the chip parameters. The above first operation rule is only used as an exemplary description, and any operation rule that can obtain different keys after performing operations on different key parameters and chip parameters is applicable, which is not limited in this embodiment of the present application.

It should be noted that chip parameters can be used to indicate information such as the life cycle of the chip, manufacturer, application manufacturer, and application equipment. For example, chip parameters can include life cycle, public key hash value, application manufacturer identification (original equipment manufacturer identity document) , OEM ID), at least one of the application device identification (product ID), register identification, where the life cycle is used to indicate the current use cycle of the chip, for example, the use cycle includes the test phase and the application phase, which can be distinguished by the life cycle The use cycle of the chip, so that different keys are used to encrypt the image file during the test phase and application phase of the chip, further improving security; the public key hash value can be used to indicate the manufacturer of the chip; OEM ID can be used to indicate the chip The manufacturer of the application; the product ID can be used to indicate the product of the chip application; the register identification is used to indicate the registers included in the chip, such as register type, register status, etc. In implementation, different keys can be generated by setting the specific content of the chip parameters, so that the chips correspond to different keys in different service cycles, different manufacturers, different application manufacturers and different application products, further preventing key leakage.

After the key generation module generates the first key, it sends the first key to the processing module, and the processing module decrypts the first encrypted file according to the first key to obtain the first image file. The processing module starts the first image file, thereby completing the first start-up phase.

It is understandable that, from the above introduction, the image files corresponding to several start-up stages of the chip can be encrypted with the same key. After the processing module obtains the key parameters and generates the key, it can use In each startup phase, use the key to decrypt the encrypted file in each startup phase, and start the decrypted image file.

Optionally, in one startup phase of the chip, there may be multiple sub-startup phases, and multiple image files need to be started. These multiple image files may correspond to the same key or different keys, that is to say , the first startup phase can correspond to multiple keys, for example, the first startup phase corresponds to the first key and the second key, the first key is used to decrypt the first encrypted file to obtain the first image file, and the second encrypted The key is used to decrypt the second encrypted file to obtain the second image file, and the first key is different from the second key. It can be understood that the second key parameter corresponding to the second key can be generated according to the first key parameter and the set operation rules. For the specific generation method of the second key, please refer to the above-mentioned generation method of the first key implementation, the repetition will not be repeated.

In addition, when a startup phase includes multiple sub-startup phases and the multiple sub-startup phases need to start the same image file, the key parameters corresponding to the image file can be stored in the chip during the chip production phase. When the chip startup process reaches the startup stage, in multiple sub-startup stages, a key is generated according to the pre-configured key parameters, and the encrypted file is decrypted according to the key to obtain an image file, and the image file is started.

In a possible embodiment of the embodiment of the present application, in order to ensure the prevention of key leaks, in each startup phase of the chip, after the image file is started, the key corresponding to the startup phase is treated as an invalid key, for example, delete The key may set all bit positions of the key to 0 or 1, so that the key cannot be used again, further ensuring the security of chip startup.

Optionally, multiple stages of the chip startup process in the embodiment of the present application are not reversible. For example, assuming that the chip startup process includes three startup phases (startup phase A, startup phase B, and startup phase C), after the startup phase B ends , can only enter the start-up phase C, but cannot enter the start-up phase A and start-up phase B again. It can be understood that, from the foregoing content, after each startup phase is completed, the key corresponding to the startup phase will be treated as an invalid key, that is, even if forced to re-enter the previous startup phase, because the corresponding The key is invalid, these image files in the previous startup stage cannot be decrypted, and the previous startup stage cannot be restarted.

Optionally, after multiple start-up phases of the chip are completed, some start-up phases of the chip may need to be restarted. restart. Of course, multiple startup phases of the current chip have been completed, and some startup phases need to be restarted, which does not mean that the entire chip needs to be restarted. When the chip is applied to a smart device, when multiple startup phases of the chip are completed, the smart device has After the boot is completed, some startup stages of the chip need to be restarted, and the smart device does not need to be restarted. Assuming that the first startup stage is a startup stage that needs to be restarted after multiple startup stages are completed, during the chip production process, the target key parameters corresponding to the first startup stage can be stored in the memory of the chip. When the first startup phase needs to be restarted, directly read the memory of the chip to obtain the target key parameters, so as to regenerate the first key corresponding to the first startup phase according to the target key parameters, and according to the first key pair The first encrypted file corresponding to the first startup stage is decrypted to obtain the first image file, and the first image file is restarted to complete the restart of the first startup stage.

In an optional implementation manner, the key generation module of the chip in the embodiment of the present application can also be split into a key parameter generation module and an operation module. For example, FIG. 3 is a schematic structural diagram of a chip, which includes a key Parameter generating module, computing module, processing module and storage module.

Wherein, the storage module can be a one-time programmable memory (one time programmable, OTP) such as flash memory (FLASH) or EFUSE, or the storage module can be a non-volatile memory (non-volatile memory, NVM), and the storage module can be used for Stores pre-configured initial values.

Based on the chip structure shown in FIG. 3 , a method for securely starting a chip provided in an embodiment of the present application includes the following steps, assuming that the chip startup process includes N startup stages:

S301: In response to the startup instruction, the key parameter generation module acquires a preconfigured initial value from the storage module.

S302: The key parameter module generates key parameters corresponding to the first startup phase according to the pre-configured initial value and the set operation rules.

For example, the key parameter generation module can be an irreversible one-way accumulation or one-way accumulation counter Monotonic, assuming that the key parameter generation module is an accumulation calculator, after the key parameter module obtains the pre-configured initial value, it can Computes the sum of the initial value and the accumulated value as the first key argument. After the key parameter generation module is enabled once, it performs a summation operation on the current value and the accumulated value to obtain the next key parameter.

S303: The key parameter module sends the calculated key parameter to the calculation module.

S304: The operation module performs operations on the key parameter and the chip parameter according to the first operation rule to obtain the key.

Optionally, when the first startup phase corresponds to multiple keys, the key parameter generation module can be enabled multiple times to obtain multiple key parameters, and the operation module can perform calculations on each key parameter and chip parameter , to get multiple keys.

S305: The computing module sends the key to the processing module.

S306: The processing module decrypts the encrypted file corresponding to the first startup stage according to the key, obtains the image file, and starts the image file.

S307: The key parameter module generates key parameters corresponding to the current start-up phase according to the current value and the set operation rule.

It can be understood that the current value in the key parameter module is the key parameter generated by the key parameter module last time.

S308: The key parameter module sends the calculated key parameter to the calculation module.

S309: The operation module performs operations on the key parameter and the chip parameter according to the first operation rule to obtain the key.

S310: The computing module sends the key to the processing module.

S311: The processing module decrypts the encrypted file corresponding to the current start-up phase according to the key, obtains the image file, and starts the image file.

S307-S311 are repeated until the N startup phases of the chip are all completed.

Exemplarily, the embodiment of the present application also provides a possible structure of a key parameter generation module, for example, FIG. 4 is a schematic structural diagram of an exemplary key parameter generation module, the key generation module includes 4 memories, The four registers are: the first register, the second register, the third register and the fourth register. The functions of these four registers are introduced below:

The second register is the selection register, which is used to select the third register or the fourth register as the output register. When the second register is 0, the third register is used as the output register, and the key parameter generated by the third register is used to generate the key ; When the second register is not 0, the fourth register is used as an output register, and the key parameter generated by the fourth register is used to generate a key.

The third register can be configured as any value supported by the register.

The fourth register is used to generate key parameters according to the set operation rules. For example, in the first startup stage of the chip, the pre-configured initial value is written into the fourth register, and the fourth register can be based on the initial value and the set operation rules. Generate key parameters corresponding to the first boot phase. The software configuration is enabled once, and the fourth register performs an operation on the current value according to the set operation rules to obtain a key parameter.

The first register is a lock register, which is used to lock the second register, the third register and the fourth register after the chip completes multiple start-up stages. For example, after writing the Magic value of the first register, the second register is clamped to 0, that is, the third register is selected as the output register, and the fourth register no longer generates key parameters.

In an optional embodiment, the chip is powered on to start the startup process, the second register is written to set a non-zero value, the fourth register is selected as the output register, the initial value stored in the chip is written into the fourth register, and the software configuration Enable once, the fourth register performs an operation on the current value according to the set operation rules to obtain a key parameter, the fourth register outputs the generated key parameter, and the subsequent operation module performs an operation on the key parameter according to the first operation rule Calculate with the chip parameters to generate a key. In the BOOTLOADER stage of the chip, all image files in the chip startup process are verified. After the verification is passed, the first register initiates a lock. After the lock, the second register is clamped to 0. At this time, the fourth register stops generating key parameters. , and the fourth register is no longer used as an output register. That is to say, after multiple start-up phases of the chip are completed, key parameters can only be generated by configuring the third register and using the third register as an output register.

Optionally, the key parameter generation module shown in Figure 4 can also realize key parameter generation in the following two special scenarios:

Scenario 1: After the completion of multiple boot phases of the chip, the first boot phase requires a reboot.

Wherein, the first startup phase is, for example, the TEEOS phase.

When it is determined that the first startup stage needs to be restarted, the target key parameter corresponding to the first startup stage is obtained from the memory of the chip, and the target key parameter is written into the third register. One register initiates a lock, and the second register is clamped to 0 after locking. At this time, the third register is used as an output register, and the third register can output the target key parameter, and the operation module performs the calculation of the target key parameter and Chip parameters are calculated to regenerate the first key. The processing module can decrypt the first encrypted file according to the first key to obtain the first image file, and the processor starts the first image file to complete the restart of the first startup stage.

Scenario 2: The same image file needs to be started in multiple sub-startup stages contained in one startup stage of the chip.

A chip startup phase may include multiple sub-boot phases, and some image files may need to be started in multiple sub-boot phases, for example, the first boot phase of the chip includes sub-boot phase A and sub-boot phase B, and the sub-boot phase Both stage A and sub-boot stage B need to start the image file A, then in the chip production stage, the key parameter A corresponding to the image file A is stored in the memory of the chip. In substart phase A, write the second register to 0, switch the third register as an output register, and keep the fourth register suspended. Read the key parameter A corresponding to the image file A from the memory of the chip, and write the key parameter A into the third register, so that the operation module can perform operations on the key parameter A and the chip parameter according to the first operation rule to generate The key A, the processing module can decrypt the encrypted file A according to the key A, obtain the image file A and start the image file A. Writing a non-zero value to the second register toggles the fourth register as an output register.

Similarly, in the sub-startup phase B, write the second register as 0, switch the third register as the output register, read the key parameter A corresponding to the image file A from the memory of the chip, and write the key parameter A into The third register, so that the operation module can calculate the key parameter A and the chip parameter according to the first operation rule to generate the key A, and the processing module can decrypt the encrypted file A according to the key A to obtain the image file A and start the image file A. Writing a non-zero value to the second register toggles the fourth register as an output register.

In an optional implementation manner of the embodiment of the present application, after the operation module receives the key parameter sent by the key parameter generation module, it may also perform different processing on the received key parameter according to different output registers. For example, it can be preset that when the third register is used as an output register, the first processing is performed on the key parameter output by the third register, and then the key parameter after the first processing is calculated with the chip identification to obtain the key; and preset When the fourth register is used as an output register, the second processing is performed on the key parameter output by the fourth register, and then the key parameter after the second processing is calculated with the chip identification to obtain the key, wherein the first processing and the second The processing can be scrambling processing or encryption processing, and the first processing is different from the second processing, so as to prevent the unsafe problem caused by maliciously configuring the third register as the value generated by the fourth register during the chip startup process. The key parameter settings generated by the different registers are processed differently. Even if the third register is maliciously configured as a certain key parameter that can be generated by the fourth register, the corresponding key cannot be obtained according to the key parameter, which further improves chip startup. security.

It should be noted that, when only the third register is set as the output register, the first processing of the key parameters output by the third register may be performed, or when only the fourth register is set as the output register, the key parameters output by the fourth register may be processed. The second processing performed on the key parameter can also achieve the above effect.

Based on the same inventive concept, an embodiment of the present application provides a method for securely starting a chip. Referring to Fig. 5, this method comprises the steps:

S501: Generate a first key corresponding to the first startup phase.

Wherein, the first start-up phase is any one of the multiple start-up phases of the chip; the first key is different from the key corresponding to the second start-up phase, and the second start-up phase is the multiple start-up phase A start-up phase other than the first start-up phase in the start-up phases.

S502: In the first startup phase, decrypt the first encrypted file according to the first key to obtain a first image file.

Wherein, the first encrypted file is encrypted using the first key.

S503: Start the first image file.

In a possible design, the generating the first key corresponding to the first startup phase includes: determining a first key parameter corresponding to the first startup phase, the first key parameter being the same as the first key parameter Key parameters corresponding to the two startup phases are different; and the first key is generated according to the first key parameter.

In addition, for other implementation manners in the method shown in FIG. 5 , reference may also be made to the relevant descriptions in FIGS. 2 to 4 above, which will not be repeated here.

The steps of the method or algorithm described in the embodiments of the present application may be directly embedded in hardware, a software unit executed by a processor, or a combination of both. The software unit may be stored in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, removable disk, CD-ROM or any other storage medium in the art. Exemplarily, the storage medium can be connected to the processor, so that the processor can read information from the storage medium, and can write information to the storage medium. Optionally, the storage medium can also be integrated into the processor. The processor and the storage medium can be set in the ASIC, and the ASIC can be set in the terminal device. Optionally, the processor and the storage medium may also be disposed in different components in the terminal device.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

Although the application has been described in conjunction with specific features and embodiments thereof, it will be apparent that various modifications and combinations can be made thereto without departing from the spirit and scope of the application. Accordingly, the specification and drawings are merely illustrative of the application as defined by the appended claims and are deemed to cover any and all modifications, variations, combinations or equivalents within the scope of this application. Obviously, those skilled in the art can make various changes and modifications to the application without departing from the spirit and scope of the application. In this way, if these modifications and variations of the application fall within the scope of the claims of the application and their equivalent technologies, the application also intends to include these modifications and variations.

Claims

A chip, characterized in that the chip includes a key generation module and a processing module;

The key generation module is configured to generate a first key corresponding to a first startup phase; wherein, the first startup phase is any one of a plurality of startup phases of the chip; the first key Different from the key corresponding to the second startup phase, the second startup phase is one of the multiple startup phases except the first startup phase;

The processing module is configured to decrypt the first encrypted file according to the first key in the first startup phase to obtain a first image file; start the first image file; wherein, the A first encrypted file is encrypted using the first key.
The chip according to claim 1, wherein the key generation module is specifically used for:

determining a first key parameter corresponding to the first startup phase, where the first key parameter is different from a key parameter corresponding to the second startup phase;

Generate the first key according to the first key parameter.
The chip according to claim 2, wherein the key generation module is specifically used for:

Performing operations on the first key parameters and chip parameters of the chip according to a first operation rule to obtain the first key.
The chip according to claim 2 or 3, wherein the key generation module is specifically used for:

When the first startup phase is the first startup phase among the multiple startup phases, generating the first key parameter according to a preconfigured initial value and a second operation rule; or

When the first start-up phase is a start-up phase other than the first start-up phase among the multiple start-up phases, generate The first key parameter.
The chip according to any one of claims 2 to 4, wherein the chip parameters include at least one of the following:

A life cycle used to indicate the usage cycle of the chip;

A hash value of the public key used to indicate the manufacturer of the chip;

The application manufacturer identification of the chip;

The application device identification of the chip;

Register IDs of the registers that the chip contains.
The chip according to any one of claims 1 to 5, wherein the processing module is further used for:

After starting the first image file, processing the first key as an invalid key;

The key generation module is also used for:

After the multiple start-up phases are over, when the first start-up phase needs to be restarted, re-determine the first key corresponding to the first start-up phase according to a pre-configured target key parameter;

The processing module is also used to:

Decrypting the first encrypted file according to the first key to obtain the first image file; restarting the first image file.
A method for securely starting a chip, applied to a chip, characterized in that the method includes:

Generate a first key corresponding to the first startup phase; wherein, the first startup phase is any one of the multiple startup phases of the chip; the first key is a key corresponding to the second startup phase Different, the second start-up phase is a start-up phase in the plurality of start-up phases except the first start-up phase;

In the first startup phase, decrypt the first encrypted file according to the first key to obtain a first image file; start the first image file; wherein, the first encrypted file uses the encrypted with the first key.
The method according to claim 7, wherein said generating the first key corresponding to the first startup phase comprises:

determining a first key parameter corresponding to the first startup phase, where the first key parameter is different from a key parameter corresponding to the second startup phase;

Generate the first key according to the first key parameter.
The method according to claim 8, wherein said generating said first key according to said first key parameter comprises:

Performing operations on the first key parameters and chip parameters of the chip according to a first operation rule to obtain the first key.
The method according to claim 8 or 9, wherein the determining the first key parameter corresponding to the first startup phase comprises:

When the first startup phase is the first startup phase among the multiple startup phases, generating the first key parameter according to a preconfigured initial value and a second operation rule; or

When the first start-up phase is a start-up phase other than the first start-up phase among the multiple start-up phases, generate The first key parameter.
The method according to any one of claims 8 to 10, wherein the chip parameters include at least one of the following:

A life cycle used to indicate the usage cycle of the chip;

A hash value of the public key used to indicate the manufacturer of the chip;

The application manufacturer identification of the chip;

The application device identification of the chip;

The identification of the registers that the chip contains.
The method according to any one of claims 7 to 11, wherein after starting the first image file, the method further comprises:

treating the first key as an invalid key;

After the plurality of start-up phases ends, the method also includes:

When the first startup phase needs to be restarted, re-determine the first key corresponding to the first startup phase according to a preconfigured target key parameter;

Decrypting the first encrypted file according to the first key to obtain the first image file; restarting the first image file.
A computer-readable storage medium, characterized by comprising instructions, which, when run on a computer, cause the computer to execute the method according to any one of claims 7 to 12.
A computer program product, characterized in that, when it is run on a computer, it causes the computer to execute the method according to any one of claims 7 to 12.