Fixed hardware security unit backup and recovery method and system

Abstract

The invention discloses a backup method of a fixed hardware safe unit, which comprises that the mutual binding is achieved through the interaction of unique identifying information of the fixed hardware safe unit and a mobile hardware safe unit, first state information and second state information are recorded and backup in the fixed hardware safe unit, the first state information corresponds to the equipment state of the fixed hardware safe unit which is cured, and the second state information of the self state of the fixed hardware safe unit corresponds to the first state information. Through the bonding relationship, the first state information and the second state information are transported to the mobile hardware safe unit. The invention provides a backup and recovering method of the fixed hardware safe unit and a system, the state information which is recorded by the fixed hardware safe unit is consistent with the state information of curing equipment thereof.

Description

technical field [0001] The invention relates to a hardware security system, in particular to a backup method and recovery method for a fixed hardware security unit, a backup system and a recovery system for a fixed hardware security unit. Background technique [0002] Hardware security units based on PCs, servers, mobile phones or other devices, such as TPM (Trusted Root) or TCM (Trusted Cryptographic Module), for security reasons, at the beginning of the design, the hardware security unit is required to have its own CPU, memory, storage space. The space and computing logic of the hardware security unit are not controlled by the devices it serves, such as PCs, servers, mobile phones or other devices. [0003] The internal logic, program flow, key and password management of the hardware security unit is a closed environment, which is completely free from the management and interference of the devices it serves, such as PCs, servers, mobile phones or other devices. Thus, whe...

AI Technical Summary

Problems solved by technology

[0008] When solving the above problems, based on the security considerations of the hardware security unit, it is impossible to use a simple button such as hard disk recovery or a simple command method to allow the hardware security unit to perform "synchronous" recovery

Because this simple recovery interface will directly affect the robustness of the hardware security unit, and it is very easy to leave a back door for the attacker and destroy the existing state of the hardware security unit

Images