Safe starting method of terminal equipment, and terminal equipment

Abstract

The invention relates to the field of mobile terminals, and discloses a safe starting method of terminal equipment, and the terminal equipment. The terminal equipment disclosed by the invention comprises a read-only first memory, a one time programmable second memory and an erasable non-volatile third memory, wherein a first safety code is saved in the first memory; a first Hash abstract is saved in the second memory; basic safety contents, a boot program and a mapping file are saved in the third memory; the basic safety contents comprise a first public key and a second safety code; the boot program comprises a ciphertext of a second Hash abstract encrypted by a first private key in advance; the basic safety contents are authenticated by using the first safety code and the first Hash abstract, and then the boot program is authenticated by the first public key and the second safety code. According to the safe starting method of terminal equipment, and the terminal equipment disclosed by the invention, on one hand, starting safety is increased by stringent multiple authentication, on the other hand, only the Hash abstract of the basic safety contents is saved in the second memory, so that a low capacity is required for the second memory and cost is reduced.

Description

technical field [0001] The present invention relates to the field of mobile terminals, in particular to the secure startup technology of terminal equipment. Background technique [0002] Almost all intrusions in the field of mobile terminals need to change the system content, and the outside world's traditional intrusion methods are mainly through destroying and exchanging hardware units or changing the contents of system files. Usually, the anti-intrusion inspection method is based on known intrusion methods, so it is almost difficult to prevent new intrusion methods. It is entirely possible for system intrusion events to last for several weeks or even longer without being detected. Skilled intruders can clear system logs and deceive common intrusion detection systems, but almost all intrusions require changes to key system files, so It is very necessary to verify the integrity and consistency of the system, which is the function and purpose of secure boot. [0003] figu...

AI Technical Summary

Problems solved by technology

[0009] This startup process does not verify the code. Users can change and crack the code at will. The security of the mobile terminal cannot be guaranteed. The functions of the system manufacturer, such as locking the network and locking the card, are easy to be cracked, so a mechanism is needed. To prevent and identify the integrity and correctness of the code

Images