SoC chip security design method and hardware platform

Abstract

The invention discloses an SoC chip security design method, and the method comprises the following steps: setting a security storage area in an SoC chip to store security configuration information; obtaining entities of all stages of SoC chip starting, creating a security mirror image file and generating security configuration information; taking first-stage boot firmware on an SoC chip as a root of trust, acquiring a mirror image of a next stage at a current stage, and performing digital signature verification; if verification succeeds, the mirror image is trusted, the mirror image is loaded, and starting is executed; if verification fails, tampering the mirror image, and terminating the starting process. The verification of the bootstrap program, the operating system and the application program is realized by means of encryption and digital signature, the security and credibility of firmware and software are ensured, the key is safely stored, and the security is improved.

Description

technical field [0001] The invention relates to the technical field of computer security, and particularly designs a SoC chip security design method and a hardware platform. Background technique [0002] System on chip SoC (system on chip) is a chip-level system formed by combining multiple integrated circuits with specific functions on a chip. The hardware layer includes microprocessor / microcontroller, control logic, on-chip memory, hardware functional units, External communication interface, etc., the software layer includes embedded systems and application software. In the process of power-on and start-up of SoC, the on-chip read-only memory ROM reads the bootloader program Boot Loader from non-volatile memory such as off-chip Flash / SD card, and the Boot Loader loads the processor, each hardware functional unit and on-chip etc. to initialize and configure. When the initialization is completed, the operating system and application programs are guided by the Boot Loader, ...

AI Technical Summary

Problems solved by technology

Malware such as Rootkit modifies the startup process of the system and is installed into the system to achieve the purpose of persistently resident in the system. Once the SoC is infected by malicious code such as Rootkit, it cannot be removed even if the system is reinstalled.

Images