Computer system cipher module detection method and device and a storage medium

Abstract

The invention relates to a computer system cipher module detection method and device and a storage medium, and the method comprises the following steps: calling a basic hardware cipher module, and detecting the basic hardware cipher module according to the encryption and decryption results of the basic hardware cipher module on a verification file; calling an operating system cryptographic module to detect the operating system cryptographic module according to encryption and decryption results of the operating system cryptographic module on the verification file; calling a middleware password module, so as to detect the middleware password module according to encryption and decryption results of the middleware password module on the verification file; and calling the application layer cryptographic module to detect the application layer cryptographic module according to the encryption and decryption results of the verification file by the application layer cryptographic module. According to the technical scheme, the problem that the discretely distributed cryptographic modules in the computer system cannot be effectively detected is effectively solved. Meanwhile, the detection efficiency is effectively improved.

Description

technical field [0001] The present invention relates generally to the field of computer security. More specifically, the present invention relates to a detection method, device and storage medium of a cloud operating system encryption module. Background technique [0002] In traditional computer systems, since there is no encryption module inside the CPU, the main storage, bus, and input and output devices cannot be fully encrypted and protected during hot running. The framework of the computer system is as figure 1 shown. [0003] As the situation of information security becomes more and more severe, our country proposes a scheme of embedding the cryptographic module into the CPU to encrypt the whole bus data set. A cryptographic module is added between the CPU bus and the input / output interface of the computer system, so that the data of the hardware device below the operating system layer is protected by the cryptographic module. A typical CPU framework with a cryptog...

AI Technical Summary

Problems solved by technology

Therefore, the traditional, internationally accepted testing methods for the whole machine and operating system are no longer suitable for the above-mentioned computer systems with discrete distribution of cryptographic modules.

Simultaneously, in the prior art, the test of CPU cryptographic module and bus cryptographic equipment (comprising bus cryptographic machine and bus cryptographic module) of the computer system of cryptographic module discrete distribution can only rely on the software realization of operating system, and can't directly CPU cryptographic module and bus cryptographic devices for detection

Images