发明申请
- 专利标题: Computer System and Method for Performing Integrity Detection on the Same
- 专利标题(中): 用于执行完整性检测的计算机系统和方法
-
申请号: US12083894申请日: 2006-03-15
-
公开(公告)号: US20090300415A1公开(公告)日: 2009-12-03
- 发明人: Yi Zhang , Jian Zhou , Zhenxin Xi , Hongping Tian
- 申请人: Yi Zhang , Jian Zhou , Zhenxin Xi , Hongping Tian
- 申请人地址: CN Beijing
- 专利权人: Lenovo (Beijing) Limited
- 当前专利权人: Lenovo (Beijing) Limited
- 当前专利权人地址: CN Beijing
- 优先权: CN200510112892.5 20051019
- 国际申请: PCT/CN2006/000401 WO 20060315
- 主分类号: G06F21/00
- IPC分类号: G06F21/00 ; G06F11/07
摘要:
The present invention proposes a computer system and a method capable of performing integrity detection, comprising: a running mode unit which comprises an integrity detection boot variable to determine whether or not to initiate an integrity detection boot mode by judging said running mode unit; an EFI integrity detection unit (5), which is used for performing an integrity detection on EFI image codes in the integrity detection boot mode, and comprises an integrity metric value for being compared with an EFI integrity calculated value generated after the EFI integrity detection unit performs the integrity detection on the EFI image codes, to determine the integrity of the EFI image codes; an operating system integrity detection unit (6); and an integrity management unit. The present invention is based on the EFI BIOS to perform the integrity detection on the operating system during the pre-boot stage, having better reliability and security.