发明授权
- 专利标题: System and method for trusted early boot flow
- 专利标题(中): 可信早期启动流的系统和方法
-
申请号: US11096832申请日: 2005-03-31
-
公开(公告)号: US07752428B2公开(公告)日: 2010-07-06
- 发明人: Shamanna M. Datta , Vincent J. Zimmer , Michael A. Rothman
- 申请人: Shamanna M. Datta , Vincent J. Zimmer , Michael A. Rothman
- 申请人地址: US CA Santa Clara
- 专利权人: Intel Corporation
- 当前专利权人: Intel Corporation
- 当前专利权人地址: US CA Santa Clara
- 代理机构: Trop, Pruner & Hu, P.C.
- 主分类号: G06F9/00
- IPC分类号: G06F9/00
摘要:
In some embodiments, the invention involves extending trusted computing environments to the boot firmware. In at least one embodiment, the present invention is intended to enable the trusted environment to be extended forward to the pre-boot environment in addition to post-OS load environment. Embodiments of the present invention enable the trusted environment to extend to the firmware at power-on. The firmware is integrated within the secure perimeter which was previously only available to the OS. In other words, the BIOS is made to be a trusted entity, as well as the OS. Extensible firmware interface (EFI) modules are signed with a public key. The processor has an embedded private key. EFI modules are verified using the keys to ensure a trusted environment from boot to OS launch. Other embodiments are described and claimed.
公开/授权文献
- US20060224878A1 System and method for trusted early boot flow 公开/授权日:2006-10-05
信息查询