CN100383695C - Safety turn-on method in visual range - Google Patents

Abstract

Disclosed is a method for safely booting in a system including a central control device, at least one wireless device, and at least one controlled device, so as to perform safe booting within the range that can be observed by human eyes, and the central control device stores the identification of the wireless device The safe boot method includes the steps of: starting the controlled device; establishing a connection between the controlled device and the central control device; the controlled device sends an authentication request to the central control device through the connection; the central control device responds to the authentication Request mutual authentication with the controlled device; the central control device searches for the wireless device corresponding to the stored wireless device identifier through short-distance radio communication; and if the wireless device is found, the central control device sends a message allowing subsequent operations to the controlled device signal, otherwise, the device will automatically shut down. By adopting the above method, it can be ensured that the personnel related to the main engine can manually monitor the start-up of the machine within the visible range of the machine, and at the same time, the operation complexity of the start-up process is not increased.

Description

How to safely power on within sight

technical field

The invention relates to computer security technology, in particular to a method for safely starting the computer within the range that can be observed by human eyes by customizing the computer startup process and strategy.

Background technique

The Extensible Firmware Interface (EFI) is a firmware standard widely used in next-generation personal computers, notebooks, servers, and various handheld devices. It is structured, standardized, and easy to maintain, and will replace the traditional Basic Input Output System (BIOS) in the future as the main firmware of the computer system. A prominent feature of EFI is that it can customize the computer's startup process and has relatively powerful network functions.

In addition, with the popularization of mobile communication terminals such as mobile phones, especially mobile terminals equipped with short-range wireless functions such as Bluetooth, mobile communication terminals such as mobile phones have become personal tools that people carry with them. A mobile phone, which is a tool carried by an individual, can be used to provide an individual's location.

The present invention combines the EFI firmware technology and the short-distance wireless technology of the mobile communication terminal as the basis to realize the safe booting of the computer within the visible range and ensure that the booting process is under legal monitoring.

There are many measures for the safety of booting. The traditional technology includes CMOS password protection and operating system password protection. However, these protections have loopholes, and people who want to break into the system still have a way to get into the system. For example, discharging the CMOS on the computer motherboard, or booting another operating system, etc. The recent power-on protection technology mainly protects the hard disk, adding a hard disk startup password function in the hard disk firmware (firmware), which can effectively protect the hard disk data, so that even if the hard disk is stolen, the data will not be lost. However, the biggest problem with this power-on protection technology is that after the user forgets the password, hard disk data will be difficult to obtain. Therefore, this power-on protection method also has a relatively large risk.

For example, in the notebooks of Lenovo and other system manufacturers, iKey technology is widely used. However, this kind of boot protection is also limited to the operating system, and cannot really protect the host system from intrusion.

The above power-on protection mode is basically based on password protection, and there are three main problems:

1. The complexity of the operation increases, and the user must remember and type in the password to operate normally;

2. Once the password is lost, it will bring a lot of trouble to the user, and sometimes it is an irreversible loss;

3. Only recognize passwords but not people. Logically, people are not the masters of computers.

In fact, the safest boot-up measure is that relevant personnel should be within the visual range of the computer when booting up. This boot-up method can largely solve various loopholes brought about by technology, and ensure that personnel related to the host (host) The owner or asset manager) artificially monitors the start-up of the machine within the visible range of the machine, and at the same time does not increase the operational complexity of the start-up process, becoming a start-up protection mode around people.

Contents of the invention

The invention ensures that a legitimate user can monitor the whole booting process during the booting process of the system through wireless technical means, so as to ensure the legal use of the host computer. Improve the reliability of password protection by allowing legitimate users to monitor within the visible range, or use such a host protection method to replace password booting.

In one aspect of the present invention, an initial setting method in a system including a central control device, at least one wireless device, and at least one controlled device is provided, comprising the steps of: starting the controlled device, and entering the basic input and output system ; establish a connection between the controlled device and the central control device; the controlled device sends an asset registration request to the central control device through the connection; the central control device generates an asset registration request in response to the asset registration request the controlled device key, and send it to the controlled device; the controlled device saves the controlled device key in a dedicated memory; and the central control device searches for wireless devices through short-range radio communication , and store the identifiers of the wireless devices of the same group in the memory.

In another aspect of the present invention, there is provided a secure boot method in a system including a central control device, at least one wireless device, and at least one controlled device, the central control device storing an identifier of the wireless device , the secure boot method includes the steps of: starting the controlled device; establishing a connection between the controlled device and the central control device; the controlled device sends an authentication to the central control device through the connection request; the central control device responds to the authentication request and mutually authenticates the controlled device; the central control device searches for the wireless device corresponding to the stored wireless device identifier through short-range radio communication; and if the searched The wireless device, the central control device sends a signal allowing subsequent operations to the controlled device, otherwise, the controlled device automatically shuts down.

In the present invention, because it can ensure that there are legal users in the visible range during the booting process, the problem of not being able to enter the system normally caused by password loss is avoided. In addition, the present invention ensures that the host can also be used when the mobile phone is lost or cannot be accessed at close range through centralized management and registration.

Description of drawings

Figure 1 is a system usage scenario of a method according to an embodiment of the present invention, in which the circle represents the radio coverage of the central control device;

Figure 2 shows the process of the controlled device registering with the central control device;

Fig. 3 shows the process of the wireless device registering with the central control device;

Fig. 4 is a flow chart of a secure boot method according to an embodiment of the present invention.

Detailed ways

Specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

FIG. 1 is a system usage scenario of a method according to an embodiment of the present invention, where the circles represent the radio coverage of the central control device. As shown in Figure 1, a plurality of controlled devices 11 and 12 in the office area visible to the human eye are linked together through a network 40 to form a group, and a central control device (standard PC, server or dedicated device) is set 20. The central control device 20 has short-distance wireless (such as Bluetooth) and network connection (Ethernet or WiFi) capabilities, and has certain information processing capabilities. In the following description, a standard PC is used as the central control device 20 prototypes. In FIG. 1 , controlled devices 11 and 12 , such as computers, are connected to a central control device 20 through a local area network (LAN) 40 . The firmware of the controlled devices 11 and 12 supports the extended firmware interface standard. The legal owner 30 of the controlled device 12 carries a wireless device (not shown) capable of short-range wireless communication.

FIG. 2 shows a flowchart of an initial setup process according to an embodiment of the present invention. For a controlled device such as a computer, it must first be set to the working mode of the present invention. As shown in Figure 2, after the controlled device is started, it enters the PEI process, that is, the pre-EFI initialization process. Afterwards, the user enters the basic input output system (BIOS) through keyboard operations such as pressing the DEL key, and performs settings.

Next, call the network driver to establish a connection with the central control device. If a connection can be established between the controlled devices 11 and 12 and the central control device 20, it will be further judged whether the central control device 20 is protected by the Key, for example, whether the central control device 20 is inserted with a USB Key. If the connection cannot be established, or the central control device 20 is not protected by the Key, it is considered that the registration of the controlled device fails. If a USB Key is inserted on the central control device 20 at this time, that is, the central control device 20 is protected by the key, then the controlled devices 11 and 12 send an asset registration request to the central control device 20 through the established connection. After receiving the asset registration requests from the controlled devices 11 and 12, the central control device 20 generates keys for the controlled devices 11 and 12, and sends the keys back to the controlled devices 11 and 12 respectively.

Then, the controlled devices 11 and 12 compare the received key with the pre-stored key, or the user judges whether the key is legal. In a dedicated memory such as OptionROM or HPA, the registration process ends.

In the power-on method of the present invention, legal users need to be within the visible range, so legal users need to be authenticated in advance, that is, the IDs of wireless devices belonging to the same group are authenticated in advance. Flow chart of device authentication.

As shown in Figure 3, at the beginning of the authentication process, it is also necessary to judge whether the central control device 20 is protected by the Key, that is, to judge whether a USB Key is inserted in the central control device 20. If the central control device 20 is not protected by the key, exit the authentication process. If the central control device 20 is protected by the Key, the central control device 20 searches for wireless devices within the effective range A (see FIG. 1 ) through short-distance wireless communication, and then judges whether any wireless device joins the group. If not, the authentication fails. If there is a wireless device to join the group at this time, it is further judged whether the wireless device is suitable for joining the group, and if it is deemed not suitable, the authentication process is exited.

If the wireless device to be added to this group is suitable, the central control device 20 saves the ID of the wireless device in the memory, and ends the authentication process.

Fig. 4 shows a flow chart of the secure boot method of the present invention. As shown in FIG. 4 , after the controlled devices 11 and 12 are restarted, they enter the PEI process, that is, the pre-EFI initialization process.

Then, a network driver program such as TCP/IP protocol is loaded to establish a network connection with the central control device 20 . If the central control device 20 cannot be connected, the controlled device will automatically stop. If it is connected to the central control device 20, it will be further judged whether the central control device 20 is protected by the Key, such as whether a USB Key is inserted in the central control device 20.

If the central control device 20 is protected by a key, the controlled devices 11 and 12 can send authentication requests to the central control device 20, for example, authenticate each other through authentication methods such as Kerboros to confirm whether the other party is legal.

After passing the authentication, the central control device 20 searches whether the wireless device corresponding to the stored wireless device ID is within the valid range through short-distance radio communication, that is, whether the stored wireless device ID can be found again.

If one wireless device in the same group of wireless devices is within the effective range, the central control device 20 sends a confirmation signal to the controlled devices 11 and 12, and subsequent operations can be performed, such as entering the operating system. If the central control device 20 does not find the relevant wireless device at this time, the controlled devices 11 and 12 will automatically shut down or prompt the user to wait for the arrival of a legitimate user.

In the above method, a desktop device that can be protected by KEY is used as the central control device 20, and such a device has Bluetooth or other short-distance wireless communication capabilities and an Ethernet interface. However, the application environment of the present invention is not limited to the above-mentioned system, and a special central control device can also be used as an accessory of the controlled devices 11 and 12 such as a PC, attached to the controlled device, and communicated with the controlled device through a USB interface. The central control device is directly connected, and the central control device must also have an independent Bluetooth function or other short-distance radio communication functions.

In the case where the central control device is used as an accessory of the controlled device, the connection between the controlled device and the central control device is not the above-mentioned network connection, but a direct connection.

In addition, in the above-mentioned method, the legal user needs to carry the wireless device at any time. If the legal user does not intend to place the wireless device within the effective range of the central control device 20, but when he is outside the effective range, there will be an unsafe boot. risks of. Therefore, if no suitable wireless device is found during the search process of the central control device 20, the central control device 20 sends a request signal to all wireless devices in the same group, and at least one wireless device in a group returns an acknowledgment signal, indicating After being allowed to start up, the central control device 20 sends a signal to the controlled devices 11 and 12 to allow subsequent operations.

In addition, the time for the central control device 20 to search for wireless devices can also be set. If the time exceeds a predetermined time threshold, the controlled devices 11 and 12 are prohibited from performing subsequent operations or entering the operating system.

The above is only a specific implementation mode in the present invention, but the scope of protection of the present invention is not limited thereto. Anyone familiar with the technology can easily think of changes or replacements within the technical scope disclosed in the present invention. All should be covered within the scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims.

Claims (20)

1. An initial setting method in a system including a central control device, at least one wireless device and at least one controlled device, comprising the steps of: Start the controlled device and enter the basic input and output system; establishing a connection between the controlled device and the central control device; The controlled device sends an asset registration request to the central control device through the connection; The central control device generates a controlled device key in response to the asset registration request, and sends it to the controlled device; The controlled device stores the controlled device key in a dedicated memory; and The central control device searches for wireless devices through short-distance radio communication, and stores identifiers of wireless devices in the same group in a memory. 2. The initial setting method according to claim 1, further comprising the steps of: judging whether the central control device is protected by a key before establishing the connection; and If the central control device is protected by a key, a connection is established; otherwise, the setting process is ended. 3. The initial setting method according to claim 2, wherein the key is a USB key. 4. The initial setting method according to claim 1 or 2, further comprising the steps of: judging whether the received controlled device key is legal; and If the key of the controlled device is legal, it is stored in the dedicated memory, otherwise, the setting process is ended. 5. The initial setting method according to claim 4, wherein it is determined whether the controlled device key is legal by comparing the controlled device key with a pre-stored key. 6. The initial setting method according to claim 5, wherein the dedicated memory is OptionROM or a hidden partition. 7. The initial setting method according to claim 1, wherein the central control device searches for the wireless device through Bluetooth communication. 8. The initial setting method according to claim 1, wherein the controlled device invokes a network driver to establish a network connection with the central control device. 9. The initial setting method according to claim 1, wherein the central control device is directly connected to the central control device through a universal serial bus interface. 10. The initial setting method according to claim 1, wherein the controlled device supports the extended firmware interface standard. 11. A method of secure booting in a system including a central control device, at least one wireless device, and at least one controlled device, the central control device stores an identifier of the wireless device, and the secure boot method comprises steps : activate said controlled device; establishing a connection between the controlled device and the central control device; The controlled device sends an authentication request to the central control device through the connection; The central control device responds to the authentication request to mutually authenticate with the controlled device; The central control device searches for a wireless device corresponding to the stored wireless device identifier through short-range radio communication; and If the wireless device is found, the central control device sends a signal allowing subsequent operations to the controlled device, otherwise, the controlled device automatically shuts down. 12. The safe boot method according to claim 11, further comprising the steps of: judging whether the central control device is protected by a key before establishing the connection; and If the central control device is protected by a key, a connection is established; otherwise, the booting process is terminated. 13. The secure boot method according to claim 12, wherein the key is a USB key. 14. The secure boot method according to claim 11, wherein the step of the central control device searching for the wireless device corresponding to the stored wireless device identifier through short-distance radio communication comprises: The central control device sends a request signal to the wireless device; The wireless device returns an acknowledgment signal to the central control device in response to the request signal. 15. The safe boot method according to any one of claims 11-14, characterized in that if the search time for the wireless device exceeds a predetermined time threshold, the controlled device is prohibited from performing subsequent operations. 16. The secure boot method according to claim 11, wherein the controlled device and the central control device perform mutual authentication through a Kerboros authentication method. 17. The secure boot method according to claim 11, wherein the controlled device invokes a network driver to establish a network connection with the central control device. 18. The secure boot method according to claim 11, wherein the central control device is directly connected to the central control device through a Universal Serial Bus interface. 19. The secure boot method according to claim 11, wherein the controlled device supports the extended firmware interface standard. 20. The secure boot method according to claim 11, wherein if the central control device does not find the wireless device, it sends a prompt to wait for a legitimate user to arrive.

Images