CN111695111A - Secure startup method and device of firmware program - Google Patents

Abstract

The present invention relates to the technical field of information security, and in particular to a method and device for safely starting a firmware program. The method includes: starting a preset trusted program, and applying the trusted program to update firmware in a distributed control system DCS Send the program to a preset security chip; enable the security chip to check whether the firmware program is a legal program; when the firmware program is a legal program, start the firmware program; when the firmware program is not a legal program, The firmware program is inhibited from starting. By applying the method, the legality of the firmware program in the distributed control system DCS can be checked by the security chip, so as to ensure that the firmware program is started when it is a legal program, thereby improving the security of the DCS.

Description

Method and device for secure booting of firmware program

technical field

The present invention relates to the technical field of information security, in particular to a method and device for safely starting a firmware program.

Background technique

In the distributed control system DCS, each data transmission process of the DCS is implemented by the DCS controller. However, when data is transmitted through the DCS controller, it is usually transmitted in plaintext, so that the DCS controller cannot verify the authenticity of the data. Therefore, in the process of data transmission, there may be illegal users sending illegal data such as Trojans or viruses. It is transmitted to the DCS, and the final firmware program of the DCS is attacked or tampered with, resulting in internal changes in the firmware program. When the tampered firmware program is started, an illegal user controls various system functions of the DCS through the tampered firmware program, which reduces the security of the DCS.

SUMMARY OF THE INVENTION

In view of this, the present invention provides a method for safely starting a firmware program. By this method, a security chip is used to verify the validity of the firmware program in the distributed control system DCS, so as to ensure that the firmware program is started when it is a legal program. Improve the security of DCS.

The present invention also provides a secure boot device for a firmware program to ensure the actual implementation and application of the above method.

A secure boot method for a firmware program, comprising:

Start a preset trusted program, and apply the trusted program to send the firmware program in the distributed control system DCS to a preset security chip;

enabling the security chip to check whether the firmware program is a legitimate program;

When the firmware program is a legal program, start the firmware program;

When the firmware program is not a legal program, it is prohibited to start the firmware program.

In the above method, optionally, the enabling of the security chip to check whether the firmware program is a legitimate program includes:

Obtain the binary code contained in the firmware program, and calculate the binary code to obtain the check value corresponding to the firmware program;

obtaining the hash value pre-stored in the security chip;

The check value and the hash value are matched, and if the check value matches the hash value, it is determined that the firmware program is a legitimate program.

In the above method, optionally, the calculation of the binary code to obtain the check value corresponding to the firmware program includes:

obtaining a hash algorithm preset in the security chip;

Hash operation is performed on the binary code by applying the hash algorithm to obtain a check value corresponding to the firmware program.

The above method, optionally, further includes:

When receiving the firmware update message sent by the preset host computer, obtain the authentication key contained in the firmware update message;

Invoke a preset upgrade program to communicate securely with the host computer, and obtain firmware information corresponding to the firmware update message in the host computer;

using the authentication key to authenticate the firmware information;

When the authentication of the firmware information is passed, the target firmware program to be updated contained in the firmware information is acquired, and the target firmware program is updated to the DCS.

The above method, optionally, after updating the target firmware program to the DCS, further includes:

Obtain the target binary code contained in the target firmware program;

Calling a preset hash algorithm to calculate the target binary code to obtain a target check value corresponding to the target firmware program;

The target check value is determined as a new hash value and stored in the security chip.

A secure boot device of a firmware program, comprising:

a sending unit, configured to start a preset trusted program, and use the trusted program to send the firmware program in the distributed control system DCS to a preset security chip;

a checking unit, configured to enable the security chip to check whether the firmware program is a legitimate program;

a startup unit, configured to start the firmware program when the firmware program is a legal program;

A prohibiting unit, configured to prohibit starting the firmware program when the firmware program is not a legal program.

The above-mentioned device, optionally, the inspection unit includes:

A calculation subunit, used for obtaining the binary code contained in the firmware program, and calculating the binary code to obtain a check value corresponding to the firmware program;

a first obtaining subunit, used to obtain a pre-stored hash value in the security chip;

A matching subunit, configured to match the check value with the hash value, and if the check value matches the hash value, determine that the firmware program is a legitimate program.

The above-mentioned device, optionally, the inspection unit includes:

The second obtaining subunit is used for obtaining a hash algorithm preset in the security chip; applying the hash algorithm to perform a hash operation on the binary code to obtain a check value corresponding to the firmware program.

The above-mentioned device, optionally, also includes:

a first obtaining unit, configured to obtain an authentication key included in the firmware update message when receiving a firmware update message sent by a preset host computer;

a communication unit, configured to call a preset upgrade program to communicate securely with the host computer, and obtain firmware information corresponding to the firmware update message in the host computer;

a verification unit, configured to perform identity verification on the firmware information by applying the authentication key;

An update unit, configured to acquire a target firmware program to be updated contained in the firmware information when the firmware information is authenticated, and update the target firmware program to the DCS.

The above-mentioned device, optionally, also includes:

The second obtaining unit is used to obtain the target binary code included in the target firmware program;

a calculation unit, configured to call a preset hash algorithm to calculate the target binary code to obtain a target check value corresponding to the target firmware program;

A storage unit, configured to determine the target check value as a new hash value and store it in the security chip.

A storage medium, wherein the storage medium includes stored instructions, wherein when the instructions are executed, a device on which the storage medium is located is controlled to execute the above-mentioned secure booting method of a firmware program.

An electronic device includes a memory and one or more instructions, wherein the one or more instructions are stored in the memory and configured to execute the above-mentioned secure boot method of a firmware program by one or more processors.

Compared with the prior art, the present invention includes the following advantages:

The present invention provides a method for safely starting a firmware program, comprising: starting a preset trusted program, and applying the trusted program to send the firmware program in the distributed control system DCS to a preset security chip; enabling all the trusted programs The security chip checks whether the firmware program is a legal program; when the firmware program is a legal program, starts the firmware program; when the firmware program is not a legal program, prohibits starting the firmware program. By applying the method, the legality of the firmware program in the distributed control system DCS can be checked by the security chip, so as to ensure that the firmware program is started when it is a legal program, thereby improving the security of the DCS.

Description of drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present invention. For those of ordinary skill in the art, other drawings can also be obtained according to the provided drawings without creative work.

1 is a method flowchart of a method for safely booting a firmware program according to an embodiment of the present invention;

2 is another method flow chart of a method for safely booting a firmware program according to an embodiment of the present invention;

3 is another method flow chart of a method for safely booting a firmware program according to an embodiment of the present invention;

4 is a flowchart of another method of a method for safely booting a firmware program according to an embodiment of the present invention;

5 is a device structure diagram of a secure boot device for a firmware program provided by an embodiment of the present invention;

FIG. 6 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

In this application, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that any such relationship exists between these entities or operations. The terms "comprising", "comprising" or any other variation thereof are intended to cover a non-exclusive inclusion such that a process, method, article or device comprising a series of elements includes not only those elements, but also Include other elements not expressly listed, or which are inherent to such a process, method, article or apparatus. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in a process, method, article or apparatus that includes the element.

The present invention may be used in numerous general purpose or special purpose computing device environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet-type devices, multi-processor devices, distributed computing environments including any of the above, and the like.

An embodiment of the present invention provides a method for securely booting a firmware program. The method can be applied to various system platforms, and the execution body of the method can be a computer terminal or a processor of various mobile devices. The method flowchart of the method is shown in the figure 1, including:

S101: Start a preset trusted program, and apply the trusted program to send the firmware program in the distributed control system DCS to a preset security chip;

In the embodiment of the present invention, before the firmware program in the distributed control system DCS is started, a trusted program preset in the DCS is started first, wherein the trusted program is a non-tamperable program obtained by writing a trusted computing technology The trusted measurement root program is solidified in the controller of the DCS. The trusted program can send the firmware program in the DCS to the security chip, so that the security chip can perform security verification on the firmware program.

It should be noted that, in this embodiment of the present invention, the security chip may be a memory chip disposed inside the CPU of the DCS, and the security chip may perform security verification on the firmware program through a certain encryption algorithm or verification technology.

S102: Enable the security chip to check whether the firmware program is a legitimate program;

In the embodiment of the present invention, after applying the trusted program to send the firmware program in the DCS to the security chip, the security chip is enabled, and the firmware program in the DCS is checked by the security chip to determine the firmware program whether it is a legal process.

It should be noted that the firmware program is pre-programmed in the DCS to implement the process of DCS data transmission. Since the firmware program in the DCS is not upgraded and updated, the firmware program is the same program every time it is started. Therefore, the firmware program in the DCS needs to be verified by the trusted program and the security chip before each startup. whether the program is legal.

S103: when the firmware program is a legal program, start the firmware program;

In this embodiment of the present invention, when the security chip is enabled to verify the firmware program and determine that the firmware program is a legitimate program, it can be determined that the firmware program has not been attacked or tampered with by an illegal user before the firmware program is started. Therefore, when the firmware program is a legal program, the firmware program can be safely booted.

S104: When the firmware program is not a legal program, it is forbidden to start the firmware program.

In the embodiment of the present invention, when the security chip checks the firmware program and determines that the firmware program is an illegal program, it can be determined that the firmware program may have been attacked or tampered with by an illegal user before being started, and the current firmware program is not It is the firmware program originally programmed in the DCS. Therefore, when the firmware program is an illegal program, it is necessary to prohibit the startup of the firmware program.

In the method for safely starting a firmware program provided by the embodiment of the present invention, before the firmware program in the DCS is started, it is necessary to determine whether the firmware program has been attacked or tampered with by an illegal user, and to perform a security check on the firmware program. Write a trusted program that cannot be tampered with in the DCS, and solidify the trusted program in the controller of the DCS. Before starting the firmware program, start the trusted program, and use the trusted program to send the firmware program to in the pre-set security chip. Enable the security chip to check the firmware program to determine whether the firmware program is a legitimate program. When it is determined that the firmware program is a legal program, the firmware program is allowed to start, otherwise, the firmware program is prohibited from being started.

In the method provided by the embodiment of the present invention, optionally, when the firmware program is an illegal program, a prompt message corresponding to the illegal program may be fed back to a preset information receiving end. Wherein, the information receiving end may be a device such as a server, a client, and the like for receiving a DCS feedback message. Users can change the firmware program and perform anti-virus operations on the DCS according to the prompt message of the information receiving end.

By applying the method provided by the embodiment of the present invention, before the firmware program in the DCS is started, the validity of the firmware program is checked by the trusted program and the security chip, so as to ensure that the firmware program is a legal program when it is started, and the reliability of the DCS is improved. safety.

In the method provided by the embodiment of the present invention, based on the content in the above step S102, after the application trusted program sends the firmware program to the security chip, the security chip is enabled to verify the firmware program whether the firmware program is a legitimate program. As shown in Figure 2, it can specifically include:

S201: Obtain the binary code contained in the firmware program, and calculate the binary code to obtain a check value corresponding to the firmware program;

In the embodiment of the present invention, the binary code of the firmware program is set in the firmware program of the DCS. If the firmware program is attacked or tampered with, the binary code will be changed. Therefore, when the legitimacy of the firmware program needs to be checked, the binary code in the firmware program is obtained. The binary code is calculated to obtain a check value that needs to be checked for the firmware program. Wherein, if the binary code in the firmware program changes, the corresponding check value will also change.

It should be noted that, in this embodiment of the present invention, the check value may actually be a hash value of the binary code of the firmware program in the DCS.

S202: Obtain a pre-stored hash value in the security chip;

In the embodiment of the present invention, a hash value corresponding to a legal firmware program is stored in the security chip, and the hash value is a value obtained after the binary code included in the legal firmware program is calculated. The hash value is stored in the security chip in advance, and when it is necessary to verify whether the firmware program is a legitimate program, the hash value in the security chip is obtained for verification.

S203: Match the check value with the hash value, and if the check value matches the hash value, determine that the firmware program is a legitimate program.

In this embodiment of the present invention, the check value is matched with the hash value. If the firmware program is not attacked or tampered with by an illegal user, the binary code of the firmware program will not be changed, and the obtained check value will not be changed. If the check value is consistent with the hash value, it can be determined that the firmware program has not been attacked or tampered with, and the firmware program is a legitimate program. When the firmware program is a legal program, the firmware program can be safely started.

In the method for safely starting a firmware program provided by the embodiment of the present invention, in order to ensure the security of the DCS when the firmware program is started, the firmware program is checked by a hash value pre-stored in the security chip. By acquiring the binary code contained in the firmware program and calculating the binary code, a check value for performing security verification on the firmware program is obtained. The hash value pre-stored in the security chip is acquired, the check value is matched with the hash value, and if the matching is consistent, it can be determined that the firmware program is a legitimate program. Optionally, if the check value does not match the hash value, that is, the check value is inconsistent with the hash value, it is determined that the firmware program has been tampered with and is an illegal program.

In the method provided based on the above embodiment, in step S201, after obtaining the binary code in the firmware program, the binary code needs to be calculated to obtain the check value corresponding to the firmware program, which may specifically include:

obtaining a hash algorithm preset in the security chip;

Hash operation is performed on the binary code by applying the hash algorithm to obtain a check value corresponding to the firmware program.

In the method for securely booting a firmware program provided by the embodiment of the present invention, a hash algorithm is set in the security chip, and a hash calculation can be performed on the binary code of the firmware program. When hashing the binary code of the firmware program, the binary code can be regarded as a segment of binary value, and the binary value is calculated. If any one of the binary values changes, the calculated check value will also change. The check value may actually be a hash value obtained by performing a hash operation on the binary value through a hash algorithm. Therefore, the check value can be matched with the hash value in the security chip to determine whether the check value is consistent with the hash value, and whether the firmware program is attacked can be determined by matching the check value and the hash value. or tampered with.

Using the method provided by the embodiment of the present invention, the binary code of the firmware program is calculated by a hash algorithm, the check value of the firmware program is obtained, and then the hash value of the legal firmware program pre-stored in the security chip is obtained. The check value and the hash value determine the legitimacy of the firmware program to prevent illegal firmware programs from being started in the DCS, which ensures the security of the DCS.

In the method provided by the embodiment of the present invention, the firmware program is a program pre-programmed in the DCS. Before the firmware program is upgraded, it is necessary to ensure that the firmware program that is started each time is a legal program in the DCS. When the firmware program in the DCS needs to be upgraded, an update process corresponding to the upgrade of the new firmware program needs to be performed. The flow chart of the specific update process is shown in Figure 3, which may further include:

S301: when receiving a firmware update message sent by a preset host computer, obtain an authentication key included in the firmware update message;

In the embodiment of the present invention, when the firmware program in the DCS needs to be upgraded, the host computer will deliver a firmware update message to the DCS. When receiving the firmware update message sent by the host computer to the DCS, obtain the authentication key included in the firmware update message.

It should be noted that, the host computer in the embodiment of the present invention may be a preset device that issues a firmware update message for the DCS, and is used to cooperate with the DCS to safely upgrade the firmware program.

S302: Invoke a preset upgrade program to perform secure communication with the host computer, and obtain firmware information corresponding to the firmware update message in the host computer;

In the embodiment of the present invention, an upgrade program is set in the DCS, which is used for safe communication with the upper computer, and upgrades the firmware program in cooperation with the upper computer. After secure communication with the host computer through the upgrade program, the firmware information corresponding to the firmware update message is obtained.

It should be noted that, in order to ensure the security of the firmware program upgrade process, the firmware information is transmitted in an encrypted transmission manner.

S303: Use the authentication key to perform identity verification on the firmware information;

In the embodiment of the present invention, after the firmware information is obtained, the authentication key included in the firmware update message is used to authenticate the encrypted firmware information, so as to ensure the legality of the obtained firmware information.

S304: When the authentication of the firmware information is passed, acquire the target firmware program to be updated contained in the firmware information, and update the target firmware program to the DCS.

In the embodiment of the present invention, when the identity verification of the firmware information is passed, the source representing the firmware information is legal, and the required target firmware program is obtained from the firmware information, and the target firmware program is updated to the DCS. An upgrade of the firmware program in the DCS.

In the method for safely starting the firmware program provided by the embodiment of the present invention, when the firmware program in the DCS needs to be upgraded, a firmware update message is sent to the DCS through the host computer, and the host computer sets the authentication key in the firmware update message. After receiving the firmware update message sent by the host computer to the DCS, obtain the authentication key contained in the firmware update message, and then perform secure communication with the host computer through the upgrade program, so as to obtain the corresponding firmware update message during the secure communication process. Firmware information. The firmware information is encrypted and transmitted, and the firmware information in the host computer is acquired by the host computer and the upgrade program after secure communication. The firmware information is authenticated by the pre-acquired authentication key, the security of the firmware information is further determined, the firmware information is prevented from being attacked or tampered with during the transmission process, and the security of the source of firmware program upgrade is guaranteed. If the identity authentication is passed, the target firmware program contained in the firmware information can be obtained, and the firmware program can be updated to the DCS, so as to complete the upgrade of the firmware program in the DCS.

It should be noted that, after the firmware program is upgraded, the original firmware program can be deleted, and the hash value originally stored in the security chip can also be deleted.

By applying the method provided by the embodiment of the present invention, when the firmware program needs to be updated, it is necessary to carry out secure communication with the host computer through the upgrade program, and after obtaining the firmware information, the authentication key is used for identity verification, so as to ensure that during the process of upgrading the firmware program, The security of the firmware program source prevents illegal users from tampering with the target firmware program during the firmware program upgrade process, further improving the security of the DCS.

In the method provided by the embodiment of the present invention, in the process of upgrading the firmware program based on the above-mentioned embodiment, after the target firmware program is updated to the DCS, the hash value of the target firmware program also needs to be saved in the security chip to ensure that When the target firmware program is subsequently started, the security check is performed on the target firmware program. The specific process of storing the new hash value to the security chip is shown in Figure 4, and may also include:

S401: Obtain the target binary code contained in the target firmware program;

In the embodiment of the present invention, after the target firmware program is updated to the DCS, the hash value in the security chip needs to be updated as well. Therefore, it is necessary to obtain the target binary code in the target firmware program. Since the firmware program has been updated, the binary code of the target firmware program is different from the original firmware program.

S402: Invoke a preset hash algorithm to calculate the target binary code, and obtain a target check value corresponding to the target firmware program;

In the embodiment of the present invention, after the target binary code of the target firmware program is obtained, a preset hash algorithm is invoked to calculate the target binary code. Wherein, the hash algorithm may be a hash algorithm preset in the security chip, or may be a hash algorithm additionally set outside the security chip of the DCS. When the hash algorithm is the hash algorithm set in the security chip, the target binary code can be sent to the security chip, and the target binary code can be hashed by applying the hash algorithm in the security chip. After hash operation is performed on the target binary code, a target check value corresponding to the target firmware program is obtained.

S403: Determine the target check value as a new hash value and store it in the security chip.

In this embodiment of the present invention, the target check value is determined as a new hash value of the target firmware program, and the new hash value is stored in the security chip.

Optionally, in the method provided by the embodiment of the present invention, after the new hash value is stored in the security chip, when the DCS needs to start the target firmware program, the specific implementation of the above steps S101 to S104 may be performed. The process will not be repeated here.

In the method for safely booting the firmware program provided by the embodiment of the present invention, in order to ensure the security of the DCS, after the target firmware program is updated, a new hash value corresponding to the target firmware program needs to be stored in the security chip. The target check value is obtained by acquiring the target binary code in the target firmware program and calling a preset hash algorithm to perform a hash operation on the target binary code. The target check value is determined as a new hash value and stored in the security chip, so as to ensure that the target firmware program is checked for security through the new hash value in the security chip before each time the target firmware program is started.

By applying the method provided by the embodiment of the present invention, after updating the target firmware program, a new hash value is re-stored, so as to ensure that the target firmware program can be checked for security every time it is started, and further ensure the security of the DCS.

The specific implementation process of each of the above-mentioned embodiments and the derivatives thereof are all within the protection scope of the present invention.

Corresponding to the method described in FIG. 1 , an embodiment of the present invention also provides a secure boot device for a firmware program, which is used for the specific implementation of the method in FIG. 1 . The secure boot device for a firmware program provided by the embodiment of the present invention may be When applied to a computer terminal or various mobile devices, a schematic diagram of its structure is shown in Figure 5, which specifically includes:

A sending unit 501, configured to start a preset trusted program, and apply the trusted program to send the firmware program in the distributed control system DCS to a preset security chip;

A checking unit 502, configured to enable the security chip to check whether the firmware program is a legitimate program;

A startup unit 503, configured to start the firmware program when the firmware program is a legal program;

The prohibiting unit 504 is configured to prohibit starting the firmware program when the firmware program is not a legal program.

In the method for securely booting a firmware program provided by the embodiment of the present invention, after the trusted program is started, the sending unit applies the trusted program to send the firmware program to the security chip, and the checking unit checks whether the firmware program is a legal program. If it is a legal program, the startup unit starts the firmware program, and if it is an illegal program, the prohibition unit prohibits the firmware program from starting, so as to ensure the safety of the DCS.

In the apparatus provided by the embodiment of the present invention, the inspection unit 502 includes:

A calculation subunit, used for obtaining the binary code contained in the firmware program, and calculating the binary code to obtain a check value corresponding to the firmware program;

a first obtaining subunit, used to obtain a pre-stored hash value in the security chip;

A matching subunit, configured to match the check value with the hash value, and if the check value matches the hash value, determine that the firmware program is a legitimate program.

In the apparatus provided by the embodiment of the present invention, the inspection unit 502 includes:

The second obtaining subunit is used for obtaining a hash algorithm preset in the security chip; applying the hash algorithm to perform a hash operation on the binary code to obtain a check value corresponding to the firmware program.

In the device provided by the embodiment of the present invention, it also includes:

a first obtaining unit, configured to obtain an authentication key included in the firmware update message when receiving a firmware update message sent by a preset host computer;

a communication unit, configured to call a preset upgrade program to communicate securely with the host computer, and obtain firmware information corresponding to the firmware update message in the host computer;

a verification unit, configured to perform identity verification on the firmware information by applying the authentication key;

An update unit, configured to acquire a target firmware program to be updated contained in the firmware information when the firmware information is authenticated, and update the target firmware program to the DCS.

In the device provided by the embodiment of the present invention, it also includes:

The second obtaining unit is used to obtain the target binary code included in the target firmware program;

a calculation unit, configured to call a preset hash algorithm to calculate the target binary code to obtain a target check value corresponding to the target firmware program;

A storage unit, configured to determine the target check value as a new hash value and store it in the security chip.

For the specific working process of each unit and sub-unit in the secure boot device of the firmware program disclosed in the above embodiments of the present invention, reference may be made to the corresponding content in the secure boot method of the firmware program disclosed by the above embodiments of the present invention, which will not be repeated here.

An embodiment of the present invention further provides a storage medium, where the storage medium includes stored instructions, wherein when the instructions are executed, the device where the storage medium is located is controlled to execute the above-mentioned secure boot method of the firmware program.

An embodiment of the present invention also provides an electronic device, the schematic structural diagram of which is shown in FIG. 6 , and specifically includes a memory 601 and one or more instructions 602 , wherein one or more instructions 602 are stored in the memory 601 and are processed through the memory 601 . The one or more instructions 602 are configured to be executed by one or more processors 603 to:

Start a preset trusted program, and apply the trusted program to send the firmware program in the distributed control system DCS to a preset security chip;

enabling the security chip to check whether the firmware program is a legitimate program;

When the firmware program is a legal program, start the firmware program;

When the firmware program is not a legal program, it is prohibited to start the firmware program.

Each embodiment in this specification is described in a progressive manner, and the same and similar parts between the various embodiments may be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system or the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and reference may be made to the partial description of the method embodiment for related parts. The systems and system embodiments described above are only illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, It can be located in one place, or it can be distributed over multiple network elements. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution in this embodiment. Those of ordinary skill in the art can understand and implement it without creative effort.

Professionals may further realize that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two.

In order to clearly illustrate the interchangeability of hardware and software, the components and steps of each example have been generally described in terms of functions in the foregoing description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Skilled artisans may implement the described functionality using different methods for each particular application, but such implementations should not be considered beyond the scope of the present invention.

The above description of the disclosed embodiments enables any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (10)

1. a safe booting method of firmware program, is characterized in that, comprises: Start a preset trusted program, and apply the trusted program to send the firmware program in the distributed control system DCS to a preset security chip; enabling the security chip to check whether the firmware program is a legitimate program; When the firmware program is a legal program, start the firmware program; When the firmware program is not a legal program, it is prohibited to start the firmware program. 2. The method according to claim 1, wherein said enabling the security chip to check whether the firmware program is a legitimate program comprises: Obtain the binary code contained in the firmware program, and calculate the binary code to obtain the check value corresponding to the firmware program; obtaining the hash value pre-stored in the security chip; The check value and the hash value are matched, and if the check value matches the hash value, it is determined that the firmware program is a legitimate program. 3. The method according to claim 2, wherein the step of calculating the binary code to obtain a check value corresponding to the firmware program comprises: obtaining a hash algorithm preset in the security chip; Hash operation is performed on the binary code by applying the hash algorithm to obtain a check value corresponding to the firmware program. 4. The method of claim 1, further comprising: When receiving the firmware update message sent by the preset host computer, obtain the authentication key contained in the firmware update message; Invoke a preset upgrade program to communicate securely with the host computer, and obtain firmware information corresponding to the firmware update message in the host computer; using the authentication key to authenticate the firmware information; When the authentication of the firmware information is passed, the target firmware program to be updated contained in the firmware information is acquired, and the target firmware program is updated to the DCS. 5. The method according to claim 4, wherein after updating the target firmware program to the DCS, the method further comprises: Obtain the target binary code contained in the target firmware program; Calling a preset hash algorithm to calculate the target binary code to obtain a target check value corresponding to the target firmware program; The target check value is determined as a new hash value and stored in the security chip. 6. A safety boot device of a firmware program, characterized in that, comprising: a sending unit, configured to start a preset trusted program, and use the trusted program to send the firmware program in the distributed control system DCS to a preset security chip; a checking unit, configured to enable the security chip to check whether the firmware program is a legitimate program; a startup unit, configured to start the firmware program when the firmware program is a legal program; A prohibiting unit, configured to prohibit starting the firmware program when the firmware program is not a legal program. 7. The device according to claim 6, wherein the inspection unit comprises: A calculation subunit, used for obtaining the binary code contained in the firmware program, and calculating the binary code to obtain a check value corresponding to the firmware program; a first obtaining subunit, used to obtain a pre-stored hash value in the security chip; A matching subunit, configured to match the check value with the hash value, and if the check value matches the hash value, determine that the firmware program is a legitimate program. 8. The device according to claim 6, wherein the inspection unit comprises: The second obtaining subunit is used for obtaining a hash algorithm preset in the security chip; applying the hash algorithm to perform a hash operation on the binary code to obtain a check value corresponding to the firmware program. 9. The apparatus of claim 6, further comprising: a first obtaining unit, configured to obtain an authentication key included in the firmware update message when receiving a firmware update message sent by a preset host computer; a communication unit, configured to call a preset upgrade program to communicate securely with the host computer, and obtain firmware information corresponding to the firmware update message in the host computer; a verification unit, configured to perform identity verification on the firmware information by applying the authentication key; An update unit, configured to acquire a target firmware program to be updated contained in the firmware information when the firmware information is authenticated, and update the target firmware program to the DCS. 10. The apparatus of claim 9, further comprising: The second obtaining unit is used to obtain the target binary code included in the target firmware program; a calculation unit, configured to call a preset hash algorithm to calculate the target binary code to obtain a target check value corresponding to the target firmware program; A storage unit, configured to determine the target check value as a new hash value and store it in the security chip.

Images