基于片上系统的EFI安全机制研究  

Research on EFI security based on on-chip system

作　　者：陈峰[1] 

机构地区：[1]浙江省公安厅科技通信管理局,杭州310009

出　　处：《计算机应用》2009年第B12期314-317,321,共5页journal of Computer Applications

基　　金：国家863计划项目(2005AA1Z2130)

摘　　要：可扩展固件接口(EFI)是用来替代BIOS的固件技术,能够克服BIOS的缺点,提供比BIOS更为强大的功能和更好的交互性。EFI独立于操作系统存在,能够直接对硬件进行控制,从而为系统的安全运行带来了威胁。对此提出了基于片上系统的EFI安全机制。该机制利用芯片上提供的硬件资源,设计了EFI固件的监控机制,提供EFI固件的安全保护。实验结果分析表明,基于片上系统的EFI安全机制能够实现对EFI固件的良好安全保护。Extensible Firmware Interface （EFI） is the firmware technology proposed to replace BIOS. It can overcome the disadvantages of BIOS and provide more powerful functions and better interactions than BIOS. The execution of EFI is independent from the traditional operating system and it can control hardware of the system directly, which is the security threat to the system. The EFI security mechanism based on on-ehip system was proposed to solve this prob]em. The security mechanism was designed based on the hardware resources on ehips to provide security protection to EFI firmware. The analysis of the experimental results showed that the EFI seeurity mechanism based on on-chip system could provide well protection to the EFT firmware.

关 键 词：固件 可扩展固件接口 片上系统 安全机制 系统级芯片 操作系统 片上存储器 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]