面向多处理器的内网计算机BIOS口令集中管理机制研究  

Research on Centralized Management Mechanism of BIOS Password for Multi-kind Processor Platform

作　　者：孙亮 陈小春 鲍天明[2] 王博[3] 任彤 汤大鹏 SUN Liang;CHEN Xiaochun;BAO Tianming;WANG Bo;REN Tong;TANG Dapeng(ZD Technologies(Beijing)Co.,Ltd.,Beijing 100083,China;Jiangnan Institute of Computing Technology,Wuxi Jiangsu 214000,China;National Internet Emergency Center,Beijing 100094,China)

机构地区：[1]中电科技(北京)有限公司,北京100083 [2]江南计算技术研究所,江苏无锡214000 [3]国家互联网应急中心,北京100094

出　　处：《信息安全与通信保密》2021年第2期63-74,共12页Information Security and Communications Privacy

摘　　要：随着自主可控计算机产业链的不断完善,大量国产计算机终端已在企事业单位应用。BIOS口令是计算机安全管理的第一道门户,如何在异构处理器和多种操作系统并存环境下,对内网计算机终端BIOS口令进行安全管理成为迫切需要解决的问题。通过设计基于固件的BIOS口令集中管理系统总体框架,融合终端自动发现、BIOS口令自适应统一更新等关键技术,可解决内网计算机BIOS口令定时更新、统一管理的难题。目前,BIOS口令集中管理系统已在X86和龙芯处理器平台的计算机终端集群中进行部署试用,取得良好效果。With the continuous improvement of the independent and controllable computer industry chain,a large number of domestic computer terminals have been applied in enterprises and institutions.BIOS password is the first gateway of computer security management.How to manage the BIOS password of Intranet computer terminals in the coexistence of heterogeneous processors and multiple operating systems has become an urgent problem to be solved.By designing the overall framework of BIOS password centralized management system based on firmware and integrating the key technologies such as terminal automatic discovery and BIOS password adaptive unified update,the problem of BIOS password regular update and unified management of Intranet computer can be solved.At present,the BIOS password centralized management system has been deployed in the computer terminal cluster of X86 and Loongson processor platform,and achieved good results.

关 键 词：国产计算机 基本输入输出系统 国产操作系统 终端安全 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]