基于安全模组的嵌入式系统安全启动设计  

Design of Security Start-up of Embedded System Based on Security Module

作　　者：赵华 张宇新 何迎利 Zhao Hua;Zhang Yuxin;He Yingli(NARI Group Corporation/State Grid Electric Power Research Institute,Nanjing 211106,China;NARI Information&Communication Technology Co.,Ltd.)

机构地区：[1]南瑞集团有限公司(国网电力科学研究院有限公司),南京211106 [2]南京南瑞信息通信科技有限公司

出　　处：《单片机与嵌入式系统应用》2021年第11期18-21,共4页Microcontrollers & Embedded Systems

基　　金：南京南瑞信息通信科技有限公司科技项目——电力多形态5G终端及智能物联网关研发(5246DR210003)。

摘　　要：围绕嵌入式设备启动过程的安全要求,本文提出了一种安全可信电路的设计,实现可信嵌入式系统。本文对该安全可信电路的设计方法进行分析,首先在嵌入式设备上电后进行交互验证,然后再利用安全模组对启动过程中的数据进行完整性度量,从而实现一种可信嵌入式系统。实验结果表明,安全模组具有安全和低时延等特点。在可信嵌入式系统中可以实现完整性度量,从而实现嵌入式设备的安全启动。In order to meet the security requirements of the start-up process of embedded devices,a secure and trusted circuit to implement a trusted embedded system is designed.This paper analyzes the design method of the safe and feasible circuit,through the interactive verification after the embedded device is powered on,and then uses the security module to measure the integrity of the data in the startup process,so as to realize a trusted embedded system.The experiment results show that the security module has stronger security features and lower delay.The integrity measurement is implemented in trusted embedded system to realize the safe start-up of embedded devices.

关 键 词：UBOOT 安全启动 STM32 安全模组 可信嵌入式系统 

分 类 号：TP368.1[自动化与计算机技术—计算机系统结构]