CN114780929A - Electronic equipment and processing method - Google Patents

Abstract

The present application discloses an electronic device and a processing method. The electronic device comprises: a housing with a accommodating space formed thereon, a first interface is provided on the housing and/or in the accommodating space, and a first interface is provided on the housing and/or in the accommodating space. A first file stored in a first storage space connected to the first interface can be obtained, the first file is a file used to support the operation of a first system, and the first system is used to initialize the electronic device . The first file used to support the operation of the first system is acquired through the first interface, thereby effectively ensuring the security of the operation of the first system.

Description

An electronic device and processing method

technical field

The present application relates to the technical field of information security, and in particular, to an electronic device and a processing method.

Background technique

With the development of computer information technology, the security of electronic equipment has been paid more and more attention. The startup of a PC (Personal Computer) mainly starts from a BIOS (Basic Input and Output System, a basic input and output system). If the BIOS is not secure, the security of the entire PC cannot be guaranteed.

SUMMARY OF THE INVENTION

Embodiments of the present application provide an electronic device and a processing method.

According to a first aspect of the present application, there is provided an electronic device, comprising: a casing with a accommodating space formed thereon, a first interface is provided on the casing and/or in the accommodating space, through which the first interface can A first file stored in a first storage space connected to the first interface is obtained, where the first file is a file used to support the operation of a first system, and the first system is used to initialize the electronic device.

According to an embodiment of the present application, the casing and/or the accommodating space is further provided with: a second interface, which is used to transmit data through the second interface after the first system initializes the first system.

According to an embodiment of the present application, the electronic device further includes: a first processor, configured to obtain the first file through the first interface, and perform security verification on the first file, so that the The first file of security verification supports the operation of the first system.

According to an embodiment of the present application, the electronic device further includes: a second processor, associated with the first interface, configured to receive an access request from the first processor to access the first interface, based on the The access request authenticates the first processor, and if the authentication of the first processor is passed, the first processor is allowed to acquire data through the first interface.

According to a second aspect of the present application, there is also provided a processing method, the method comprising: obtaining a first file stored in a first storage space connected to the first interface through a first interface that does not require initialization, the The first file is a file used to support the operation of the first system, and the first system is used to initialize the electronic device; based on the first file, the first system is supported to be started.

According to an embodiment of the present application, the supporting the startup of the first system based on the first file includes: supporting the running of the first part of the first system based on the first file, the first part of the first system used to initialize the electronic device; obtain the second file in the second storage space connected to the second interface through the second interface; based on the second file, support the second part of the first system to run, the The second part of the first system is used for booting the operating system.

According to an embodiment of the present application, supporting the operation of the first part of the first system based on the first file includes: performing security verification on the first file, so that the first file that has passed the security verification supports all The first part of the first system operates.

According to an embodiment of the present application, the first file includes a first sub-file and a second sub-file of the first system, the first sub-file is generated according to a private key configured for the first system, the The private key is stored in a third storage space independent of the electronic device; correspondingly, supporting the operation of the first part of the first system based on the first file includes: pairing the first system with a pre-stored public key. Decrypt the sub-file to obtain a decryption result; compare the decryption result with the pre-stored verification data to verify the security of the first file; under the condition that the decryption result is consistent with the pre-stored verification data, run the a first file to support the operation of the first part of the first system; wherein the public key corresponds to the private key.

According to an embodiment of the present application, before acquiring the first file from the first storage space connected to the first interface through the first interface that does not require initialization, the method further includes: in response to starting the electronic device's triggering signal, requesting to obtain the startup password of the first system of the electronic device; receiving the startup password; verifying the startup password; in the case of passing the startup password verification, execute the foregoing process to make the startup password Electronic equipment starts.

According to an embodiment of the present application, the first file is an encrypted file; correspondingly, supporting the first system startup based on the first file includes: performing security verification on the first file; If the first file is verified successfully, the third file is verified according to the first file, the storage location of the third file is different from that of the first file, and the third file is a basic input output system file.

The electronic device and the processing method provided by the embodiments of the present application include: a housing with a accommodating space formed thereon, a first interface is provided on the housing and/or in the accommodating space, and a first interface is provided on the housing and/or in the accommodating space. A first file stored in the first storage space connected to the first interface can be obtained, the first file is a file used to support the operation of a first system, and the first system is used to initialize the electronic device . The first file used to support the operation of the first system is acquired through the first interface, thereby effectively ensuring the security of the operation of the first system.

It should be understood that the teachings of the present application do not need to achieve all the above-mentioned beneficial effects, but specific technical solutions can achieve specific technical effects, and other embodiments of the present application can also achieve the beneficial effects not mentioned above. Effect.

Description of drawings

The above and other objects, features and advantages of exemplary embodiments of the present application will become readily understood by reading the following detailed description with reference to the accompanying drawings. In the accompanying drawings, several embodiments of the present application are shown by way of example and not limitation, wherein:

In the drawings, the same or corresponding reference numerals denote the same or corresponding parts.

FIG. 1 shows a schematic diagram of the composition and structure of an electronic device according to an embodiment of the present application;

FIG. 2 shows a schematic structural diagram of an application example of an electronic device according to an embodiment of the present application;

FIG. 3 shows a schematic flowchart of the implementation of the processing method provided by the first embodiment of the present application;

FIG. 4 shows a schematic flowchart of the implementation of the processing method provided by the second embodiment of the present application;

FIG. 5 shows a schematic flowchart of the implementation of the processing method provided by the third embodiment of the present application;

FIG. 6 shows a schematic flowchart of the implementation of the processing method provided by the fourth embodiment of the present application;

FIG. 7 shows a schematic flowchart of the implementation of the processing method provided by the fifth embodiment of the present application.

Detailed ways

The principles and spirit of the present application will be described below with reference to several exemplary embodiments. It should be understood that these embodiments are only provided for those skilled in the art to better understand and implement the present application, but do not limit the scope of the present application in any way. Rather, these embodiments are provided so that this application will be thorough and complete, and will fully convey the scope of this application to those skilled in the art.

The technical solutions of the present application will be further elaborated below with reference to the accompanying drawings and specific embodiments.

FIG. 1 shows a schematic diagram of the composition and structure of an electronic device according to an embodiment of the present application.

Referring to FIG. 1 , an electronic device 10 according to an embodiment of the present application includes a housing 101 formed with a accommodating space 102 , a first interface 103 is provided on the housing 101 and/or in the accommodating space 102 , and storage can be obtained through the first interface 103 The first file in the first storage space 104 connected to the first interface 103 is a file used to support the operation of the first system, and the first system is used to initialize the electronic device 10 .

In this embodiment of the present application, the electronic device 10 may be a portable notebook computer, a desktop computer, a server, or the like. The first interface 103 may be a logical interface conforming to NVMe (Non Volatile Memory Express, non-volatile memory host controller interface specification), and can be used directly after the EC is powered on.

The first storage space may be a non-volatile storage device such as an SSD having a logical interface conforming to NVMe.

The first system may be the BIOS.

In this embodiment of the present application, the first file may include at least a digital signature or a digital certificate for BIOS system startup. Some or all of the BIOS system files may also be included.

In this embodiment of the present application, a second interface 105 is further provided on the casing 101 and/or in the accommodating space 102 , and the second interface 105 is used to transmit data through the second interface 105 after the first system pair is initialized.

In this embodiment of the present application, the second interface needs to be used after initializing the first system, and the second file in the second storage space connected to the second interface can be obtained through the second interface, The second file and the first file form a complete file for supporting the operation of the first system. For example, if the first file only includes the digital signature or digital certificate for booting the BIOS system, the second file is the complete file of the BIOS system. If the first file includes the digital certificate for booting the BIOS system and part of the BIOS system file, the second file is other files in the BIOS system file except the part included in the first file.

In this embodiment of the present application, the electronic device 10 further includes: a first processor 106, configured to obtain the first file through the first interface 103, and perform security verification on the first file, so that the first file that has passed the security verification The file supports the operation of the first system.

In this embodiment of the present application, the first processor 106 may be a CPU or a SOC or a Chipset (chipset), such as a north bridge and a south bridge.

In this embodiment of the present application, the electronic device 10 further includes: a second processor 107, associated with the first interface 103, for receiving an access request from the first processor 106 to access the first interface 103, and based on the access request The first processor 106 performs identity verification, and allows the first processor 106 to acquire data through the first interface 103 if the identity verification of the first processor 106 is passed.

In this embodiment of the present application, the second processor 107 may be a processing chip provided by an NVMe storage device, and the NVMe storage device may be a processing chip provided by a solid state drive or the like.

In this embodiment of the present application, the data acquired through the first interface 103 may be the first file or other files.

In addition, it should be noted that the second interface 105, the first processor 106 and the second processor 107 are included in a more preferred embodiment of the present invention, and are not made in this embodiment of the present application. Specific restrictions.

FIG. 2 shows a schematic structural diagram of an application example of an electronic device according to an embodiment of the present application.

Referring to FIG. 2 , applying the electronic device according to the embodiment of the present application, the BIOS file is divided into two parts, and one part is stored in a storage device having an NVMe-compliant interface, such as a solid-state hard disk. Based on the electronic device shown in Figure 2, the security of the electronic device can be guaranteed through the following operation process:

1. Use the private key of the owner of the electronic device to encrypt the BIOS file stored in the storage space with the SPI interface and the BIOS file stored in the storage space with the NVMe interface to obtain a digital certificate.

2. Store the encrypted digital certificate in a set location, for example, you can store the digital certificate in a solid-state drive with an NVMe interface.

3. When the electronic device is powered on and starts to start, the digital certificate is obtained from the external solid-state hard disk with NVMe interface through the NVMe boot partition technology, and then the first part of the BIOS file stored in the Boot FW SPI FLASH (hard disk with SPI interface) is stored and the second part of the BIOS file stored to the NVMe BIOS FW (SSD with NVMe-compliant interface) are verified separately. If the verification is passed, it can be booted normally. If the verification is not passed, the halt (stop) operation will be performed.

It should be noted that, in the embodiments of the present application, the solid-state disk having the NVMe interface is also referred to as the NVMe key disk.

4. If a power-on BIOS password is set for the electronic device, the encrypted ciphertext of the power-on BIOS password can be stored in a solid-state hard disk having an NVMe-compliant interface. For example, in the process of setting the power-on BIOS password, the MD5 digest value algorithm can be used to calculate the first hash value of the power-on BIOS password, and the first hash value of the power-on BIOS password can be stored in the solid state drive with the NVMe-compliant interface , which is used in subsequent verification of the power-on BIOS password. During the next power-on process of the electronic device, in the case of receiving the power-on request of the electronic device, the power-on BIOS password is detected, and when the power-on BIOS password input by the user of the electronic device is detected, the first digit of the received power-on BIOS password is calculated. Second hash value, and then compare the second hash value with the first hash value, if they are the same, it is determined that the boot BIOS password is passed.

In addition, authentication can be performed before the BIOS is started. For example, it is possible to generate a BootKey (startup password), encrypt the BootKey with the private key of the owner of the electronic device, and store the encrypted BootKey in a solid-state hard disk with an NVMe-compliant interface. When the power-on request of the electronic device is detected, the CPU can use the NVMeBoot Partition (NVMe boot partition) technology to read the encrypted BootKey, and then use the public key corresponding to the private key to verify the encrypted BootKey, and the verification is normal. Execute the subsequent boot process of the BIOS. If the power-on BIOS password is set on the electronic device, the power-on BIOS password needs to be verified after the boot-up password is verified, and if the power-on BIOS password is also verified, the subsequent boot process of the BIOS is normally performed.

FIG. 3 shows a schematic flowchart of the implementation of the processing method provided by the first embodiment of the present application.

Referring to FIG. 3 , the processing method according to the embodiment of the present application includes at least the following operation flow: In operation 301, a first file stored in a first storage space connected to the first interface is obtained through a first interface that does not require initialization. The first file The first system is a file for supporting the operation of the first system, and the first system is used to initialize the electronic device; in operation 302, based on the first file, the first system is supported to be started.

In operation 301, a first file stored in a first storage space connected to the first interface is obtained through a first interface that does not require initialization. The first file is a file used to support the operation of the first system. to initialize electronic equipment.

In this embodiment of the present application, the first interface may be an NVMe-compliant interface.

In operation 302, based on the first file, a first system startup is supported.

In this embodiment of the present application, the first file includes at least the digital certificate of the BIOS system, and may also include part of the BIOS file. Here first, the embodiment of the present application is described by taking the first file including the digital certificate of the BIOS system as an example.

For example, when the CPU obtains the digital certificate of the BIOS system, the CPU can decrypt the first file according to the public key stored by the CPU to obtain the decrypted data. The decrypted data is compared with the pre-stored verification data to verify the security of the first file.

Specifically, a public key can be used to decrypt the digital certificate to obtain a first hash value, and a hash operation is performed on the first file to obtain a second hash value, where the first hash value is the same as the second hash value In the case of , it is determined that the verification of the first file is passed. At this time, the BIOS of the electronic device can be initialized, so that the CPU can transmit data through the second interface, so as to obtain the second file through the second interface, and complete the startup of the first system.

The public key is a pre-configured public key for the BIOS, and the public key corresponds to a private key stored in a third storage space independent of the electronic device. The third storage space may be the cloud, a dedicated key storage device, a USB flash drive, or a computer that stores keys, etc.

FIG. 4 shows a schematic flowchart of the implementation of the processing method provided by the second embodiment of the present application.

Referring to FIG. 4 , the processing method of the embodiment of the present application includes at least the following operation flow:

Operation 401: Obtain a first file stored in a first storage space connected to the first interface through a first interface that does not require initialization, where the first file is a file used to support the operation of the first system, and the first system is used for initialization Electronic equipment.

In operation 402, based on the first file, the first part of the first system is supported to run, and the first part of the first system is used to initialize the electronic device.

For example, the first storage space has a memory whose interface conforms to the NVMe interface specification and is connected to the motherboard, and the second storage space is SPI Flash (a memory with an SPI interface). The first system is the BIOS. The first file includes the BIOS system file of the digital certificate part of the BIOS system startup.

After the first file is obtained, the digital certificate is firstly verified with reference to the above operation 302 for security. In the case of passing the security verification, run a part of the BIOS system file obtained from the first storage space to complete the initialization of the BIOS system. The initialization of the BIOS at least includes the initialization of the second interface. After the BIOS initialization is completed, the following can be performed. In operation 403, the second file in the second storage space connected to the second interface is acquired through the second interface.

In operation 403, the second file in the second storage space connected to the second interface is acquired through the second interface.

In operation 404, based on the second file, the second part of the first system is supported to run, and the second part of the first system is used to boot the operating system to start.

In this embodiment of the present application, after the first part and the second part of the first system are supported to run, the BIOS can be started.

For example, the digital certificate in the first storage space is securely verified by using the public key stored in the CPU. In the case that the verification of the digital certificate is passed, the first part that supports the running of the BIOS is obtained from the first storage space, and the first part of the BIOS is securely verified by using the digital certificate. If the security verification of the first part of the BIOS is passed, the second part that supports the running of the BIOS is obtained from the second storage space, and the second part that supports the running of the BIOS is verified again according to the digital certificate. When both the first part and the second part supporting the running of the BIOS are verified and passed, the first part and the second part supporting the running of the BIOS are run to complete the initialization of the BIOS.

As a result, the files of the two parts of the BIOS are cross-checked, and any part of the two parts is damaged or tampered with, it is forbidden to boot, thereby effectively ensuring the data security of the electronic device.

In this embodiment of the present application, security verification is performed on the first file, so that the first file that has passed the security verification supports the operation of the first system, and thus supports the operation of the first part of the first system based on the first file.

The specific implementation process of operation 401 is similar to the specific implementation process of operation 101 in the embodiment shown in FIG. 1 , and details are not repeated here.

FIG. 5 shows a schematic flowchart of the implementation of the processing method provided by the third embodiment of the present application.

Referring to FIG. 5, in the processing method of the embodiment of the present application, the first file includes a first sub-file and a second sub-file of the first system, the first sub-file is generated according to the private key configured for the first system, and the private key is stored in an independent The third storage space of the electronic device at least includes the following operation procedures:

Operation 501: Obtain a first file stored in a first storage space connected to the first interface through a first interface that does not require initialization, where the first file is a file used to support the operation of the first system, and the first system is used for initialization Electronic equipment.

In operation 502, the first subfile is decrypted according to the public key stored by the processor to obtain a decryption result, wherein the public key is the public key configured by the first system, and the public key corresponds to the private key.

In operation 503, the decryption result is compared with the pre-stored verification data to verify the security of the first file.

In operation 504, if the decryption result is consistent with the pre-stored verification data, run the first file.

The specific implementation process of operations 501 to 504 is similar to the specific implementation process of operations 101 to 102 in the embodiment shown in FIG. 1 , and details are not repeated here.

FIG. 6 shows a schematic flowchart of the implementation of the processing method provided by the fourth embodiment of the present application.

Referring to FIG. 6 , the processing method of the embodiment of the present application includes at least the following operation flow:

In operation 601, in response to a trigger signal for starting the electronic device, request to obtain a start-up password of a first system of the electronic device.

In operation 602, an activation password is received.

In operation 603, the activation password is verified.

In operation 604, if the startup password verification is passed, the foregoing process is performed to enable the electronic device to be started.

Specifically, the startup of the BIOS is divided into three stages: the first stage is the power-on self-check process of BIOS startup; the second stage is the process of BIOS startup and electronic device initialization; the third stage is the process of booting the operating system.

The operations in Figure 3-5 above are all executed in the second stage of BIOS startup.

In this embodiment of the present application, authentication is performed in the first stage of BIOS startup, that is, before the BIOS is started. For example, it is possible to generate a BootKey (startup password), encrypt the BootKey with the private key of the owner of the electronic device, and store the encrypted BootKey in a solid-state hard disk with an NVMe-compliant interface. When the power-on request of the electronic device is detected, the CPU can use the NVMe Boot Partition (NVMe Boot Partition) technology to read the encrypted BootKey, and then use the public key corresponding to the private key to verify the encrypted BootKey. Execute the subsequent startup process of the BIOS normally. If the power-on BIOS password is set on the electronic device, the power-on BIOS password needs to be verified after the boot-up password is verified, and if the power-on BIOS password is also verified, the subsequent boot process of the BIOS is normally performed.

Operation 605: Obtain a first file stored in a first storage space connected to the first interface through a first interface that does not require initialization, where the first file is a file used to support the operation of the first system, and the first system is used for initialization Electronic equipment.

In operation 606, based on the first file, the first system startup is supported.

The specific implementation process of operations 605 and 606 is similar to the specific implementation process of operations 101 and 102 in the embodiment shown in FIG. 1 , and details are not repeated here.

FIG. 7 shows a schematic flowchart of the implementation of the processing method provided by the fifth embodiment of the present application.

Referring to FIG. 7 , in the processing method of the embodiment of the present application, the first file is an encrypted file, and the processing method of the embodiment of the present application includes at least the following operation flow:

Operation 701: Obtain a first file stored in a first storage space connected to the first interface through a first interface that does not require initialization, where the first file is a file used to support the operation of the first system, and the first system is used for initialization Electronic equipment.

In operation 702, security verification is performed on the first file.

In operation 703, if the first file is verified successfully, verify the third file according to the first file, the storage location of the third file is different from that of the first file, and the third file is a BIOS file.

For example, the CPU may first obtain the digital certificate of the BIOS from the solid-state drive with the NVMe-compliant interface. The digital certificate is decrypted by using the public key pre-stored in the CPU and configured for the BIOS, so as to perform security verification on the digital certificate. In the case that the verification of the digital certificate is passed, the BIOS file is obtained from the hard disk, and the BIOS file is verified according to the digital certificate.

Wherein, other specific implementation processes of operations 701 to 703 are similar to the specific implementation processes of operations 101 to 102 in the embodiment shown in FIG. 1 , and details are not repeated here.

Through the above processing method, the key of the BIOS is stored in the storage space with the NVMe-compliant interface. The storage space with the NVMe-compliant interface must be connected to the electronic device and the verification of the BIOS digital certificate can be completed. The BIOS of the electronic device is initialized and further starts the electronic device. A storage space having an interface conforming to NVMe is a physical device that can be stored independently. Therefore, the dependency relationship between the physical devices of the electronic device is fully utilized, and the data security of the electronic device is effectively improved. If the storage space with the NVMe-compliant interface is missing, the verification of the BIOS cannot be completed, and the power-on operation of the electronic device cannot be completed.

In the electronic device and the processing method provided by the embodiments of the present application, the electronic device includes: a housing 101 with a accommodating space 102 formed therein, and a first interface is provided on the housing 101 and/or in the accommodating space 102, through which the first interface can be obtained The first file stored in the first storage space connected to the first interface is a file used to support the operation of the first system, and the first system is used to initialize the electronic device. The first file used to support the operation of the first system is acquired through the first interface, thereby effectively ensuring the security of the operation of the first system.

Similarly, based on the above processing method, an embodiment of the present application further provides a computer-readable storage medium, where the computer-readable storage medium stores a program, and when the program is executed by the processor, the processor is caused to perform at least the following operation steps: Operation 301: Obtain a first file stored in a first storage space connected to the first interface through a first interface that does not require initialization, where the first file is a file used to support the operation of the first system, and the first system is used for initialization The electronic device; in operation 302, based on the first file, support the startup of the first system.

It should be pointed out here that the above description of the electronic device embodiments in FIGS. 1 and 2 is similar to the description of the method embodiments shown in FIGS. Similar beneficial effects are not repeated here. For technical details that are not disclosed in the device embodiments of the present application, please refer to the descriptions of the processing method embodiments shown in FIGS. 2 to 7 of the present application for understanding. In order to save space, they will not be repeated.

It should be noted that, herein, the terms "comprising", "comprising" or any other variation thereof are intended to encompass non-exclusive inclusion, such that a process, method, article or device comprising a series of elements includes not only those elements, It also includes other elements not expressly listed or inherent to such a process, method, article or apparatus. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in a process, method, article or apparatus that includes the element.

In the several embodiments provided in this application, it should be understood that the disclosed apparatus and method may be implemented in other manners. The device embodiments described above are only illustrative. For example, the division of units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated. to another system, or some features can be ignored, or not implemented. In addition, the coupling, or direct coupling, or communication connection between the components shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be electrical, mechanical or other forms. of.

The unit described above as a separate component may or may not be physically separated, and the component displayed as a unit may or may not be a physical unit; it may be located in one place or distributed to multiple network units; Some or all of the units may be selected according to actual needs to achieve the purpose of the solution in this embodiment.

In addition, each functional unit in each embodiment of the present application may all be integrated into one processing unit, or each unit may be separately used as a unit, or two or more units may be integrated into one unit; the above integration The unit can be implemented either in the form of hardware or in the form of hardware plus software functional units.

Those of ordinary skill in the art can understand that all or part of the steps of implementing the above method embodiments can be completed by program instructions related to hardware, the aforementioned program can be stored in a computer-readable storage medium, and when the program is executed, the execution includes: The steps of the above method embodiments; and the aforementioned storage medium includes: a removable storage device, a read only memory (Read Only Memory, ROM), a magnetic disk or an optical disk and other media that can store program codes.

Alternatively, if the above-mentioned integrated units of the present application are implemented in the form of software function modules and sold or used as independent products, they may also be stored in a computer-readable storage medium. Based on such understanding, the technical solutions of the embodiments of the present application can be embodied in the form of software products in essence or in the parts that make contributions to the prior art. The computer software products are stored in a storage medium and include several instructions for A computer device (which may be a personal computer, a server, or a network device, etc.) is caused to execute all or part of the methods of the various embodiments of the present application. The aforementioned storage medium includes various media that can store program codes, such as a removable storage device, a ROM, a magnetic disk, or an optical disk.

The above are only specific embodiments of the present application, but the protection scope of the present application is not limited to this. Any person skilled in the art can easily think of changes or replacements within the technical scope disclosed in the present application, and should cover within the scope of protection of this application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims (10)

1. An electronic device, comprising:

the electronic equipment comprises a shell, wherein an accommodating space is formed on the shell, a first interface is arranged on the shell and/or in the accommodating space, a first file stored in a first storage space connected with the first interface can be obtained through the first interface, the first file is a file used for supporting the operation of a first system, and the first system is used for initializing the electronic equipment.

2. The electronic device of claim 1, further comprising, disposed on the housing and/or within the receiving space:

a second interface for enabling data to be transferred through the second interface after the first system initializes the first system.

3. The electronic device of claim 1, further comprising:

and the first processor is used for obtaining the first file through the first interface and carrying out security verification on the first file so as to enable the first file passing the security verification to support the operation of the first system.

4. The electronic device of claim 3, further comprising:

and the second processor is associated with the first interface and used for receiving an access request of the first processor for accessing the first interface, authenticating the first processor based on the access request, and allowing the first processor to acquire data through the first interface under the condition that the authentication of the first processor is passed.

5. A method of processing, the method comprising:

the method comprises the steps that a first file stored in a first storage space connected with a first interface is obtained through the first interface which does not need to be initialized, the first file is used for supporting a first system to operate, and the first system is used for initializing electronic equipment;

supporting the first system boot based on the first file.

6. The method of claim 5, the enabling the first system boot based on the first file, comprising:

supporting a first part of a first system to run based on the first file, wherein the first part of the first system is used for initializing the electronic equipment;

acquiring a second file in a second storage space connected with a second interface through the second interface;

and supporting a second part of the first system to run based on the second file, wherein the second part of the first system is used for guiding the starting of the operating system.

7. The method of claim 6, the supporting a first portion of the operation of a first system based on the first file, comprising:

and performing security verification on the first file, so that the first file passing the security verification supports the operation of the first part of the first system.

8. The method of claim 6, the first file comprising a first subfile and a second subfile of the first system, the first subfile generated from a private key configured for the first system, the private key stored in a third storage space separate from the electronic device; accordingly, the method can be used for solving the problems that,

the supporting of the first part of the first system running based on the first file comprises:

decrypting the first subfile according to a pre-stored public key to obtain a decryption result;

comparing the decryption result with pre-stored verification data to verify the security of the first file;

under the condition that the decryption result is consistent with pre-stored verification data, operating the first file to support the first part operation of the first system;

wherein the public key corresponds to the private key.

9. The method of claim 5, prior to retrieving a first file from a first storage space connected to the first interface through a first interface that does not require initialization, the method further comprising:

responding to a trigger signal for starting the electronic equipment, and requesting to acquire a starting password of a first system of the electronic equipment;

receiving the starting password;

verifying the starting password;

and in the case that the starting password is verified, executing the process to enable the electronic equipment to start.

10. The method of any of claims 5 to 9, the first file being an encrypted file; accordingly, the method can be used for solving the problems that,

the supporting of the first system boot based on the first file includes:

performing security verification on the first file;

and under the condition that the first file passes the verification, verifying a third file according to the first file, wherein the storage position of the third file is different from that of the first file, and the third file is a basic input and output system file.

Images