CN115878199A - Chip operating system startup method, device, equipment and storage medium - Google Patents

Abstract

The application relates to a method, a device, equipment and a storage medium for starting an operating system of a chip. The method comprises the following steps: the method comprises the steps of determining the sequence of downloading a starting program of a chip from a multi-level storage path according to a voltage value of a pin of the chip configured in advance, downloading the starting program, a signature corresponding to the starting program and a public key for signing a first hash value of the starting program from the multi-level storage path corresponding to the sequence, if the starting program, the signature corresponding to the starting program and the public key for signing the first hash value of the starting program are downloaded successfully from any one of the multi-level storage paths, not inquiring the multi-level storage path corresponding to the rest sequence, verifying the starting program based on the public key and the signature, and if the verification is passed, operating the starting program and starting an operating system of the chip. The method and the device can improve the reliability, the safety and the flexibility of chip starting.

Description

Chip operating system startup method, device, equipment and storage medium

technical field

The present application relates to the field of chip technology, and in particular to a method, device, device and storage medium for starting an operating system of a chip.

Background technique

Embedded system chips usually use multi-level programs to start the operating system corresponding to the chip. In the prior art, when starting the operating system corresponding to the chip, the first-level program of the multi-level program will be downloaded from a fixed storage medium. If there is a problem with the downloaded driver design or due to other reasons, the startup code of the later stage cannot be downloaded normally, and the chip will fail to start. In addition, if a malicious third party tampers with the file stored in the fixed storage medium If the startup code is directly run and downloaded to the startup code, it will bring huge security risks to the entire system.

Contents of the invention

In view of the above, the present application provides a chip operating system startup method, device, equipment and storage medium, the purpose of which is to solve the technical problems of low chip startup reliability, security and flexibility in the prior art.

In a first aspect, the present application provides a method for starting an operating system of a chip, the method comprising:

determining the sequence of downloading the startup program of the chip from the multi-level storage path according to the pre-configured voltage values of the pins of the chip;

Download the startup program, the signature corresponding to the startup program, and the public key for signing the first hash value of the startup program from the multi-level storage path corresponding to the sequence, if in the multi-level storage path If any one-level storage path is downloaded successfully, the multi-level storage path corresponding to the remaining sequence will not be inquired again;

The startup program is verified based on the public key and the signature, and if the verification is passed, the startup program is run and the operating system of the chip is started.

In a second aspect, the present application provides a device for starting an operating system of a chip, and the device for starting an operating system of the chip includes:

Determination module: used to determine the order of downloading the startup program of the chip from the multi-level storage path according to the pre-configured voltage values of the pins of the chip;

Download module: used to download the startup program, the signature corresponding to the startup program, and the public key for signing the first hash value of the startup program from the multi-level storage path corresponding to the sequence, if in the If the download of any one of the multi-level storage paths is successful, the remaining multi-level storage paths corresponding to the sequence will not be inquired again;

A startup module: used to verify the startup program based on the public key and the signature, and if the verification is passed, run the startup program and start the operating system of the chip.

In a third aspect, the present application provides an electronic device, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory complete communication with each other through the communication bus;

memory for storing computer programs;

The processor is configured to implement the steps of the chip operating system startup method described in any one embodiment of the first aspect when executing the program stored in the memory.

In a fourth aspect, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the method for starting the operating system of a chip as described in any one embodiment of the first aspect is implemented. step.

Compared with the prior art, the above-mentioned technical solutions provided by the embodiments of the present application have the following advantages:

This application supports downloading the startup program from the multi-level storage path to start the operating system corresponding to the chip. As long as the startup program is downloaded from any one of the multi-level storage paths and the startup is successful, the chip can work normally, avoiding the problem of A situation in which the chip startup fails when the download in the storage medium fails, improves the reliability of the chip startup. The downloaded startup program is verified through the downloaded public key and signature in the multi-level storage path, and the startup program is run only when the verification is passed, so as to avoid running the startup program even when the downloaded startup program is a malicious program, thereby improving the security of the system. And because different voltage values of the chip pins correspond to different sequences of downloading the chip startup program, the order of downloading the chip startup program from the multi-level storage path can be determined according to the pre-configured voltage values of the chip pins, The download of the startup program is not limited to a certain storage path, avoiding the situation in the prior art that the chip startup program can only be downloaded from a fixed storage medium, and improving the flexibility of chip startup.

Description of drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the application and together with the description serve to explain the principles of the application.

In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, for those of ordinary skill in the art, In other words, other drawings can also be obtained from these drawings without paying creative labor.

Fig. 1 is the schematic flow chart diagram of the preferred embodiment of the operating system startup method of the chip of the present application;

Fig. 2 is the module schematic diagram of the preferred embodiment of the operating system starting device of the chip of the present application;

FIG. 3 is a schematic diagram of a preferred embodiment of the electronic device of the present application;

The realization, functional features and advantages of the present application will be further described in conjunction with the embodiments and with reference to the accompanying drawings.

Detailed ways

In order to make the purpose, technical solution and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present application, not to limit the present application. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.

It should be noted that the descriptions in this application involving "first", "second" and so on are for descriptive purposes only, and should not be understood as indicating or implying their relative importance or implicitly indicating the number of indicated technical features . Thus, the features defined as "first" and "second" may explicitly or implicitly include at least one of these features. In addition, the technical solutions of the various embodiments can be combined with each other, but it must be based on the realization of those skilled in the art. When the combination of technical solutions is contradictory or cannot be realized, it should be considered that the combination of technical solutions does not exist , nor within the scope of protection required by the present application.

The present application provides a method for starting an operating system of a chip. Referring to FIG. 1 , it is a schematic flow chart of an embodiment of a method for starting an operating system of a chip of the present application. The method can be executed by an electronic device, and the electronic device can be realized by software and/or hardware. The operating system startup method of the chip includes:

Step S10: According to the pre-configured voltage values of the pins of the chip, determine the order of downloading the startup program of the chip from the multi-level storage path;

Step S20: Downloading the startup program, the signature corresponding to the startup program, and the public key for signing the first hash value of the startup program from the multi-level storage path corresponding to the sequence, if in the If the download of any one of the multi-level storage paths is successful, the remaining multi-level storage paths corresponding to the sequence will not be inquired again;

Step S30: Verifying the startup program based on the public key and the signature, and if the verification is passed, run the startup program and start the operating system of the chip.

The chip may be an embedded system-on-chip (System on chip, SOC) chip installed in the electronic device. Embedded system chips usually use multi-level programs to start the operating system corresponding to the chip. For example, the sequence of multi-level programs is Bootrom→Bootloader→OS kernel (operating system kernel). Compared with the first-level program, the second-level The Bootloader is usually stored in the storage medium outside the chip, which can be easily programmed and modified. However, in order to prevent data loss after the chip is powered off and ensure boot security, the first-level code program is usually fixed in a rom memory inside the chip, which is called Bootrom for short. The code segment in the Bootrom cannot be modified after being fixed.

The main function of the code in the Bootrom is to download the post-stage boot program from the external storage medium of the chip to boot the chip. The operating system corresponding to the chip cannot be started. If the Bootrom code is only to download the startup code of the back stage from a fixed storage medium, for example, the Bootrom code downloads the backstage startup from the external embedded multimedia card according to the embedded multimedia card (Embedded MultiMedia Card, emmc) driver Program Bootloader, if there is a problem with the emmc driver that cannot be downloaded normally, the SOC will fail to start.

In this embodiment, the chip is started by downloading the startup program of the chip from a multi-level storage path, wherein the multi-level storage path includes emmc memory, nandflash memory and sdcard memory, as long as the chip can be successfully downloaded from any level of storage path Run the startup program, the chip can work normally, and when all the storage paths fail to download, the error message error will be returned, thereby improving the reliability of the chip startup. It can be understood that the multi-level storage path is a storage path outside the chip.

Specifically, different orders are pre-configured for downloading the startup program from the multi-level storage path, and the voltage values of the pins of the chip are configured so that the order of downloading the startup program corresponds to the voltage value of the pins. For example, the first download order is configured For nandflash-emmc-sdcard, the corresponding pin 1 and pin 2 are both low level, configure the second download sequence as emmc-nandflash-sdcard, the corresponding pin 1 is low level, and pin 2 is high level Level, configure the third download sequence as sdcard-emmc-nandflash, the corresponding pin 1 is low level, and pin 2 is high level. It can be understood that if it is necessary to switch the download sequence, it can be realized by modifying the external pin voltage. For example, if it is necessary to switch the first download sequence to the second download sequence, change pin 2 from low level to high level.

According to the voltage value of the pre-configured pins of the chip, the sequence of downloading the startup program of the chip from the multi-level storage path is determined, and the startup program, the signature corresponding to the startup program, and the startup program are downloaded from the multi-level storage path corresponding to the sequence. For example, if the determined download sequence is emmc-nandflash-sdcard, download from the multi-level storage path corresponding to the sequence, wherein each level of storage path in the multi-level storage path The startup program is stored, and each level of storage path stores the signature and public key corresponding to the startup program. The signature corresponding to the startup program refers to the signature obtained by executing the signature operation on the first hash value of the startup program. The public key is Refers to the public key that signed the first hash of the launcher. The first hash value refers to the hash value obtained by using the hash algorithm to hash the startup program before the startup program is stored in the multi-level storage path. The hash algorithm can be MD5 algorithm, SHA-1 algorithm, etc., in This is not limited.

The signature and public key are used to verify the legitimacy of the startup program (that is, to verify whether the downloaded startup program has been tampered with). If the download of any one of the multi-level storage paths is successful, the download order will not be asked again For other corresponding storage paths, for example, the download sequence is emmc-nandflash-sdcard. If the download is successful in the emmc storage, the nandflash storage and sdcard storage will not be inquired.

Use the public key and signature to verify the downloaded startup program, for example, use the hash algorithm to calculate the hash value of the downloaded startup program, use the public key to decrypt the signature, and obtain the hash value of the decrypted startup program, compare Whether the hash value obtained by decryption is the same as the hash value of the downloaded startup program, if they are the same, the verification is passed, otherwise the verification is not passed. If the downloaded startup program passes the verification, it means that the startup program has not been tampered with. At this time, run the startup program and start the operating system of the chip. If the verification fails, it means that the startup program has been maliciously tampered with. At this time, an error message is returned and the startup process of the chip is exited.

This application supports downloading the startup program from the multi-level storage path to start the operating system corresponding to the chip. As long as the startup program is downloaded from any one of the multi-level storage paths and the startup is successful, the chip can work normally, avoiding the problem of A situation in which the chip startup fails when the download in the storage medium fails, improves the reliability of the chip startup. Improve the reliability of chip startup. The downloaded startup program is verified by the downloaded public key and signature in the multi-level storage path, and the startup program is run only when the verification is passed, so as to avoid running the startup program even when the downloaded startup program is a malicious program, which improves the security of the system. And because different voltage values of the chip pins correspond to different sequences of downloading the chip startup program, the order of downloading the chip startup program from the multi-level storage path can be determined according to the pre-configured voltage values of the chip pins, The downloading of the startup program is not limited to a certain storage path, avoiding the situation in the prior art that the chip startup program can only be downloaded fixedly from one storage medium, and improving the flexibility of chip startup.

In one embodiment, before determining the order of downloading the startup program of the chip from the multi-level storage path according to the pre-configured voltage values of the pins of the chip, the method further includes:

calculating a first hash value of the startup program, and performing a signature operation on the first hash value using a private key of a pre-generated key pair to obtain a signature corresponding to the startup program;

calculating an initial hash value of the public key of the key pair, and storing the initial hash value of the public key in the internal storage space of the chip;

The signature corresponding to the startup program, the public key and the startup program are respectively stored in a multi-level storage path outside the chip.

The first hash value refers to the hash value obtained by using the hash algorithm to hash the startup program before the startup program is stored in the multi-level storage path. The public key and private key of the key pair can be generated using a key Generated by the tool, use the private key to perform a signature operation on the first hash value, obtain the signature corresponding to the startup program, calculate the initial hash value of the public key, and store the initial hash value of the public key in the internal storage space of the chip. The initial hash value of the public key is used to verify the public key subsequently downloaded from the multi-level storage path. After that, the signature, public key and startup program corresponding to the startup program are stored in the multi-level storage path outside the chip. Since the signature and public key corresponding to the startup program are stored in the multi-level storage path, when the subsequent chip downloads the startup program, it can use The signature and public key are used to verify the downloaded startup program, thereby verifying whether the startup program in the multi-level storage path has been tampered with by a malicious third party.

In one embodiment, the verifying the startup program based on the public key and the signature includes:

calculating the current hash value of the public key, and obtaining the initial hash value of the public key pre-stored in the internal storage space of the chip;

Verifying whether the current hash value is the same as the initial hash value;

If so, decrypt the signature based on the public key to obtain a first hash value of the boot program, and calculate a second hash value of the boot program that has been successfully downloaded;

verifying that the first hash value is the same as the second hash value;

If yes, the verification is passed.

Calculate the current hash value of the downloaded public key, and obtain the initial hash value of the public key pre-stored in the internal storage space of the chip, and verify whether the current hash value of the public key is the same as the initial hash value of the public key, if The same means that the downloaded public key has not been tampered with, so the downloaded public key can be used to decrypt the signature, and the first hash value of the startup program can be obtained by decrypting the signature according to the downloaded public key, and the hash value of the successfully downloaded startup program can be calculated. The second hash value, the second hash value refers to the hash value of the downloaded startup program, if the second hash value of the startup program is the same as the first hash value of the startup program, it means that the downloaded startup program is not has been tampered with, so the bootloader verification passes. By verifying the public key, after the verification of the public key is passed, verifying the startup program decrypted by the public key can further determine whether the startup program has been tampered with, thereby improving the security of the system.

Further, the verifying whether the current hash value is the same as the initial hash value also includes:

If the current hash value is different from the initial hash value, return an error message and exit the startup process of the chip.

If the current hash value of the downloaded public key is different from the initial hash value of the public key, it means that the public key has been tampered with. At this time, an error message is returned and the startup process of the chip is exited, which improves the security of the system.

Further, the verifying whether the first hash value is the same as the second hash value also includes:

If the first hash value is different from the second hash value, return an error message and exit the startup process of the chip.

If the second hash value of the boot program is different from the first hash value of the boot program, it means that the downloaded boot program has been tampered with. At this time, an error message is returned and the boot process of the chip is exited. Avoid running maliciously tampered startup programs and improve system security.

In one embodiment, according to the pre-configured voltage values of pins of the chip, the order of downloading the startup program of the chip from the multi-level storage path is determined, including:

Determine the voltage value of the pin according to the register corresponding to the pin of the chip;

The order of downloading the startup program from the multi-level storage path is determined according to the voltage value of the pin. The on-chip CPU reads the register corresponding to the pin to determine the voltage value of the pin, and the sequence of downloading the startup program from the multi-level storage path can be determined according to the voltage value of the pin. It can be understood that inside the chip, the level of the pin is controlled by controlling the contents of different registers, so that the chip can transmit a specified signal to the peripheral.

In one embodiment, the downloading the startup program, the signature corresponding to the startup program, and the public key for signing the first hash value of the startup program from the multi-level storage path corresponding to the sequence includes :

Downloading the startup program, the signature, and the public key from the first-level storage path of the multi-level storage path, and judging whether the download is successful;

If not, download the startup program, the signature and the public key from the second-level storage path of the multi-level storage path, and determine whether the download is successful;

If not, download the startup program, the signature, and the public key from a third-level storage path of the multi-level storage path.

For example, if the download sequence is emmc-nandflash-sdcard, that is, the first-level storage path is emmc, the second-level storage path is nandflash, and the third-level storage path is sdcard. Download the startup program, signature and public key from emmc, and judge whether the download from emmc is successful. If the download from the first-level storage path emmc fails, download from the second-level storage path nandflash, and judge whether the download from nandflash is successful. If the second-level storage path nandflash fails to download, it will download from the third-level storage path sdcard. The startup programs can be sequentially downloaded from the multi-level storage path.

Further, after downloading the startup program, the signature and the public key from the third-level storage path of the multi-level storage path, the method further includes:

Judging whether the startup program, the signature and the public key are downloaded successfully;

If not, return an error message.

After the download is performed from the third-level storage path of the multi-level storage path, it is judged whether the startup program, the signature and the public key are downloaded successfully from the third-level storage path sdcard, and if the download fails, an error is returned information, that is, when the download fails in all storage paths, the error message error is returned. It can be understood that when any one of the primary storage paths is successfully downloaded, the downloaded startup program is verified according to the public key and the signature, and if the verification is passed, the startup program is run and the operating system of the chip is started. This avoids the situation in the prior art that the failure to start the chip will be caused when the download from a storage medium fails, and improves the reliability of the chip start.

Further, the running the startup program and starting the operating system of the chip includes:

Running the startup program to determine whether the startup program runs successfully;

When it is judged that the startup program runs successfully, run the kernel program corresponding to the operating system and start the operating system of the chip;

When it is judged that the startup program fails to run, an error message is returned.

After the downloaded startup program is verified, run the startup program and judge whether the startup program runs successfully. When the startup program runs successfully, run the kernel program corresponding to the operating system and start the operating system of the chip. When the startup program fails to run, then Return an error message.

Referring to FIG. 2 , it is a schematic diagram of functional modules of the operating system startup device 100 of the chip of the present application.

The operating system starting device 100 for the chip described in this application can be installed in an electronic device. According to the realized functions, the chip operating system startup device 100 may include a determination module 110 , a download module 120 and a startup module 130 . The module described in this application can also be called a unit, which refers to a series of computer program segments that can be executed by the processor of the electronic device and can complete fixed functions, and are stored in the memory of the electronic device.

In this embodiment, the functions of each module/unit are as follows:

Determination module 110: used to determine the sequence of downloading the startup program of the chip from the multi-level storage path according to the pre-configured voltage value of the pin of the chip;

Download module 120: used to download the startup program, the signature corresponding to the startup program, and the public key for signing the first hash value of the startup program from the multi-level storage path corresponding to the sequence. If any one of the multi-level storage paths is downloaded successfully, the remaining multi-level storage paths corresponding to the sequence will not be inquired again;

The startup module 130: used to verify the startup program based on the public key and the signature, and if the verification is passed, run the startup program and start the operating system of the chip.

In one embodiment, the verifying the startup program based on the public key and the signature includes:

calculating the current hash value of the public key, and obtaining the initial hash value of the public key pre-stored in the internal storage space of the chip;

Verifying whether the current hash value is the same as the initial hash value;

If so, decrypt the signature based on the public key to obtain a first hash value of the boot program, and calculate a second hash value of the boot program that has been successfully downloaded;

verifying that the first hash value is the same as the second hash value;

If yes, the verification is passed.

In one embodiment, the determination module is also used for:

calculating a first hash value of the startup program, and performing a signature operation on the first hash value using a private key of a pre-generated key pair to obtain a signature corresponding to the startup program;

calculating an initial hash value of the public key of the key pair, and storing the initial hash value of the public key in the internal storage space of the chip;

The signature corresponding to the startup program, the public key and the startup program are respectively stored in a multi-level storage path outside the chip.

In one embodiment, the downloading the startup program, the signature corresponding to the startup program, and the public key for signing the first hash value of the startup program from the multi-level storage path corresponding to the sequence includes :

Downloading the startup program, the signature, and the public key from the first-level storage path of the multi-level storage path, and judging whether the download is successful;

If not, download the startup program, the signature and the public key from the second-level storage path of the multi-level storage path, and determine whether the download is successful;

If not, download the startup program, the signature, and the public key from a third-level storage path of the multi-level storage path.

In one embodiment, the verifying whether the current hash value is the same as the initial hash value further includes:

If the current hash value is different from the initial hash value, return an error message and exit the startup process of the chip.

In one embodiment, the verifying whether the first hash value is the same as the second hash value further includes:

If the first hash value is different from the second hash value, return an error message and exit the startup process of the chip.

In one embodiment, the multi-level storage paths include emmc memory, nandflash memory and sdcard memory.

Referring to FIG. 3 , it is a schematic diagram of a preferred embodiment of the electronic device 1 of the present application.

The electronic device 1 includes but not limited to: a memory 11 , a processor 12 , a display 13 and a communication interface 14 . The electronic device 1 can be connected to the network through the communication interface 14 . Wherein, the network may be an enterprise intranet (Intranet), Internet (Internet), Global System of Mobile Communication (Global System of Mobile communication, GSM), Wideband Code Division Multiple Access (Wideband Code Division Multiple Access, WCDMA), 4G network , 5G network, Bluetooth (Bluetooth), Wi-Fi, call network and other wireless or wired networks.

Wherein, the memory 11 includes at least one type of readable storage medium, and the readable storage medium includes a flash memory, a hard disk, a multimedia card, a card-type memory (for example, SD or DX memory, etc.), random access memory (RAM), static Random Access Memory (SRAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), Programmable Read Only Memory (PROM), Magnetic Memory, Magnetic Disk, Optical Disk, etc. In some embodiments, the storage 11 may be an internal storage unit of the electronic device 1 , such as a hard disk or a memory of the electronic device 1 . In other embodiments, the memory 11 can also be an external storage device of the electronic device 1, such as a plug-in hard disk equipped with the electronic device 1, a smart memory card (Smart Media Card, SMC), a secure digital ( Secure Digital (SD) card, flash memory card (Flash Card), etc. Certainly, the storage 11 may also include both an internal storage unit of the electronic device 1 and an external storage device thereof. In this embodiment, the memory 11 is generally used to store the operating system and various computer programs installed in the electronic device 1 , such as program codes of the operating system startup program 10 of the chip, and the like. In addition, the memory 11 can also be used to temporarily store various types of data that have been output or will be output.

In some embodiments, the processor 12 may be a central processing unit (Central Processing Unit, CPU), a controller, a microcontroller, a microprocessor, or other data processing chips. The processor 12 is generally used to control the overall operation of the electronic device 1 , for example, perform data interaction or communication-related control and processing. In this embodiment, the processor 12 is configured to run program codes stored in the memory 11 or process data, such as program codes for running the operating system startup program 10 of the chip, and the like.

The display 13 may be called a display screen or a display unit. In some embodiments, the display 13 may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an organic light-emitting diode (Organic Light-Emitting Diode, OLED) touch device, and the like. The display 13 is used for displaying information processed in the electronic device 1 and for displaying a visualized work interface.

The communication interface 14 may optionally include a standard wired interface or wireless interface (such as a WI-FI interface), and the communication interface 14 is generally used to establish a communication connection between the electronic device 1 and other electronic devices.

Fig. 3 only shows the electronic device 1 with the components 11-14 and the operating system boot program 10 of the chip, but it should be understood that it is not required to implement all the components shown, and more or less can be implemented instead. components.

In the above-mentioned embodiment, when the processor 12 executes the operating system startup program 10 of the chip stored in the memory 11, the following steps can be implemented:

determining the sequence of downloading the startup program of the chip from the multi-level storage path according to the pre-configured voltage values of the pins of the chip;

Download the startup program, the signature corresponding to the startup program, and the public key for signing the first hash value of the startup program from the multi-level storage path corresponding to the sequence, if in the multi-level storage path If any one-level storage path is downloaded successfully, the multi-level storage path corresponding to the remaining sequence will not be inquired again;

The startup program is verified based on the public key and the signature, and if the verification is passed, the startup program is run and the operating system of the chip is started.

The storage device may be the memory 11 of the electronic device 1 , or other storage devices connected in communication with the electronic device 1 .

For the detailed introduction of the above steps, please refer to the above-mentioned description of the functional block diagram of the embodiment of the device 100 for starting the operating system of the chip in FIG. 2 and the description of the flowchart of the embodiment of the method for starting the operating system of the chip in FIG. 1 .

In addition, the embodiment of the present application also provides a computer-readable storage medium, and the computer-readable storage medium may be non-volatile or volatile. The computer-readable storage medium can be hard disk, multimedia card, SD card, flash memory card, SMC, read-only memory (ROM), erasable programmable read-only memory (EPROM), portable compact disk read-only memory (CD- ROM), USB memory, etc., or any combination of several. The computer-readable storage medium includes a data storage area and a program storage area, and the program storage area stores the operating system startup program 10 of the chip. When the operating system startup program 10 of the chip is executed by the processor, the following operations are realized:

determining the sequence of downloading the startup program of the chip from the multi-level storage path according to the pre-configured voltage values of the pins of the chip;

Download the startup program, the signature corresponding to the startup program, and the public key for signing the first hash value of the startup program from the multi-level storage path corresponding to the sequence, if in the multi-level storage path If any one-level storage path is downloaded successfully, the multi-level storage path corresponding to the remaining sequence will not be inquired again;

The startup program is verified based on the public key and the signature, and if the verification is passed, the startup program is run and the operating system of the chip is started.

The specific implementation of the computer-readable storage medium of the present application is substantially the same as the specific implementation of the method for starting the operating system of the above-mentioned chip, and will not be repeated here.

It should be noted that the serial numbers of the above embodiments of the present application are only for description, and do not represent the advantages and disadvantages of the embodiments. And herein the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, apparatus, article or method comprising a set of elements includes not only those elements, but also includes the elements not expressly included. other elements listed, or also include elements inherent in the process, apparatus, article, or method. Without further limitations, an element defined by the phrase "comprising a ..." does not preclude the presence of additional same elements in the process, apparatus, article or method comprising the element.

Through the description of the above embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus a necessary general-purpose hardware simulation platform, and of course also by hardware, but in many cases the former is more best implementation. Based on such an understanding, the technical solution of the present application can be embodied in the form of a software product in essence or the part that contributes to the prior art, and the computer software product is stored in a storage medium as described above (such as ROM/RAM , magnetic disk, optical disk), including several instructions to enable a terminal device (which may be a mobile phone, a computer, an electronic device, or a network device, etc.) to execute the methods described in various embodiments of the present application.

The above are only preferred embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structures or equivalent process transformations made by using the description of the application and the accompanying drawings are directly or indirectly used in other related technical fields. , are all included in the patent protection scope of the present application in the same way.

Claims (10)

1. A method for starting an operating system of a chip, characterized in that the method comprises: determining the sequence of downloading the startup program of the chip from the multi-level storage path according to the pre-configured voltage values of the pins of the chip; Download the startup program, the signature corresponding to the startup program, and the public key for signing the first hash value of the startup program from the multi-level storage path corresponding to the sequence, if in the multi-level storage path If any one-level storage path is downloaded successfully, the multi-level storage path corresponding to the remaining sequence will not be inquired again; The startup program is verified based on the public key and the signature, and if the verification is passed, the startup program is run and the operating system of the chip is started. 2. The method for starting the operating system of the chip according to claim 1, wherein the verification of the startup program based on the public key and the signature includes: calculating the current hash value of the public key, and obtaining the initial hash value of the public key pre-stored in the internal storage space of the chip; Verifying whether the current hash value is the same as the initial hash value; If so, decrypt the signature based on the public key to obtain a first hash value of the boot program, and calculate a second hash value of the boot program that has been successfully downloaded; verifying that the first hash value is the same as the second hash value; If yes, the verification is passed. 3. the operating system startup method of chip as claimed in claim 1 is characterized in that, according to the voltage value of the pin of described chip of pre-configuration, determine to download the startup program of described chip from multi-level storage path Before the order, the method also includes: calculating a first hash value of the startup program, and performing a signature operation on the first hash value using a private key of a pre-generated key pair to obtain a signature corresponding to the startup program; calculating an initial hash value of the public key of the key pair, and storing the initial hash value of the public key in the internal storage space of the chip; The signature corresponding to the startup program, the public key and the startup program are respectively stored in a multi-level storage path outside the chip. 4. The method for starting an operating system of a chip according to claim 1, wherein the downloading of the startup program, the signature corresponding to the startup program from the multi-level storage path corresponding to the sequence, and The program's first hash is signed with the public key, consisting of: Downloading the startup program, the signature, and the public key from the first-level storage path of the multi-level storage path, and judging whether the download is successful; If not, download the startup program, the signature and the public key from the second-level storage path of the multi-level storage path, and determine whether the download is successful; If not, download the startup program, the signature, and the public key from a third-level storage path of the multi-level storage path. 5. The method for starting the operating system of the chip according to claim 2, wherein the verifying whether the current hash value is the same as the initial hash value further comprises: If the current hash value is different from the initial hash value, return an error message and exit the startup process of the chip. 6. The method for starting the operating system of the chip according to claim 2, wherein the verifying whether the first hash value is identical to the second hash value further comprises: If the first hash value is different from the second hash value, return an error message and exit the startup process of the chip. 7. the operating system starting method of chip as claimed in claim 1 is characterized in that, described multi-level storage path comprises emmc memory, nandflash memory and sdcard memory. 8. A device for starting an operating system of a chip, wherein the device comprises: Determination module: used to determine the order of downloading the startup program of the chip from the multi-level storage path according to the pre-configured voltage values of the pins of the chip; Download module: used to download the startup program, the signature corresponding to the startup program, and the public key for signing the first hash value of the startup program from the multi-level storage path corresponding to the sequence, if in the If the download of any one of the multi-level storage paths is successful, the remaining multi-level storage paths corresponding to the sequence will not be inquired again; A startup module: used to verify the startup program based on the public key and the signature, and if the verification is passed, run the startup program and start the operating system of the chip. 9. An electronic device, characterized in that it comprises a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory complete mutual communication through the communication bus; memory for storing computer programs; The processor is used to implement the chip operating system startup method according to any one of claims 1 to 7 when executing the program stored in the memory. 10. A computer-readable storage medium, on which a computer program is stored, characterized in that, when the computer program is executed by a processor, the method for starting the operating system of the chip according to any one of claims 1 to 7 is implemented. step.

Images