CAJ | 학술논문

针对单机环境下通用PC终端常用身份认证方法存在安全隐患的缺点,提出了一种在计算机BIOS级进行用户身份认证的解决方案,用于增强主机系统的安全防护能力.在研究计算机BIOS系统安全功能增强技术的基础上,论述了基于USB Key的BIOS级身份认证系统的工作流程,详细分析了身份认证系统的组成结构及关键技术,并给出了相应的实现方法.实验结果表明,该身份认证系统能够较好地抵御典型的恶意攻击,满足PC终端安全防护的需要.
침대단궤배경하통용PC종단상용신빈인증방법존재안전은환적결점,제출료일충재계산궤BIOS급진행용호신빈인증적해결방안,용우증강주궤계통적안전방호능력.재연구계산궤BIOS계통안전공능증강기술적기출상,논술료기우USB Key적BIOS급신빈인증계통적공작류정,상세분석료신빈인증계통적조성결구급관건기술,병급출료상응적실현방법.실험결과표명,해신빈인증계통능구교호지저어전형적악의공격,만족PC종단안전방호적수요.
Considering the normal method of authentication has some shortcomings to protect the PC terminal,a new solution based on computer BIOS is put forward to enhance the protection ability of the terminal.Based on the technology of adding security function modules in computer BIOS,the work flow of authentication system based USB Key in computer BIOS is described.Meanwhile,the modules structure and key technology of authentication system are analyzed in detail,and the implementation method is also described.The experimental results show that the authentication system is of great advantage to defend typical attack and meets the requirement of PC terminal protection.