南京师范大学学报(工程技术版)2026,Vol.26Issue(3):14-21,8.DOI:10.3969/j.issn.1672-1292.2026.03.002
基于嵌入式系统的可信启动构架设计及实现研究
Research on the Design and Realization of Trusted Boot Architecture Based on Embedded System
摘要
Abstract
This paper analyzes and researches the boot process of embedded system and proposes a trusted boot method based on Raspberry Pi embedded system.The method adopts STM32F103RCT6 controller in hardware to realize the basic functions of trusted computing module such as SHA-256 encryption algorithm,non-volatile storage space,and so on,and uses this as the hardware trusted root.Meanwhile,a peripheral boot control circuit is designed to connect the Raspberry Pi TF card and the system power supply in order to realize the Raspberry Pi boot process control,so that the controller can actively read the Raspberry Pi boot file,kernel image,and other files in the operating system located in the TF card to realize the active metrics,and to verify the results of the metrics.It is verified that the system successfully measures the boot file and completes the trusted boot of Raspberry Pi.The trusted boot method proposed in this paper can be compatible with the trusted computing 3.0 dual architecture proposed independently in China,and provides a reference for the implementation of trusted boot for other embedded devices.关键词
嵌入式控制/可信计算3.0/可信启动/信任链/加密算法Key words
embedded control/trusted computing 3.0/trusted boot/chain of trust/encryption algorithm分类
信息技术与安全科学引用本文复制引用
王修栋,施建平,霍银龙,张华,岳彦利..基于嵌入式系统的可信启动构架设计及实现研究[J].南京师范大学学报(工程技术版),2026,26(3):14-21,8.基金项目
国家自然科学基金项目(52005268). (52005268)