CREDIBLE KERNEL STARTING METHOD AND DEVICE

摘要

Provided are a credible kernel starting method and device. The method comprises: starting a boot loader (201); invoking the boot loader to measure whether a platform configuration register (PCR) partition is credible according to a first security algorithm (202); if the PCR partition is credible, invoking the boot loader to read a kernel code into a memory, and invoking the boot loader to measure whether the kernel code is credible according to a first complete algorithm and a measurement standard value of the kernel code which is pre-stored in the PCR partition (203); if the kernel code is credible, initializing the kernel code so as to trigger an initialized kernel to measure whether the boot loader is credible according to a second complete algorithm (204); and if the boot loader is credible, starting the kernel (205). The present invention improves the kernel starting security.