| 摘要 |
<p>A method and system to provide secure boot process for a personal computer. A security kernel (37) forming part of the invention typically resides in the upper area in memory for encrypting/decrypting data from any application that is running under the operating system. The invention allows two operating systems to work separately using the same hardware. The method and system also provides real time encryption for any peripheral that has been selected for which encryption is required during run time operations such as while receiving or sending confidential information over the Internet using a modem or network connection. In place of a standard BIOS, the invention utilizes a security engine including a kernel stored in a flash memory (95), a modified north bridge (70) and a smart card (43) for auto burning the flash memory portion of the security engine (35) and key generation.</p> |
