Abstract:
A safety booting method for an embedded controller is applied in a laptop. The embedded controller is installed in the laptop, and the laptop includes a central processor unit (CPU). The safety booting method for the embedded controller includes steps of: connecting the embedded controller with a power; determining whether a safety verification for a booting read only memory (ROM) is passed or not; and initializing the power of the laptop by the embedded controller to normally provide the power to the laptop and boot the laptop when the safety verification for the booting ROM is passed.

Description:
CROSS-REFERENCE TO RELATED APPLICATIONS 
       [0001]    This application claims the benefit of Taiwan patent application No. 104116717, filed on May 25, 2015, the disclosure of which is incorporated herein in its entirety by reference. 
       BACKGROUND OF THE INVENTION 
     1. Field of the Invention 
       [0002]    The present invention relates to an embedded controller for safety booting and method thereof, and more particularly to an embedded controller for safety booting and method thereof to determine whether a safety verification of a booting read only memory (ROM) is passed or not. 
       2. Description of Related Art 
       [0003]    Since computer information technology is well developed, the problems of information security, such as computer data leakage of personal information and even the safety of personal assets, will occur. Therefore, the computer information safety is concerned by the public. Generally, in order to avoid the information safety problem that a third party installs a booting ROM in a laptop, a current solution is to install a controller in a chipset (such as north bridge chipset or south bridge chipset) within the laptop. The controller will analyze and determine whether the booting ROM is properly performing. If an invalid booting ROM is performed, the power of the laptop is cut off to stop the booting ROM of the third party or the invalid booting ROM. The booting ROM is a ROM within the laptop and the ROM saves all the data and related information, such as BIOS code of basic input and output system, related to a booting procedure. Those data won&#39;t vanish when the power is turned off. The booting ROM has a control authorization for the basic input and output system (BIOS) when the laptop is turned on. 
         [0004]    However, the drawback of the aforementioned technique is that only some of the specific chipsets, instead of all of the chipsets, include certain control functions. When some of the chipsets do not support such functions, the effect of the safety booting is questionable. 
       SUMMARY OF THE INVENTION 
       [0005]    A main objective of the present invention is to provide an embedded controller for safety booting and a method thereof. Before a booting ROM of the laptop is executed, the embedded controller determines whether a safety verification of the booting ROM is passed or not. If the safety verification is not passed, the power of the laptop is cut off to stop booting so as to solve information security problem of the laptop. 
         [0006]    In order to achieve the aforementioned purpose in the present invention, a safety booting method for an embedded controller is disclosed in the present invention. The safety booting method for an embedded controller is executed by the embedded controller. The embedded controller is installed in a laptop, and the laptop includes a central processor unit (CPU). The safety booting method for the embedded controller comprises steps of: connecting the embedded controller with a power; determining whether a safety verification of a booting read only memory (ROM) is passed or not; and initializing the power of the laptop by the embedded controller to normally provide the power to the laptop and boot the laptop when the safety verification for the booting ROM is passed. 
         [0007]    According to the safety booting method for the embedded controller, the method further comprises a step of keeping the laptop in a power-off mode by the embedded controller and stopping booting the laptop when the safety verification for the booting ROM is not passed. 
         [0008]    According to the safety booting method for the embedded controller, the step of determining whether the safety verification for the booting ROM is passed or not is to determine whether a checksum in all or some blocks within the booting ROM is correct or not. 
         [0009]    According to the safety booting method for the embedded controller, the step of determining whether the safety verification for the booting ROM is passed or not is to determine whether a signature verification in a certain block within the booting ROM is correct or not. 
         [0010]    According to the safety booting method for the embedded controller, the step of determining whether the safety verification for the booting ROM is passed or not is to determine whether content in a certain block within the booting ROM is valid or not. 
         [0011]    According to the safety booting method for the embedded controller, the step of determining whether the checksum is correct or not includes steps of: calculating a first value in accordance with a packet of a ROM block; transmitting the first value and the packet together; receiving the packet at a receiving end; calculating a second value in accordance with the received packet; determining whether the second value and the first value are the same or not; determining the packet at the receiving end is correct when the second value and the first value are the same; and determining the packet at the receiving end is incorrect when the second value and the first value are different. 
         [0012]    In order to achieve the aforementioned purpose in the present invention, an embedded controller for safety booting is disclosed in the present invention, and the embedded controller for safety booting is installed within a laptop and the laptop includes a CPU. The embedded controller for safety booting comprises an embedded controller processor, a memory unit, a nonvolatile storage unit and a connecting interface. The memory unit is electrically connected with the embedded controller processor and is configured to store data. The nonvolatile storage unit is electrically connected with the embedded controller processor and is configured to store a safety booting firmware. One end of the connecting interface is electrically connected with a computer bus of the embedded controller processor and another end thereof is electrically connected with an embedded system bus of the laptop. The safety booting firmware determines whether a safety verification for a booting ROM in the laptop is passed or not when the embedded controller for safety booting is connected with a power. If the safety verification is passed, the laptop is booting. 
         [0013]    According to the embedded controller for safety booting, the laptop includes a ROM and a RAM. The ROM is electrically connected with the CPU and the connecting interface, and is configured to store booting data of the laptop. The RAM is electrically connected with the CPU and is configured to be system memory of the laptop. The embedded system bus is electrically connected with the CPU and configured to be an input/output (I/O) interface of the CPU. The safety booting firmware determines whether a safety verification for a booting ROM in the laptop is passed or not. 
         [0014]    In order to achieve the aforementioned purpose in the present invention, a baseboard management controller for safety booting is disclosed herein. The baseboard management controller is installed within a laptop and the laptop includes a CPU, and the baseboard management controller for safety booting comprises a baseboard management processor, a memory unit, a nonvolatile storage unit, and a connecting interface. The memory unit is electrically connected with the baseboard management processor and configured to store data. The nonvolatile storage unit is electrically connected with the baseboard management processor and configured to store a safety booting firmware. One end of the connecting interface electrically is connected with a computer bus of the baseboard management processor and another end thereof is electrically connected with an embedded system bus of the laptop. The safety booting firmware determines whether a safety verification for a booting ROM in the laptop is passed or not when the embedded controller for safety booting is connected with a power. If the safety verification is passed, the laptop is booting. 
         [0015]    According to the baseboard management controller for safety booting, the laptop includes a ROM and a RAM. The ROM is electrically connected with the CPU and the connecting interface, and is configured to store booting data of the laptop. The RAM is electrically connected with the CPU and configured to be system memory of the laptop. The embedded system bus is electrically connected with the CPU and configured to be an input/output (I/O) interface of the CPU. The safety booting firmware determines whether a safety verification for a booting ROM in the laptop is passed or not. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0016]      FIG. 1  is a flowchart of a first embodiment in the present invention; 
           [0017]      FIG. 2  is flowchart of a second embodiment in the present invention; 
           [0018]      FIG. 3  is a flowchart of a third embodiment in the present invention; 
           [0019]      FIG. 4  is a flowchart of a fourth embodiment in the present invention; 
           [0020]      FIG. 5  is a flowchart to determine whether the checksum is correct or not in the second embodiment of the present invention; 
           [0021]      FIG. 6  is a block diagram of the first embodiment in the present invention; and 
           [0022]      FIG. 7  is a block diagram of the second embodiment in the present invention. 
       
    
    
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 
       [0023]    These and other aspects of the embodiments herein will be better appreciated and understood when considered in conjunction with the following description and the accompanying drawings. 
         [0024]    An embedded controller for safety booting and method thereof are provided in the present invention and the embedded controller and the method thereof are preferably used in a laptop. Normally, the laptop includes an embedded controller (EC) and the embedded controller is a chip firstly executed in the laptop. One of the functions of the embedded controller is to perform power control before booting an operation system (OS) in the laptop. When the laptop is connected with a power or is turned on by a battery thereof and a user has not pushed a power button on the laptop, the embedded controller has already worked functionally. Therefore, a safety checking of a booting ROM can be executed. 
         [0025]    The booting ROM is a ROM in the laptop for storing all the data and related information for a booting procedure, such as a BIOS code of a basic input and output system. Those information and data won&#39;t vanish when the power is turned off. The booting ROM includes a control authorization of the basic input and output system when the laptop is turned on. 
         [0026]      FIG. 1  is a flowchart of a first embodiment of the method in the present invention. The method includes the following steps. In step S 10 , the embedded controller is connected with a power. In step S 12 , the booting ROM is determined whether a safety verification thereof is passed or not. In step S 14 , if the safety verification for the booting ROM is passed, a power initialization of the laptop is completed by the embedded controller. In step S 16 , the power is normally provided in the laptop. In step S 18 , a booting procedure for the laptop is performed. In step S 13 , if the safety verification for the booting ROM is not passed, the embedded controller keeps the laptop in a power-off mode. In step S 15 , the booting of the laptop is not performed. According to the aforementioned method, when the embedded controller is connected with the power, the laptop is determined whether the safety verification for the booting ROM is passed or not. If the safety verification is passed, the laptop performs the booting procedure. If the safety verification is not passed, the booting of the laptop is not performed. 
         [0027]    Connecting the laptop with the power is that the laptop is connected with the power via a power wire or the laptop is turned on by the power of the battery. When the user does not push the power button, the embedded controller can perform some basic operations. The power initialization is that a management setting in a power initialization status when the laptop is booting. The power cut off mode is that the laptop is powered-off. 
         [0028]    The aforementioned safety verification manner in step S 12  includes, but is not limited to: 1. determining if checksums in all or some blocks of the booting ROM is correct or not; 2. determining if a signature verification in a certain block of the booting ROM is correct or not; 3. determining if content in a certain block of the booting ROM is valid or not. The aforementioned three examples are respectively corresponding to the embodiments of the flowcharts in  FIG. 2 - FIG. 4 . 
         [0029]      FIG. 2  is the method of the second embodiment of the present invention. The method includes the following steps. In step S 10 , the embedded controller is connected with the power. In step S 20 , the booting ROM is determined whether the checksums in all or some blocks are correct or not. If the checksums are correct, the power initialization of the laptop is normally performed by the embedded controller. In step S 16 , the power is normally provided in the laptop. In step S 18 , the booting procedure for the laptop is performed. In step S 13 , if the checksums are not correct, the embedded controller keeps the laptop in the power-off mode. In step S 15 , the booting of the laptop is not performed. 
         [0030]      FIG. 3  is the method in the third embodiment of the present invention. The method includes the following steps. In step S 10 , the embedded controller is connected with the power. In step S 30 , the booting ROM is determined whether the signature verification in a certain block is correct or not. In step S 14 , if the signature verification in the certain block is correct, the embedded controller normally performs the power initialization of the laptop. In step S 16 , the power is normally provided in the laptop. In step S 18 , the booting procedure for the laptop is performed. In step S 13 , if the signature verification in the certain block is not correct, the embedded controller keeps the laptop in the power-off mode. In step S 15 , the booting of the laptop is not performed. The aforementioned signature verification is to verify the signature data of block address saved in the booting ROM is correct or not. For example, a number code corresponding to an offset value of a signature is verified to be correct or not and used for the safety verification. 
         [0031]      FIG. 4  is the method in the fourth embodiment of the present invention. The method includes the following steps. In step S 10 , the embedded controller is connected with the power. In step S 40 , the booting ROM is determined whether content in a certain block is valid or not. In step S 14 , if the content in the certain block is correct, the embedded controller normally performs the power initialization of the laptop. In step S 16 , the power is normally provided in the laptop. In step S 18 , the booting procedure for the laptop is performed. In step S 13 , if the content in the certain block is not correct, the embedded controller keeps the laptop in the power-off mode. In step S 15 , the booting of the laptop is not performed. The step to determine the content in the certain block of the booting ROM is valid or not is to determine, for example, whether the content of a table in the certain block is valid or not. The content may be a company name, a manufacture date or a serial number of an integrated chip (IC), and is used for the safety verification. 
         [0032]    The aforementioned checksum in the second embodiment is a small-size datum within a digital data block and used to determine integrity of the transmitted data. The checksum belongs to a formation of a redundancy check. Through an error detection method, for digital signals, the data is transmitted via a communication transmission manner and received at a receiving end corresponding to a transmitting end so as to perform a complete data determination. As shown in  FIG. 5 , the method includes the following steps. In step S 10 , the embedded controller is connected with the power. In step S 21 , a first value is calculated in accordance with a data in a block of the booting ROM. In step S 22 , the value is transmitted with a packet. In step S 23 , the packet is received at the receiving end. In step S 24 , a second value is calculated in accordance with the content of the packet. In step S 25 , it is to determine whether the first value and the second value are the same or not. If the first value and the second value are the same, in step S 26 , the packet received at the receiving end is correct. If the first value and the second value are different, in step S 27 , the packet received at the receiving end is incorrect. By the determination and the verification, the embedded controller in the present invention can determine whether the safety verification for the booting ROM is passed or not to make sure the laptop will not be turned on by the third party or maliciously turned on. 
         [0033]    A laptop  60  and a computer peripheral device  70  are shown in  FIG. 6  and the laptop  60  includes an embedded controller  50  for safety booting. The embedded controller  50  includes an embedded controller processor  52 , a memory unit  54 , a nonvolatile storage unit  56 , a safety booting firmware  58 , and a connecting interface  51 . 
         [0034]    One end of the connecting interface  51  is connected with a computer bus within the embedded controller processor  52  of the embedding controller  50  and the other end of the connecting interface  51  is connected with an embedded system bus  61 . The embedded controller processor  52  of the embedded controller  50  is a calculating core of the embedded controller  50 . The memory unit  54  is connected with the embedded controller processor  52  of the embedded controller  50  for storing data. The nonvolatile storage unit  56  is connected with the embedded controller processor  52  of the embedded controller  50  for storing the safety booting firmware  58 . The safety booting firmware  58  is the program to perform the method shown in the flowcharts of  FIG. 1  to  FIG. 4 . By the safety booting firmware  58 , when the embedded controller  50  is connected with the power, the safety verification for the booting ROM in the laptop is determined to be passed or not. If the safety verification is passed, the booting of the laptop is performed. If the safety verification is not passed, the booting of the laptop is not performed. 
         [0035]    In addition, the device with the embedded controller  50  for safety booting is connected with a computer peripheral device  70  and the computer peripheral device  70  may be a keyboard, a mouse or a device connected with the computer bus of the embedded controller  50 . 
         [0036]    The laptop  60  includes a CPU  62 , a random access memory (RAM)  64 , a ROM  66  and an embedded system bus  61 . The CPU  62  is a calculating core of the laptop  60 . The ROM  66  is electrically connected with the CPU  62  and the connecting interface  51 , and is configured to store booting data of the laptop  60 . The RAM  64  is electrically connected with the CPU  62  and is a system memory of the laptop  60 . The embedded system bus  61  is electrically connected with the CPU  62  and used as an input/output (I/O) interface of the CPU  62 . 
         [0037]    The embedded system bus  61  of the laptop  60 , practically, includes an I/O host controller and is configured to control signal input and output in the laptop  60 . The embedded system bus  61  also includes a PCI bus electrically connected with the I/O host controller to be the bus for signal transmission. 
         [0038]      FIG. 7  is the second embodiment of the laptop with the embedded controller. The difference between the first embodiment and the second embodiment is that the embedded controller for safety booting is a baseboard management controller (BMC)  80  in the second embodiment. The baseboard management controller  80  includes a baseboard management processor  82 , a memory unit  84 , a nonvolatile storage unit  86 , a safety booting firmware  88  and a connecting interface  81 . Similarly, the baseboard management processor  82  is the calculating core of the baseboard management controller  80 . The memory unit  84  is electrically connected with the baseboard management processor  82  and is configured to store data. The nonvolatile storage unit  86  is electrically connected with the baseboard management processor  82  for storing the safety booting firmware  88 . The safety booting firmware  88  is to perform the programs of the method shown in the embodiment of  FIG. 1  to  FIG. 4 . When the baseboard management controller  80  is connected with the power, the laptop is determined whether the safety verification for the booting ROM is passed or not. If the safety verification is passed, the laptop performs the booting procedure. One end of the connecting interface  81  is connected with the computer bus of the baseboard management processor  82 . Another end of the connecting interface  81  is connected with the embedded system bus  61  and the other end of the connecting interface  81  is connected with the ROM  66 . In addition, the laptop  60  with the baseboard management controller  80  is electrically connected with the computer peripheral device  70  and the computer peripheral device  70  may be a keyboard, a mouse and a device connected with the computer bus of the embedded controller  80 . 
         [0039]    The baseboard management controller (BMC)  80  for safety booting is used to monitor a variation of physical parameters within the laptop  60 . The physical parameters monitored by the BMC  80  includes temperature, humidity, voltage value of the power, speed of a fan, communication parameter or operating system (OS) function and so on. When one of the physical parameters is abnormal, the BMC  80  stops the laptop  60  from booting. 
         [0040]    In summary, in the present invention, before the booting ROM of the laptop is executed, the embedded controller  50  determines whether the safety verification for the booting ROM is passed or not. If the safety verification is not passed, the laptop is powered off to prevent installation of a third party booting ROM or a malware ROM booting the laptop. The present invention may efficiently solve the information security problem of the laptop. 
         [0041]    While the present invention has been described in terms of what are presently considered to be the most practical and preferred embodiments, it is to be understood that the present invention need not be restricted to the disclosed embodiment. On the contrary, it is intended to cover various modifications and similar arrangements included within the spirit and scope of the appended claims which are to be accorded with the broadest interpretation so as to encompass all such modifications and similar structures. Therefore, the above description and illustration should not be taken as limiting the scope of the present invention which is defined by the appended claims.