Patent ID: 8468342

Claim:
A computer system including hardware and software, the hardware including a main board, a central processing unit (CPU), an internal memory, a hard disk and peripheral equipment, the computer system being capable of performing integrity detection, comprising: a running mode circuit having software configured to determine, after the basic initialization of the central processing unit (CPU), chipsets, and the main board is finished in a Pre-Extensible Firmware Interface (PEI) stage, whether or not to initialize an integrity detection initiating mode by judging an integrity detection initiating control parameter; an Extensible Firmware Interface (EFI) storage unit configured to include an EFI integrity detection application for performing the integrity detection on the EFI image codes in the integrity detection initiating mode to generate an EFI integrity calculated value and comparing the calculated value with an integrity metric value to determine the integrity of the EFI image codes; an operating system integrity detection application, for forcibly performing an operating system integrity detection before initiating an operating system; wherein said operating system integrity detection application comprises a credible file detection application, for invoking the operating system integrity detection method to perform the integrity detection on all credible files, comparing and determining whether each of the credible files are tampered, generating a credible files calculated value for each of the files in turn, and performing the integrity detection on the files of the operating system; said computer system further comprises a credible file metric value which is compared with the calculated value to determine the integrity of an individual file to thereby determine the integrity of all the files of the operating system, after the operating system integrity detection unit performs the integrity detection on all credible files, compares and determines whether each of the credible files are tampered, and generates the credible files calculated value for each of the files in turn; wherein said operating system integrity detection application further comprises a magnetic disk parameter data detection application, for reading out a magnetic disk parameter data, detecting whether the magnetic disk parameter data is integral, and then invoking the credible file detection application to perform the integrity detection on the individual credible file; and said computer system further comprises a magnetic disk parameter metric value which is compared with the calculated value to determine the integrity of the operating system after the operating system integrity detection application performs the magnetic disk parameter integrity detection on the magnetic disk on which the files of the operating system are stored and generates a magnetic disk parameter integrity calculated value.