Research Of Terminal Control System Based On UEFI BIOS

At present, network technology develops rapidly. Company-internal network has become the main channel for internal communication and transfer of information, so as to share resources and have convenient management. It greatly improves efficiency. But the phenomenon such as illegal outreach, unauthorized access and illegal operation seriously threat to the security of terminal system. The terminal control of computer is a use of the terminal network authentication and identification, so as to ensure that only legitimate end to be able to access the network. It also uses control program to complete the terminal control of computer. The terminal control of computer ensures the safety of company-internal network and terminals. Although there are a lot of terminal control system, but they have many shortcomings in terminal control. The traditional terminal control program usually makes program run in the OS, so as to control terminal. In this way the control program stored in the terminal operating system, it is very easy to be destructed by malicious users. It cannot reach a good effect. The traditional control mechanisms based only on the operating system level has been unable to meet the needs of development of security terminal control. Terminal control system needs to be further extended to the firmware layer and hardware layer. It will provide more basic, more robust security mechanism for the computer system and achieve security control from source.Design a new computer terminal control solutions. This design moves client of terminal control from the operating system to UEFI BIOS, make computer accept control before the terminal enters the stage of operating system. The solution implements secure transmission and storage in UEFI BIOS, and it studies on the storage and protection of terminal codes, makes it run independently. The control program stored in the server, the client can connect to server through UEFI's network service. It authenticate identity and receive control program and accept control from the program. This design protects control program and enhances the isolation of control program. Terminal control program can run independently not rely on server. In addition, the program also incorporates authentication and trusted computing technologies, makes the function of system more perfect. At first, paper discusses UEFI BIOS and terminal control and related technology. Then it introduce the operation mechanism and principle of applications in UEFI platform. Then it proposes a solution for unique environment of UEFI. The paper elaborates structure and architecture of system and function of each module. Finally the paper also proposes development and improvements in the future.