An Efficient Trustworthy Protected-Ring Model for UEFI Firmware

Abstract

A trustworthy protected-ring model for UEFI firmware is proposed and a prototype based on Intel Platform Innovation Framework is implemented in this paper. In addition to meet static security attributes such as integrity and authenticity proposed in trusted firmware, this model can also satisfy some dynamic security attributes such as control object’s operations on device or modifications on key data. Furthermore, this model is simple and efficient enough to meet firmware’s need for small size and fast boot.