Abstract: Security requirements of trusted BIOS are analyzed，and architecture of trusted BIOS is developed in this paper.To construct Pre-OS chain of trust，message digest and digital signature are used to verify integrity and authenticity of entities in different phases of bootstrap.Trusted components，workflow and methods of implementation of Taihang secure BIOS are introduced in detail.Performance of trusted measurement is also analyzed at the end.

摘要： 分析了可信BIOS的安全需求，提出一种可信BIOS体系结构。使用消息摘要和数字签名技术验证系统引导阶段实体的完整性和真实性，构建了操作系统运行前的信任链。介绍了太行安全BIOS的可信部件、执行流程及其实现方法，讨论了可信测量对BIOS引导过程的性能影响。