Protection method and protection system of system partition key data and terminal

A protection method of system partition key data for determining whether to start a system of a terminal, the terminal comprising a memory that includes a system partition, a system file, a system partition file, and a bootloader;

• the protection method comprising:
• generating a mapping file that records files of system partition and corresponding block addresses when compiling the system file;
• determining, according to the mapping file, a block address corresponding to key data carried in the system partition file when the bootloader is started, and calculating a hash value of the block address;
• generating a first verification value according to the block address and the hash value, and encrypting the first verification value using a preset private key or a public key to obtain a digital signature;
• storing the digital signature, the block address, and the hash value in a verification table, and appending the verification table to the system file;
• obtaining the verification table corresponding to the key data, wherein the verification table comprises the digital signature, the block address, and the hash value;
• decrypting the digital signature using the preset public key or the private key to obtain the first verification value;
• generating a second verification value according to the block address and the hash value, and comparing the first verification value with the second verification value;
• and
• starting the system if the first verification value is same as the second verification value.

A protection system of system partition key data for determining whether to start a system of a terminal;

• the protection system comprising:
• one or more processors;
• a memory including a system partition, a system file, a system partition file, and a bootloader;
• and
• one or more application programs, wherein the one or more application programs are stored in the memory and executed by the processor to perform a method comprising:
• generating a mapping file that records files of system partition and corresponding block addresses when compiling the system file;
• determining, according to the mapping file, a block address corresponding to key data carried in the system partition file when the bootloader is started, and calculating a hash value of the block address;
• generating a first verification value according to the block address and the hash value, and encrypting the first verification value using a preset private key or a public key to obtain a digital signature;
• storing the digital signature, the block address, and the hash value in a verification table, and appending the verification table to the system file;
• obtaining the verification table corresponding to the key data, wherein the verification table comprises the digital signature, the block address, and the hash value;
• decrypting the digital signature using the preset public key or the private key to obtain the first verification value;
• generating a second verification value according to the block address and the hash value, and comparing the first verification value with the second verification value;
• and
• starting the system if the first verification value is same as the second verification value.