CN114995918A - Starting method and configuration method and device of baseboard management controller and electronic equipment - Google Patents

Abstract

The invention discloses a startup method, startup configuration method, device, electronic device and computer-readable storage medium of a baseboard management controller, and relates to the technical field of computers. The public key stored in the volatile memory; according to the public key, the digital signature stored in the non-volatile memory is decrypted to obtain the file encryption information; according to the file encryption information, it is detected whether the image file stored in the non-volatile memory is If yes, load the image file into the memory of the baseboard management controller to run; the present invention detects whether the image file stored in the non-volatile memory is correct according to the file encryption information, and can detect whether the image file has been tampered with, thereby enabling On the basis of not using RoT, based on the existing characteristics of non-volatile memory, the secure boot of the BMC chip is realized, which avoids the increased hardware cost of updating the chip.

Description

Start-up method, configuration method, device and electronic device of baseboard management controller

technical field

The present invention relates to the field of computer technology, and in particular, to a startup method, startup device, startup configuration method, startup configuration device, electronic device, and computer-readable storage medium of a baseboard management controller.

Background technique

With the development of computer technology, software security is becoming more and more important. In a storage device, the Baseboard Management Controller (BMC) acts as an out-of-band management center. If the BMC software program is attacked before starting, it will affect the normal management of the entire storage device.

At present, the common practice in the industry is to build RoT (Root of Trust, Root of Trust) and CRTM (Core Root of Trust for Measurement, trusted measurement code) into the BMC chip, and then verify the BMC-IMAGE (mirror image) through RoT and CRTM. Whether the file) has been tampered with, so as to realize the secure boot of the BMC; however, the BMC chips that have been widely used at present basically do not support the secure boot function. Therefore, how to realize the safe boot of the BMC chip without using the RoT, ensure the safe use of the BMC chip, and avoid the increased hardware cost of updating the chip is an urgent problem to be solved today.

SUMMARY OF THE INVENTION

The purpose of the present invention is to provide a startup method, startup device, startup configuration method, startup configuration device, electronic equipment and computer-readable storage medium of a baseboard management controller, so as to realize the security of BMC chips without using RoT. boot, avoiding the added hardware cost of updating the chip.

In order to solve the above technical problems, the present invention provides a method for starting a baseboard management controller, including:

After the baseboard management controller is powered on and started, the public key stored in the non-volatile memory is obtained;

Decrypt the digital signature stored in the non-volatile memory according to the public key to obtain file encryption information;

Detecting whether the image file stored in the non-volatile memory is correct according to the file encryption information;

If so, load the image file into the memory of the baseboard management controller to run.

Optionally, the detecting whether the image file stored in the non-volatile memory is correct according to the file encryption information includes:

Using the first preset digest algorithm to calculate the digest value corresponding to the image file;

Judging whether the digest value is the same as the file encryption information;

If the same, the step of loading the image file into the memory of the baseboard management controller is executed.

Optionally, before acquiring the public key stored in the non-volatile memory, the method further includes:

Loading the trusted measurement code stored in the non-volatile memory into the memory of the baseboard management controller to run;

During the running process of the trusted measurement code, the step of obtaining the public key stored in the non-volatile memory is performed.

Optionally, the loading of the trusted measurement code stored in the non-volatile memory into the memory of the baseboard management controller for execution includes:

The trusted metric code is loaded from the protection area of the non-volatile memory into the memory of the baseboard management controller to run; wherein, the protection area is a programmable area in read-only mode.

Optionally, before the digital signature stored in the non-volatile memory is decrypted according to the public key to obtain the file encryption information, the method further includes:

Determine whether the public key is correct according to the preset encryption information stored in the non-volatile memory; wherein, the preset encryption information is stored in a one-time programming area in the non-volatile memory;

If the public key is correct, the step of decrypting the digital signature stored in the non-volatile memory according to the public key to obtain file encryption information is performed.

Optionally, determining whether the public key is correct according to preset encryption information stored in the non-volatile memory includes:

using the second preset digest algorithm to calculate the public key digest value corresponding to the public key;

Determine whether the public key digest value is the same as the preset encryption information;

If they are the same, it is determined that the public key is correct, and the step of decrypting the digital signature stored in the non-volatile memory according to the public key to obtain file encryption information is performed.

The present invention also provides a startup configuration method for the baseboard management controller, comprising:

Encrypt the image file of the baseboard management controller to obtain file encryption information;

Using the private key of the preset asymmetric encryption algorithm to encrypt the file encryption information to generate a digital signature;

The image file, the digital signature and the public key corresponding to the private key are stored in a non-volatile memory.

Optionally, the startup configuration method further includes:

The trusted measurement code is stored in a protection area of the non-volatile memory; wherein, the protection area is a programmable area in a read-only mode, and the trusted measurement code is used to verify the image file.

Optionally, the startup configuration method further includes:

Encrypting the public key to obtain preset encryption information;

Writing the preset encrypted information into a one-time programming area in the non-volatile memory.

Optionally, before the writing the preset encrypted information into the one-time programming area in the non-volatile memory, the method further includes:

Generate and output memory recommendation information according to the size of the preset encryption information; wherein the memory recommendation information includes non-volatile memory information whose capacity of a one-time programming area is greater than or equal to the size of the preset encryption information.

Optionally, encrypting the public key to obtain preset encryption information, including:

Using the second preset digest algorithm, encrypt the public key to obtain the preset encryption information.

The present invention also provides a starting device for the baseboard management controller, comprising:

The public key acquisition module is used to acquire the public key stored in the non-volatile memory after the baseboard management controller is powered on and started;

a public key decryption module, configured to decrypt the digital signature stored in the non-volatile memory according to the public key to obtain file encryption information;

an image detection module, configured to detect whether the image file stored in the non-volatile memory is correct according to the file encryption information;

A startup and operation module is configured to load the image file into the memory of the baseboard management controller for operation if the image file is correct.

The present invention also provides a startup configuration device for the baseboard management controller, comprising:

The file encryption module is used to encrypt the image file of the baseboard management controller and obtain the file encryption information;

a private key encryption module for encrypting the file encryption information by using the private key of the preset asymmetric encryption algorithm to generate a digital signature;

A storage module, configured to store the image file, the digital signature and the public key corresponding to the private key in a non-volatile memory.

The present invention also provides an electronic device, comprising:

memory for storing computer programs;

The processor is configured to implement the steps of the above-mentioned starting method of a baseboard management controller or the above-mentioned starting configuration method of a baseboard management controller when executing the computer program.

In addition, the present invention also provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the above-mentioned method for starting a baseboard management controller is implemented or the steps of the above-mentioned startup configuration method of the baseboard management controller.

A method for starting a baseboard management controller provided by the present invention includes: after the baseboard management controller is powered on and started, acquiring a public key stored in a non-volatile memory; Decrypt the digital signature of the file to obtain the file encryption information; check whether the image file stored in the non-volatile memory is correct according to the file encryption information; if so, load the image file into the memory of the baseboard management controller to run;

It can be seen that the present invention can detect whether the image file stored in the non-volatile memory is correct and whether the image file has been tampered with according to the file encryption information, so that it can detect whether the image file is tampered with based on the file encryption information. It has the characteristics to realize the safe boot of the BMC chip and avoid the increased hardware cost of updating the chip. In addition, the present invention also provides a startup device, startup configuration method, device and electronic device for a baseboard management controller, which also have the above beneficial effects.

Description of drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present invention. For those of ordinary skill in the art, other drawings can also be obtained according to the provided drawings without creative work.

FIG. 1 is a flowchart of a method for starting a baseboard management controller according to an embodiment of the present invention;

FIG. 2 is a schematic diagram of storage area division of another method for starting a baseboard management controller according to an embodiment of the present invention;

3 is a flowchart of another method for starting a baseboard management controller according to an embodiment of the present invention;

4 is a schematic diagram of a digital signature production process of another startup method of a baseboard management controller provided by an embodiment of the present invention;

5 is a schematic flowchart of another method for starting a baseboard management controller according to an embodiment of the present invention;

FIG. 6 is a flowchart of a startup configuration method of a baseboard management controller according to an embodiment of the present invention;

FIG. 7 is a structural block diagram of a device for starting a baseboard management controller according to an embodiment of the present invention;

FIG. 8 is a structural block diagram of an apparatus for starting configuration of a baseboard management controller according to an embodiment of the present invention.

Detailed ways

In order to make the purposes, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments These are some embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Please refer to FIG. 1 , which is a flowchart of a method for starting a baseboard management controller according to an embodiment of the present invention. The initiating method may include:

Step 101: After the baseboard management controller is powered on and started, the public key stored in the non-volatile memory is obtained.

The public key in this embodiment may be the secret key used for decrypting the encrypted digital signature of the file encryption information of the image file (BMC-IMAGE) corresponding to the BMC software to be run by the BMC startup, that is, the file encryption information The public key (KeyPub) corresponding to the private key (KeyPri) used for asymmetric encryption.

Specifically, the specific content and quantity of the public key stored in the non-volatile memory in this embodiment can be set by the designer according to practical scenarios and user requirements. For example, the public key can be asymmetrically encrypted with the file encryption information. The private key used is a pair of secret keys, such as a pair of RSA secret keys of the RSA encryption algorithm (an asymmetric encryption and decryption algorithm), that is, the public key stored in the non-volatile memory can be used for the The public key corresponding to the private key used by the symmetric encryption algorithm to encrypt the file encryption information; the number of public keys can also be multiple, that is, the public key stored in the non-volatile memory can be used to encrypt the file encryption information multiple times. The public keys corresponding to each of the multiple private keys used, such as the two public keys corresponding to the two secret keys used for the secondary encryption of the file encryption information. As long as the processor can use the public key stored in the non-volatile memory to decrypt the digital signature obtained after encrypting the file encryption information to obtain the file encryption information, this embodiment does not impose any limitation on this.

It can be understood that the BMC startup method provided in this embodiment can be applied to the BMC. For example, the BMC chip of the storage device, that is, the BMC processor (the BMC-CPU in FIG. 2 ) The startup method provided in this embodiment detects whether the image file has been tampered with, so as to load (LOAD) the image file into the memory of the BMC (the BMC-RAM in Figure 2) when the image file has not been tampered with, so as to realize the security of the BMC. start up.

Correspondingly, in this embodiment, the trusted measurement code (CRTM code) is used to detect whether the image file has been tampered with, that is, the processor of the BMC can detect whether the image file is correct in the process of running the trusted measurement code, thereby realizing the security of the BMC. Startup; among them, the trusted measurement code can be the first piece of code run by the BMC, which is used to complete basic functions such as memory initialization and signature verification of the BMC. That is to say, before this step of the method provided in this embodiment, after the BMC is powered on and started, loading the trusted measurement code stored in the non-volatile memory into the memory of the baseboard management controller to run; During the running process of the trusted measurement code, step 101 and subsequent steps are performed.

Specifically, in order to ensure the security of the trusted measurement code stored in the non-volatile memory, the trusted measurement code in this embodiment may be stored in an OTP (One Time Programe, one-time programming area) area in the non-volatile memory or the protection area of read-only mode in the programmable area; as shown in Figure 2, when the non-volatile memory is flash memory (FLASH), the CRTM code can be stored in the programmable area (BLOCK area) only in read-only state protected area.

Step 102: Decrypt the digital signature stored in the non-volatile memory according to the public key to obtain file encryption information.

The digital signature in this step may be a result obtained by encrypting the file encryption information corresponding to the image file by using the private key. In this step, the public key corresponding to the private key stored in the nonvolatile memory is used to encrypt the digital The signature is decrypted to obtain the file encryption information, so as to use the decrypted file encryption information to detect whether the image file stored in the non-volatile memory has been tampered with.

Specifically, in this step, the processor decrypts the digital signature stored in the non-volatile memory according to the public key, and obtains the specific method of file encryption information, which can be set by the designer. For example, the processor can, according to the public key, The digital signature stored in the non-volatile memory is decrypted by using a preset asymmetric encryption algorithm to obtain file encryption information. As long as it is guaranteed that the processor can decrypt the digital signature stored in the non-volatile memory by using the public key stored in the non-volatile memory, this embodiment does not impose any limitation on this.

Further, before this step, the processor can also detect whether the public key stored in the non-volatile memory is correct according to the preset encryption information stored in the non-volatile memory; when the public key is correct, that is, when the public key has not been tampered with. , and enter step 102; when the public key is incorrect, that is, when the public key is tampered with, the process can be directly ended to stop starting the BMC. The above preset encryption information may be a result obtained after encrypting a preset public key, such as a digest value (ie, a hash HASH value) obtained after digest encryption is performed on the public key.

Correspondingly, for the above-mentioned specific method of detecting whether the public key stored in the non-volatile memory is correct according to the preset encryption information stored in the non-volatile memory, the designer can set it by himself. Preset digest algorithm, calculate the public key digest value corresponding to the public key; determine whether the public key digest value is the same as the preset encryption information; if they are the same, determine that the public key is correct, and go to step 102; if not, determine the public key If it is not correct, you can end this process and stop starting the BMC.

Further, for the security of the preset encrypted information stored in the non-volatile memory, the preset encrypted information in this embodiment may be stored in an OTP (One Time Programe, one-time programming area) area in the non-volatile memory; As shown in Figure 2, when the non-volatile memory is FLASH, the preset encryption information (root public key HASH value) can be stored in the OTP area of FLASH.

Step 103 : according to the file encryption information, check whether the image file stored in the non-volatile memory is correct; if yes, go to step 104 .

It can be understood that, in this embodiment, the processor can use decryption to obtain file encryption information to detect whether the image file stored in the non-volatile memory has been tampered with, so that when it is determined that the image file has not been tampered with, it enters step 104 to load the image file. Run it in the memory of the BMC, start running the BMC software, and realize the safe boot of the BMC.

Correspondingly, if the image file is incorrect in this step, that is, the image file is tampered with, it can be set by the designer. For example, when the processor determines that the image file is incorrect, it can directly end the process without loading the image file. , stop starting the BMC.

Correspondingly, the specific method for the processor to detect whether the image file stored in the non-volatile memory is correct according to the file encryption information in this step can be set by the designer according to practical scenarios and user needs. For example, the processor can use the file. Encrypt the image file corresponding to the encryption method to obtain the encryption result; check whether the encryption result is the same as the file encryption information; if they are the same, the image file is determined to be correct; if not, the image file is determined to be incorrect. For example, when the file encryption information is an encryption result (ie, a digest value) obtained by encrypting the image file using the first preset digest algorithm, the processor in this step may use the first preset digest algorithm to calculate the digest value corresponding to the image file; determine Whether the digest value and the file encryption information are the same; if they are the same, go to step 104 .

Step 104: Load the image file into the memory of the baseboard management controller to run.

Specifically, in this step, when determining that the image file has not been tampered with, the processor may load the image file into the memory of the BMC for operation, start to run the BMC software, and complete the secure boot of the BMC.

In this embodiment, the embodiment of the present invention can detect whether the image file stored in the non-volatile memory is correct according to the file encryption information, and can detect whether the image file has been tampered with. The existing characteristics of the volatile memory are used to realize the safe boot of the BMC chip and avoid the increased hardware cost of updating the chip.

Please refer to FIG. 3. FIG. 3 is a flowchart of another method for starting a baseboard management controller according to an embodiment of the present invention. The method may include:

Step 201: After the baseboard management controller is powered on and started, the trusted measurement code stored in the non-volatile memory is loaded into the memory of the baseboard management controller to run.

It can be understood that in this step, the processor of the BMC can load the trusted measurement code (CRTM code) into the memory of the BMC (the BMC-RAM in Figure 5) to run after power-on, so as to use the running CRTM. The code completes the detection of whether the image file has been tampered with, and completes the secure boot of the BMC.

Specifically, in this embodiment, the trusted measurement code can be stored in a protected area in the non-volatile memory, that is, a programmable area in read-only mode, so as to avoid malicious tampering of the stored trusted measurement code; as shown in the figure 2, when the non-volatile memory is flash memory (FLASH), the CRTM code (credible measurement code) can be stored in the programmable area (BLOCK area) in a read-only protected area. Correspondingly, in this step, the processor of the BMC can load the trusted metric code from the protection area of the non-volatile memory to the memory of the baseboard management controller after being powered on and run; wherein, the protection area is in read-only mode. Programmable area.

Step 202: During the running process of the trusted measurement code, obtain the public key stored in the non-volatile memory.

The public key in this step may be stored in a non-protected area of the non-volatile memory, that is, a programmable area outside the protected area, that is, a normal storage area. As shown in Figure 2, the public key can be stored in a non-protected area of the non-volatile memory (FLASH) together with the digital signature and image file (BMC IMAGE).

Step 203 : according to the preset encryption information stored in the non-volatile memory, determine whether the public key is correct; if yes, go to step 204 .

Among them, the preset encrypted information can be stored in the one-time programming area in the non-volatile memory (the OTP area in Figure 2), for example, the preset encrypted information can be written into the one-time programming area of the non-volatile memory during the production stage .

It can be understood that the preset encryption information in this step can be the encryption result encrypted by the preset public key, for example, the public key (the root public key in Figure 5) is encrypted by the digest algorithm to obtain the digest value (such as HASH value of the RSA public key in Figure 5).

Specifically, in this step, the processor determines whether the public key is correct according to the preset encryption information stored in the non-volatile memory. The specific method can be set by the designer according to practical scenarios and user needs, such as preset encryption information. When the public key is encrypted by the second preset digest algorithm to obtain the digest value, in this step, the processor can use the second preset digest algorithm to calculate the public key digest value corresponding to the public key; determine the public key digest value and the preset encryption value. Whether the information is the same; if it is the same, it is determined that the public key is correct, and you can go to step 204 to continue the next image file verification process; if not, it is determined that the public key is incorrect, you can directly end the process, and no longer start the BMC. . This embodiment does not impose any limitation on this.

Step 204: Decrypt the digital signature stored in the non-volatile memory according to the public key to obtain file encryption information.

Wherein, the file encryption information in this step can be obtained by encrypting the image file to obtain the encryption result. As shown in Figure 4, the image file (BMC-IMAGE) is encrypted by the digest algorithm to obtain the digest, so that the private key (RSA private key) corresponding to the public key is used to obtain the digest. After encrypting the digest, the digital signature that needs to be stored in the non-volatile memory can be obtained, so that the processor of the BMC can use the public key to decrypt the digital signature to obtain the digest.

Specifically, in this step, the processor decrypts the digital signature stored in the non-volatile memory according to the public key to obtain the file encryption information, which can be set by the designer. The public key decryption method of the symmetric encryption/decryption algorithm is implemented in the same or similar manner, which is not limited in this embodiment.

Step 205: According to the file encryption information, check whether the image file stored in the non-volatile memory is correct; if yes, go to step 206.

Specifically, in this step, the processor detects whether the image file stored in the non-volatile memory is correct according to the file encryption information, which can be set by the designer according to practical scenarios and user needs. For example, the file encryption information is an image file. When the file is encrypted by the first preset digest algorithm to obtain a digest value (the BMC-IMAGE digest value A in FIG. 5 ), in this step, the processor can use the first preset digest algorithm to calculate the digest value corresponding to the image file ( Digest value A' in Figure 5); determine whether the digest value is the same as the file encryption information; if the same, then determine that the mirror file is correct, and enter step 206, continue to start the BMC; if not, then determine that the mirror file is not Correct, this process can be ended, and the BMC is no longer started and run, and this embodiment does not impose any restrictions on this.

It can be understood that the selection of the specific digest algorithm (SHA algorithm, also known as HASH algorithm) of the first preset digest algorithm and the second preset digest algorithm can be set by the designer according to practical scenarios and user needs. The first preset digest algorithm and the second preset digest algorithm can be the same digest algorithm, such as MD5 (Message Digest Algorithm Fifth Edition), SM3 (National Secret Algorithm), SHA-1 (a secure hash algorithm), SHA - Digest algorithms such as 224 (a secure hash algorithm), SHA-256 (a secure hash algorithm), SHA-384 (a secure hash algorithm) and SHA-512 (a secure hash algorithm); The first preset digest algorithm and the second preset digest algorithm may also use different digest algorithms. For example, the first preset digest algorithm may be the MD5 algorithm, and the second preset digest algorithm may be the SM3 algorithm. This embodiment does not impose any limitation on this.

Step 206: Load the image file into the memory of the baseboard management controller to run.

Specifically, in this step, when determining that the image file has not been tampered with, the processor may load the image file into the memory of the BMC for operation, start to run the BMC software, and complete the secure boot of the BMC.

In this embodiment, the embodiment of the present invention determines whether the public key is correct according to the preset encryption information stored in the non-volatile memory, can verify the public key stored in the non-volatile memory, and detect whether the public key has been tampered with , to further ensure the security of BMC chip startup.

Based on the startup method of the baseboard management controller provided by the above embodiment, the present embodiment provides a startup configuration method of the baseboard management controller, so as to configure the non-volatile memory used when the BMC starts, so as to ensure the safe startup of the BMC .

Please refer to FIG. 6 . FIG. 6 is a flowchart of a startup configuration method of a baseboard management controller according to an embodiment of the present invention. The startup configuration method may include:

Step 301: Encrypt the image file of the baseboard management controller to obtain file encryption information.

It can be understood that the BMC startup configuration method provided in this embodiment can be applied to computer equipment, such as a non-volatile memory production equipment, that is, the processor of the computer equipment can configure the non-volatile memory used when the BMC starts. A non-volatile memory (such as FLASH) is used to implement the configuration of the BMC safe boot and ensure that the BMC can boot safely.

Specifically, this embodiment does not limit the processor to encrypt the image file of the baseboard management controller to obtain the file encryption information. Algorithm) to encrypt the BMC image file (BMC-IMAGE) to obtain file encryption information (ie digest value).

Step 302: Encrypt the file encryption information by using the private key of the preset asymmetric encryption algorithm to generate a digital signature.

Specifically, in this step, the processor may use the private key of the preset asymmetric encryption algorithm to perform asymmetric encryption on the file encryption information to obtain a signature file (ie, a digital signature) of the image file. The specific content and quantity of the private key of the preset asymmetric encryption algorithm in this embodiment can be set by the designer according to practical scenarios and user requirements. For example, the private key can be used for asymmetric encryption of file encryption information. ; The number of private keys can be 1, such as the private key in a pair of RSA key pairs of the RSA encryption algorithm, that is, the public key in the RSA key pair can be stored in non-volatile memory for non-volatile The digital signature stored in the volatile memory is decrypted to obtain the file encryption information; the number of private keys can also be multiple, such as the private keys in the multiple pairs of RSA key pairs of the RSA encryption algorithm, that is, the processor can use multiple The private key encrypts the file encryption information multiple times to obtain a digital signature. As long as the processor can preset the private key of the asymmetric encryption algorithm, encrypt the file encryption information, and generate a digital signature that can be decrypted by the corresponding public key, this embodiment does not impose any limitation.

For example, the processor can use an RSA algorithm to generate one or more pairs of RSA keys (that is, public and private keys), and use the private key in the RSA key pair to asymmetrically encrypt the file encryption information to generate an image file. digital signature.

Specifically, the specific content and quantity of the private key of the preset asymmetric encryption algorithm in this embodiment can be set by the designer according to practical scenarios and user requirements. For example, the public key can be used for asymmetric encryption of file encryption information. The private key is a pair of secret keys, such as a pair of RSA keys of the RSA encryption algorithm (an asymmetric encryption and decryption algorithm), that is, the public key stored in the non-volatile memory can be asymmetric using a preset The public key corresponding to the private key used by the encryption algorithm to encrypt the file encryption information; the number of public keys can also be multiple, that is, the public key stored in the non-volatile memory can be used for multiple encryption of the file encryption information. The public keys corresponding to each of the multiple private keys, such as the two public keys corresponding to the two private keys used for the secondary encryption of the file encryption information. As long as the processor can use the public key stored in the non-volatile memory to decrypt the digital signature obtained by encrypting the file encryption information to obtain the file encryption information, this embodiment does not impose any restrictions on this.

It should be noted that this embodiment does not limit the specific manner in which the processor uses the private key of the preset asymmetric encryption algorithm to encrypt the file encryption information and generate a digital signature. As shown in FIG. 4 , the processor can use the RSA private key. The key encrypts the encrypted information of the image file of the BMC to generate a digital signature.

Step 303: Store the image file, the digital signature and the public key corresponding to the private key in a non-volatile memory.

It can be understood that in this step, the image file, digital signature and public key (such as the public key in the above-mentioned RSA key pair) can be released together, and written to the normal storage area of the non-volatile memory (as shown in Figure 2). non-protected area in ).

Further, in this embodiment, the processor can also encrypt the public key to obtain preset encryption information; the preset encryption information is written into the one-time programming area in the non-volatile memory, so as to realize the public key when the BMC is started. Verification process; for example, the processor can use the digest algorithm to encrypt the public key, obtain preset encrypted information (ie digest value), and write it into the one-time programming area in the non-volatile memory. For example, the processor can use the second preset digest algorithm to encrypt the public key, obtain preset encrypted information (ie digest value), and write it into a one-time programming area in the non-volatile memory; correspondingly, the processor can also According to the length of the sequence generated by the second preset digest algorithm (that is, the length of the generated sequence), select and determine the non-volatile memory for writing the preset encrypted information from a plurality of optional non-volatile memories, such as non-volatile memory The memory may be an optional non-volatile memory with an OTP area greater than or equal to the length of the generated sequence and with a minimum OTP area.

Correspondingly, in this embodiment, the processor can also write the trusted metric code into a one-time programming area in the non-volatile memory or a read-only protected area in the programmable area, so as to use the trusted metric code to verify the image. file to ensure the safe boot of BMC. As shown in Figure 2, the processor can write the trusted metric code into the BLOCK area of FLASH (that is, the programmable area) and set the area where the trusted metric code is stored (that is, the protected area) in read-only mode; accordingly, The FLASH may not contain silkscreen, for example, the processor can output prompt information to prompt the staff to remove the silkscreen of the FLASH, so as to avoid using the information on the silkscreen to modify the trusted measurement code in the protection area and ensure the safe startup of the BMC; that is, That said, the non-volatile memory in this embodiment may not contain silkscreen.

Further, the startup configuration method of the baseboard management controller provided in this embodiment may further include a selection process of the non-volatile memory, for example, when the one-time programming area in the non-volatile memory is used to store preset encrypted information. In this embodiment, the processor of the startup configuration device of the baseboard management controller (such as a non-volatile memory production device) can generate and output memory recommendation information according to the size of the preset encrypted information; wherein, the memory recommendation information includes a once Non-volatile memory information whose capacity of the programming area is greater than or equal to the size of the preset encrypted information; that is, the startup configuration device can display the non-volatile memory of the appropriate OTP area size to the staff by outputting memory recommendation information. , so that the staff can choose the corresponding non-volatile memory, so that the processor can use the non-volatile memory selected by the staff to store preset encryption information, trusted measurement code, image file, digital signature and public key Correspondingly, according to the received memory selection instruction, the processor may store preset encryption information, trust measurement code, image file, digital signature and public key in the non-volatile memory corresponding to the memory selection instruction.

Correspondingly, the processor of the startup configuration device may also determine the non-volatile memory according to the size of the preset encrypted information; wherein the capacity of the one-time programming area of the non-volatile memory is greater than or equal to the size of the preset encrypted information. For example, the processor may determine the non-volatile memory from the preset non-volatile memory according to the size of the preset encryption information, and the non-volatile memory may be the size of the one-time programming area in the target preset non-volatile memory. The preset non-volatile memory with the smallest capacity, and the target preset non-volatile memory may be the preset non-volatile memory whose capacity of the one-time programming area is greater than or equal to the size of the preset encrypted information.

Specifically, the size of the above-mentioned preset encryption information may be the actual size of the preset encryption information obtained after public key encryption; the size of the above-mentioned preset encryption information may also be the encryption algorithm used for public key encryption (such as the second preset encryption algorithm). The length of the sequence generated by the digest algorithm) (that is, the length of the generated sequence). For example, when the processor encrypts the public key by using the second preset digest algorithm to obtain the preset encryption information, the processor can use the second preset digest algorithm to encrypt the public key. The generated sequence length of the digest algorithm generates and outputs memory recommendation information; wherein, the memory recommendation information includes non-volatile memory information whose capacity of the one-time programming area is greater than or equal to the generated sequence length.

In this embodiment, by storing the image file, the digital signature and the public key corresponding to the private key in the non-volatile memory, the non-volatile memory used when the BMC is started can be configured to ensure the safe start of the BMC. .

Corresponding to the above embodiments of the starting method, the embodiments of the present invention further provide a starting device for a baseboard management controller, the starting device for a baseboard management controller described below is the same as the The activation methods can refer to each other.

Please refer to FIG. 7 , which is a structural block diagram of an apparatus for starting a baseboard management controller according to an embodiment of the present invention. The activation means may include:

The public key acquisition module 10 is used for acquiring the public key stored in the non-volatile memory after the baseboard management controller is powered on and started;

The public key decryption module 20 is used for decrypting the digital signature stored in the non-volatile memory according to the public key to obtain file encryption information;

The image detection module 30 is used to detect whether the image file stored in the non-volatile memory is correct according to the file encryption information;

The startup and operation module 40 is configured to load the image file into the memory of the baseboard management controller for operation if the image file is correct.

Optionally, the image detection module 30 may include:

a first calculation submodule, configured to calculate the digest value corresponding to the image file by using the first preset digest algorithm;

The first judging sub-module is used to judge whether the digest value is the same as the file encryption information;

Optionally, the starting device may further include:

The loading module is used to load the trusted measurement code stored in the non-volatile memory into the memory of the baseboard management controller to run; during the running process of the trusted measurement code, send a start signal to the public key acquisition module 10 .

Optionally, the loading module may be specifically configured to load the trusted metric code from the protection area of the non-volatile memory to the memory of the baseboard management controller to run; wherein, the protection area is a programmable area in read-only mode.

Optionally, the starting device may further include:

The public key verification module is used for judging whether the public key is correct according to the preset encryption information stored in the non-volatile memory; wherein, the preset encryption information is stored in the one-time programming area in the non-volatile memory; if the public key is correct , the start signal is sent to the public key decryption module 20 .

Optionally, the public key authentication module may include:

The second calculation submodule is configured to calculate the public key digest value corresponding to the public key by using the second preset digest algorithm;

The second judgment sub-module is used for judging whether the public key digest value is the same as the preset encryption information;

In this embodiment, the embodiment of the present invention uses the image detection module 30 to detect whether the image file stored in the non-volatile memory is correct according to the file encryption information, and can detect whether the image file has been tampered with, so as to be able to detect whether the image file has been tampered with, so as to not use RoT , Based on the existing characteristics of the non-volatile memory, the secure boot of the BMC chip is realized, which avoids the increased hardware cost of updating the chip.

Corresponding to the above embodiments of the startup configuration method, the embodiments of the present invention further provide a startup configuration device for a baseboard management controller, a startup configuration device for a baseboard management controller described below and a baseboard management controller described above. The startup configuration methods of the controllers can refer to each other correspondingly.

Please refer to FIG. 8 . FIG. 8 is a structural block diagram of an apparatus for starting configuration of a baseboard management controller according to an embodiment of the present invention. The boot configuration means may include:

The file encryption module 50 is used for encrypting the image file of the baseboard management controller to obtain file encryption information;

The private key encryption module 60 is used for encrypting the file encryption information by using the private key of the preset asymmetric encryption algorithm to generate a digital signature;

The storage module 70 is configured to store the image file, the digital signature and the public key corresponding to the private key in the non-volatile memory.

Optionally, the startup configuration device may further include:

The code storage module is used for storing the trusted measurement code in the protection area of the non-volatile memory; wherein, the protection area is a programmable area in read-only mode, and the trusted measurement code is used to verify the image file.

Optionally, the startup configuration device may further include:

The public key encryption module is used to encrypt the public key to obtain preset encrypted information;

The encryption storage module is used for writing preset encrypted information into a one-time programming area in the non-volatile memory.

Optionally, the startup configuration device may further include:

The recommendation generating module is configured to generate and output memory recommendation information according to the size of the preset encrypted information; wherein, the memory recommendation information includes non-volatile memory information whose capacity of the one-time programming area is greater than or equal to the size of the preset encrypted information.

Optionally, the public key encryption module may be specifically configured to use the second preset digest algorithm to encrypt the public key to obtain preset encryption information.

In this embodiment, the embodiment of the present invention stores the image file, the digital signature and the public key corresponding to the private key in the non-volatile memory through the storage module 60, so that the non-volatile memory used when the BMC is started can be configured to ensure that the BMC is started. secure boot.

Corresponding to the above method embodiments, the embodiments of the present invention further provide an electronic device, an electronic device described below, a startup method of a baseboard management controller and a startup configuration method of a baseboard management controller described above can refer to each other.

An electronic device comprising:

memory for storing computer programs;

The processor is configured to implement the steps of the baseboard management controller startup method or the baseboard management controller startup configuration method provided by the above embodiments when executing the computer program.

Specifically, the electronic device provided by this embodiment may be a BMC chip, such as a BMC chip of a storage device; the electronic device provided by this embodiment may also be a computer device, such as a nonvolatile memory production device.

Corresponding to the above method embodiments, embodiments of the present invention further provide a computer-readable storage medium, a computer-readable storage medium described below, a method for starting a baseboard management controller and a baseboard management described above. The startup configuration methods of the controllers can refer to each other correspondingly.

A computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the method for starting a baseboard management controller or the method for starting configuration of a baseboard management controller provided by the foregoing embodiments is implemented. step.

The computer-readable storage medium may specifically be a USB flash drive, a removable hard disk, a read-only memory (Read-Only Memory, ROM), a random access memory (Random Access Memory, RAM), a magnetic disk, or an optical disk, etc., which can store various program codes. computer readable storage medium.

The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same and similar parts between the various embodiments can be referred to each other. For the apparatuses, electronic devices, and computer-readable storage media disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the descriptions are relatively simple, and for related parts, please refer to the descriptions of the methods.

The startup method, startup device, startup configuration method, startup configuration device, electronic device, and computer-readable storage medium of a baseboard management controller provided by the present invention have been described above in detail. The principles and implementations of the present invention are described herein by using specific examples, and the descriptions of the above embodiments are only used to help understand the method and the core idea of the present invention. It should be pointed out that for those skilled in the art, without departing from the principle of the present invention, several improvements and modifications can also be made to the present invention, and these improvements and modifications also fall within the protection scope of the claims of the present invention.

Claims (15)

1. A method for starting a baseboard management controller, comprising: After the baseboard management controller is powered on and started, the public key stored in the non-volatile memory is obtained; Decrypt the digital signature stored in the non-volatile memory according to the public key to obtain file encryption information; Detecting whether the image file stored in the non-volatile memory is correct according to the file encryption information; If so, load the image file into the memory of the baseboard management controller to run. 2 . The method for starting a baseboard management controller according to claim 1 , wherein the detecting whether the image file stored in the non-volatile memory is correct according to the file encryption information comprises: 2 . Using the first preset digest algorithm to calculate the digest value corresponding to the image file; Judging whether the digest value is the same as the file encryption information; If the same, the step of loading the image file into the memory of the baseboard management controller is executed. 3 . The method for starting a baseboard management controller according to claim 1 , wherein before acquiring the public key stored in the non-volatile memory, the method further comprises: 3 . Loading the trusted measurement code stored in the non-volatile memory into the memory of the baseboard management controller to run; During the running process of the trusted measurement code, the step of obtaining the public key stored in the non-volatile memory is performed. 4 . The method for starting a baseboard management controller according to claim 3 , wherein the loading the trusted measurement code stored in the non-volatile memory into the memory of the baseboard management controller to run, include: The trusted metric code is loaded from the protection area of the non-volatile memory into the memory of the baseboard management controller to run; wherein, the protection area is a programmable area in read-only mode. The method for starting a baseboard management controller according to any one of claims 1 to 4, wherein the decrypting the digital signature stored in the non-volatile memory according to the public key, Before getting the file encryption information, it also includes: Determine whether the public key is correct according to the preset encryption information stored in the non-volatile memory; wherein, the preset encryption information is stored in a one-time programming area in the non-volatile memory; If the public key is correct, the step of decrypting the digital signature stored in the non-volatile memory according to the public key to obtain file encryption information is performed. 6 . The method for starting a baseboard management controller according to claim 5 , wherein the determining whether the public key is correct according to the preset encryption information stored in the non-volatile memory comprises: 6 . using the second preset digest algorithm to calculate the public key digest value corresponding to the public key; Determine whether the public key digest value is the same as the preset encryption information; If they are the same, it is determined that the public key is correct, and the step of decrypting the digital signature stored in the non-volatile memory according to the public key to obtain file encryption information is performed. 7. A startup configuration method for a baseboard management controller, comprising: Encrypt the image file of the baseboard management controller to obtain file encryption information; Using the private key of the preset asymmetric encryption algorithm to encrypt the file encryption information to generate a digital signature; The image file, the digital signature and the public key corresponding to the private key are stored in a non-volatile memory. 8 . The startup configuration method of the baseboard management controller according to claim 7 , further comprising: The trusted measurement code is stored in a protection area of the non-volatile memory; wherein, the protection area is a programmable area in a read-only mode, and the trusted measurement code is used to verify the image file. 9. The startup configuration method of the baseboard management controller according to claim 7 or 8, further comprising: Encrypting the public key to obtain preset encryption information; Writing the preset encrypted information into a one-time programming area in the non-volatile memory. 10 . The startup configuration method of the baseboard management controller according to claim 9 , wherein before the writing the preset encryption information into the one-time programming area in the non-volatile memory, the method further comprises: 11 . : Generate and output memory recommendation information according to the size of the preset encryption information; wherein the memory recommendation information includes non-volatile memory information whose capacity of a one-time programming area is greater than or equal to the size of the preset encryption information. 11 . The startup configuration method of a baseboard management controller according to claim 9 , wherein the encrypting the public key to obtain preset encryption information comprises: 11 . Using the second preset digest algorithm, encrypt the public key to obtain the preset encryption information. 12. A device for starting a baseboard management controller, comprising: The public key acquisition module is used to acquire the public key stored in the non-volatile memory after the baseboard management controller is powered on and started; a public key decryption module, configured to decrypt the digital signature stored in the non-volatile memory according to the public key to obtain file encryption information; an image detection module, configured to detect whether the image file stored in the non-volatile memory is correct according to the file encryption information; A startup and operation module is configured to load the image file into the memory of the baseboard management controller for operation if the image file is correct. 13. A startup configuration device for a baseboard management controller, comprising: The file encryption module is used to encrypt the image file of the baseboard management controller and obtain the file encryption information; a private key encryption module for encrypting the file encryption information by using the private key of the preset asymmetric encryption algorithm to generate a digital signature; A storage module, configured to store the image file, the digital signature and the public key corresponding to the private key in a non-volatile memory. 14. An electronic device, characterized in that, comprising: memory for storing computer programs; A processor for implementing the startup method of the baseboard management controller according to any one of claims 1 to 6 or the startup configuration of the baseboard management controller according to any one of claims 7 to 11 when executing the computer program steps of the method. 15. A computer-readable storage medium, wherein a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the substrate according to any one of claims 1 to 6 is implemented Steps of the startup method of the management controller or the startup configuration method of the baseboard management controller according to any one of claims 7 to 11 .

Images