A server flash security management method and system

Abstract

The invention discloses a server flash security management method, which comprises the following steps of after a code monitoring chip receives a startup instruction, reading a startup code stored ina flash, sending the startup code to a CPU, and controlling a startup component to suspend reading of the startup code; using the CPU to carry out security verification on the starting code, determinewhether the starting code is tampered or not, and send a passing signal to the code monitoring chip if the verification is passed; and after receiving the passing signal, using the code monitoring chip to control the startup component to read the startup code so as to complete the startup operation of the flash. According to the method, before starting up, the starting-up code in the flash is subjected to safety verification, starting is carried out after it is determined that the starting code is not tampered, and therefore the overall safety and the reliability of the server are improved. The invention further discloses a server flash security management system for executing the method.

Description

technical field [0001] The invention relates to the technical field of server security management, in particular to a server flash security management method and system thereof. Background technique [0002] The SPI flash of the server is used as the storage medium of the system startup code, which is very important for the security of the server system. At present, there have been some hackers who maliciously attack SPI flash. By tampering with the code information stored in SPI flash, serious failures such as server downtime have occurred. In some cases, information in the server can even be obtained at will. [0003] At present, on the server motherboard, the SPI flash is connected to the PCH and BMC through a first-level MUX (2 selection 1 routing chip). Among them, PCH is used as the system bus startup channel. During the boot process, it obtains the BIOS code stored in the flash, and runs various system register settings to start the boot; BMC serves as the SPI flash ...

AI Technical Summary

Problems solved by technology

[0004] Since the SPI flash bus is only connected to the PCH or BMC channel, the data in the flash does not pass through other links, and the bus data of the flash will not be monitored during startup, update and operation, so that when malicious code attacks occur, The data in the flash can be tampered with at will, which will lead to failures such as server downtime. In some cases, user data may also be stolen, which threatens the overall security of the server, and the security and reliability are low.

Images