PCIe Switch firmware safety execution method, device, terminal and storage medium

Abstract

The technical scheme of the invention provides a PCIe Switch firmware safety execution method, a device, a terminal and a storage medium. The PCIe Switch firmware safety execution method comprises the following steps: firstly, electrifying a PCIe Switch; performing redundancy check calculation on the firmware to be executed to obtain a redundancy check code; wherein the firmware to be executed is any one of firmware to be started and firmware to be upgraded; comparing the obtained redundancy check code with a redundancy check code pre-stored in the firmware to be executed, if the obtained redundancy check code is consistent with the redundancy check code pre-stored in the firmware to be executed, continuing the next step; if the obtained redundancy check code is not consistent with the redundancy check code pre-stored in the firmware to be executed, stopping firmware execution; and finally, comparing the secret key stored in the firmware to be executed with a pre-stored secret key, if the secret key is consistent with the pre-stored secret key, allowing the firmware to be executed, and if the secret key is not consistent with the pre-stored secret key, stopping the firmware from being executed. According to the method, attack of malicious firmware can be effectively prevented, data tampering of the malicious firmware to the host and the equipment is avoided, and the safety of the system is effectively protected.

Description

technical field [0001] The invention relates to the field of PCIe Switch firmware execution, in particular to a PCIe Switch firmware safe execution method, device, terminal and storage medium. Background technique [0002] With the development of modern processor technology, PCIe bus, as a standard high-speed bus, has the characteristics of high speed, reliability, high bandwidth, and automatic configuration, and has been widely used in the server field. [0003] At the same time, with the increase of PCIe devices in server systems, server developers are faced with the problem of insufficient number of CPU PCIe buses. In order to solve this problem, developers are increasingly adding PCIe Switches (chips that can expand the number of PCIe) to In the server system, the expansion of the number of PCIe is realized. The PCIe Switch is connected upstream to the CPU and downstream to PCIe devices. Once the firmware of the PCIe Switch is tampered with or attacked, it will pose an ...

AI Technical Summary

Problems solved by technology

The PCIe Switch is connected upstream to the CPU and downstream to PCIe devices. Once the firmware of the PCIe Switch is tampered with or attacked, it will pose an immeasurable threat to the security of the entire server system.

[0004] However, there is no security mechanism for the startup and upgrade of PCIe Switch in the existing technical solution, which makes the system vulnerable to malicious firmware attacks, and cannot prevent malicious firmware from tampering with the data of PCIe hosts and PCIe devices; Verify and authenticate, thus bringing hidden dangers to firmware security

Images