Operation safety monitoring method, device and equipment based on heterogeneous dual systems and medium

Abstract

The invention relates to the technical field of computers, and discloses an operation safety monitoring method and device based on heterogeneous dual systems, equipment and a medium. After entering a working state based on the starting running instruction, guiding other CPU cores except the first CPU core in the BMC to run a service operating system respectively; verifying the service operation system; and when the verification fails, terminating the operation of the service operation system. And the business operation system is verified through the verification operation system, so that the network security of the BMC is improved. And deeper security check is carried out on the service operating system to ensure that the service operating system is not influenced by malicious software or attacks, so that the risk that the server is attacked by the network is reduced. By adopting the new BMC architecture and security mechanism, the security, reliability and performance of the server can be improved, so that the server is more competitive in the market.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a method, device, equipment and medium for monitoring operation safety based on heterogeneous dual systems. Background Art

[0002] With the rapid development of electronic technology, especially in the current context of huge demand for computing power, the demand for servers has increased dramatically, so whether servers can operate safely and reliably has become an increasingly prominent issue. Servers contain many parts, such as a very important part of the server, such as BMC, which is similar to the server's housekeeper, used to detect the server's operating status, report various fault information, alarm information, and adjust the fan speed, so that the server can work in a relatively optimal working environment. Therefore, the safe and reliable operation of BMC also determines whether the CPU on the server can operate safely and reliably.

[0003] However, the current BMC is not robust enough in terms of network security, which may result in the BMC being in an unsafe and unreliable working environment, thus causing serious challenges to the security of the server's working environment.

[0004] Although the network protection of BMC in related technologies can play a certain role, these open source software still have some security loopholes, which still makes it impossible for BMC to run safely and stably. Summary of the invention

[0005] In view of this, the present invention provides an operation safety monitoring method, device, equipment and medium based on a heterogeneous dual system to solve the problem in the related art that the BMC has no way to operate safely and stably.

[0006] In a first aspect, the present invention provides an operation safety monitoring method based on a heterogeneous dual system, the method is applied to a multi-core BMC, a plurality of operating systems are implanted in the BMC, the plurality of operating systems include a verification operating system and at least one business operating system, a first CPU core is used in the multi-core BMC to run the verification operating system, and other CPU cores except the first CPU core in the multi-core BMC respectively run a business operating system, the method is executed by the verification operating system, and the method includes:

[0007] Obtaining a boot-up and running instruction, where the boot-up and running instruction is an instruction generated after the first CPU core enters a working state and runs a preset program in a boot read-only memory (Boot Read-Only Memory, referred to as BootRoom);

[0008] After entering the working state based on the startup operation instruction, guide the other CPU cores in the BMC except the first CPU core to respectively run the business operating system;

[0009] Verify the business operating system;

[0010] When the verification fails, the operation of the business operating system is terminated.

[0011] The present invention provides a method for monitoring operation safety based on heterogeneous dual systems, which has the following advantages:

[0012] A verification operating system and at least one business operating system are implanted in the BMC. The network security of the BMC can be improved by verifying the business operating system through the verification operating system. The verification operating system can perform a more in-depth security check on the business operating system to ensure that it is not affected by malware or attacks, thereby reducing the risk of the server being attacked by the network. When the verification fails, terminating the operation of the business operating system can prevent potential security vulnerabilities or failures from affecting the normal operation of the server. This proactive security measure can improve the reliability of the system and reduce the server downtime caused by BMC failure. In a multi-core BMC, each CPU core except the first CPU core runs a business operating system. This multi-core architecture can achieve more flexible resource allocation. Different business operating systems can allocate different CPU resources according to their functions and requirements, improving the overall performance and efficiency of the system. The design of multiple operating systems makes it easier to maintain and upgrade the BMC. A single business operating system can be maintained and upgraded independently without affecting the normal operation of other operating systems. It helps to reduce maintenance time and cost and improve the maintainability of the system. Different business operating systems can also be customized and optimized according to the specific application requirements of the server. For example, a dedicated operating system can be configured for different server functions or application scenarios to provide better performance and functional support. The verification operating system can monitor and verify the business operating system in real time, and promptly detect potential faults or abnormalities. When a fault is detected, appropriate measures can be taken to recover, improve the system's fault detection and recovery capabilities, and reduce the impact of system faults on the business. By adopting this new BMC architecture and security mechanism, the security, reliability and performance of the server can be improved, making it more competitive in the market.

[0013] In an optional implementation, after entering the working state based on the startup operation instruction, guiding other CPU cores in the BMC except the first CPU core to respectively run the service operating system specifically includes:

[0014] Establishing a communication connection link with a second CPU core, wherein the second CPU core is any CPU core among other CPU cores in the BMC except the first CPU core;

[0015] Sending a startup instruction to the second CPU core via the communication connection link;

[0016] The startup instruction is used to instruct the second CPU core to run the preset logic code in the secondary program loader (SPL) from the preset memory address, so that the secondary program loader initializes the hardware device and system environment of the second CPU core, and loads and boots the universal boot loader (UBOOT) to load the business operating system; the startup instruction also includes an error detection code;

[0017] When the second CPU core is started to run the preset logic code in the secondary program loader to perform an operation, periodically checking whether there is an error in starting the secondary program loader or starting the universal boot loader according to the error detection code;

[0018] When it is currently determined that there is an error in the process of starting the secondary program loader and / or starting the universal boot loader, analyzing the cause of the error;

[0019] According to the cause of the error, adopt the error handling strategy corresponding to the error and generate alarm information.

[0020] Specifically, by periodically checking errors during the startup process and taking corresponding error handling strategies, potential problems can be discovered and solved in a timely manner, thereby improving the reliability and stability of the system. Among them, the introduction of error detection code can more comprehensively detect errors in the startup process, including problems in hardware device initialization, system environment settings, and operating system loading. When an error occurs, the cause of the error can be analyzed and a corresponding handling strategy can be taken, so that the problem can be quickly located and effective measures can be taken to solve it, thereby reducing the impact of system failures. By optimizing startup instructions and error handling strategies, the startup efficiency of the system can be improved, the startup time can be reduced, and the availability of the server can be improved. In addition, timely discovery and handling of errors during the startup process can prevent potential security vulnerabilities and improve the security of the system. The generation of alarm information can promptly notify the administrator of system problems, facilitate maintenance and management, and improve the maintainability of the system.

[0021] In an optional implementation, verifying the service operating system includes:

[0022] Perform a validity check on files in the preset storage area of ​​the business operating system.

[0023] Specifically, by verifying the legitimacy of the file, the loading and running of malware or other illegal files can be prevented, thereby improving the security of the system. Legitimacy verification can ensure that key files in the business operating system have not been tampered with or damaged, ensuring the integrity and stability of the system. If a problem occurs during the operation of the system, the legitimacy of the file can be verified to eliminate the fault caused by file damage or illegal modification, which facilitates troubleshooting and repair. In an optional implementation, the preset storage area includes: one or more of the kernel image file of the business operating system, the file in the root file system, and the system configuration file.

[0024] Specifically, verifying the legitimacy of the kernel image file can prevent malicious or tampered kernels from being loaded, ensuring the normal operation of the core functions of the system. The files in the root file system are also crucial to the normal operation of the system. Verifying these files can prevent illegal modification or replacement, protecting the stability and security of the system. The system configuration file contains various settings and parameters of the server. Verifying these files can ensure the accuracy and consistency of the configuration, avoiding system failures or security vulnerabilities caused by configuration errors. Therefore, by verifying the files in the preset storage area, unauthorized file modification or malware implantation can be prevented, improving the overall security of the system.

[0025] In an optional embodiment, the method further includes:

[0026] Obtaining a communication verification request sent by the business operating system, wherein the communication verification request includes a communication password to be verified, the communication password is a password that has been verified once by the business operating system and successfully verified, and the communication password is a password extracted from the communication connection request after the BMC receives a request from an external communication device to apply for establishing a communication connection through a preset communication protocol;

[0027] Based on the communication verification request, the communication password is verified twice, and a verification result of the secondary verification is obtained, wherein the verification result of the secondary verification is used to determine whether to establish a communication connection with an external communication device.

[0028] Specifically, by performing a secondary verification of the communication password, a security line of defense is added and the security of the communication connection is improved. Even if the communication password has been verified once in the business operating system, the secondary verification can further ensure the legitimacy and accuracy of the password. Even if the communication password applied for by the external communication device is stolen or leaked during the transmission process, the secondary verification can prevent unauthorized devices from establishing a communication connection and reduce the risk of password leakage. Therefore, only the communication password that has been successfully verified twice can establish a communication connection, thereby ensuring the reliability and stability of the communication. It helps to prevent system failures or anomalies caused by incorrect passwords or unauthorized connections. Moreover, the results of the secondary verification can be recorded and audited, which is convenient for troubleshooting and tracing when problems arise. It helps to discover potential security vulnerabilities or abnormal situations, and take corresponding measures to repair and improve them.

[0029] In an optional embodiment, the method further includes:

[0030] The verification result is sent to the business operating system so that the business operating system determines whether to establish a communication connection with the external communication device based on the verification result.

[0031] In an optional implementation, the verification operating system and the business operating system communicate via IPI, wherein the business operating system is a Linux system and the verification operating system is a real-time operating system.

[0032] In a second aspect, the present invention provides an operation safety monitoring device based on a heterogeneous dual system, the device is applied to a multi-core BMC, a plurality of operating systems are implanted in the BMC, the plurality of operating systems include a verification operating system and at least one business operating system, the multi-core BMC uses a first CPU core to run the verification operating system, and the other CPU cores except the first CPU core in the multi-core BMC respectively run a business operating system, the device corresponds to the verification operating system, and the device includes:

[0033] An acquisition module is used to acquire a startup operation instruction, where the startup operation instruction is an instruction generated after the first CPU core enters a working state and starts running a preset program in the startup read-only memory;

[0034] A processing module, configured to guide other CPU cores in the BMC except the first CPU core to respectively run a business operating system after entering a working state based on a startup operation instruction;

[0035] Verification module, used to verify the business operating system;

[0036] The processing module is also used to terminate the operation of the business operating system when the verification fails.

[0037] The present invention provides an operation safety monitoring device based on a heterogeneous dual system, which has the following advantages:

[0038] A verification operating system and at least one business operating system are implanted in the BMC. The network security of the BMC can be improved by verifying the business operating system through the verification operating system. The verification operating system can perform a more in-depth security check on the business operating system to ensure that it is not affected by malware or attacks, thereby reducing the risk of the server being attacked by the network. When the verification fails, terminating the operation of the business operating system can prevent potential security vulnerabilities or failures from affecting the normal operation of the server. This proactive security measure can improve the reliability of the system and reduce the server downtime caused by BMC failure. In a multi-core BMC, each CPU core except the first CPU core runs a business operating system. This multi-core architecture can achieve more flexible resource allocation. Different business operating systems can allocate different CPU resources according to their functions and requirements, improving the overall performance and efficiency of the system. The design of multiple operating systems makes it easier to maintain and upgrade the BMC. A single business operating system can be maintained and upgraded independently without affecting the normal operation of other operating systems. It helps to reduce maintenance time and cost and improve the maintainability of the system. Different business operating systems can also be customized and optimized according to the specific application requirements of the server. For example, a dedicated operating system can be configured for different server functions or application scenarios to provide better performance and functional support. The verification operating system can monitor and verify the business operating system in real time, and promptly detect potential faults or abnormalities. When a fault is detected, appropriate measures can be taken to recover, improve the system's fault detection and recovery capabilities, and reduce the impact of system faults on the business. By adopting this new BMC architecture and security mechanism, the security, reliability and performance of the server can be improved, making it more competitive in the market.

[0039] In a third aspect, the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the computer instructions to execute the operation safety monitoring method based on heterogeneous dual systems according to the first aspect or any corresponding embodiment thereof.

[0040] In a fourth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the operation safety monitoring method based on a heterogeneous dual system according to the first aspect or any corresponding embodiment thereof.

[0041] In a fifth aspect, the present invention provides a computer program product, including computer instructions, which are used to enable a computer to execute the operation safety monitoring method based on a heterogeneous dual system according to the first aspect or any corresponding embodiment thereof. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0043] Figure 1 It is a flow chart of an operation safety monitoring method based on a heterogeneous dual system provided by an embodiment of the present invention;

[0044] Figure 2 It is a flow chart of another operation safety monitoring method based on heterogeneous dual systems provided by an embodiment of the present invention;

[0045] Figure 3 This is a simplified flowchart of a specific example of a method for monitoring operation safety based on a heterogeneous dual system provided by an embodiment of the present invention;

[0046] Figure 4 It is a simplified flowchart of another specific example of an operation safety monitoring method based on a heterogeneous dual system provided by an embodiment of the present invention;

[0047] Figure 5 It is a structural block diagram of an operation safety monitoring device based on a heterogeneous dual system provided by an embodiment of the present invention;

[0048] Figure 6 It is a schematic diagram of the hardware structure of a computer device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0049] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0050] With the rapid development of electronic technology, especially in the current context of huge demand for computing power, the demand for servers has increased dramatically, so whether servers can operate safely and reliably has become an increasingly prominent issue. Servers contain many parts, such as a very important part of the server, such as BMC, which is similar to the server's housekeeper, used to detect the server's operating status, report various fault information, alarm information, and adjust the fan speed, so that the server can work in a relatively optimal working environment. Therefore, the safe and reliable operation of BMC also determines whether the CPU on the server can operate safely and reliably.

[0051] However, the current BMC is not robust enough in terms of network security, which may result in the BMC being in an unsafe and unreliable working environment, which in turn leads to serious challenges to the security of the server's working environment. The current BMC's commonly used security solutions are generally as follows:

[0052] The network protection of BMC in related technologies includes iptable, which can filter and intercept some illegal IPs, and add key functions to some connections, such as SSH to open encrypted connections; however, these open source software will have some security vulnerabilities after all. Attackers can use these security vulnerabilities to obtain some keys for BMC and external interactions. For example, attackers can use these vulnerabilities to obtain the SSH connection key of BMC, and then remotely log in to the SSH terminal of our BMC, so that they can modify, delete, and add our BMC configuration files, or implant some codes, making it impossible for our BMC to run safely and stably.

[0053] To solve the above problems, an embodiment of the present invention provides an operation safety monitoring embodiment based on a heterogeneous dual system. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system (computer device) including a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0054] In this embodiment, a method for monitoring operation safety based on a heterogeneous dual system is provided, which can be used for the above-mentioned terminal equipment, such as a mobile phone, a tablet computer, etc. Figure 1 is a flow chart of a method for monitoring operation safety based on heterogeneous dual systems provided by an embodiment of the present invention, such as Figure 1As shown, the method is applied to a multi-core BMC, in which multiple operating systems are implanted, including a verification operating system and at least one business operating system. The multi-core BMC uses a first CPU core to run the verification operating system, and the other CPU cores except the first CPU core in the multi-core BMC respectively run a business operating system. The method is executed by the verification operating system, and the process includes the following steps:

[0055] Step S101, obtaining a start-up operation instruction.

[0056] The startup running instruction is an instruction generated after the first CPU core enters the working state and runs the preset program in the startup read-only memory.

[0057] Specifically, when the server system is powered on, the first CPU is awakened, and then the first CPU runs a preset program in the start-up read-only memory, that is, an instruction generated after verifying the logic code related to the operating system.

[0058] Step S102 : after entering the working state based on the start-up operation instruction, guide the other CPU cores in the BMC except the first CPU core to respectively run the service operating system.

[0059] Specifically, the startup operation instruction controls the verification operating system to enter a working state. Then, the verification operating system guides the other CPU cores in the BMC except the first CPU core to respectively run the business operating system. That is, the business operating system is controlled to start.

[0060] Step S103, verifying the business operating system.

[0061] Specifically, when the business operating system enters the working state, the trusted verification program in the verification operating system begins to perform a legitimacy verification on some important storage area files in the business operating system.

[0062] Step S104: when the verification fails, the operation of the service operating system is terminated.

[0063] Specifically, when the verification is successful, the business operating system continues to operate normally;

[0064] On the contrary, if the verification fails, the business operating system terminates.

[0065] The operation security monitoring method based on heterogeneous dual systems provided in this embodiment implants a verification operating system and at least one business operating system in the BMC. By verifying the business operating system through the verification operating system, the network security of the BMC can be improved. The verification operating system can perform a more in-depth security check on the business operating system to ensure that it is not affected by malware or attacks, thereby reducing the risk of the server being attacked by the network. When the verification fails, terminating the operation of the business operating system can prevent potential security vulnerabilities or failures from affecting the normal operation of the server. This proactive security measure can improve the reliability of the system and reduce the server downtime caused by BMC failure. In the multi-core BMC, the other CPU cores except the first CPU core each run a business operating system, and this multi-core architecture can achieve more flexible resource allocation. Different business operating systems can allocate different CPU resources according to their functions and requirements, thereby improving the overall performance and efficiency of the system. The design of multiple operating systems makes it easier to maintain and upgrade the BMC. A single business operating system can be independently maintained and upgraded without affecting the normal operation of other operating systems. It helps to reduce maintenance time and cost and improve the maintainability of the system. Different business operating systems can also be customized and optimized according to the specific application requirements of the server. For example, you can configure a dedicated operating system for different server functions or application scenarios to provide better performance and functional support. The verification operating system can monitor and verify the business operating system in real time to detect potential failures or abnormalities in a timely manner. When a failure is detected, appropriate measures can be taken to recover, improve the system's fault detection and recovery capabilities, and reduce the impact of system failures on the business. By adopting this new BMC architecture and security mechanism, the security, reliability, and performance of the server can be improved, making it more competitive in the market.

[0066] In this embodiment, a method for monitoring operation safety based on a heterogeneous dual system is provided, which can be used for the above-mentioned mobile terminals, such as mobile phones, tablet computers, etc. Figure 2 FIG. 1 is a flow chart of another operation safety monitoring method based on heterogeneous dual systems provided by an embodiment of the present invention. Figure 2 As shown, based on the foregoing method embodiment, in an optional implementation manner, after entering the working state based on the startup operation instruction, guiding the other CPU cores in the BMC except the first CPU core to respectively run the business operating system can be implemented by the following optional implementation manner, which specifically includes the following method steps:

[0067] Step S201: Establish a communication connection link with the second CPU core.

[0068] The second CPU core is any CPU core among other CPU cores in the BMC except the first CPU core.

[0069] Specifically, the communication connection link between the verification operating system and the second CPU core may be formed through a message queue, or in the form of an "interrupt", or may be implemented through a shared memory or the like.

[0070] Step S202 sends a startup instruction to the second CPU core through the communication connection link.

[0071] Among them, the startup instruction is used to instruct the second CPU core to run the preset logic code in the SPL from the preset memory address, so that the SPL initializes the hardware equipment and system environment of the second CPU core, and loads and boots the universal boot loader to start, so that the universal boot loader loads the business operating system.

[0072] Specifically, after the verification operating system sends a startup instruction to the second CPU core through the communication connection link, the startup instruction can specify that the second CPU core runs part of the SPL code. When the second CPU core receives the startup instruction, it starts to execute the execution code of the SPL from the specified memory address. Among them, the SPL code is responsible for initializing the hardware device of CPU1, setting the system environment, and loading the universal boot loader image. The execution process of the SPL code is similar to starting a specified program in a read-only memory, and it is necessary to complete the initialization of the hardware device, the setting of the system environment, and the loading of the universal boot loader image.

[0073] Specifically, the SPL code reads the universal boot loader image from the storage device and loads it into memory. Then, the SPL code jumps to the entry point of the universal boot loader and starts executing the universal boot loader initialization code. The universal boot loader initialization code completes further system initialization work, such as setting up the memory map, initializing the console, etc.

[0074] After that, the general boot loader stage will load the kernel of the business operating system and start the BMC business program.

[0075] In a specific example, the verification operating system may be a real-time operating system (RTOS for short), and the business operating system may be a Linux system.

[0076] In a specific example, the startup instruction also includes an error detection code.

[0077] Therefore, when the second CPU core is started to run the preset logic code in the secondary program loader to perform an operation, the verification operating system is also used to perform the following operations:

[0078] Step S203: Periodically check whether there is an error in starting the secondary program loader or starting the universal boot loader according to the error detection code.

[0079] Specifically, considering that there may be faults or errors in the process of starting the SPL by the second CPU core, or the SPL starting the universal boot loader, in order to ensure the stability and reliability of the system, in the process of starting the second CPU core to run the preset logic code in the secondary program loader to operate, the verification operating system is also used to periodically check whether there are errors in the process of starting the secondary program loader or starting the universal boot loader according to the error detection code. The error detection code may, for example, include checking the status information of key hardware components, detecting whether there are abnormal conditions in the boot process, etc. Of course, other methods can also be used for error checking, such as hardware detection mechanism, self-test program or other appropriate methods for error detection.

[0080] Step S204: when it is determined that there is an error in the process of starting the secondary program loader and / or starting the universal boot loader, the cause of the error is analyzed.

[0081] Specifically, the error type and error cause can be matched from a pre-built database according to the detected error. The error type can be determined as a recoverable error or an unrecoverable error. The error cause can include, for example, a hardware failure or an error in the running program code.

[0082] Step S205: according to the cause of the error, adopt an error handling strategy corresponding to the error and generate alarm information.

[0083] Specifically, as described above, for recoverable errors, the corresponding recovery strategies configured in advance can be extracted from the pre-built database, including, for example, retrying to boot, repairing hardware problems, loading backup configurations, etc.

[0084] For unrecoverable errors, appropriate measures are taken, such as logging error information or shutting down the system to avoid further damage.

[0085] For the above-mentioned recoverable errors and irrecoverable operations, alarm information needs to be generated to inform the staff, so that the staff can be informed of the errors in time, or assist in repairing the errors, etc.

[0086] In an optional example, when an error is detected, the RTOS task may also take the following error handling measures.

[0087] For example, real-time monitoring of the operating status of each CPU core, including CPU usage, memory usage, disk I / O, etc. At the same time, system performance indicators such as response time and throughput can also be monitored.

[0088] The collected data is transmitted to a central management server or monitoring platform through the network, wherein, for example, methods such as SNMP (Simple Network Management Protocol) and RESTful API can be used to ensure reliable data transmission.

[0089] Develop an administrative interface through which administrators can access monitoring data and perform administrative operations.

[0090] The management interface can be web-based or a dedicated client application.

[0091] Administrators can view the real-time data of the running status, resource usage and system performance indicators of each CPU core on the management interface. They can view the system status, diagnose problems, and adjust system configuration in real time through the management interface. For example, they can adjust system configuration, optimize applications, and increase resources.

[0092] Furthermore, it can also include recording system operation logs and events, including boot process, user login, system configuration changes, etc. These logs can be used for auditing and tracing to ensure the security and compliance of the system.

[0093] By establishing the monitoring mechanism and implementing remote monitoring and management, administrators can understand the system's operating status in real time, discover and solve problems in a timely manner, and improve system reliability and performance. At the same time, through identity authentication and authorization mechanisms, the security and compliance of the system can be ensured. The specific implementation process will be adjusted and optimized according to the characteristics and needs of the system.

[0094] The embodiment of the present invention provides a method for monitoring the operation safety based on heterogeneous dual systems. By periodically checking errors during the startup process and adopting corresponding error handling strategies, potential problems can be discovered and solved in time, thereby improving the reliability and stability of the system. Among them, the introduction of error detection code can more comprehensively detect errors in the startup process, including problems in hardware device initialization, system environment settings, and operating system loading. When an error occurs, the cause of the error can be analyzed and a corresponding handling strategy can be adopted, so that the problem can be quickly located and effective measures can be taken to solve it, thereby reducing the impact of system failures. By optimizing the startup instructions and error handling strategies, the startup efficiency of the system can be improved, the startup time can be reduced, and the availability of the server can be improved. In addition, timely discovery and handling of errors during the startup process can prevent potential security vulnerabilities and improve the security of the system. The generation of alarm information can promptly notify the administrator of system problems, facilitate maintenance and management, and improve the maintainability of the system.

[0095] In an optional example, the aforementioned verification of the business operating system includes:

[0096] Perform a validity check on files in the preset storage area of ​​the business operating system.

[0097] The preset storage area includes: one or more of a kernel image file of a business operating system, a file in a root file system, and a system configuration file.

[0098] Specifically, verifying the legitimacy of the kernel image file can prevent malicious or tampered kernels from being loaded, ensuring the normal operation of the core functions of the system. The files in the root file system are also crucial to the normal operation of the system. Verifying these files can prevent illegal modification or replacement and protect the stability and security of the system. The system configuration file contains various settings and parameters of the server. Verifying these files can ensure the accuracy and consistency of the configuration and avoid system failures or security vulnerabilities caused by configuration errors. Therefore, by verifying the files in the preset storage area, unauthorized file modification or malware implantation can be prevented, improving the overall security of the system. Moreover, if problems occur during system operation, the legitimacy of the files can be verified to eliminate failures caused by file damage or illegal modification, facilitating troubleshooting and repair.

[0099] In an optional example, the method further includes the following method steps:

[0100] Step a1, obtaining a communication verification request sent by the business operating system.

[0101] The communication verification request includes a communication password to be verified, which is a password that has been verified once by the business operating system and successfully verified, and the communication password is a password extracted from the communication connection request after the BMC receives a request from an external communication device to apply for establishing a communication connection through a preset communication protocol;

[0102] Step a2: Based on the communication verification request, perform secondary verification on the communication password and obtain the verification result of the secondary verification.

[0103] The verification result of the secondary verification is used to determine whether to establish a communication connection with an external communication device.

[0104] Specifically, after the entire BMC system is fully started, external access needs to be verified, such as verifying the legitimacy of access to various network connections such as ssh or serial terminals.

[0105] In a specific example, SSH connection is used as an example. The serial terminal is similar. If you need to connect to the BMC via SSH, you need to verify the password. After entering the password, the business operating system first verifies the entered password. After the verification is passed, the password is passed to the verification operating system. The trusted verification program of the verification operating system will perform a second verification on the code and obtain the verification result of the second verification. The verification result of the second verification is used to determine whether to establish a communication connection with the external communication device.

[0106] In a specific example, the method further includes:

[0107] The verification result is sent to the business operating system so that the business operating system determines whether to establish a communication connection with the external communication device based on the verification result.

[0108] In another specific example, the verification operating system and the business operating system communicate through IPI, wherein the business operating system is a Linux system and the verification operating system is a real-time operating system.

[0109] That is, the verification result is transmitted back to the business operating system side through IPI, and then the business operating system side determines whether the current login is normal based on the verification result.

[0110] By performing a secondary verification of the communication password, the security line of defense is increased and the security of the communication connection is improved. Even if the communication password has been verified once in the business operating system, the secondary verification can further ensure the legitimacy and accuracy of the password. Even if the communication password applied for by the external communication device is stolen or leaked during the transmission process, the secondary verification can prevent unauthorized devices from establishing a communication connection and reduce the risk of password leakage. Therefore, only the communication password that has been successfully verified twice can establish a communication connection, thereby ensuring the reliability and stability of communication. It helps to prevent system failures or anomalies caused by incorrect passwords or unauthorized connections. Moreover, the results of the secondary verification can be recorded and audited, which is convenient for troubleshooting and tracing when problems arise. It helps to discover potential security vulnerabilities or abnormal situations, and take corresponding measures to repair and improve them.

[0111] Figure 3The figure shows the schematic diagram of the startup process of the heterogeneous dual system when there are two CPU cores, the first CPU core is CPU0, and the second CPU core is CPU1, including powering on and waking up CPU0, BootRoom loading RTOS, RTOS loading SPL, then SPL loading UBOOT, and then UBOOT loading the Linux system. After that, RTOS verifies some areas of Linux, that is, loads the preset storage area. Then, it is determined whether to terminate the Linux operation or run normally. The detailed method steps have been introduced in detail in the previous article, so I will not repeat them here.

[0112] Figure 4 The figure shows the flow chart of the subsequent verification process after the user logs in through SSH, for example, the user triggers SSH login, the Linux side starts to verify the input password, and after the password verification passes, it is sent to RTOS through IPI, and the RTOS trusted verification code performs a secondary verification, and the verification result is sent to Linux through IPI, and then Linux judges the verification result sent back, and determines whether the login is normal based on the verification result. The detailed operation has been introduced in the previous article, so I will not repeat it here.

[0113] In this embodiment, there is also provided an operation safety monitoring device based on a heterogeneous dual system, which is applied to a multi-core BMC, in which multiple operating systems are implanted, including a verification operating system and at least one business operating system. The first CPU core in the multi-core BMC runs the verification operating system, and the other CPU cores in the multi-core BMC except the first CPU core respectively run a business operating system. The device corresponds to the verification operating system, and the device is used to implement the above-mentioned embodiments and preferred implementation modes, and those that have been explained will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware for a predetermined function. Although the device described in the following embodiments is preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceived.

[0114] This embodiment provides an operation safety monitoring device based on a heterogeneous dual system, such as Figure 5 As shown, it includes: an acquisition module 501, a processing module 502, and a verification module 503.

[0115] An acquisition module 501 acquires a startup operation instruction, where the startup operation instruction is an instruction generated after the first CPU core enters a working state and starts running a preset program in the startup read-only memory;

[0116] The processing module 502 is used to guide the other CPU cores except the first CPU core in the BMC to respectively run the service operating system after entering the working state based on the start-up operation instruction;

[0117] Verification module 503, used to verify the business operating system;

[0118] The processing module 502 is also used to terminate the operation of the business operating system when the verification fails.

[0119] In an optional example, the processing module 502 is specifically configured to:

[0120] Establishing a communication connection link with a second CPU core, wherein the second CPU core is any CPU core among other CPU cores in the BMC except the first CPU core;

[0121] Sending a startup instruction to the second CPU core via the communication connection link;

[0122] The startup instruction is used to instruct the second CPU core to run the preset logic code in the secondary program loader from the preset memory address, so that the secondary program loader initializes the hardware device and system environment of the second CPU core, and loads and boots the universal boot loader to start, so that the universal boot loader loads the business operating system; the startup instruction also includes an error detection code;

[0123] When the second CPU core is started to run the preset logic code in the secondary program loader to perform an operation, periodically checking whether there is an error in starting the secondary program loader or starting the universal boot loader according to the error detection code;

[0124] When it is currently determined that there is an error in the process of starting the secondary program loader and / or starting the universal boot loader, analyzing the cause of the error;

[0125] According to the cause of the error, adopt the error handling strategy corresponding to the error and generate alarm information.

[0126] In an optional example, the verification module 503 is specifically configured to perform a validity check on files in a preset storage area in the business operating system.

[0127] In an optional example, the preset storage area includes: one or more of a kernel image file of a business operating system, a file in a root file system, and a system configuration file.

[0128] In an optional example, the acquisition module 501 is further used to:

[0129] Obtaining a communication verification request sent by the business operating system, wherein the communication verification request includes a communication password to be verified, the communication password is a password that has been verified once by the business operating system and successfully verified, and the communication password is a password extracted from the communication connection request after the BMC receives a request from an external communication device to apply for establishing a communication connection through a preset communication protocol;

[0130] The verification module 503 is further used to perform secondary verification on the communication password based on the communication verification request, and obtain the verification result of the secondary verification, wherein the verification result of the secondary verification is used to determine whether to establish a communication connection with an external communication device.

[0131] In an optional example, the apparatus further includes: a sending module 504;

[0132] The sending module 504 is used to send the verification result to the service operating system, so that the service operating system determines whether to establish a communication connection with the external communication device according to the verification result.

[0133] In an optional example, the verification operating system and the business operating system communicate via IPI, wherein the business operating system is a Linux system and the verification operating system is a real-time operating system.

[0134] The operation safety monitoring device based on heterogeneous dual systems in this embodiment is presented in the form of functional modules, where the modules refer to application specific integrated circuits (ASICs), processors and memories that execute one or more software or fixed programs, and / or other devices that can provide the above functions.

[0135] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0136] An operation safety monitoring device based on a heterogeneous dual system provided by an embodiment of the present invention implants a verification operating system and at least one business operating system in a BMC. By verifying the business operating system through the verification operating system, the network security of the BMC can be improved. The verification operating system can perform a more in-depth security check on the business operating system to ensure that it is not affected by malware or attacks, thereby reducing the risk of the server being attacked by the network. When the verification fails, terminating the operation of the business operating system can prevent potential security vulnerabilities or failures from affecting the normal operation of the server. This active security measure can improve the reliability of the system and reduce the server downtime caused by BMC failure. In a multi-core BMC, the other CPU cores except the first CPU core respectively run a business operating system, and this multi-core architecture can achieve more flexible resource allocation. Different business operating systems can allocate different CPU resources according to their functions and requirements, thereby improving the overall performance and efficiency of the system. The design of multiple operating systems makes it easier to maintain and upgrade the BMC. A single business operating system can be independently maintained and upgraded without affecting the normal operation of other operating systems. It helps to reduce maintenance time and cost and improve the maintainability of the system. Different business operating systems can also be customized and optimized according to the specific application requirements of the server. For example, you can configure a dedicated operating system for different server functions or application scenarios to provide better performance and functional support. The verification operating system can monitor and verify the business operating system in real time to detect potential failures or abnormalities in a timely manner. When a failure is detected, appropriate measures can be taken to recover, improve the system's fault detection and recovery capabilities, and reduce the impact of system failures on the business. By adopting this new BMC architecture and security mechanism, the security, reliability, and performance of the server can be improved, making it more competitive in the market.

[0137] The embodiment of the present invention also provides a computer device having the above Figure 5 The operation safety monitoring device based on heterogeneous dual systems is shown.

[0138] See also Figure 6 , Figure 6 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 6As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 6 A processor 10 is taken as an example.

[0139] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include an integrated circuit. The integrated circuit may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0140] The memory 20 stores instructions executable by at least one processor 10, so that at least one processor 10 executes the method shown in the above embodiment.

[0141] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created by the use of a computer device based on the presentation of a small program landing page, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0142] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0143] The computer device also includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 may be connected via a bus or other means. Figure 6 The example of connecting through bus is taken in the following.

[0144] The input device 30 can receive input digital or character information, and generate key signal input related to the user settings and function control of the computer device, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator bar, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device can be a touch screen.

[0145] The embodiment of the present invention also provides a computer-readable storage medium. The method provided in the above embodiment of the present invention can be implemented in hardware, firmware, or implemented as a computer code that can be recorded in a storage medium, or is implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium and downloaded through a network, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0146] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0147] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A method for operation safety monitoring based on heterogeneous dual systems. It is characterized in that The method is applied to a multi-core BMC, wherein multiple operating systems are implanted in the BMC, wherein the multiple operating systems include a verification operating system and at least one business operating system, wherein a first CPU core is used in the multi-core BMC to run the verification operating system, and other CPU cores in the multi-core BMC except the first CPU core respectively run one business operating system, and the method is executed by the verification operating system, and the method includes: Obtaining a startup and running instruction, wherein the startup and running instruction is an instruction generated after the first CPU core enters a working state and runs a preset program in the startup read-only memory; After entering the working state based on the startup operation instruction, guiding other CPU cores in the BMC except the first CPU core to respectively run the service operating system; Verifying the business operating system; When the verification fails, the operation of the service operating system is terminated.

2. The method according to claim 1, It is characterized in that After entering the working state based on the startup operation instruction, guiding other CPU cores in the BMC except the first CPU core to respectively run the service operating system specifically includes: Establishing a communication connection link with a second CPU core, wherein the second CPU core is any CPU core among other CPU cores in the BMC except the first CPU core; Sending a startup instruction to the second CPU core via the communication connection link; The startup instruction is used to instruct the second CPU core to run the preset logic code in the secondary program loader from the preset memory address, so that the secondary program loader initializes the hardware device and system environment of the second CPU core, and loads and boots the universal boot loader to start, so that the universal boot loader loads the business operating system; the startup instruction also includes an error detection code; When the second CPU core is started to run the preset logic code in the secondary program loader to perform an operation, periodically checking whether there is an error in starting the secondary program loader or starting the universal boot loader according to the error detection code; When it is currently determined that there is an error in the process of starting the secondary program loader and / or starting the universal boot loader, analyzing the cause of the error; According to the cause of the error, an error handling strategy corresponding to the error is adopted, and an alarm message is generated.

3. The method according to claim 1, It is characterized in that The verifying the business operating system includes: Perform a validity check on files in a preset storage area in the business operating system.

4. The method according to claim 3, It is characterized in that The preset storage area includes: one or more of: a kernel image file of the business operating system, a file in a root file system, and a system configuration file.

5. The method according to any one of claims 1 to 4, It is characterized in that The method further comprises: Obtaining a communication verification request sent by the business operating system, wherein the communication verification request includes a communication password to be verified, the communication password is a password that has been verified once by the business operating system and successfully verified, and the communication password is a password extracted from the communication connection request after the BMC receives a request from an external communication device to apply for establishing a communication connection through a preset communication protocol; Based on the communication verification request, the communication password is verified twice, and a verification result of the secondary verification is obtained, wherein the verification result of the secondary verification is used to determine whether to establish a communication connection with the external communication device.

6. The method according to claim 5, It is characterized in that The method further comprises: The verification result is sent to the service operating system so that the service operating system determines whether to establish a communication connection with the external communication device according to the verification result.

7. The method according to any one of claims 1 to 4, It is characterized in that The verification operating system and the business operating system communicate with each other via IPI, wherein the business operating system is a Linux system and the verification operating system is a real-time operating system.

8. An operation safety monitoring device based on heterogeneous dual systems, It is characterized in that The device is applied to a multi-core BMC, wherein a plurality of operating systems are implanted in the BMC, wherein the plurality of operating systems include a verification operating system and at least one business operating system, wherein a first CPU core is used in the multi-core BMC to run the verification operating system, and other CPU cores in the multi-core BMC except the first CPU core respectively run one business operating system, and the device corresponds to the verification operating system, and comprises: An acquisition module is used to acquire a startup and running instruction, where the startup and running instruction is an instruction generated after the first CPU core enters a working state and runs a preset program in the startup read-only memory; a processing module, configured to guide other CPU cores in the BMC except the first CPU core to respectively run the service operating system after entering a working state based on the startup operation instruction; A verification module, used to verify the business operating system; The processing module is also used to terminate the operation of the business operating system when the verification fails.

9. A computer device, It is characterized in that include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the operation safety monitoring method based on heterogeneous dual systems as described in any one of claims 1 to 7 by executing the computer instructions.

10. A computer-readable storage medium, It is characterized in that The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the operation safety monitoring method based on heterogeneous dual systems according to any one of claims 1 to 7.

Images