A server information processing method, device, and medium

Abstract

This application, in the field of cloud servers, discloses a server information processing method, apparatus, and medium, including: acquiring operation instructions and user information sent by a user to execute the user operation instructions; acquiring an operation password corresponding to the user information to determine whether the user has operation permissions; wherein the operation password is a password generated based on the user information when a password update instruction is received from the user or when the current time meets the password update cycle, to prevent unauthorized access and acquisition of data due to prolonged use of the same password; and sending an access request containing the operation password to the server so that the server can execute the operation instruction after confirming the operation password is correct. Therefore, the solution provided in this application, by updating the operation password upon receiving a password update instruction from the user or when the current time meets the password update cycle, prevents unauthorized data acquisition due to system password leakage, thereby improving the security of cloud computing clusters.

Description

Technical Field

[0001] This application relates to the field of servers, and in particular to a server information processing method, apparatus, and medium. Background Technology

[0002] The Intelligent Platform Management Interface (IPMI) is an open standard hardware management interface specification that defines specific methods for communication between embedded management subsystems. IPMI communicates with a baseboard management controller that is independent of the server's processor, Basic Input Output System (BIOS), or operating system, enabling communication across different operating systems, firmware, and hardware platforms.

[0003] In the process of providing computing services to users through cloud computing clusters, data transmission protocols such as IPMI are typically used to obtain the working status information of servers in the cluster in order to control the servers and thus reduce equipment costs. However, currently commonly used data transmission protocols often use fixed passwords to access servers in the cluster and encrypt data, which can easily lead to unauthorized data access.

[0004] Therefore, how to provide a more secure method for processing server information is a problem that urgently needs to be solved by those skilled in the art. Summary of the Invention

[0005] The purpose of this application is to provide a server information processing method, apparatus, and medium to prevent data from being illegally obtained due to low password security, and to improve the security and reliability of cloud computing clusters.

[0006] To address the aforementioned technical problems, this application provides a server information processing method applied to a client, the method comprising:

[0007] Obtain user-sent operation commands and user information;

[0008] Obtain the operation password corresponding to the user information, wherein the operation password is a password generated based on the user information when a password update instruction is received from the user or when the current time meets the password update cycle;

[0009] An access request containing the operation password is sent to the server so that the server can parse the access request to obtain the operation password and operation instructions, and execute the operation instructions after confirming that the operation password is correct.

[0010] Preferably, the user information includes at least: initial password, server IP, server model, and server serial number;

[0011] Accordingly, generating a password based on the user information includes:

[0012] Obtain the first key and the second key based on the initial password, the server IP, the server model, and the server serial number;

[0013] The initial password is encrypted using the first key, the second key, and at least two encryption algorithms to obtain the operation password;

[0014] The operation password is written into the user database, and the server's initial password is updated to the operation password.

[0015] Preferably, after the step of updating the server's initial password to the operation password, the method further includes:

[0016] If the step of updating the server's initial password to the operation password fails, the reason for the failure will be written to the log.

[0017] Preferably, the encryption algorithm includes: MD5 encryption algorithm and DES encryption algorithm.

[0018] To address the aforementioned technical problems, this application also provides a server information processing method, applied to a server, the method comprising:

[0019] The client receives an access request containing an operation password, wherein the access request is generated by the client after receiving the operation instruction and user information sent by the user, and the operation password is a password generated by the client based on the user information when it receives the password update instruction sent by the user or when the current time meets the password update cycle;

[0020] Parse the access request to obtain the operation password and operation instructions;

[0021] Determine if the operation password is correct; if correct, execute the operation instruction.

[0022] Preferably, after the step of determining whether the operation password is correct, the method further includes:

[0023] If the operation password is incorrect, an alarm message will be sent to the administrator.

[0024] Preferably, determining whether the operation password is correct includes:

[0025] Determine whether the operation password is the same as the initial password, wherein the operation password is a password obtained from the user database.

[0026] To address the aforementioned technical problems, this application also provides a server information processing apparatus, comprising:

[0027] The first acquisition module is used to acquire operation instructions and user information sent by the user.

[0028] The second acquisition module is used to acquire the operation password corresponding to the user information. The operation password is a password generated based on the user information when a password update instruction is received from the user or when the current time meets the password update cycle.

[0029] The access module is used to send an access request containing the operation password to the server, so that the server can parse the access request to obtain the operation password and operation instructions, and execute the operation instructions after confirming that the operation password is correct.

[0030] To address the aforementioned technical problems, this application also provides a server information processing device, including a memory for storing computer programs;

[0031] A processor is used to implement the steps of the server information processing method when executing the computer program.

[0032] To address the aforementioned technical problems, this application also provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the server information processing method.

[0033] This application provides a server information processing method, the method comprising:

[0034] The system acquires user-sent operation instructions and user information to execute user operation instructions. It also acquires an operation password corresponding to the user information to determine if the user has the necessary permissions. This operation password is generated based on the user information when a password update instruction is received from the user or when the current time meets the password update cycle. This prevents unauthorized data access due to prolonged use of the same password. An access request containing the operation password is sent to the server, which parses the request to obtain the operation password and operation instructions. Upon confirming the operation password is correct, the server executes the operation instructions. Therefore, the solution provided in this application improves the security of cloud computing clusters by updating the operation password upon receiving a user-sent password update instruction or when the current time meets the password update cycle, thus preventing unauthorized data access due to system password leakage.

[0035] In addition, this application also provides a server information processing device and medium, which correspond to the above method and have the same effect. Attached Figure Description

[0036] To more clearly illustrate the embodiments of this application, the accompanying drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0037] Figure 1 A flowchart illustrating a server information processing method provided in an embodiment of this application;

[0038] Figure 2 A flowchart illustrating another server information processing method provided in this application embodiment;

[0039] Figure 3 This is a structural diagram of a server information processing device provided in an embodiment of this application;

[0040] Figure 4 This is a structural diagram of another server information processing device provided in an embodiment of this application. Detailed Implementation

[0041] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the protection scope of this application.

[0042] The core of this application is to provide a server information processing method, apparatus, and medium to prevent data from being illegally obtained due to system password leakage, thereby improving the security of cloud computing clusters.

[0043] In cloud computing cluster applications, IPMI is typically used to manage servers within the cluster. When providing computing services to users, they access the server via a webpage or client application. The client receives user commands and uses IPMI to obtain server information or control the server to execute user commands. To protect server security, IPMI requires password login. However, current methods typically use MD5 or DES encryption, which offers low security and is prone to password leakage, allowing unauthorized access to the server and data acquisition. To improve the security of cloud computing clusters, this application provides a server information processing method. This method obtains the operation password corresponding to user information and sends an access request containing the operation password to the server. The server parses the request to obtain the operation password and operation instructions, and executes the instructions after confirming the password is correct. The method updates the operation password upon receiving a password update instruction from the user or when the password update cycle is met, preventing unauthorized data acquisition due to system password leakage and thus improving the security of the cloud computing cluster.

[0044] To enable those skilled in the art to better understand the present application, the present application will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0045] Figure 1 A flowchart illustrating a server information processing method provided in this application embodiment, applied to a cloud computing client, such as... Figure 1 As shown, the method includes:

[0046] S10: Obtain operation instructions and user information sent by the user.

[0047] In practical implementation, the cloud computing client obtains operation instructions sent by the user to provide cloud computing services to the user. The server information processing method provided in this application is applied to the client, wherein the operating system running on the server can be a Windows system or a Linux system, which is not limited here. In addition, the information processing method provided in this application can be applied to systems using IPMI protocol, SMT protocol, and HTTP protocol.

[0048] Understandably, cloud computing platforms are used to provide cloud computing services to a large number of users. Therefore, in addition to obtaining operation instructions, it is also necessary to obtain information about the user who sent the operation instructions, such as: username, user password used by the user to log in to the client, and device information of the server that the user wants to access.

[0049] S11: Obtain the operation password corresponding to the user information. The operation password is the password generated based on the user information when the user sends a password update instruction or when the current time meets the password update cycle.

[0050] The system retrieves the operation password corresponding to the user information from the user database, which stores the mapping between user information and operation passwords. The client needs to log in to the server using the operation password to read server status information and control the server to execute user-sent operation commands.

[0051] Understandably, since operation passwords are typically encrypted using MD5 or DES encryption algorithms, and these algorithms are widely known, the encrypted operation passwords are easily decrypted, leading to password leaks and unauthorized access to the server. Therefore, the server information processing method provided in this application generates a new operation password upon receiving a password update instruction from the user or when the current time meets the password update cycle, thereby improving system security through regular password changes. To further enhance security, operation passwords can also be generated based on the user's information. This user information includes: username, password, the IP address of the server the user wants to access, server model, serial number, port, etc.

[0052] Understandably, user information can be obtained by reading user configuration files through scripts or by querying user databases. The latter approach is more efficient, but the information is less timely.

[0053] It is important to note that, in order to ensure the normal operation of the system, after generating a new operation password, it is also necessary to write the operation password into the user database to update the operation password corresponding to each user. At the same time, it is also necessary to use the initial password and log in to the server through IPMI to change the initial password to the operation password.

[0054] S12: Send an access request containing the operation password to the server so that the server can parse the access request to obtain the operation password and operation instructions, and execute the operation instructions after confirming that the operation password is correct.

[0055] The server checks if the obtained operation password matches the operation password stored on the server. If they match, the password is correct, and the user-sent operation commands can be executed. Information that the user can obtain includes: the server CPU's operating status and the operating status of other server hardware (e.g., fan speed information), CPU and GPU performance information, and alarm information sent by the server. Simultaneously, the user can also control the server CPU and fans to execute corresponding operation commands via IPMI.

[0056] Understandably, the client can also use a key to encrypt access requests and generate a new key when the key update cycle is met or when a key update instruction is received from the user.

[0057] After receiving a login request from the client, the server checks if the operation password matches the initial password. The operation password is retrieved from the user database. It's understood that the operation password in the user database is written via a script, and it should always match the initial password when the system is running normally. Therefore, if the server detects a discrepancy between the operation password and the login password, it indicates a system malfunction or unauthorized database access. To improve system security, an alert needs to be sent to administrators promptly.

[0058] In this embodiment, a server information processing method is provided. The method includes: acquiring an operation instruction and user information sent by a user to execute the user operation instruction; acquiring an operation password corresponding to the user information to determine if the user has operation permissions; wherein the operation password is a password generated based on the user information when a password update instruction is received from the user or when the current time meets the password update cycle, to prevent unauthorized access and acquisition of data due to prolonged use of the same password; sending an access request containing the operation password to the server, so that the server can parse the access request to obtain the operation password and operation instruction, and execute the operation instruction after confirming that the operation password is correct. Therefore, the solution provided in this application, by updating the operation password when a password update instruction is received from the user or when the current time meets the password update cycle, prevents unauthorized data acquisition due to system password leakage, thereby improving the security of the cloud computing cluster.

[0059] In practical implementation, since commonly used encryption algorithms have low security, this application also provides a new encryption algorithm to improve system security.

[0060] Based on the above embodiments, generating a password from user information includes:

[0061] Obtain the first key and the second key based on the user equipment information;

[0062] The initial password is encrypted using a first key, a second key, and at least two encryption algorithms to obtain the operation password;

[0063] Write the operation password into the user database and update the server's initial password to the operation password.

[0064] The user information includes at least the initial password and user device information, which includes the device IP address, model number, and serial number.

[0065] Specifically, the combination of username and device IP address is used as the first key, and the device serial number and model number are used as the second key. The initial password is encrypted using a first encryption algorithm to obtain the first operation password. Different encryption algorithms are then used with the first and second keys to encrypt the first operation password to obtain the final operation password. For example: Assume the username is "admin", the device IP address is 127.0.0.1, the device serial number is 15678239, the model number is "HWIPER", and the initial password is "123456a?". The combination of username and device IP address is used as the first key K1, where K1 is "127.0.0.1admin". The combination of device serial number and model number is used as the second key K2, where K2 is "15678239HWIPER". The initial password is encrypted using the MD5 encryption algorithm: MD5(123456a?) = asfasduyyiufnyjkfj*#hsdj. A fixed-length (e.g., 10-bit) data is then randomly truncated to obtain the first operation password tmp1, where tmp1 = jkfj*#hsdj. The first operation password tmp1 is then encrypted using the DES encryption algorithm with the key K1 to obtain the second operation password temp2: temp2 = DES(jkfj*#hsdj,127.0.0.1admin) = NWEI%KSJDFJ8sjdkfhui%ksjdfnbk. Finally, the second operation password temp2 is encrypted using the MD5 encryption algorithm: MD5(NWEI%KSJDFJ8sjdkfhui%ksjdfnbkc) = iuqewrkankhfuymnvz&f bdfg#; and randomly extract a fixed-length portion of the data to obtain the third operation password temp3, temp3 = nvz&fbdfg#; encrypt the third operation password temp3 using the DES encryption algorithm with the key K2 to obtain the fourth operation password temp4, 1.Des2 = DES(nvz&fbdfg#,127.0.0.1admin) = poiumnvhalie$mqasfhku%gkjh*kgn; encrypt the fourth operation password temp4 using the MD5 encryption algorithm MD5(poiumnvhalie$mqasfhku%gkjh*kgn) = mutI%jskjfd8sjdkfiuh%ksjdoo$fs#, and randomly extract a fixed-length portion of the data to obtain the operation password password, password = ksjdoo$fs#. Whenever a password update command is received from the user or the current time meets the password update cycle, repeat the above steps to obtain a new operation password.

[0066] In this implementation, a new operation password is generated by combining MD5 and DES encryption algorithms with user information to prevent the operation password from being leaked and to improve system security.

[0067] As a preferred embodiment, the encryption algorithms used in this application include MD5 and DES encryption algorithms. MD5 (Message-Digest Algorithm) is a widely used cryptographic hash function that produces a 128-bit (16-byte) hash value to ensure the integrity and consistency of transmitted information. MD5 was designed by American cryptographer Ronald Linn Rivest and published in 1992. The algorithm's procedure is specified in RFC 1321. After 1996, the algorithm was found to have weaknesses and could be broken. For data requiring high security, it is generally recommended to use other algorithms, such as SHA-2. In 2004, it was confirmed that the MD5 algorithm cannot prevent collisions, therefore it is unsuitable for security authentication, such as SSL public key authentication or digital signatures. The DES encryption algorithm, or Data Encryption Standard (DES), is a block encryption algorithm that uses a key to encrypt data. The DES algorithm transforms a 64-bit plaintext input block into a 64-bit ciphertext output block. The key it uses is also 64 bits (56 bits are actually used; bits 8, 16, 24, 32, 40, 48, 56, and 64 are parity bits, ensuring that each key has an odd number of 1s). Its algorithm mainly consists of two steps: initial permutation and inverse permutation.

[0068] Figure 2 A flowchart illustrating another server information processing method provided in this application embodiment, applied to a server, such as... Figure 2 As shown, the method includes:

[0069] S20: Obtain an access request containing an operation password sent by the client. The access request is a request generated by the client after obtaining the operation instruction and user information sent by the user. The operation password is a password generated by the client based on the user information when it obtains the password update instruction sent by the user or when the current time meets the password update cycle.

[0070] In practice, the password update cycle can be a default cycle, such as 24 hours; or it can be a cycle set by the user, which is not limited here.

[0071] S21: Parse the access request to obtain the operation password and operation instructions.

[0072] S22: Determine if the operation password is correct. If correct, execute the operation command.

[0073] Users can obtain information including: the server CPU's operating status and the operating status of other server hardware (e.g., fan speed information), server CPU and GPU performance information, and receive alarm information sent by the server. Additionally, users can control the server CPU and fans to execute corresponding operation commands via IPMI.

[0074] After receiving the login request from the client, the server checks if the operation password matches the initial password. The operation password is retrieved from the user database. It's understood that the operation password in the user database is written via a script, and it should always match the initial password when the system is running normally. Therefore, if the server detects a discrepancy between the operation password and the login password, it indicates a system malfunction or unauthorized database access. To improve system security, an alert needs to be sent to administrators promptly.

[0075] In practice, to further enhance security, an operation password can be generated to encrypt the data transmitted between the client and the server, and the encryption key can be changed when the user sends a password update instruction or when the current time meets the password update cycle.

[0076] It is understandable that the server and client can communicate using the IPMI protocol, HTTP protocol, or SMT protocol; no specific restrictions are imposed here.

[0077] In addition, the server information processing device provided in this application also includes a log module, which is used to write the reason for failure to the log if the step of updating the initial password of the server to the operation password fails, so as to facilitate timely maintenance by the administrator.

[0078] To address the aforementioned technical problems, this application provides a server information processing method, comprising: acquiring operation instructions and user information sent by a user to execute the user operation instructions; acquiring an operation password corresponding to the user information to determine whether the user has operation permissions; wherein the operation password is a password generated based on the user information when a password update instruction is received from the user or when the current time meets the password update cycle, to prevent unauthorized access and acquisition of data due to prolonged use of the same password; and sending an access request containing the operation password to the server so that the server can execute the operation instructions after confirming the operation password is correct. Therefore, the solution provided by this application, by updating the operation password when a password update instruction is received from the user or when the current time meets the password update cycle, prevents unauthorized data acquisition due to system password leakage, thereby improving the security of cloud computing clusters.

[0079] In a preferred embodiment, after updating the server's initial password to the operation password, the method further includes: if the step of updating the server's initial password to the operation password fails, writing the reason for the failure into a log.

[0080] When a password update operation fails, the relevant information needs to be written to a log file so that administrators can maintain it in a timely manner.

[0081] In the above embodiments, the server information processing method has been described in detail. This application also provides embodiments corresponding to the server information processing apparatus. It should be noted that this application describes the embodiments of the apparatus from two perspectives: one is based on functional modules, and the other is based on hardware.

[0082] Figure 3 This is a structural diagram of a server information processing device provided in an embodiment of this application, as shown below. Figure 3 As shown, the device includes:

[0083] The first acquisition module 10 is used to acquire operation instructions and user information sent by the user.

[0084] In practical implementation, the cloud computing client obtains operation instructions sent by the user to provide cloud computing services to the user. The server information processing method provided in this application is applied to the client, wherein the operating system running on the server can be a Windows system or a Linux system, which is not limited here. In addition, the information processing method provided in this application can be applied to systems using IPMI protocol, SMT protocol, and HTTP protocol.

[0085] Understandably, cloud computing platforms are used to provide cloud computing services to a large number of users. Therefore, in addition to obtaining operation instructions, it is also necessary to obtain information about the user who sent the operation instructions, such as: username, user password used by the user to log in to the client, and device information of the server that the user wants to access.

[0086] The second acquisition module 11 is used to acquire the operation password corresponding to the user information. The operation password is the password generated based on the user information when the user sends a password update instruction or when the current time meets the password update cycle.

[0087] The user database stores the mapping between user information and operation passwords. Clients need to log in to the server using their operation passwords to read server status information and control the server to execute user-sent operation commands.

[0088] Understandably, since operation passwords are typically encrypted using MD5 or DES encryption algorithms, and these algorithms are widely known, the encrypted operation passwords are easily decrypted, leading to password leaks and unauthorized access to the server. Therefore, the server information processing method provided in this application generates a new operation password upon receiving a password update instruction from the user or when the current time meets the password update cycle, thereby improving system security through regular password changes. To further enhance security, operation passwords can also be generated based on the user's information. This user information includes: username, password, the IP address of the server the user wants to access, server model, serial number, port, etc.

[0089] Understandably, user information can be obtained by reading user configuration files through scripts or by querying user databases. The latter approach is more efficient, but the information is less timely.

[0090] It is important to note that, in order to ensure the normal operation of the system, after generating a new operation password, it is also necessary to write the operation password into the user database to update the operation password corresponding to each user. At the same time, it is also necessary to use the initial password and log in to the server through IPMI to change the initial password to the operation password.

[0091] The access module is used to send an access request containing the operation password to the server, so that the server can parse the access request to obtain the operation password and operation instructions, and execute the operation instructions after confirming that the operation password is correct.

[0092] Since the embodiments of the apparatus and the embodiments of the method correspond to each other, please refer to the description of the embodiments of the method for the embodiments of the apparatus, which will not be repeated here.

[0093] In addition, the server information processing device provided in this application also includes a log module, which is used to write the reason for failure to the log if the step of updating the initial password of the server to the operation password fails, so as to facilitate timely maintenance by the administrator.

[0094] In this embodiment, a server information processing device is provided, comprising: a first acquisition module, used to acquire operation instructions and user information sent by a user, to execute the user operation instructions; a second acquisition module, used to acquire an operation password corresponding to the user information, to determine whether the user has operation permissions, wherein the operation password is a password generated based on the user information when a password update instruction sent by the user is received or when the current time meets the password update cycle, to prevent the unauthorized access and acquisition of data due to the prolonged use of the same password; and an access module, used to send an access request containing the operation password to the server, so that the server can parse the access request to obtain the operation password and operation instructions, and execute the operation instructions after confirming that the operation password is correct. Therefore, the solution provided in this application, by updating the operation password when a password update instruction sent by the user is received or when the current time meets the password update cycle, prevents the unauthorized acquisition of data due to system password leakage, thereby improving the security of the cloud computing cluster.

[0095] Figure 4 A structural diagram of a server information processing apparatus provided in another embodiment of this application is shown below. Figure 4 As shown, the server information processing device includes: a memory 20 for storing computer programs;

[0096] The processor 21 is used to implement the steps of the method for obtaining operation instructions and user information sent by the user as described in the above embodiment when executing a computer program.

[0097] The terminal devices that run the cloud client provided in this embodiment may include, but are not limited to, smartphones, tablets, laptops, or desktop computers.

[0098] The processor 21 may include one or more processing cores, such as a quad-core processor or an octa-core processor. The processor 21 may be implemented using at least one of the following hardware forms: Digital Signal Processor (DSP), Field-Programmable Gate Array (FPGA), or Programmable Logic Array (PLA). The processor 21 may also include a main processor and a coprocessor. The main processor, also known as the Central Processing Unit (CPU), is used to process data in the wake-up state; the coprocessor is a low-power processor used to process data in the standby state. In some embodiments, the processor 21 may integrate a Graphics Processing Unit (GPU), which is responsible for rendering and drawing the content to be displayed on the screen. In some embodiments, the processor 21 may also include an Artificial Intelligence (AI) processor, which is used to handle computational operations related to machine learning.

[0099] The memory 20 may include one or more computer-readable storage media, which may be non-transitory. The memory 20 may also include high-speed random access memory and non-volatile memory, such as one or more disk storage devices or flash memory devices. In this embodiment, the memory 20 is used to store at least the following computer program 201, which, after being loaded and executed by the processor 21, is capable of implementing the relevant steps of the server information processing method disclosed in any of the foregoing embodiments. In addition, the resources stored in the memory 20 may also include an operating system 202 and data 203, and the storage method may be temporary or permanent storage. The operating system 202 may include Windows, Unix, Linux, etc. The data 203 may include, but is not limited to, operation passwords, initial passwords, etc.

[0100] In some embodiments, the server information processing device may further include a display screen 22, an input / output interface 23, a communication interface 24, a power supply 25, and a communication bus 26.

[0101] Those skilled in the art will understand that Figure 4 The structure shown does not constitute a limitation on the server information processing device and may include more or fewer components than shown.

[0102] The server information processing apparatus provided in this application includes a memory and a processor. When the processor executes a program stored in the memory, it can implement the following method:

[0103] Obtain user-sent operation commands and user information;

[0104] Obtain the operation password corresponding to the user information. The operation password is the password generated based on the user information when the password update instruction sent by the user is obtained or when the current time meets the password update cycle.

[0105] An access request containing the operation password is sent to the server so that the server can parse the access request to obtain the operation password and operation instructions, and execute the operation instructions after confirming that the operation password is correct.

[0106] In this embodiment, a server information processing device is provided. This device includes a memory and a processor. When executing a program stored in the memory, the processor acquires operation instructions and user information sent by the user to execute the user operation instructions. It acquires an operation password corresponding to the user information to determine if the user has operation permissions. The operation password is a password generated based on the user information when a password update instruction is received from the user or when the current time meets the password update cycle, to prevent unauthorized data access due to prolonged use of the same password. An access request containing the operation password is sent to the server so that the server can parse the access request to obtain the operation password and operation instructions, and execute the operation instructions after confirming the operation password is correct. Therefore, the solution provided in this application improves the security of cloud computing clusters by updating the operation password when a password update instruction is received from the user or when the current time meets the password update cycle, thus preventing unauthorized data access due to system password leakage.

[0107] Finally, this application also provides an embodiment corresponding to a computer-readable storage medium. The computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps described in the above method embodiments (which may be a method corresponding to the server side, a method corresponding to the client side, or a method corresponding to both the server side and the client side).

[0108] It is understood that if the methods in the above embodiments are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and executes all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0109] The server information processing method, apparatus, and medium provided in this application have been described in detail above. The various embodiments in the specification are described in a progressive manner, with each embodiment focusing on its differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. For the apparatus disclosed in the embodiments, since it corresponds to the method disclosed in the embodiments, the description is relatively simple; relevant parts can be referred to in the method section. It should be noted that those skilled in the art can make several improvements and modifications to this application without departing from the principles of this application, and these improvements and modifications also fall within the protection scope of the claims of this application.

[0110] It should also be noted that, in this specification, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

Claims

1. A server information processing method characterized by comprising: Applied to the client, the method comprises: Obtaining the operation instruction and user information sent by the user; Obtaining the operation password corresponding to the user information, the operation password being a password generated according to the user information when the password update instruction sent by the user is obtained or the current time meets the password update period; Sending an access request containing the operation password to the server, so that the server parses the access request to obtain the operation password and the operation instruction and executes the operation instruction after determining that the operation password is correct; The user information at least includes: initial password, server IP, server model and server serial number; Correspondingly, the password generated according to the user information comprises: Obtaining the first key and the second key according to the initial password, the server IP, the server model and the server serial number, including: taking the combination of the username and the server IP as the first key, and taking the server serial number and the server model as the second key; Encrypting the initial password by using the first key, the second key and at least two encryption algorithms to obtain the operation password; Writing the operation password into the user database, and logging into the server by using the initial password and through the intelligent platform management interface IPMI, and updating the initial password of the server to the operation password.

2. The server information processing method according to claim 1, characterized by, After the step of updating the initial password of the server to the operation password, the method further comprises: If the step of updating the initial password of the server to the operation password fails, write the failure event into the log.

3. The server information processing method according to claim 1, characterized by, The encryption algorithm includes: MD5 encryption algorithm and DES encryption algorithm.

4. A server information processing method characterized by comprising: Applied to the server, the method comprises: Obtaining the access request containing the operation password sent by the client, wherein the access request is a request generated by the client after obtaining the operation instruction and user information sent by the user, and the operation password is a password generated by the client according to the user information when the password update instruction sent by the user is obtained or the current time meets the password update period; Parsing the access request to obtain the operation password and the operation instruction; Determining whether the operation password is correct, if correct, executing the operation instruction; The user information at least includes: initial password, server IP, server model and server serial number; Correspondingly, the password generated according to the user information comprises: Obtaining the first key and the second key according to the initial password, the server IP, the server model and the server serial number, including: taking the combination of the username and the server IP as the first key, and taking the server serial number and the server model as the second key; Encrypting the initial password by using the first key, the second key and at least two encryption algorithms to obtain the operation password; Writing the operation password into the user database, and logging into the server by using the initial password and through the intelligent platform management interface IPMI, and updating the initial password of the server to the operation password.

5. The server information processing method according to claim 4, characterized by, After the step of determining whether the operation password is correct, the method further comprises: If the operation password is incorrect, an alarm message is sent to a manager.

6. The server information processing method according to claim 4, characterized by, The judging whether the operation password is correct comprises: judging whether the operation password is same as the initial password, wherein the operation password is a password obtained from the user database.

7. A server information processing apparatus characterized by comprising: comprises: a first obtaining module, configured to obtain an operation instruction and user information sent by a user; a second obtaining module, configured to obtain an operation password corresponding to the user information, the operation password being a password generated according to the user information when a password update instruction sent by the user is obtained or a current time meets a password update period; an accessing module, configured to send an access request containing the operation password to a server, so that the server parses the access request to obtain the operation password and the operation instruction and executes the operation instruction after determining that the operation password is correct; the user information at least comprises an initial password, a server IP, a server model and a server serial number; correspondingly, the password generating module comprises: obtaining a first key and a second key according to the initial password, the server IP, the server model and the server serial number; encrypting the initial password by using the first key, the second key and at least two encryption algorithms to obtain the operation password; writing the operation password into a user database, and updating the initial password of the server to the operation password by logging in the server through IPMI using the initial password.

8. A server information processing apparatus characterized by comprising: comprises a memory, configured to store a computer program; a processor, configured to execute the computer program to implement the steps of the server information processing method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that, The computer program is stored on the computer readable storage medium and is executed by the processor to implement the steps of the server information processing method according to any one of claims 1 to 6.

Images