Method, device, and electronic device for executing management of a server remote management controller

Abstract

The embodiments of the present application provide a management method, device, and electronic device for an execution server remote management controller. Among them, the method includes: receiving attribute information of at least one BMC sent by the execution server remote management controller BMC; determining the operating environment where the BMC is located according to the attribute information of the BMC, where the operating environment at least includes an internal environment and a third-party environment; determining a target policy according to the operating environment where the BMC is located, where the target policy represents whether to restrict the permissions for configuring the BMC. Through the present application, the problem of low efficiency in manually configuring the security policy of the BMC in the prior art is solved, and thus the effect of reducing the configuration time of the security policy and improving the configuration efficiency of the security policy is achieved.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of computers, and more specifically, to a management method, device, and electronic device for an execution server remote management controller. Background Art

[0002] BMC (Baseboard Management Controller), an execution server remote management controller, is a baseboard management controller that can implement functions such as relevant control and information monitoring of a server, and is a platform for intuitively presenting server information.

[0003] In the cloud era, third-party users rent hardware servers from cloud environment providers and access the BMC in the cloud environment under the operating system to meet their operation and maintenance needs. For example, third-party users can monitor the temperature, voltage, fans, power supply, etc. of the system through the BMC and take corresponding adjustment operations to ensure that the system is in a healthy state. In theory, during the use of the BMC by third-party users, they can bypass the BMC system under the operating system and directly write a program into the flash storage chip to modify the BMC firmware. Then, third-party users can invade the management network of the cloud environment through the modified BMC, bringing great security risks to the entire cloud environment. Therefore, when the provider hands over each server to a third party for use, it is necessary to configure corresponding security policies to strengthen the security of the BMC. For example, disabling the operation of writing to the flash, etc., to avoid the above-mentioned invasion phenomenon.

[0004] Currently, in the related art, when the server is handed over to a third party for use, the security policy of the BMC is configured manually. For example, manually disabling the flash operation, etc., which has the problem of low efficiency. Moreover, the operation process is cumbersome and error-prone, with relatively large security risks. In addition, when the provider recovers the server for maintenance, it is also necessary to manually turn off the security reinforcement policy, resulting in a waste of labor costs and time costs.

[0005] In view of the above problems, no effective solution has been proposed yet. Summary of the Invention

[0006] The embodiments of the present application provide a management method, device, and electronic device for an execution server remote management controller to at least solve the problem of low efficiency in manually configuring the security policy of the BMC in the related art.

[0007] According to an embodiment of the present application, a management method for an execution server remote management controller is provided, including: receiving attribute information of at least one BMC sent by the execution server remote management controller BMC; determining the operating environment where the BMC is located according to the attribute information of the BMC, where the operating environment at least includes an internal environment and a third-party environment; determining a target policy according to the operating environment where the BMC is located, where the target policy characterizes whether to restrict the permissions for configuring the BMC.

[0008] In an exemplary embodiment, determining the operating environment where the BMC is located according to the attribute information of the BMC includes: obtaining a target label and / or the address information of the BMC from the attribute information of the BMC, where the target label is obtained by analyzing the behavior when configuring the BMC according to a target object; determining the operating environment where the BMC is located according to the target label and / or the address information.

[0009] In an exemplary embodiment, determining the operating environment where the BMC is located according to the target label and / or the address information includes: when the target label is a first label and / or the address information is a first address, determining that the operating environment where the BMC is located is an internal environment, where the first address is the address of the BMC operator; when the target label is a second label and / or the address information is a second address, determining that the operating environment where the BMC is located is a third-party environment, where the second address is the address of the BMC lessee.

[0010] In an exemplary embodiment, determining the target policy according to the operating environment where the BMC is located includes: when the operating environment where the BMC is located is an internal environment, determining that the target policy is a first policy, where the first policy characterizes that the permissions for configuring the BMC are in a fully available state; when the operating environment where the BMC is located is a third-party environment, determining that the target policy is a second policy, where the second policy characterizes that the permissions for configuring the BMC are in a partially available state.

[0011] In an exemplary embodiment, after determining that the target policy is a first policy when the operating environment where the BMC is located is an internal environment, the management method for the execution server remote management controller further includes: sending the first policy to the BMC; adjusting the permissions for configuring the BMC to a fully available state through the first policy.

[0012] In an exemplary embodiment, after determining that the target policy is a second policy when the operating environment where the BMC is located is a third-party environment, the management method for the execution server remote management controller further includes: sending the second policy to the BMC; disabling some of the permissions for configuring the BMC through the second policy.

[0013] In an exemplary embodiment, when the operating environment where the BMC is located is a third-party environment, after determining that the target policy is the second policy, the management method of the server remote management controller further includes: judging whether the BMC is in a maintenance state according to the operation data of the BMC; and when the BMC is in a maintenance state, changing the target policy from the second policy to the first policy.

[0014] According to another embodiment of the present application, there is provided a management device for executing a server remote management controller, including: a receiving module, configured to receive attribute information of at least one BMC sent by the server remote management controller BMC; a first determining module, configured to determine the operating environment where the BMC is located according to the attribute information of the BMC, where the operating environment at least includes an internal environment and a third-party environment; and a second determining module, configured to determine a target policy according to the operating environment where the BMC is located, where the target policy represents whether to restrict the permission to configure the BMC.

[0015] According to still another embodiment of the present application, there is further provided a computer-readable storage medium, in which a computer program is stored, where the computer program is configured to execute the steps in any one of the above method embodiments when running.

[0016] According to still another embodiment of the present application, there is further provided an electronic device, including a memory and a processor, where a computer program is stored in the memory, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

[0017] In the embodiment of the present invention, by using the method of determining the operating environment of the BMC through big data analysis and automatically configuring the security policy, first, the attribute information of at least one BMC sent by the server remote management controller BMC is received, then the operating environment where the BMC is located is determined according to the attribute information of the BMC, and then the target policy is determined according to the operating environment where the BMC is located, where the target policy represents whether to restrict the permission to configure the BMC, and the operating environment at least includes an internal environment and a third-party environment.

[0018] In the above process, by receiving the attribute information of at least one BMC sent by the server remote management controller BMC, a data basis is provided for subsequent determination of the corresponding security policy; by analyzing the attribute information of the BMC, the operating environment where the BMC is located can be known, and the security policy is determined through the operating environment where the BMC is located, realizing the process of automatically configuring the security policy through data analysis, without manual configuration of the security policy, saving labor costs and time costs, improving the configuration efficiency of the security policy, and ensuring the safe and stable operation of the cloud environment.

[0019] As can be seen, through the technical solution of the present invention, the purpose of automatically distributing BMC security policies is achieved, thereby realizing the technical effects of reducing the configuration time of security policies and improving the configuration efficiency of security policies, and further solving the technical problem of low efficiency in manually configuring BMC security policies in the prior art. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The illustrative embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0021] Figure 1 is a flowchart of an optional method for managing a server remote management controller according to an embodiment of the present application;

[0022] Figure 2 is a schematic diagram of a network architecture of an optional BMC security reinforcement policy based on big data analysis according to an embodiment of the present application;

[0023] Figure 3 is a structural block diagram of an optional device for managing a server remote management controller according to an embodiment of the present application. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0024] The embodiments of the present application will be described in detail below with reference to the drawings and in conjunction with the embodiments.

[0025] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above drawings are used to distinguish similar objects and do not necessarily describe a specific order or sequence.

[0026] The embodiments of the present application can run on Figure 2 the network architecture shown, as Figure 2 shown, the network architecture includes: a big data management center, a management network, an internal environment, a third-party environment, and multiple security reinforcement policies. Among them, the BMCs in different environments (internal environment, third-party environment) report raw data to the big data management center. The big data management center determines the usage environment of the BMC through big data analysis and determines the corresponding security reinforcement policy, and then distributes the security reinforcement policy to the BMC in the server through the management network.

[0027] In this embodiment, a method running on the above network architecture is provided. Figure 1 is a flowchart according to an embodiment of the present application, as Figure 1 shown, the process includes the following steps:

[0028] Step S102, receive the attribute information of at least one BMC sent by the remote management controller BMC of the execution server;

[0029] Step S104, determine the operating environment where the BMC is located according to the attribute information of the BMC, where the operating environment includes at least an internal environment and a third-party environment;

[0030] Step S106, determine the target policy according to the operating environment where the BMC is located, where the target policy indicates whether to restrict the permissions for configuring the BMC.

[0031] Among them, the execution subject of the above steps can be a server, etc., but is not limited thereto.

[0032] The execution order of Step S102 and Step S104 can be interchanged, that is, Step S104 can be executed first, and then S102 can be executed.

[0033] Specifically, in Step S102, the big data management center receives the attribute information of at least one BMC sent by the remote management controller BMC of the execution server. The attribute information of the BMC can be the address of the BMC, such as an IP address or a MAC address, or the product serial number of the BMC, etc.

[0034] Specifically, in Step S104, the big data management center can perform big data analysis on the attribute information of the BMC to determine the operating environment where the BMC is located. For example, when it is analyzed that the address of the BMC is an internal address, it can be determined that the current BMC is in the internal environment, that is, the current physical server (bare metal server) is in the hands of the supplier, i.e., the operator; when it is analyzed that the address of the BMC is a third-party address, it can be determined that the current BMC is in the third-party environment, that is, the current physical server (bare metal server) is in the hands of a third-party user, i.e., the lessee.

[0035] Specifically, in Step S106, the big data management center can determine the target policy according to the operating environment where the BMC is located. For example, when it is analyzed that the operating environment where the BMC is located is the internal environment, the big data management center automatically distributes, through the management network, the normal security reinforcement policy 1 of BMC1 as shown in Figure 2 The normal security reinforcement policy 1 of BMC1 can be set by the operation and maintenance personnel of the supplier, i.e., the operator, according to requirements. Here, the normal security reinforcement policy 1 of BMC1 is taken as an example where all permissions are open, and it is not limited. Similarly, when it is analyzed that the operating environment where the BMC is located is the third-party environment, the big data management center automatically distributes, through the management network, as shown in Figure 2The BMC1 normal security reinforcement policy 2 shown, where the BMC1 normal security reinforcement policy 2 can be set by the operation and maintenance personnel of the supplier (i.e., the operator) according to requirements. Here, the BMC1 normal security reinforcement policy 2 is taken as an example of partial opening of permissions for illustration, without limitation. Optionally, the BMC1 normal security reinforcement policy 2 can be to disable the operation of writing to the flash, or to disable the system temperature query function, etc.

[0036] Optionally, taking the BMC1 normal security reinforcement policy 2 as an example of disabling the operation of writing to the flash, the big data management center determines through big data analysis that the usage environment of the BMC is a third-party environment, thus determining the security policy as the BMC1 normal security reinforcement policy 2, and then sending the BMC1 normal security reinforcement policy 2 to the BMC through the management network. The BMC applies the BMC1 normal security reinforcement policy 2 to disable the operation of writing to the flash, thereby avoiding the phenomenon that third-party users write programs to the flash storage chip and invade the management network of the cloud environment, realizing the automatic distribution of security policies. The whole process is efficient and stable, greatly improving the security and stability of the cloud environment.

[0037] Based on the solutions defined in the above steps S102 to S106, it can be learned that in the embodiment of the present invention, by using the method of big data analysis to determine the operating environment of the BMC and automatically configure the security policy, first receive the attribute information of at least one BMC sent by the remote management controller BMC of the execution server, then determine the operating environment of the BMC according to the attribute information of the BMC, and then determine the target policy according to the operating environment of the BMC, where the target policy represents whether to restrict the permissions for configuring the BMC, and the operating environment at least includes the internal environment and the third-party environment.

[0038] It is easy to notice that in the above process, by receiving the attribute information of at least one BMC sent by the remote management controller BMC of the execution server, it provides a data basis for subsequent determination of the corresponding security policy; by analyzing the attribute information of the BMC, it can be known the operating environment of the BMC, and through the operating environment of the BMC, determine the security policy, realizing the process of automatically configuring the security policy through data analysis, without manual configuration of the security policy, saving labor costs and time costs, improving the configuration efficiency of the security policy, and ensuring the safe and stable operation of the cloud environment.

[0039] Thus, through the technical solution of the present invention, the purpose of automatically distributing the BMC security policy is achieved, thereby realizing the technical effect of reducing the configuration time of the security policy and improving the configuration efficiency of the security policy, and further solving the technical problem of low efficiency in manually configuring the BMC security policy in the prior art.

[0040] In an exemplary embodiment, based on the attribute information of the BMC, the operating environment where the BMC is located is determined, including: obtaining the target label and / or the address information of the BMC from the attribute information of the BMC, where the target label is obtained by analyzing the behavior when the BMC is configured according to the target object; determining the operating environment where the BMC is located according to the target label and / or the address information.

[0041] Optionally, the attribute information of the BMC may include the label of the target object, that is, the target label. The target object is the person who configures the BMC, which may be the operation and maintenance personnel of the operator or a third-party user. The target label is obtained by analyzing the behavior when the target object configures the BMC. Specifically, when a third-party user uses the server, custom settings will be made first. For example, the name of the field-replaceable unit (FRU) of the server is modified first. Customer A, that is, third-party user A, sets the name of the FRU to a name starting with the letter V according to their own habits and transmits the above modification to the big data management center. At this time, "the FRU name starts with the letter V" can be used as the label of customer A. Usually, the operation and maintenance personnel do not make the above settings, and the label may be "the FRU name is not modified". When the big data management center obtains the label of "the FRU name starts with the letter V" from the attribute information of the BMC, it can be known that the current server is in the hands of customer A, and thus it is determined that the operating environment where the BMC is currently located is a third-party environment. Similarly, when the big data management center obtains the label of "the FRU name is not modified", it can be known that the current server is in the hands of the operation and maintenance personnel, and thus it is determined that the operating environment where the BMC is currently located is an internal environment. It should be noted that the above examples are only for explanation and do not constitute a limitation to the embodiments of the present invention.

[0042] Optionally, the address information may be the address of the BMC, such as the IP address, MAC address, etc., which have been described in detail in the foregoing process and will not be elaborated here.

[0043] In an exemplary embodiment, in the process of determining the operating environment where the BMC is located according to the target label and / or the address information, when the target label is the first label and / or the address information is the first address, it is determined that the operating environment where the BMC is located is an internal environment, where the first address is the address of the BMC operator; when the target label is the second label and / or the address information is the second address, it is determined that the operating environment where the BMC is located is a third-party environment, where the second address is the address of the BMC lessee.

[0044] Optionally, the first tag indicates that the user of the BMC is the first entity, which is the entity with the highest operation authority. The second tag indicates that the user of the BMC is the second entity, and the operation authority of the second entity is lower than that of the first entity. Optionally, the first entity is the operation and maintenance personnel of the supplier, i.e., the operator, who has the highest operation authority, i.e., the operation authority is unrestricted. For example, the operation of writing to the flash can be performed to modify the BMC, or the BMC can be upgraded, etc. The first tag can be obtained by analyzing the operation behavior of the operation and maintenance personnel. The first address is the address of the BMC operator, i.e., the supplier. Specifically, the big data management center analyzes the received BMC data, i.e., the attribute information. If the BMC data contains the first tag and / or the first address, it can be determined that the operating environment where the BMC is located is the internal environment.

[0045] Optionally, the second entity is a third-party user, and its operation authority is restricted. For example, it can only view the voltage of the system, but cannot view the temperature of the system, cannot modify the password, etc. The second tag can be obtained by analyzing the operation behavior of the customer, i.e., the third-party user. The second address is the address of the BMC lessee, i.e., the customer. Specifically, the big data management center analyzes the received BMC data, i.e., the attribute information. If the BMC data contains the second tag and / or the second address, it can be determined that the operating environment where the BMC is located is the third-party environment.

[0046] Optionally, different operation authorities can be set for customers, i.e., third-party users, of different scales. For example, customer A is a small customer and does not require refined management. Therefore, for customer A, only some query authorities can be opened. For example, only the voltage and temperature of the system can be viewed, etc.; customer B is a medium-sized customer and has certain management requirements. Therefore, for customer B, all query authorities and some management authorities can be opened. For example, customer B can customize the query module and add a device management module, etc.; customer C is a large customer and has high management requirements. Therefore, for customer C, all management authorities except the operation authority of writing to the flash can be opened. For example, customer C can modify the password and can also manage the device through the device management module according to the management requirements, etc.

[0047] In an exemplary embodiment, in the process of determining the target policy according to the operating environment where the BMC is located, when the operating environment where the BMC is located is the internal environment, the target policy is determined to be the first policy, where the first policy indicates that the permissions for configuring the BMC are in the fully available state; when the operating environment where the BMC is located is the third-party environment, the target policy is determined to be the second policy, where the second policy indicates that the permissions for configuring the BMC are in the partially available state.

[0048] Optionally, asFigure 2 As shown in the figure, if the operating environment where the BMC is located is an internal environment, the big data management center automatically issues the first normal security reinforcement policy of BMC1, i.e., the first policy, through the management network; if the operating environment where the BMC is located is a third-party environment, the big data management center automatically issues the second normal security reinforcement policy of BMC1, i.e., the second policy, through the management network. Among them, multiple different second policies can be set according to different customers. For example, for the above-mentioned small customer A, set the normal security reinforcement policy 3 of BMC1; for the above-mentioned medium customer B, set the normal security reinforcement policy 4 of BMC1; for the above-mentioned large customer C, set the normal security reinforcement policy 5 of BMC1, and so on.

[0049] It should be noted that by setting different policies, after disabling relevant permissions, the needs of different customers can still be met. At the same time, by disabling the operation permission to write to the flash, the phenomenon that third-party users write programs into the flash storage chip and invade the management network of the cloud environment is avoided, improving the security and stability of the cloud environment.

[0050] In addition, in some other exemplary embodiments, according to the type of the customer, i.e., the third-party user, when the operating environment where the BMC is located is a third-party environment, the target policy can also be determined as the first policy, that is, all permissions can also be opened to the customer, i.e., the third-party user. For example, when the customer is an authoritative institution (such as a government department), due to the nature of the customer itself, there will be no intrusion behavior fundamentally, and it has high management requirements. At this time, as Figure 2 shown in the figure, even if the operating environment where the BMC is located is a third-party environment, the big data management center will automatically issue the first normal security reinforcement policy of BMC1, that is, the operation permission to write to the flash will not be disabled. Specifically, the customer can also be identified as an authoritative institution through the above-mentioned target label and / or address information, so that even when the operating environment where the BMC is located is a third-party environment, the big data management center can determine that the target policy is the first policy and automatically issue it.

[0051] In an exemplary embodiment, when the operating environment where the BMC is located is an internal environment, after determining that the target policy is the first policy, the first policy is issued to the BMC, and then through the first policy, the permissions of the BMC are adjusted to the fully available state.

[0052] Optionally, the big data management center automatically issues the first policy to the BMC through the management network, and the BMC applies the first policy to realize the adjustment of permissions. For example, the operation permission to write to the flash is enabled.

[0053] In an exemplary embodiment, when the operating environment where the BMC is located is a third-party environment, after determining that the target policy is the second policy, the second policy is sent to the BMC, and then through the second policy, some permissions for configuring the BMC are disabled.

[0054] Optionally, the big data management center automatically sends the second policy to the BMC through the management network, and the BMC applies the second policy to implement permission adjustment. For example, the operation permission to write to the flash is disabled.

[0055] In an exemplary embodiment, when the operating environment where the BMC is located is a third-party environment, after determining that the target policy is the second policy, according to the running data of the BMC, it is judged whether the BMC is in a maintenance state. When the BMC is in a maintenance state, the target policy is changed from the second policy to the first policy.

[0056] Optionally, the running data can be the system running pressure, etc. For example, by analyzing the system running pressure, it can be known whether the current server is running business. The maintenance state can be component updates and maintenance upgrades of the server, or the third party stops renting the server and the supplier reclaims the server for maintenance, etc. For example, when the supplier rents the server to a third party, the big data management center determines through data analysis that the target policy is BMC1 normal security reinforcement policy 2, and disables the operation of writing to the flash in the BMC of the server. When the server needs component updates, maintenance upgrades or the third party stops renting the server, the server is returned to the supplier. At this time, the big data management center can judge whether the BMC is in a maintenance state by analyzing the running data of the BMC, so as to change the security policy in time. Specifically, when the big data management center analyzes that the BMC is in a maintenance state, it can be known that the BMC in the current server is in an internal environment. At this time, the big data management center automatically sends BMC1 normal security reinforcement policy 1 to enable the permission to write to the flash of the BMC, and the operation and maintenance personnel can perform corresponding operation and maintenance operations, such as in-band upgrade operation of the BMC. Optionally, the BMC1 maintenance state security reinforcement policy 1 as shown in Figure 2 can also be separately set according to the operation and maintenance requirements to complete the permission setting for configuring the BMC.

[0057] Optionally, after the method of the embodiment of the present invention is adopted on the server provided by the supplier (i.e., the operator) to the customer (i.e., the third-party user), the security reinforcement policies in all operating states are automatically executed, greatly reducing the labor cost and time cost, and improving the security and stability of the cloud environment. Specifically, the intrusion behavior may be to write a program into the flash to modify the BMC, thereby causing losses to other systems in the cloud environment. For example, in a multi-cluster computer room, a restart program is written into the flash to restart all BMCs, causing the entire system to crash. Or, by modifying the BMC, it is possible to configure someone else's device as the intruder's own device and steal the BMC data of others. Without the permission to write to the flash under the operating system, the third party cannot modify the BMC and thus cannot intrude into the cloud environment. In addition, when performing server maintenance, the security reinforcement policy can be automatically switched, improving the configuration efficiency of the security reinforcement policy while also improving the maintenance efficiency and saving time costs.

[0058] It should be noted that in the above process, when the server is handed over to the third-party user for use, the big data management center automatically issues the security reinforcement policy to the BMC to restrict the flash writing operation of the BMC. When the machine is recycled and maintained by the operation and maintenance personnel, the big data management center automatically issues a new security reinforcement policy to the BMC to close the restriction. Although the actual hardware environment (referring to the physical server) remains unchanged, the selected security reinforcement policies are different, realizing the automated operation and maintenance of the BMC security policy. In addition, when handed over to the third-party user for use, the third-party user cannot modify the flash of the BMC and thus cannot intrude into the cloud environment, improving the security of the cloud environment.

[0059] It can be seen that through the technical solution of the present invention, the purpose of automatically issuing the BMC security policy is achieved, thereby realizing the technical effect of reducing the configuration time of the security policy and improving the configuration efficiency of the security policy, and further solving the technical problem of low efficiency in manually configuring the BMC security policy in the prior art.

[0060] Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by means of software plus a necessary general hardware platform. Of course, it can also be implemented by hardware, but in many cases, the former is a better implementation method. Based on such an understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. The computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), including several instructions for causing a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the management method of the execution server remote management controller described in various embodiments of the present application.

[0061] In this embodiment, a management device for an execution server remote management controller is further provided. This device is used to implement the above embodiments and preferred implementation manners, and those that have been described will not be repeated. As used hereinafter, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, implementation in hardware, or a combination of software and hardware is also possible and contemplated.

[0062] Figure 3 is a structural block diagram of a management device for an execution server remote management controller according to an embodiment of the present application. As Figure 3 shown, the device includes: a receiving module 32, configured to receive attribute information of at least one BMC sent by an execution server remote management controller BMC; a first determination module 34, configured to determine the operating environment in which the BMC is located according to the attribute information of the BMC, where the operating environment includes at least an internal environment and a third-party environment; a second determination module 36, configured to determine a target policy according to the operating environment in which the BMC is located, where the target policy characterizes whether to restrict the permissions for configuring the BMC.

[0063] It should be noted that the above receiving module 32, first determination module 34, and second determination module 36 correspond to steps S102 to S106 in the above embodiment. The examples and application scenarios implemented by the three modules and the corresponding steps are the same, but are not limited to the content disclosed in the above method embodiments.

[0064] Optionally, the first determination module includes: an obtaining unit, configured to obtain a target label and / or the address information of the BMC from the attribute information of the BMC, where the target label is obtained by analyzing the behavior when the BMC is configured according to a target object; a determination unit, configured to determine the operating environment in which the BMC is located according to the target label and / or the address information.

[0065] Optionally, the determination unit includes: a first determination sub-module, configured to determine that the operating environment in which the BMC is located is an internal environment when the target label is a first label and / or the address information is a first address, where the first address is the address of the BMC operator; a second determination sub-module, configured to determine that the operating environment in which the BMC is located is a third-party environment when the target label is a second label and / or the address information is a second address, where the second address is the address of the BMC lessee.

[0066] Optionally, the second determination module includes: a first determination unit, configured to determine that the target policy is the first policy when the operating environment where the BMC is located is an internal environment, where the first policy represents that the permissions of the BMC are in a fully available state; a second determination unit, configured to determine that the target policy is the second policy when the operating environment where the BMC is located is a third-party environment, where the second policy represents that the permissions of the BMC are in a partially available state.

[0067] Optionally, the management device for executing the server remote management controller further includes: a first distribution module, configured to distribute the first policy to the BMC; a first adjustment module, configured to adjust the permissions of the configured BMC to a fully available state through the first policy.

[0068] Optionally, the management device for executing the server remote management controller further includes: a second distribution module, configured to distribute the second policy to the BMC; a second adjustment module, configured to disable some of the permissions of the configured BMC through the second policy.

[0069] Optionally, the management device for executing the server remote management controller further includes: a judgment module, configured to judge whether the BMC is in a maintenance state according to the operation data of the BMC; a policy change module, configured to change the target policy from the second policy to the first policy when the BMC is in a maintenance state.

[0070] It should be noted that the above-mentioned various modules can be implemented by software or hardware. For the latter, it can be implemented in the following ways, but not limited to: the above-mentioned modules are all located in the same processor; or, the above-mentioned various modules are respectively located in different processors in any combination form.

[0071] An embodiment of the present application further provides a computer-readable storage medium, in which a computer program is stored, where the computer program is configured to execute the steps in any one of the above method embodiments when running.

[0072] In an exemplary embodiment, the above computer-readable storage medium may include, but is not limited to: various media such as a USB flash drive, a read-only memory (ROM for short), a random access memory (RAM for short), a mobile hard disk, a magnetic disk, or an optical disc that can store a computer program.

[0073] An embodiment of the present application further provides an electronic device, including a memory and a processor, where a computer program is stored in the memory, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

[0074] In an exemplary embodiment, the above-mentioned electronic device may further include a transmission device and an input / output device, wherein the transmission device is connected to the above-mentioned processor, and the input / output device is connected to the above-mentioned processor.

[0075] For specific examples in this embodiment, reference may be made to the examples described in the above-mentioned embodiments and exemplary embodiments, and details are not repeated here.

[0076] Obviously, those skilled in the art should understand that the above-mentioned modules or steps of the present application can be implemented by a general-purpose computing device. They can be concentrated on a single computing device or distributed on a network composed of multiple computing devices. They can be implemented by program codes executable by the computing device. Thus, they can be stored in a storage device and executed by the computing device. And in some cases, the steps shown or described can be executed in a different order from here, or they can be separately fabricated into individual integrated circuit modules, or multiple modules or steps among them can be fabricated into a single integrated circuit module to be implemented. In this way, the present application is not limited to any specific combination of hardware and software.

[0077] The above are only the preferred embodiments of the present application and are not used to limit the present application. For those skilled in the art, various changes and modifications can be made to the present application. Any modification, equivalent replacement, improvement, etc. made within the principle of the present application shall be included in the protection scope of the present application.

Claims

1. A management method for a server remote management controller, characterized in that Including: Receiving attribute information of at least one BMC sent by an execution server remote management controller BMC; Determining the operating environment where the BMC is located according to the attribute information of the BMC, where the operating environment at least includes an internal environment and a third-party environment; Determining a target policy according to the operating environment where the BMC is located, where the target policy represents whether to restrict the permissions for configuring the BMC; Among them, determining the operating environment where the BMC is located according to the attribute information of the BMC includes: obtaining a target label from the attribute information of the BMC, where the target label is obtained by analyzing the behavior when the BMC is configured according to a target object; determining the operating environment where the BMC is located according to the target label; Determining the operating environment where the BMC is located according to the target label includes: when the target label is a first label, determining that the operating environment where the BMC is located is the internal environment, where the first label is used to represent that the target object is an object with unrestricted operation permissions; when the target label is a second label, determining that the operating environment where the BMC is located is the third-party environment, where the second label is used to represent that the target object is an object with partially restricted operation permissions.

2. The method according to claim 1, characterized in that, Determining the operating environment where the BMC is located according to the attribute information of the BMC further includes: Obtaining the address information of the BMC, the address information of the BMC, and the target label from the attribute information of the BMC; Determining the operating environment where the BMC is located according to the address information, the address information, and the target label.

3. The method according to claim 2, wherein Determining the operating environment where the BMC is located according to the address information, the address information, and the target label includes: When the address information is a first address, the address information is a first address, and the target label is a first label, determining that the operating environment where the BMC is located is the internal environment, where the first address is the address of the BMC operator; When the address information is a second address, the address information is a second address, and the target label is a second label, determining that the operating environment where the BMC is located is the third-party environment, where the second address is the address of the BMC lessee.

4. The method according to claim 3, wherein Determining the target policy according to the operating environment where the BMC is located includes: When the operating environment where the BMC is located is the internal environment, determining that the target policy is a first policy, where the first policy represents that the permissions for configuring the BMC are in a fully available state; When the operating environment where the BMC is located is the third-party environment, determining that the target policy is a second policy, where the second policy represents that the permissions for configuring the BMC are in a partially available state.

5. The method according to claim 4, wherein After determining that the target policy is a first policy when the operating environment where the BMC is located is the internal environment, the method further includes: Sending the first policy to the BMC; Through the first policy, the permissions for configuring the BMC are adjusted to the fully available state.

6. The method according to claim 4, characterized in that, When the operating environment where the BMC is located is the third-party environment, after determining that the target policy is the second policy, the method further includes: Issuing the second policy to the BMC; Through the second policy, disable some of the permissions for configuring the BMC.

7. The method according to claim 6, wherein When the operating environment where the BMC is located is the third-party environment, after determining that the target policy is the second policy, the method further includes: According to the running data of the BMC, determine whether the BMC is in the maintenance state; When the BMC is in the maintenance state, change the target policy from the second policy to the first policy.

8. A management device for implementing a remote management controller of a server, characterized in that, Includes: A receiving module, configured to receive the attribute information of at least one BMC sent by the execution server remote management controller BMC; A first determination module, configured to determine the operating environment where the BMC is located according to the attribute information of the BMC, where the operating environment at least includes an internal environment and a third-party environment; A second determination module, configured to determine a target policy according to the operating environment where the BMC is located, where the target policy represents whether to restrict the permissions for configuring the BMC; Wherein, the first determination module is used to determine the operating environment in the following manner: obtain a target label from the attribute information of the BMC, where the target label is obtained by analyzing the behavior when the BMC is configured according to a target object; according to the target label, determine the operating environment where the BMC is located; [[ID= 9. A computer-readable storage medium, characterized in that, ​ 10. An electronic device, comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, characterized in that, ​

Images