A method, system, device, and storage medium for verifying the PRM function

Abstract

The embodiments of the present application provide a method, system, device, and storage medium for verifying the PRM function, aiming to solve the technical problem that in the existing method for judging the PRM function based on DRAM, when abnormalities also occur in DRAM areas other than PRM, it is impossible to determine whether the PRM area is abnormal. The method is as follows: Configure the central processing unit and the memory; determine that the central processing unit supports the software protection extension function, set the relevant configurations corresponding to the software protection extension function, save the settings and restart the server; determine that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension drivers are generated based on the saved settings; based on the software protection extension drivers, traverse the SGX PRM Size configurable values and output the PRM function verification result. This solution does not need to rely on verifying by judging the overall DRAM function and whether the areas other than PRM are normal, effectively improving the test efficiency.

Description

Technical Field

[0001] This application relates to the field of testing technologies, and in particular, to a method, system, device, and storage medium for verifying the PRM function. Background Art

[0002] SGX (Software Guard Extensions) is a set of server CPU instruction extensions that can create a trusted execution environment to protect code and data, which cannot be accessed even with root privileges. PRM (Preserved Random Memory) is a reserved area in the dynamic memory DRAM (Dynamic Random Access Memory) for SGX. This continuous memory space is at the lowest BIOS (Basic Input Output System) layer and cannot be accessed by any software.

[0003] PRM is a reserved area in the dynamic memory DRAM for SGX. When PRM is abnormal, since SGX cannot be accessed even with root privileges, the current method for determining whether the PRM function is normal is as follows: determine that PRM is normal by determining that the overall DRAM is normal; determine that PRM is abnormal by determining that the overall DRAM is abnormal and then determining that the area outside DRAM is normal. When PRM is abnormal, infer that PRM is abnormal by determining that the overall DRAM is abnormal and then determining that the DRAM area outside PRM is normal. However, when the DRAM area outside PRM also appears abnormal, it is impossible to determine whether the PRM area is abnormal. Summary of the Invention

[0004] Embodiments of this application provide a method, system, device, and storage medium for verifying the PRM function, so as to solve the technical problem that when the DRAM area outside PRM also appears abnormal in the existing method for determining the PRM function based on DRAM, it is impossible to determine whether the PRM area is abnormal.

[0005] On the one hand, embodiments of this application provide a method for verifying the PRM function, and the method includes:

[0006] Step S1: Configure the central processing unit and the memory;

[0007] Step S2: Determine that the central processing unit supports the software protection extension function, set the relevant configurations corresponding to the software protection extension function, save the settings, and restart the server;

[0008] Step S3: Determine that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension drivers are generated based on the saved settings;

[0009] Step S4: Based on the software protection extension drivers, traverse the SGX PRM Size configurable values and output the PRM function verification result.

[0010] In an implementation manner of the present application, the determining that the central processing unit supports the software protection extension function specifically includes:

[0011] Enter the basic input / output system and check whether the relevant configuration of the software protection extension is grayed out;

[0012] If it is not grayed out, it indicates that the central processing unit supports the software protection extension function; if it is grayed out, it indicates that the central processing unit does not support the software protection extension function.

[0013] In an implementation manner of the present application, the method further includes:

[0014] Reset the relevant configuration corresponding to the software protection extension function, save the settings and restart the server.

[0015] In an implementation manner of the present application, before the determining that the central processing unit supports the software protection extension function, the method further includes:

[0016] Judge whether the configuration of the memory information is full memory configuration or half-full memory configuration;

[0017] If the configuration of the memory information is not full memory configuration or half-full memory configuration, reconfigure the central processing unit and the memory;

[0018] If the configuration of the memory information is full memory configuration or half-full memory configuration, power on the server carrying the central processing unit and the memory, load and enter the basic input / output system.

[0019] In an implementation manner of the present application, before the judging whether the configuration of the memory information is full memory configuration or half-full memory configuration, the method further includes:

[0020] Enter the basic input / output system and check the configuration of the memory information in the memory mapping.

[0021] In an implementation manner of the present application, the process of generating the software protection extension drivers is specifically as follows:

[0022] Start the server and enter the operating system;

[0023] Based on the saved configuration, find the corresponding driver and install it.

[0024] In an implementation manner of the present application, based on the software protection extension driver, traverse the SGX PRM Size settable values and output the PRM function verification result, which specifically includes:

[0025] Return to the basic input / output system again, view the settable values of SGX PRM Size, record them as A[1], A[2]... A[n] (n = 1, 2...), set SGX PRM Size to A[n], n = n + 1, run the SGX tool, retrieve PRM Size in the generated log file and record it as B[n];

[0026] If A[n] is not equal to B[n], then output that the PRM function is abnormal; if A[n] is equal to B[n], then record the traversal times m = m + 1, (m = 0, 1, 2...);

[0027] If m is not n, traverse other settable values of SGX PRM Size for testing; if m is n, then output that the PRM function is normal.

[0028] The embodiment of the present application further provides a system for verifying the PRM function, and the system includes:

[0029] A configuration unit for configuring the central processing unit and the memory;

[0030] A setting unit for determining that the central processing unit supports the software protection extension function, setting the relevant configurations corresponding to the software protection extension function, saving the settings and restarting the server;

[0031] A driver determination unit for determining that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension driver is generated based on the saved settings;

[0032] A verification unit for traversing the SGX PRM Size settable values based on the software protection extension driver and outputting the PRM function verification result.

[0033] The embodiments of the present application also provide a device for verifying the PRM function. The device includes: at least one processor; and a memory communicatively connected to the at least one processor. Wherein, the memory stores instructions executable by the at least one processor, and when the instructions are executed by the at least one processor, the at least one processor is capable of: configuring the central processing unit and the memory; determining that the central processing unit supports the software protection extension function, setting the relevant configurations corresponding to the software protection extension function, saving the settings and restarting the server; determining that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension drivers are generated based on the saved settings; based on the software protection extension drivers, traversing the SGX PRM Size configurable values and outputting the PRM function verification result.

[0034] The embodiments of the present application also provide a non-volatile computer storage medium for verifying the PRM function, storing computer-executable instructions, and the computer-executable instructions are set to: configure the central processing unit and the memory; determine that the central processing unit supports the software protection extension function, set the relevant configurations corresponding to the software protection extension function, save the settings and restart the server; determine that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension drivers are generated based on the saved settings; based on the software protection extension drivers, traversing the SGX PRM Size configurable values and outputting the PRM function verification result.

[0035] A method, system, device and storage medium for verifying the PRM function provided by the embodiments of the present application directly determines whether the PRM is normal through the SGX PRM Size, without relying on determining whether the overall DRAM function and the areas other than the PRM are normal to determine whether the PRM function is normal, excluding the influence of the areas other than the PRM on the PRM function judgment, and effectively improving the test efficiency. Through the SGX function and driver supported by the CPU, combined with SGX-related tools, the PRM function test is carried out, and a set of logic for judging the PRM function is developed, improving the accuracy of the PRM function judgment and enhancing the user experience. Description of the Drawings

[0036] The drawings described herein are used to provide a further understanding of the present application, and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation of the present application. In the drawings:

[0037] Figure 1 It is a flowchart of a method for verifying the PRM function provided by the embodiments of the present application;

[0038] Figure 2System composition diagram for verifying the PRM function provided by an embodiment of the present application;

[0039] Figure 3 Schematic diagram of a device for verifying the PRM function provided by an embodiment of the present application. Specific implementation manners

[0040] To make the objectives, technical solutions, and advantages of the present application clearer, the technical solutions of the present application will be clearly and completely described below in conjunction with specific embodiments of the present application and the corresponding drawings. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

[0041] SGX (Software Guard Extensions) is a set of server CPU instruction extensions that can create a trusted execution environment to protect code and data, which cannot be accessed even with root privileges. PRM (Preserved Random Memory) is a reserved area in the dynamic memory DRAM (Dynamic Random Access Memory) for SGX. This continuous memory space is at the lowest BIOS (Basic Input Output System) layer and cannot be accessed by any software.

[0042] PRM is a reserved area in the dynamic memory DRAM for SGX. When PRM is abnormal, since SGX cannot be accessed even with root privileges, the current method for judging whether the PRM function is normal is as follows: judge that PRM is normal by judging that the overall DRAM is normal; judge that PRM is abnormal by judging that the overall DRAM is abnormal and then judging that the area outside DRAM is normal. When PRM is abnormal, infer that PRM is abnormal by judging that the overall DRAM is abnormal and then judging that the DRAM area outside PRM is normal. However, when the DRAM area outside PRM also shows abnormalities, it is impossible to judge whether the PRM area is abnormal.

[0043] SGX PRM Size is an important feature of the PRM function. When the DRAM area outside PRM also shows abnormalities, the current method cannot judge whether the PRM area is normal. At this time, the SGX PRM Size can be used to directly judge whether PRM is normal.

[0044] The embodiments of the present application provide a method, a system, a device, and a storage medium for verifying the PRM function, so as to solve the technical problem that in the existing method for judging the PRM function based on DRAM, when an abnormality also occurs in the DRAM area other than PRM, it is impossible to judge whether the PRM area is abnormal.

[0045] The technical solutions proposed in the embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0046] Figure 1 It is a flowchart of the method provided by the embodiments of the present application. As Figure 1 shown, the method mainly includes the following steps:

[0047] Step S1: Configure the central processing unit and the memory.

[0048] In the embodiments of the present application, the SGX PRM Size is written into the BIOS. During the process of the server booting and loading the BIOS, its function can be verified by accessing and configuring it.

[0049] Specifically, PRM is a reserved area in the dynamic memory DRAM for SGX. Hardware-wise, the SGX function requires a CPU that supports the SGX function and the memory associated with the CPU to be fully configured or half-configured (fully configured with white slots) to support. Therefore, in this step, the CPU and the memory are configured first.

[0050] Further, enter the basic input / output system and view the configuration of the memory information in the memory mapping.

[0051] Furthermore, judge whether the configuration of the memory information is full memory configuration or half memory configuration; if the configuration of the memory information is not full memory configuration or half memory configuration, reconfigure the central processing unit and the memory; if the configuration of the memory information is full memory configuration or half memory configuration, power on the server carrying the central processing unit and the memory, load and enter the basic input / output system.

[0052] Step S2: Determine that the central processing unit supports the software protection extension function, set the relevant configurations corresponding to the software protection extension function, save the settings and restart the server.

[0053] In the embodiments of the present application, enter the basic input / output system and view whether the relevant configuration of the software protection extension is grayed out; if it is not grayed out, it indicates that the central processing unit supports the software protection extension function; if it is grayed out, it indicates that the central processing unit does not support the software protection extension function.

[0054] Further, set the relevant configurations corresponding to the software protection extension function, save the settings and restart the server.

[0055] Step S3: Determine that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension drivers are generated based on the saved settings.

[0056] In the embodiment of the present application, if two software protection extension drivers are not newly added under the software components in the device manager, re-set the relevant configurations corresponding to the software protection extension function, save the settings and restart the server.

[0057] Specifically, the process of generating the software protection extension driver is as follows: Start the server and enter the operating system; Based on the saved configuration, find the corresponding driver and install it.

[0058] Step S4: Based on the software protection extension driver, traverse the SGX PRM Size configurable values and output the PRM function verification result.

[0059] In the embodiment of the present application, return to the basic input / output system again, view the configurable values of SGX PRM Size, record them as A[1], A[2]... A[n] (n = 1, 2...), set SGX PRM Size to A[n], n = n + 1, start to the operating system, then run the SGX tool, and retrieve PRM Size in the generated log file and record it as B[n]. The SGX tool is.\sgxbiosinfotool.exe–v–l–wa_new_platform–wa_uncore_issue.

[0060] If A[n] is not equal to B[n], then output that the PRM function is abnormal; if A[n] is equal to B[n], then record the traversal times m = m + 1, (m = 0, 1, 2...).

[0061] If m is not n, traverse other configurable values of SGX PRM Size for testing; if m is n, then output that the PRM function is normal.

[0062] A method for verifying the PRM function provided by the embodiment of the present application directly determines whether the PRM is normal through SGX PRM Size, without relying on judging whether the overall DRAM function and the area other than the PRM are normal to judge whether the PRM function is normal, excluding the influence of the area other than the PRM on the PRM function judgment, and effectively improving the test efficiency. Through the SGX function and driver supported by the CPU, and combined with SGX-related tools, the PRM function test is carried out, and a set of logic for judging the PRM function is developed, improving the accuracy of the PRM function judgment and enhancing the user experience.

[0063] The above is a method for verifying the PRM function provided by an embodiment of the present application. Based on the same inventive concept, an embodiment of the present application also provides a system for verifying the PRM function. Figure 2 It is a composition diagram of a system for verifying the PRM function provided by an embodiment of the present application, as Figure 2 shown. The system mainly includes:

[0064] A configuration unit 201 for configuring the central processing unit and the memory;

[0065] A setting unit 202 for determining that the central processing unit supports the software protection extension function, setting the relevant configurations corresponding to the software protection extension function, saving the settings and restarting the server;

[0066] A driver determination unit 203 for determining that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension driver is generated based on the saved settings;

[0067] A verification unit 204 for traversing the SGX PRM Size configurable values based on the software protection extension driver and outputting the PRM function verification result.

[0068] In an embodiment of the present application, the setting unit 202 specifically executes: entering the basic input / output system to check whether the relevant configuration of the software protection extension is grayed out; if it is not grayed out, it indicates that the central processing unit supports the software protection extension function; if it is grayed out, it indicates that the central processing unit does not support the software protection extension function. Set the relevant configurations corresponding to the software protection extension function, save the settings and restart the server.

[0069] The driver determination unit 203 also executes: if two software protection extension drivers are not newly added under the software components in the device manager, re-set the relevant configurations corresponding to the software protection extension function, save the settings and restart the server. Start the server and enter the operating system; based on the saved configuration, find the corresponding driver and install it.

[0070] The above is a system for verifying the PRM function provided by an embodiment of the present application. Based on the same inventive concept, an embodiment of the present application also provides a device for verifying the PRM function. Figure 3 It is a schematic diagram of a device for verifying the PRM function provided by an embodiment of the present application, as Figure 3As shown in the figure, the device mainly includes: at least one processor 301; and a memory 302 communicatively connected to the at least one processor; wherein, the memory 302 stores instructions executable by the at least one processor 301, and the instructions are executed by the at least one processor 301 to enable the at least one processor 301 to complete: configuring the central processing unit and the memory; determining that the central processing unit supports the software protection extension function, setting the relevant configurations corresponding to the software protection extension function, saving the settings and restarting the server; determining that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension drivers are generated based on the saved settings; based on the software protection extension drivers, traversing the SGX PRM Size configurable values and outputting the PRM function verification result.

[0071] In addition, an embodiment of the present application also provides a non-volatile computer storage medium for verifying the PRM function, storing computer-executable instructions, and the computer-executable instructions are set as:

[0072] Configuring the central processing unit and the memory; determining that the central processing unit supports the software protection extension function, setting the relevant configurations corresponding to the software protection extension function, saving the settings and restarting the server; determining that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension drivers are generated based on the saved settings; based on the software protection extension drivers, traversing the SGX PRM Size configurable values and outputting the PRM function verification result.

[0073] The present invention is described with reference to the flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowcharts and / or block diagrams, and the combination of processes and / or blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing devices to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing devices generate a device for implementing the functions specified in Figure 1 one process or multiple processes and / or blocks Figure 1 one block or multiple blocks.

[0074] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory generate a manufactured article including an instruction device, and the instruction device implements the functions in Figure 1 one process or multiple processes and / or blocks Figure 1The functions specified in one or more boxes.

[0075] These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operation steps are executed on the computer or other programmable device to generate a computer-implemented process. Thus, the instructions executed on the computer or other programmable device provide for implementing the steps of the functions specified in one Figure 1 one process or multiple processes and / or boxes Figure 1 or more boxes.

[0076] In a typical configuration, a computing device includes one or more processors (CPUs), an input / output interface, a network interface, and memory.

[0077] Each embodiment in this application is described in a progressive manner. For the same or similar parts among the embodiments, reference can be made to each other. Each embodiment focuses on the differences from other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple. For the relevant parts, reference can be made to the description of the method embodiment.

[0078] It should also be noted that the term "comprising", "including" or any other variation thereof is intended to cover non-

[0079] exclusive inclusion, so that a process, method, commodity or device including a series of elements not only includes those elements, but also includes other elements not expressly listed, or also includes elements inherent to such process, method, commodity or device. Without further limitation, an element defined by the statement "including one..." does not exclude the existence of additional identical elements in the process, method, commodity or device including the said element.

[0080] The above are only the embodiments of this application and are not used to limit this application. For those skilled in the art, this application can have various changes and modifications. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included within the scope of the claims of this application.

Claims

1. A method for verifying the PRM function, characterized in that, the method includes: Step S1: Configure the central processing unit and the memory; Step S2: Determine that the central processing unit supports the software protection extension function, set the relevant configurations corresponding to the software protection extension function, save the settings and restart the server; Step S3: Determine that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension driver is generated based on the saved settings; Step S4: Based on the software protection extension driver, traverse the SGX PRM Size configurable values and output the PRM function verification result; specifically including: Return to the basic input / output system again, view the configurable values of SGX PRM Size, record them as A[1], A[2]... A[n], n = 1, 2..., set SGX PRM Size to A[n], n = n + 1, run the SGX tool, retrieve PRM Size in the generated log file and record it as B[n]; if A[n] is not equal to B[n], then output that the PRM function is abnormal; if A[n] is equal to B[n], then record the traversal times m = m + 1, m = 0, 1, 2...; if m is not n, traverse other configurable values of SGX PRM Size for testing; if m is n, then output that the PRM function is normal.

2. A method for verifying the PRM function according to claim 1, characterized in that, the determination that the central processing unit supports the software protection extension function specifically includes: Enter the basic input / output system and view whether the relevant configuration of the software protection extension is grayed out; If it is not grayed out, it indicates that the central processing unit supports the software protection extension function; if it is grayed out, it indicates that the central processing unit does not support the software protection extension function.

3. A method for verifying the PRM function according to claim 1, if two software protection extension drivers are not newly added under the software components in the device manager, characterized in that, the method further includes: Reset the relevant configurations corresponding to the software protection extension function, save the settings and restart the server.

4. A method for verifying the PRM function according to claim 1, characterized in that, before the determination that the central processing unit supports the software protection extension function, the method further includes: Judge whether the configuration of the memory information is full memory configuration or half-full memory configuration; If the configuration of the memory information is not full memory configuration or half-full memory configuration, reconfigure the central processing unit and the memory; If the configuration of the memory information is full memory configuration or half-full memory configuration, power on the server carrying the central processing unit and the memory, load and enter the basic input / output system.

5. A method for verifying the PRM function according to claim 4, characterized in that, before the judgment of whether the configuration of the memory information is full memory configuration or half-full memory configuration, the method further includes: Enter the basic input / output system and view the configuration of the memory information in the memory mapping.

6. A method for verifying the PRM function according to claim 1, It is characterized in that the process of generating the software protection extension driver is specifically as follows: Start the server and enter the operating system; Based on the saved configuration, find the corresponding driver and install it.

7. A system for verifying the PRM function It is characterized in that the system includes: a configuration unit for configuring the central processing unit and the memory; a setting unit for determining that the central processing unit supports the software protection extension function, setting the relevant configurations corresponding to the software protection extension function, saving the settings and restarting the server; a driver determination unit for determining that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension driver is generated based on the saved settings; a verification unit for traversing the SGX PRM Size configurable values based on the software protection extension driver and outputting the PRM function verification result; specifically including: returning to the basic input / output system again, checking the configurable values of SGX PRM Size, recording them as A[1], A[2]... A[n], n = 1, 2..., setting SGX PRM Size to A[n], n = n + 1, running the SGX tool, retrieving PRM Size in the generated log file and recording it as B[n]; if A[n] is not equal to B[n], then output that the PRM function is abnormal; if A[n] is equal to B[n], then record the traversal times m = m + 1, m = 0, 1, 2...; if m is not n, traverse other configurable values of SGX PRM Size for testing; if m is n, then output that the PRM function is normal.

8. A device for verifying the PRM function It is characterized in that the device includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can: configure the central processing unit and the memory; determine that the central processing unit supports the software protection extension function, set the relevant configurations corresponding to the software protection extension function, save the settings and restart the server; determine that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension driver is generated based on the saved settings; Based on the software protection extension driver, traverse the SGX PRM Size configurable values and output the PRM function verification result; specifically including: returning to the basic input / output system, checking the configurable values of SGX PRM Size, recording them as A[1], A[2]... A[n], n = 1, 2..., setting SGX PRM Size to A[n], n = n + 1, running the SGX tool, retrieving the PRM Size in the generated log file and recording it as B[n]; if A[n] is not equal to B[n], then output that the PRM function is abnormal; if A[n] is equal to B[n], then record the traversal count m = m + 1, m = 0, 1, 2...; if m is not n, traverse other configurable values of SGX PRM Size for testing; if m is n, then output that the PRM function is normal.

9. A non-volatile computer storage medium for verifying the PRM function, storing computer-executable instructions, characterized in that, the computer-executable instructions are set to: configure the central processing unit and the memory; determine that the central processing unit supports the software protection extension function, set the relevant configurations corresponding to the software protection extension function, save the settings and restart the server; determine that two software protection extension drivers are newly added under the software components in the device manager; wherein, the software protection extension driver is generated based on the saved settings; Based on the software protection extension driver, traverse the SGX PRM Size configurable values and output the PRM function verification result; specifically including: returning to the basic input / output system, checking the configurable values of SGX PRM Size, recording them as A[1], A[2]... A[n], n = 1, 2..., setting SGX PRM Size to A[n], n = n + 1, running the SGX tool, retrieving the PRM Size in the generated log file and recording it as B[n]; if A[n] is not equal to B[n], then output that the PRM function is abnormal; if A[n] is equal to B[n], then record the traversal count m = m + 1, m = 0, 1, 2...; if m is not n, traverse other configurable values of SGX PRM Size for testing; if m is n, then output that the PRM function is normal.

Images