A server management software business lock mode system and use method

Abstract

The present invention belongs to the technical field of server BMC, and specifically relates to a server management software business lock mode system and a method of use, including a BMC business lock mode setting module, a password setting module, an identity authentication module and a power control instruction interception module; the BMC business lock mode setting module is used to set the working state. The BMC business lock mode setting module implements the switching between different working states of the BMC business lock mode and verifies the identity of the user of the server management software business lock mode system; the password setting module is used for the administrator or operator to set an independent password to ensure the security of the BMC business lock mode; the identity authentication module is used to verify the identity of the administrator or operator. The power control instruction interception module is used to intercept the power control command. In a scenario where the server is in a business that cannot be interrupted, the power state of the BMC is locked.

Description

Technical Field

[0001] The present invention belongs to the technical field of server BMC, and in particular relates to a server management software service lock mode system and a use method thereof. Background Art

[0002] BMC stands for "Baseboard Management Controller", which is an independent hardware management controller usually embedded in the motherboard of a server, computer or other electronic device. Its main function is to monitor, manage and control the entire system without interference from the operating system to improve the reliability and availability of the system. Among them, BMC usually provides power management functions for the server, such as power management functions and the issuance of commands to directly restart or power on and off the OS in KVM (Kernel-based Virtual Machine) applications.

[0003] As enterprises and organizations continue to increase their demand for server management, the remote management function of servers has become increasingly important. In some large data centers, remote management of servers allows administrators or authorized personnel to remotely monitor and control servers over the network. However, this also brings certain risks to the services currently running on the server. When malicious intruders obtain any administrator or operator account through means, or operators who are prone to misoperation, they can issue power control commands to the server power supply and the power supply in the KVM. When the system business is running normally or in critical functions such as database backup, migration, and data analysis, if the server is suddenly restarted or powered off at this time, it is easy to cause extremely serious consequences such as business interruption and loss of critical data.

[0004] Therefore, how to provide a business lock mode method on the BMC that can lock the current power state to reduce the risk of interruption to server OS-related services caused by malicious users or users who make incorrect operations. When the business lock mode is turned on under certain conditions, all users temporarily lose control of the server power on the BMC. Even if other users have the authority to control the power, they are temporarily unable to operate the server power in interfaces such as Web, Redfish, IPMI, and KVM applications, thereby ensuring the safe and stable operation of the business on the server. When the business meets the conditions for suspension or stop, the administrator who turned on the business lock mode will turn off the business lock mode to restore all users' operations on the power supply. This is a technical problem that urgently needs to be solved. Summary of the invention

[0005] The purpose of the present invention is to provide a service lock mode method capable of locking the current power state on the BMC, so as to solve the technical problem that malicious users or misoperating users may cause interruption risks to server OS related services.

[0006] In order to solve the above technical problems, the technical solution adopted by the present invention is as follows:

[0007] In a first aspect, a server management software business lock mode system is provided, including a BMC business lock mode setting module, a password setting module, an identity authentication module, and a power control instruction interception module;

[0008] The BMC service lock mode setting module is used to set the working state of the BMC service lock mode;

[0009] The BMC business lock mode setting module includes a switch module and an identity authentication module. The switch module implements switching between different working states of the BMC business lock mode; the identity authentication module is used to verify the identity of the user of the server management software business lock mode system;

[0010] The password setting module is used by an administrator or operator to set an independent password to ensure the security of the BMC business lock mode;

[0011] The identity authentication module is used to verify the identity of the administrator or operator to ensure the single management authority of the server management software business lock mode system;

[0012] The power control instruction interception module is used to intercept all power control commands when the server management software business lock mode system is in the lock mode on state.

[0013] Preferably, the working state of the BMC service lock mode includes a lock mode on state and a lock mode off state.

[0014] Preferably, the identity verification module includes a display module, a data input module, a data receiving module, and a data comparison module;

[0015] The display module is used for interface display of the service lock mode system of the server management software;

[0016] The data input module is used for an administrator or operator to input identity information;

[0017] The data receiving module is used to receive identity information data input by an administrator or operator;

[0018] The data comparison module is used to compare the identity information data input by the administrator or operator with the preset identity information of the administrator or operator to determine whether the identity of the person currently inputting the identity information is legal.

[0019] Preferably, the identity information input by the administrator or operator to the data input module is face image data or fingerprint data or gesture data.

[0020] Preferably, the power control commands intercepted by the power control instruction interception module include a power on command, a power off command and a restart command.

[0021] Preferably, it also includes a prompt module, which is used to return a prompt message to the user when a user controls the power supply of the server and the business lock mode system of the server management software is in the lock mode on state, informing the user that the business lock mode has been entered and the power supply cannot be controlled at the BMC level.

[0022] In a second aspect, a method for using a service lock mode of a server management software is provided, comprising the following steps:

[0023] S1: The administrator or operator comes to the BMC Web login interface;

[0024] S2: The administrator or operator enters the identity information to log in to the BMC Web;

[0025] S3: Verify the identity information input by the administrator or operator to determine whether the identity information is legal. If so, execute step S4. If not, return identity information abnormality information;

[0026] S4: Navigate to the business lock mode, and switch the lock mode from the lock mode off state to the lock mode on state;

[0027] S5: When the lock mode needs to be switched from the lock mode on state to the lock mode off state, find the business lock mode state switching option and click to turn off the business lock mode to switch from the lock mode on state to the lock mode off state.

[0028] Preferably, in step S2, the IP address or domain name of the BMC is accessed through a browser, the user name and password of an administrator or a user with power management authority is entered, and the BMC Web interface is logged in.

[0029] Preferably, step S5 further includes the following specific process:

[0030] S51: After clicking to close the business lock mode, a pop-up prompt appears to enter the independent password set when opening the business lock;

[0031] S52: The administrator or operator enters the independent password and clicks OK;

[0032] S53: The system authenticates the administrator or operator by inputting an independent password, and determines whether the identity information is legal. If so, step S54 is executed. If not, abnormal identity information is returned, and the business lock mode state remains unchanged.

[0033] S54: A shutdown prompt pops up. Click OK to switch from the lock mode on state to the lock mode off state.

[0034] The beneficial effects of the present invention include:

[0035] The server management software business lock mode system and use method provided by the present invention include a BMC business lock mode setting module, a password setting module, an identity authentication module and a power control instruction interception module; the BMC business lock mode setting module is used to set the working state. The BMC business lock mode setting module implements the switching between different working states of the BMC business lock mode and verifies the identity of the user of the server management software business lock mode system; the password setting module is used for the administrator or operator to set an independent password to ensure the security of the BMC business lock mode; the identity authentication module is used to verify the identity of the administrator or operator. The power control instruction interception module is used to intercept power control commands. In a scenario where the server's business cannot be interrupted, the power state of the BMC is locked to prevent multiple users from operating the power on and off or restarting the power supply, thereby causing business interruption, providing a safer and more reliable mode. It provides an effective reduction in the risk of business interruption when the business is running. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 It is a schematic diagram of the architecture of the server management software business lock mode system of the present invention.

[0037] Figure 2 It is a flow chart of the server management software service lock mode system and the use method of the present invention.

[0038] Figure 3 It is a flow chart of the process after the lock mode on state is switched to the lock mode off state of the present invention. DETAILED DESCRIPTION

[0039] The following is combined with Figure 1-Figure 3 The present invention is further described in detail:

[0040] Example 1

[0041] See also Figure 1, a server management software business lock mode system, including a BMC business lock mode setting module, a password setting module, an identity authentication module and a power control instruction interception module. The BMC business lock mode setting module is used to set the working state of the BMC business lock mode. The BMC business lock mode setting module includes a switch module and an identity authentication module, and the switch module realizes the switching between different working states of the BMC business lock mode; the identity authentication module is used to verify the identity of the user of the server management software business lock mode system. The password setting module is used for the administrator or operator to set an independent password to ensure the security of the BMC business lock mode. The identity authentication module is used to verify the identity of the administrator or operator to ensure the single management authority of the server management software business lock mode system. The power control instruction interception module is used to intercept all power control commands when the server management software business lock mode system is in the lock mode on state.

[0042] When the server business is currently in a very important scenario and cannot be interrupted, the administrator or an operator with power management authority logs in to the BMC, enters the BMC business lock mode setting module, and clicks to turn on the business lock mode. The working status of the BMC business lock mode includes a lock mode on state and a lock mode off state.

[0043] The switch module is used to switch between the closed state and the open state of the BMC business lock mode. The administrator or operator's identity information is input, and the input identity information is verified by the system's identity verification module. After the identity information is verified, click Confirm to enable, and the business lock mode can be enabled.

[0044] When the business operation is completed or can be interrupted, click to close the business lock mode, and use the switch module to switch the BMC business lock mode between the mode-on state and the lock mode-off state. Enter the identity information of the administrator or operator, and verify the input identity information through the system's identity authentication module. After the identity information verification is passed, click Confirm to close, and the business lock mode will be closed.

[0045] The identity authentication module includes a display module, a data input module, a data receiving module, and a data comparison module; the display module is used for interface display of the server management software business lock mode system; the data input module is used for an administrator or operator to input identity information; the data receiving module is used to receive identity information data input by the administrator or operator; the data comparison module is used to compare the identity information data input by the administrator or operator with the preset identity information of the administrator or operator to determine whether the identity of the person currently inputting the identity information is legal.

[0046] The identity information input by the administrator or operator to the data input module is face image data, fingerprint data or gesture data. The power control commands intercepted by the power control instruction interception module include power on command, power off command and restart command. It also includes a prompt module, which is used to return a prompt message to the user when a user controls the power of the server and the server management software business lock mode system is in the lock mode on state, informing the user that the business lock mode has been entered and the power cannot be controlled at the BMC level.

[0047] Example 2

[0048] Based on Example 1, see Figure 2 , a method for using a server management software service lock mode, comprising the following steps:

[0049] S1: The administrator or operator comes to the BMC Web login interface;

[0050] S2: The administrator or operator enters the identity information to log in to the BMC Web;

[0051] S3: Verify the identity information input by the administrator or operator to determine whether the identity information is legal. If so, execute step S4. If not, return identity information abnormality information;

[0052] S4: Navigate to the business lock mode, and switch the lock mode from the lock mode off state to the lock mode on state;

[0053] S5: When the lock mode needs to be switched from the lock mode on state to the lock mode off state, find the business lock mode state switching option and click to turn off the business lock mode to switch from the lock mode on state to the lock mode off state.

[0054] In step S2, the IP address or domain name of the BMC is accessed through a browser, and the user name and password of an administrator or a user with power management privileges are entered to log in to the BMC Web interface.

[0055] Example 3

[0056] Based on Example 1 or Example 2, see Figure 3 , after step S5, the following specific process is also included:

[0057] S51: After clicking to close the business lock mode, a pop-up prompt appears to enter the independent password set when opening the business lock;

[0058] S52: The administrator or operator enters the independent password and clicks OK;

[0059] S53: The system authenticates the administrator or operator by inputting an independent password, and determines whether the identity information is legal. If so, step S54 is executed. If not, abnormal identity information is returned, and the business lock mode state remains unchanged.

[0060] S54: A shutdown prompt pops up. Click OK to switch from the lock mode on state to the lock mode off state.

[0061] When the server is in a scenario where the business is very important and cannot be interrupted, use the administrator or a user with power management privileges to log in to the BMC, enter the business lock mode page, click Enable business lock mode, enter a new independent password, and confirm to enable the business lock mode. When the business is completed or can be interrupted, use the user who previously enabled the business lock mode to disable the business lock mode, enter the independent password set previously, and disable the business lock mode after verification. This effectively ensures that the server is safer and more stable when the business is running, and effectively reduces the risk of malicious users interrupting the business or administrators interrupting the business by mistake when the business is not allowed to be interrupted, so as to avoid serious consequences caused by business interruption.

[0062] In summary, the server management software business lock mode system and use method provided by the present invention include a BMC business lock mode setting module, a password setting module, an identity authentication module and a power control instruction interception module; the BMC business lock mode setting module is used to set the working state. The BMC business lock mode setting module implements the switching between different working states of the BMC business lock mode and verifies the identity of the user of the server management software business lock mode system; the password setting module is used for the administrator or operator to set an independent password to ensure the security of the BMC business lock mode; the identity authentication module is used to verify the identity of the administrator or operator. The power control instruction interception module is used to intercept power control commands. In a scenario where the server's business cannot be interrupted, the power state of the BMC is locked to prevent multiple users from operating the power on and off or restarting, thereby causing business interruptions, providing a safer and more reliable mode. It provides an effective reduction in the risk of business interruption when the business is running.

Claims

1. A server management software business lock mode system, characterized in that: Including BMC business lock mode setting module, password setting module, identity authentication module and power control instruction interception module; The BMC service lock mode setting module is used to set the working state of the BMC service lock mode; The BMC business lock mode setting module includes a switch module and an identity authentication module. The switch module implements switching between different working states of the BMC business lock mode; the identity authentication module is used to verify the identity of the user of the server management software business lock mode system; The password setting module is used by an administrator or operator to set an independent password to ensure the security of the BMC business lock mode; The identity authentication module is used to verify the identity of the administrator or operator to ensure the single management authority of the server management software business lock mode system; The power control instruction interception module is used to intercept all power control commands when the server management software business lock mode system is in the lock mode on state; The working state of the BMC service lock mode includes a lock mode on state and a lock mode off state. The identity verification module includes a display module, a data input module, a data receiving module, and a data comparison module; The display module is used for interface display of the service lock mode system of the server management software; The data input module is used for an administrator or operator to input identity information; The data receiving module is used to receive identity information data input by an administrator or operator; The data comparison module is used to compare the identity information data input by the administrator or operator with the preset identity information of the administrator or operator to determine whether the identity of the person currently inputting the identity information is legal; The power control commands intercepted by the power control instruction interception module include a power on command, a power off command and a restart command; A method for using a server management software service lock mode system comprises the following steps: S1: The administrator or operator comes to the BMC Web login interface; S2: The administrator or operator enters the identity information to log in to the BMC Web; S3: Verify the identity information input by the administrator or operator to determine whether the identity information is legal. If so, execute step S4. If not, return identity information abnormality information; S4: Navigate to the business lock mode, and switch the lock mode from the lock mode off state to the lock mode on state; S5: When the lock mode needs to be switched from the lock mode on state to the lock mode off state, find the business lock mode state switching option and click to turn off the business lock mode to switch from the lock mode on state to the lock mode off state.

2. A server management software service lock mode system according to claim 1, characterized in that: The identity information input by the administrator or operator to the data input module is face image data, fingerprint data or gesture data.

3. A server management software service lock mode system according to claim 1, characterized in that: It also includes a prompt module, which is used to return a prompt message to the user when a user controls the power supply of the server and the service lock mode system of the server management software is in the lock mode on state, informing the user that the service lock mode has been entered and the power supply cannot be controlled at the BMC level.

4. A server management software service lock mode system according to claim 1, characterized in that: In step S2, the IP address or domain name of the BMC is accessed through a browser, and the user name and password of an administrator or a user with power management privileges are entered to log in to the BMC Web interface.

5. A server management software service lock mode system according to claim 1, characterized in that: After step S5, the following specific process is also included: S51: After clicking to close the business lock mode, a pop-up prompt appears to enter the independent password set when opening the business lock; S52: The administrator or operator enters the independent password and clicks OK; S53: The system authenticates the administrator or operator by inputting an independent password, and determines whether the identity information is legal. If so, step S54 is executed. If not, abnormal identity information is returned, and the business lock mode state remains unchanged. S54: A shutdown prompt pops up. Click OK to switch from the lock mode on state to the lock mode off state.

Images