A data processing method, device, medium and program product

Abstract

The present application discloses a data processing method, device, medium and program product in the field of computer technology. In the present application, during the server startup process, the kernel of the server timely stores the system display information in a preset shared memory area in a ciphertext form and sets a readable flag bit, so that the baseboard management controller in the server can read the corresponding ciphertext from the shared memory area through the communication bus between the shared memory area and the baseboard management controller, with reference to the readable flag bit, and then compare it with the system display information sent by the basic input and output system. After confirming that the information is correct, the baseboard management controller automatically transmits the system display information in a ciphertext form to the management end of the baseboard management controller for display. In this way, a fully automated process from acquisition to display of system display information is realized, the efficiency of acquiring system display information is improved, and the security and accuracy of the information transmission process are also guaranteed.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a data processing method, device, medium and program product. Background Art

[0002] In the server, dmesg (display message, system display information) usually records key information such as system startup process, hardware detection, driver loading, system errors, etc. However, to view this information, you need to log in to the operating system. If there is a problem when logging in to the operating system, such as: encountering a system crash, the operation and maintenance personnel cannot obtain dmesg information.

[0003] Therefore, how to quickly obtain dmesg information is a problem that those skilled in the art need to solve. Summary of the invention

[0004] In view of this, the purpose of this application is to provide a data processing method, device, medium and program product to quickly obtain dmesg information. The specific scheme is as follows:

[0005] In a first aspect, the present application provides a data processing method, comprising:

[0006] The kernel of the server obtains the first system display information during the boot process of the server, and encrypts the first system display information using a first encryption rule to obtain a first ciphertext; writes the first ciphertext into a preset shared memory area, and sets a readable flag bit;

[0007] The baseboard management controller in the server detects the communication bus between the shared memory area and the baseboard management controller; if the communication bus is normal, the readable flag is detected in the shared memory area through the communication bus; if the readable flag is detected, the first ciphertext is read from the shared memory area through the communication bus, and the first ciphertext is decrypted to obtain the first system display information; if the first system display information is consistent with the second system display information sent by the basic input and output system in the server, the first system display information or the second system display information is encrypted using a second encryption rule to obtain a second ciphertext; the second ciphertext is sent to the management end of the baseboard management controller so that the management end can decrypt the second ciphertext and display the decrypted plaintext.

[0008] Optionally, before the kernel encrypts the first system display information using the first encryption rule, the process further includes:

[0009] The kernel randomly selects the first encryption rule from a preset rule base; the first encryption rule is different from the first encryption rule selected by the kernel last time.

[0010] Optionally, before the baseboard management controller encrypts the first system display information or the second system display information by using the second encryption rule, the method further includes:

[0011] The baseboard management controller randomly selects the second encryption rule from a preset rule library; the second encryption rule is different from the second encryption rule selected last time by the baseboard management controller.

[0012] Optionally, the kernel writes the first marking information of the first encryption rule selected this time into the shared memory area.

[0013] Optionally, the baseboard management controller reads the first marking information from the shared memory area through the communication bus, and determines a first decryption rule corresponding to the first encryption rule in a preset rule library according to the first marking information.

[0014] Optionally, the baseboard management controller decrypts the first ciphertext to obtain the first system display information, including:

[0015] The baseboard management controller decrypts the first ciphertext using the first decryption rule to obtain the first system display information.

[0016] Optionally, the baseboard management controller sends the second marking information of the second encryption rule selected this time to the management end.

[0017] Optionally, the management terminal determines a second decryption rule corresponding to the second encryption rule in a preset rule base according to the second marking information;

[0018] Correspondingly, the management end decrypts the second ciphertext, including:

[0019] The management end decrypts the second ciphertext using the second decryption rule.

[0020] Optionally, when the first system display information is consistent with the second system display information, the baseboard management controller detects whether there is an alarm in the first system display information or the second system display information; if so, uses the information with the alarm as the first alarm item, and generates first alarm information including the first alarm item; generates log information including the first alarm information and the first system display information, and stores the log information locally.

[0021] Optionally, when confirming that the first system display information is inconsistent with the second system display information, the baseboard management controller uses the inconsistent information as a second alarm item, generates second alarm information including the second alarm item, and adds the second alarm information to the log information.

[0022] Optionally, the management terminal displays the decrypted plain text, including:

[0023] The management end classifies the plaintext obtained by decryption according to the information type to obtain multiple categories; determines whether there is an alarm for the information under each category; if there is an alarm for the information under any category, sorts the information under the corresponding category according to the alarm degree to obtain a target sequence, and displays the target sequence; if there is no alarm for the information under any category, sorts the information under the corresponding category according to the default sorting rule to obtain a target sequence, and displays the target sequence.

[0024] Optionally, the information type includes: at least one of: device information, operating system information, driver loading information, system error information and system startup information.

[0025] In a second aspect, the present application provides an electronic device, including:

[0026] Memory for storing computer programs;

[0027] The processor is used to execute the computer program to implement the data processing method disclosed above.

[0028] In a third aspect, the present application provides a non-volatile storage medium for storing a computer program, wherein the computer program implements the aforementioned disclosed data processing method when executed by a processor.

[0029] In a fourth aspect, the present application provides a computer program product, comprising a computer program / instruction, which implements the steps of the aforementioned disclosed data processing method when executed by a processor.

[0030] It can be seen from the above scheme that the present application provides a data processing method, including: the kernel of the server obtains first system display information during the boot process of the server, and encrypts the first system display information using a first encryption rule to obtain a first ciphertext; the first ciphertext is written into a preset shared memory area, and a readable flag is set; the baseboard management controller in the server detects the communication bus between the shared memory area and the baseboard management controller; if the communication bus is normal, the readable flag is detected in the shared memory area through the communication bus; if the readable flag is detected, the first ciphertext is read from the shared memory area through the communication bus, and the first ciphertext is decrypted to obtain the first system display information; if the first system display information is consistent with the second system display information sent by the basic input and output system in the server, the first system display information or the second system display information is encrypted using a second encryption rule to obtain a second ciphertext; the second ciphertext is sent to the management end of the baseboard management controller so that the management end decrypts the second ciphertext and displays the decrypted plaintext.

[0031] The beneficial effects of the present application are as follows: during the server startup process, the server kernel timely stores the system display information in a preset shared memory area in a ciphertext form and sets a readable flag, so that the baseboard management controller in the server can read the corresponding ciphertext from the shared memory area through the communication bus between the shared memory area and the baseboard management controller, with reference to the readable flag, and then compare it with the system display information sent by the basic input and output system. After confirming that the information is correct, the baseboard management controller automatically transmits the system display information in a ciphertext form to the management end of the baseboard management controller for display. This realizes a fully automated process from acquisition to display of system display information, improves the efficiency of acquiring system display information, and ensures the security and accuracy of information transmission.

[0032] Correspondingly, a data processing electronic device, medium and program product provided by the present application also have the above-mentioned technical effects. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0034] Figure 1 A flow chart of a data processing method disclosed in this application;

[0035] Figure 2 A schematic diagram of the connection between the CPU and the baseboard management controller in the server host disclosed in this application;

[0036] Figure 3 A flow chart of another data processing method disclosed in this application;

[0037] Figure 4 A flow chart of another data processing method disclosed in this application;

[0038] Figure 5 A schematic diagram of an electronic device disclosed in this application;

[0039] Figure 6 A server structure diagram provided for this application;

[0040] Figure 7 A terminal structure diagram provided for this application. DETAILED DESCRIPTION

[0041] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other examples obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0042] At present, in the server, dmesg (display message, system display information) usually records key information such as system startup process, hardware detection, driver loading, system errors, etc. However, when viewing this information, you need to log in to the operating system. If there is a problem with logging in to the operating system, such as: encountering a system crash, the operation and maintenance personnel cannot obtain dmesg information. To this end, the present application provides a data processing solution that realizes a fully automated process from acquisition to display of system display information, improves the efficiency of obtaining system display information, and ensures the security and accuracy of information transmission.

[0043] See also Figure 1 As shown, the embodiment of the present application discloses a data processing method, including:

[0044] S101. The kernel of the server obtains first system display information during the server startup process, and encrypts the first system display information using a first encryption rule to obtain a first ciphertext; writes the first ciphertext into a preset shared memory area, and sets a readable flag.

[0045] S102, the baseboard management controller in the server detects the communication bus between the shared memory area and the baseboard management controller; if the communication bus is normal, the readable flag is detected in the shared memory area through the communication bus; if the readable flag is detected, the first ciphertext is read from the shared memory area through the communication bus, and the first ciphertext is decrypted to obtain the first system display information; if the first system display information is consistent with the second system display information sent by the basic input and output system in the server, the first system display information or the second system display information is encrypted using a second encryption rule to obtain a second ciphertext; the second ciphertext is sent to the management end of the baseboard management controller so that the management end decrypts the second ciphertext and displays the decrypted plaintext.

[0046] In this embodiment, the management end of the baseboard management controller can be specifically a WEB end. The communication bus between the shared memory area and the baseboard management controller can specifically include: eSPI (Enhanced Serial Peripheral Interface), MMBI (Memory-Mapped BMC Interface, a protocol for communication between hardware and software). Among them, eSPI is a bus standard for system management, which can connect various devices and sensors of the server, such as BIOS, power manager, temperature sensor, etc. The interface that complies with eSPI has the advantages of high performance, high reliability, few pins, and low power consumption. MMBI allows data exchange between BMC (Baseboard Management Controller) and the host through memory mapping. MMBI is usually used in conjunction with MMIO (Memory-Mapped I / O).

[0047] In one example, the connection diagram between the CPU (Central Processing Unit) in the server host and the baseboard management controller can be referred to as Figure 2 . Figure 2 In the present invention, the baseboard management controller is externally connected to DDR (Double Data Rate, double data rate synchronous dynamic random access memory) for storing log information.

[0048] Generally, the system display information may include: hard disk operation mode, network card configuration information, ACPI (Advanced Configuration and Power Management Interface) information, memory allocation, processor information, system startup process, hardware detection, device driver loading, system errors, warnings, and other important system events.

[0049] In one embodiment, before the kernel uses the first encryption rule to encrypt the first system display information, the method further includes: the kernel randomly selects a first encryption rule from a preset rule base; the first encryption rule is different from the first encryption rule previously selected by the kernel. In one embodiment, before the baseboard management controller uses the second encryption rule to encrypt the first system display information or the second system display information, the method further includes: the baseboard management controller randomly selects a second encryption rule from a preset rule base; the second encryption rule is different from the second encryption rule previously selected by the baseboard management controller.

[0050] In one embodiment, the kernel writes the first tag information of the first encryption rule selected this time into the shared memory area. In one embodiment, the baseboard management controller reads the first tag information from the shared memory area through the communication bus, and determines the first decryption rule corresponding to the first encryption rule in the preset rule base according to the first tag information. In one embodiment, the baseboard management controller decrypts the first ciphertext to obtain the first system display information, including: the baseboard management controller decrypts the first ciphertext using the first decryption rule to obtain the first system display information. In one embodiment, the baseboard management controller sends the second tag information of the second encryption rule selected this time to the management end. In one embodiment, the management end determines the second decryption rule corresponding to the second encryption rule in the preset rule base according to the second tag information; accordingly, the management end decrypts the second ciphertext, including: the management end decrypts the second ciphertext using the second decryption rule.

[0051] In one embodiment, when the first system display information is consistent with the second system display information, the baseboard management controller detects whether there is an alarm in the first system display information or the second system display information; if so, the information with the alarm is used as the first alarm item, and first alarm information including the first alarm item is generated; log information including the first alarm information and the first system display information is generated, and the log information is stored locally.

[0052] In one embodiment, when confirming that the first system display information and the second system display information are inconsistent, the baseboard management controller uses the inconsistent information as a second alarm item, generates second alarm information including the second alarm item, and adds the second alarm information to the log information.

[0053] In one implementation, the management terminal displays the plain text obtained by decryption, including: the management terminal classifies the plain text obtained by decryption according to the information type to obtain multiple categories; determines whether there is an alarm for the information under each category; if there is an alarm for the information under any category, sorts the information under the corresponding category according to the alarm degree to obtain a target sequence, and displays the target sequence; if there is no alarm for the information under any category, sorts the information under the corresponding category according to the default sorting rule to obtain a target sequence, and displays the target sequence. The information type includes at least one of: device information (such as relevant information of the hard disk, memory, network card, etc.), operating system information, driver loading information, system error information, and system startup information.

[0054] It can be seen that in this embodiment, during the server startup process, the kernel of the server promptly stores the system display information in the preset shared memory area in the form of ciphertext and sets a readable flag. Then, the baseboard management controller in the server can read the corresponding ciphertext from the shared memory area by referring to the readable flag through the communication bus between the shared memory area and the baseboard management controller, and then compare it with the system display information sent by the basic input and output system. After confirming that the information is correct, the baseboard management controller automatically transmits the system display information in the form of ciphertext to the management end of the baseboard management controller for display. In this way, a fully automated process from acquisition to display of system display information is realized, the efficiency of acquiring system display information is improved, and the security and accuracy of information transmission are guaranteed.

[0055] See also Figure 3 , another processing flow of dmesg information includes:

[0056] 1. The server is powered on normally, demsg information is obtained, and the flag for obtaining dmesg is set to 1.

[0057] 2. Check whether the eSPI bus and MMBI protocol are normal.

[0058] 3. When the server is initialized, it maps the shared memory of the BMC to the eSPI and calls the MMBI function to send dmesg to the shared memory area.

[0059] 4. The server obtains the flag of dmesg. If the value is 1, the information in the shared memory is sent to the BMC EEPROM for storage. The shared memory can be a memory area in the host CPU that communicates with the BMC. The communication connection between the BMC and the host CPU can be referred to Figure 2 .

[0060] 5. The server obtains the dmesg flag. If the flag is 0, it means that the server is still in the post process or is in shutdown state. At this time, the BMC EEPROM does not obtain the dmesg information from the shared memory. The BMC EEPROM stores the dmesg information obtained after the last restart.

[0061] 6. BMC parses the contents saved in EEPROM to enable BMC to obtain dmesg information.

[0062] Furthermore, BMC will process the dmesg information. For details, see Figure 4 , the relevant implementation process includes: BMC stores all dmesg information in a one-click log and encrypts it; classifies and analyzes the dmesg information, and compares useful information, such as startup information, device information, and information sent by BIOS; if the information sent by dmesg and BIOS is consistent, it will be directly presented on the web; if it is inconsistent, an alarm message will be generated; at the same time, the alarm message will also be processed by BMC to generate corresponding log information. It can be seen that in this implementation, when comparing information, it is not necessary to compare the entire amount of information, but to selectively select more important information for comparison. Among them, the more important information can be preset in the configuration file in advance, and by reading the configuration file, it can be determined which information in the system display information needs to be compared.

[0063] It can be seen that based on the MMBI protocol and the eSPI physical interface, information communication between the host CPU and the BMC can be realized, and the dmesg information can be sent to the BMC. Specifically, if the dmesg information on the server side is updated, the flag is updated to 1, and the dmesg information in the shared memory is saved to the BMC EEPROM; if the server is in the post process or the machine is powered off, the flag is 0, and the information in the BMC EEPROM remains unchanged. After that, the BMC parses, classifies, and processes the dmesg information in the BMC EEPROM, and displays the relevant alarm information directly on the web. Among them, the important information such as the startup information and device information in the dmesg information is compared with the information sent by the BIOS to the BMC. If they are consistent, these important information are displayed on the WEB side. If they are inconsistent, an alarm information is generated and displayed in the log. The secondary verification of information is achieved through information comparison to ensure the accuracy of the information.

[0064] In this embodiment, the shared memory area is readable and writable, and the user can also change the data in the BMC shared memory area. Using the more secure and reliable MMBI protocol, it has higher reliability and higher performance; through out-of-band access, it avoids the problem of not being able to obtain dmesg information during system downtime or machine restart, which helps to locate the problem in time when a fault occurs. BMC encrypts the dmesg information to ensure its security. The dmesg information and its related alarm information are directly displayed on the BMC's WEB end, which is convenient for users to understand machine error information.

[0065] An electronic device provided in an embodiment of the present application is introduced below. The electronic device described below can be referenced to other embodiments described in this document.

[0066] See also Figure 5 As shown, the embodiment of the present application discloses an electronic device, including:

[0067] Memory 501, used for storing computer programs;

[0068] The processor 502 is used to execute the computer program to implement the method disclosed in any of the above embodiments.

[0069] In this embodiment, when the processor executes the computer program stored in the memory, the following steps can be specifically implemented: during the server startup process, the first system display information is obtained, and the first system display information is encrypted using a first encryption rule to obtain a first ciphertext; the first ciphertext is written into a preset shared memory area, and a readable flag is set.

[0070] In this embodiment, when the processor executes the computer program stored in the memory, the following steps can be specifically implemented: detecting the communication bus between the shared memory area and the baseboard management controller; if the communication bus is normal, detecting a readable flag in the shared memory area through the communication bus; if the readable flag is detected, reading the first ciphertext from the shared memory area through the communication bus, and decrypting the first ciphertext to obtain first system display information; if the first system display information is consistent with the second system display information sent by the basic input and output system in the server, encrypting the first system display information or the second system display information using a second encryption rule to obtain a second ciphertext; and sending the second ciphertext to the management end of the baseboard management controller so that the management end decrypts the second ciphertext and displays the decrypted plaintext.

[0071] In this embodiment, when the processor executes the computer program stored in the memory, the following steps may be specifically implemented: randomly selecting a first encryption rule from a preset rule base; the first encryption rule is different from the first encryption rule previously selected by the kernel.

[0072] In this embodiment, when the processor executes the computer program stored in the memory, the following steps may be specifically implemented: randomly selecting a second encryption rule from a preset rule library; the second encryption rule is different from the second encryption rule previously selected by the baseboard management controller.

[0073] In this embodiment, when the processor executes the computer program stored in the memory, the following steps may be specifically implemented: writing the first marking information of the first encryption rule selected this time into the shared memory area.

[0074] In this embodiment, when the processor executes the computer program stored in the memory, the following steps can be specifically implemented: reading the first tag information from the shared memory area through the communication bus, and determining the first decryption rule corresponding to the first encryption rule in a preset rule base according to the first tag information.

[0075] In this embodiment, when the processor executes the computer program stored in the memory, the following steps may be specifically implemented: decrypting the first ciphertext using the first decryption rule to obtain the first system display information.

[0076] In this embodiment, when the processor executes the computer program stored in the memory, the following steps may be specifically implemented: sending the second marking information of the second encryption rule selected this time to the management end.

[0077] In this embodiment, when the processor executes the computer program stored in the memory, the following steps may be specifically implemented: determining a second decryption rule corresponding to the second encryption rule in a preset rule base according to the second marking information;

[0078] In this embodiment, when the processor executes the computer program stored in the memory, the following steps may be specifically implemented: decrypting the second ciphertext using the second decryption rule.

[0079] In this embodiment, when the processor executes the computer program stored in the memory, the following steps can be specifically implemented: when the first system display information is consistent with the second system display information, detect whether there is an alarm in the first system display information or the second system display information; if so, use the information with the alarm as the first alarm item, and generate first alarm information including the first alarm item; generate log information including the first alarm information and the first system display information, and store the log information locally.

[0080] In this embodiment, when the processor executes the computer program stored in the memory, the following steps can be specifically implemented: when it is confirmed that the first system display information and the second system display information are inconsistent, the inconsistent information is used as the second alarm item, second alarm information including the second alarm item is generated, and the second alarm information is added to the log information.

[0081] In this embodiment, when the processor executes the computer program stored in the memory, the following steps can be specifically implemented: classify the plaintext obtained by decryption according to the information type to obtain multiple categories; determine whether there is an alarm for the information under each category; if there is an alarm for the information under any category, sort the information under the corresponding category according to the alarm degree to obtain a target sequence, and display the target sequence; if there is no alarm for the information under any category, sort the information under the corresponding category according to the default sorting rule to obtain a target sequence, and display the target sequence.

[0082] Furthermore, the present application also provides an electronic device. The electronic device can be Figure 6 The server shown can also be Figure 7 Terminal shown. Figure 6 and Figure 7 All of them are structural diagrams of electronic devices according to an exemplary embodiment, and the contents in the diagrams cannot be regarded as any limitation on the scope of use of the present application.

[0083] Figure 6 A schematic diagram of the structure of a server provided in an embodiment of the present application. The server may specifically include: at least one processor, at least one memory, a power supply, a communication interface, an input / output interface, and a communication bus. The memory is used to store a computer program, which is loaded and executed by the processor to implement the relevant steps in the data processing disclosed in any of the aforementioned embodiments.

[0084] In this embodiment, the power supply is used to provide working voltage for each hardware device on the server; the communication interface can create a data transmission channel between the server and external devices, and the communication protocol it follows is any communication protocol that can be applied to the technical solution of the present application, and is not specifically limited here; the input and output interface is used to obtain external input data or output data to the outside world, and its specific interface type can be selected according to specific application needs and is not specifically limited here.

[0085] In addition, the memory as a carrier for resource storage can be a read-only memory, random access memory, disk or CD, etc. The resources stored thereon include operating system, computer programs and data, etc. The storage method can be temporary storage or permanent storage.

[0086] The operating system is used to manage and control the hardware devices and computer programs on the server to realize the operation and processing of the data in the memory by the processor, and it can be Windows Server, Netware, Unix, Linux, etc. In addition to computer programs that can be used to complete the data processing method disclosed in any of the above embodiments, the computer program can also further include computer programs that can be used to complete other specific tasks. In addition to data such as application update information, the data can also include data such as application developer information.

[0087] Figure 7 A schematic diagram of the structure of a terminal provided in an embodiment of the present application, the terminal may specifically include but is not limited to a smart phone, a tablet computer, a laptop computer or a desktop computer, etc.

[0088] Generally, the terminal in this embodiment includes: a processor and a memory.

[0089] Among them, the processor may include one or more processing cores, such as a 4-core processor, an 8-core processor, etc. The processor may be implemented in at least one hardware form of DSP (Digital Signal Processing), FPGA (Field-Programmable Gate Array), and PLA (Programmable Logic Array). The processor may also include a main processor and a coprocessor. The main processor is a processor for processing data in the awake state, also known as a CPU (Central Processing Unit); the coprocessor is a low-power processor for processing data in the standby state. In some embodiments, the processor may be integrated with a GPU (Graphics Processing Unit), which is responsible for rendering and drawing the content to be displayed on the display screen. In some embodiments, the processor may also include an AI (Artificial Intelligence) processor, which is used to process computing operations related to machine learning.

[0090] The memory may include one or more computer non-volatile storage media, which may be non-transitory. The memory may also include high-speed random access memory, and non-volatile memory, such as one or more disk storage devices, flash memory storage devices. In this embodiment, the memory is at least used to store the following computer program, wherein, after the computer program is loaded and executed by the processor, it can implement the relevant steps in the data processing method performed by the terminal side disclosed in any of the aforementioned embodiments. In addition, the resources stored in the memory may also include an operating system and data, etc., and the storage method may be temporary storage or permanent storage. Among them, the operating system may include Windows, Unix, Linux, etc. The data may include, but is not limited to, update information of the application.

[0091] In some embodiments, the terminal may also include a display screen, an input and output interface, a communication interface, a sensor, a power supply, and a communication bus.

[0092] Those skilled in the art will understand that Figure 7 The structure shown in the figure does not constitute a limitation on the terminal, and may include more or fewer components than those shown in the figure.

[0093] A non-volatile storage medium provided in an embodiment of the present application is introduced below. The non-volatile storage medium described below can be cross-referenced with other embodiments described herein.

[0094] A non-volatile storage medium for storing a computer program, wherein the computer program, when executed by a processor, implements the data processing method disclosed in the above-mentioned embodiment. The non-volatile storage medium is a computer-readable non-volatile storage medium, which, as a carrier for storing resources, may be a read-only memory, a random access memory, a disk or an optical disk, etc. The resources stored thereon include an operating system, a computer program and data, etc., and the storage method may be temporary storage or permanent storage.

[0095] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps can be specifically implemented: during the server startup process, the first system display information is obtained, and the first system display information is encrypted using a first encryption rule to obtain a first ciphertext; the first ciphertext is written into a preset shared memory area, and a readable flag is set.

[0096] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps can be specifically implemented: detecting the communication bus between the shared memory area and the baseboard management controller; if the communication bus is normal, detecting a readable flag in the shared memory area through the communication bus; if the readable flag is detected, reading the first ciphertext from the shared memory area through the communication bus, and decrypting the first ciphertext to obtain first system display information; if the first system display information is consistent with the second system display information sent by the basic input and output system in the server, encrypting the first system display information or the second system display information using a second encryption rule to obtain a second ciphertext; and sending the second ciphertext to the management end of the baseboard management controller so that the management end decrypts the second ciphertext and displays the decrypted plaintext.

[0097] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps may be specifically implemented: randomly selecting a first encryption rule from a preset rule base; the first encryption rule is different from the first encryption rule previously selected by the kernel.

[0098] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps can be specifically implemented: randomly selecting a second encryption rule from a preset rule library; the second encryption rule is different from the second encryption rule previously selected by the baseboard management controller.

[0099] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps may be specifically implemented: writing the first marking information of the first encryption rule selected this time into the shared memory area.

[0100] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps can be specifically implemented: reading the first marking information from the shared memory area through the communication bus, and determining the first decryption rule corresponding to the first encryption rule in a preset rule base according to the first marking information.

[0101] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps may be specifically implemented: decrypting the first ciphertext using the first decryption rule to obtain the first system display information.

[0102] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps may be specifically implemented: sending the second marking information of the second encryption rule selected this time to the management end.

[0103] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps may be specifically implemented: determining a second decryption rule corresponding to the second encryption rule in a preset rule base according to the second marking information;

[0104] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps may be specifically implemented: decrypting the second ciphertext using the second decryption rule.

[0105] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps can be specifically implemented: when the first system display information is consistent with the second system display information, detect whether there is an alarm in the first system display information or the second system display information; if so, use the information with the alarm as the first alarm item, and generate first alarm information including the first alarm item; generate log information including the first alarm information and the first system display information, and store the log information locally.

[0106] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps can be specifically implemented: when it is confirmed that the first system display information and the second system display information are inconsistent, the inconsistent information is used as the second alarm item, second alarm information including the second alarm item is generated, and the second alarm information is added to the log information.

[0107] In this embodiment, when the processor executes the computer program stored in the non-volatile storage medium, the following steps can be specifically implemented: classify the plaintext obtained by decryption according to the information type to obtain multiple categories; determine whether there is an alarm for the information under each category; if there is an alarm for the information under any category, sort the information under the corresponding category according to the alarm degree to obtain a target sequence, and display the target sequence; if there is no alarm for the information under any category, sort the information under the corresponding category according to the default sorting rule to obtain a target sequence, and display the target sequence.

[0108] A computer program product provided in an embodiment of the present application is introduced below. The computer program product described below can be cross-referenced with other embodiments described in this document.

[0109] A computer program product comprises a computer program / instruction, which implements the steps of the aforementioned disclosed data processing method when executed by a processor.

[0110] In this embodiment, when the computer program / instruction is executed by the processor, the following steps can be specifically implemented: during the server startup process, the first system display information is obtained, and the first system display information is encrypted using a first encryption rule to obtain a first ciphertext; the first ciphertext is written into a preset shared memory area, and a readable flag is set.

[0111] In this embodiment, when the computer program / instruction is executed by the processor, the following steps can be specifically implemented: detecting the communication bus between the shared memory area and the baseboard management controller; if the communication bus is normal, detecting a readable flag in the shared memory area through the communication bus; if the readable flag is detected, reading the first ciphertext from the shared memory area through the communication bus, and decrypting the first ciphertext to obtain first system display information; if the first system display information is consistent with the second system display information sent by the basic input and output system in the server, encrypting the first system display information or the second system display information using a second encryption rule to obtain a second ciphertext; and sending the second ciphertext to the management end of the baseboard management controller so that the management end decrypts the second ciphertext and displays the decrypted plaintext.

[0112] In this embodiment, when the computer program / instruction is executed by the processor, the following steps may be specifically implemented: randomly selecting a first encryption rule from a preset rule base; the first encryption rule is different from the first encryption rule previously selected by the kernel.

[0113] In this embodiment, when the computer program / instruction is executed by the processor, the following steps can be specifically implemented: randomly selecting a second encryption rule from a preset rule library; the second encryption rule is different from the second encryption rule previously selected by the baseboard management controller.

[0114] In this embodiment, when the computer program / instruction is executed by the processor, the following steps may be specifically implemented: writing the first marking information of the first encryption rule selected this time into the shared memory area.

[0115] In this embodiment, when the computer program / instruction is executed by the processor, the following steps can be specifically implemented: reading the first tag information from the shared memory area through the communication bus, and determining the first decryption rule corresponding to the first encryption rule in a preset rule base according to the first tag information.

[0116] In this embodiment, when the computer program / instruction is executed by the processor, the following steps may be specifically implemented: decrypting the first ciphertext using the first decryption rule to obtain the first system display information.

[0117] In this embodiment, when the computer program / instruction is executed by the processor, the following steps may be specifically implemented: sending the second marking information of the second encryption rule selected this time to the management end.

[0118] In this embodiment, when the computer program / instruction is executed by the processor, the following steps may be specifically implemented: determining a second decryption rule corresponding to the second encryption rule in a preset rule base according to the second marking information.

[0119] In this embodiment, when the computer program / instruction is executed by the processor, the following steps may be specifically implemented: decrypting the second ciphertext using the second decryption rule.

[0120] In this embodiment, when the computer program / instructions are executed by the processor, the following steps can be specifically implemented: when the first system display information is consistent with the second system display information, detect whether there is an alarm in the first system display information or the second system display information; if so, use the information with the alarm as the first alarm item, and generate first alarm information including the first alarm item; generate log information including the first alarm information and the first system display information, and store the log information locally.

[0121] In this embodiment, when the computer program / instructions are executed by the processor, the following steps can be specifically implemented: when it is confirmed that the first system display information and the second system display information are inconsistent, the inconsistent information is used as a second alarm item, second alarm information including the second alarm item is generated, and the second alarm information is added to the log information.

[0122] In this embodiment, when the computer program / instructions are executed by the processor, the following steps can be specifically implemented: classifying the plaintext obtained by decryption according to the information type to obtain multiple categories; determining whether there is an alarm for the information under each category; if there is an alarm for the information under any category, sorting the information under the corresponding category according to the alarm degree to obtain a target sequence, and displaying the target sequence; if there is no alarm for the information under any category, sorting the information under the corresponding category according to the default sorting rule to obtain a target sequence, and displaying the target sequence.

[0123] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0124] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of non-volatile storage medium known in the art.

[0125] Specific examples are used herein to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea. At the same time, for those skilled in the art, according to the idea of ​​the present application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A data processing method, characterized in that: include: The kernel of the server obtains the first system display information during the boot process of the server, and encrypts the first system display information using a first encryption rule to obtain a first ciphertext; Writing the first ciphertext into a preset shared memory area and setting a readable flag; The baseboard management controller in the server detects the communication bus between the shared memory area and the baseboard management controller; if the communication bus is normal, the readable flag is detected in the shared memory area through the communication bus; if the readable flag is detected, the first ciphertext is read from the shared memory area through the communication bus, and the first ciphertext is decrypted to obtain the first system display information; if the first system display information is consistent with the second system display information sent by the basic input and output system in the server, the first system display information or the second system display information is encrypted using a second encryption rule to obtain a second ciphertext; Sending the second ciphertext to the management end of the baseboard management controller so that the management end decrypts the second ciphertext and displays the decrypted plaintext; When confirming that the first system display information and the second system display information are inconsistent, the baseboard management controller uses the inconsistent information as a second alarm item, generates second alarm information including the second alarm item, and adds the second alarm information to the log information.

2. The method according to claim 1, characterized in that Before the kernel encrypts the first system display information using the first encryption rule, the method further includes: The kernel randomly selects the first encryption rule from a preset rule base; the first encryption rule is different from the first encryption rule selected by the kernel last time.

3. The method according to claim 2, characterized in that Before the baseboard management controller encrypts the first system display information or the second system display information using the second encryption rule, the method further includes: The baseboard management controller randomly selects the second encryption rule from a preset rule library; the second encryption rule is different from the second encryption rule selected last time by the baseboard management controller.

4. The method according to claim 3, characterized in that The kernel writes the first marking information of the first encryption rule selected this time into the shared memory area.

5. The method according to claim 4, characterized in that The baseboard management controller reads the first marking information from the shared memory area through the communication bus, and determines a first decryption rule corresponding to the first encryption rule in a preset rule base according to the first marking information.

6. The method according to claim 5, characterized in that The baseboard management controller decrypts the first ciphertext to obtain the first system display information, including: The baseboard management controller decrypts the first ciphertext using the first decryption rule to obtain the first system display information.

7. The method according to claim 6, characterized in that The baseboard management controller sends the second marking information of the second encryption rule selected this time to the management terminal.

8. The method according to claim 7, characterized in that The management end determines, according to the second marking information, a second decryption rule corresponding to the second encryption rule in a preset rule base; Correspondingly, the management end decrypts the second ciphertext, including: The management end decrypts the second ciphertext using the second decryption rule.

9. The method according to claim 1, characterized in that: The baseboard management controller detects whether there is an alarm in the first system display information or the second system display information when the first system display information is consistent with the second system display information; If it exists, the alarm information is used as the first alarm item, and the first alarm information including the first alarm item is generated; log information including the first alarm information and the first system display information is generated, and the log information is stored locally.

10. The method according to any one of claims 1 to 9, characterized in that: The management terminal displays the decrypted plain text, including: The management end classifies the plaintext obtained by decryption according to the information type to obtain multiple categories; determines whether there is an alarm for the information under each category; if there is an alarm for the information under any category, sorts the information under the corresponding category according to the alarm degree to obtain a target sequence, and displays the target sequence; if there is no alarm for the information under any category, sorts the information under the corresponding category according to the default sorting rule to obtain a target sequence, and displays the target sequence.

11. The method according to claim 10, characterized in that The information type includes: at least one of device information, operating system information, driver loading information, system error information and system startup information.

12. An electronic device, characterized in that: include: Memory for storing computer programs; A processor, configured to execute the computer program to implement the method according to any one of claims 1 to 11.

13. A non-volatile storage medium, characterized in that: Used to store a computer program, wherein when the computer program is executed by a processor, the method according to any one of claims 1 to 11 is implemented.

14. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by a processor, the method according to any one of claims 1 to 11 is implemented.

Images