Security authentication system and method based on server

Abstract

The invention discloses a security authentication system and method based on a server, and relates to the technical field of computer security, and the system comprises a first security authentication module which is used for judging whether first security authentication is successful or not according to a mutual authentication password between a BIOS and a CPLD; the second security authentication module is used for judging whether the second authentication is successful or not according to the mutual authentication password between the BMC and the CPLD; the third security authentication module is used for judging whether the authentication between the BIOS and the BMC is successful or not according to the mutual authentication password between the BIOS and the BMC, and judging that the final authentication is successful when the authentication is successful and the first security authentication and the second security authentication are successful; through mutual authentication among the CPLD, the BIOS and the BMC, the server can be protected from unauthorized access and malicious damage in different stages of starting of the server, especially hardware-level attack, and the safety of the server is effectively improved.

Description

Technical Field

[0001] The present invention relates to the field of computer security technology, and in particular to a server-based security authentication system and method. Background Art

[0002] With the rapid development of information technology, servers play an increasingly important role in data centers, cloud computing, and enterprise IT infrastructure. The security of servers is directly related to the confidentiality, integrity, and availability of data. Traditional server security measures are basically single-mode security authentication, such as relying on BIOS and BMC single security protection. This single security protection has obvious defects. If the intruder replaces the two firmwares, the server can be successfully started, making this protection invalid. These measures are often powerless against hardware-level attacks when the attacker replaces the BIOS and BMC firmware, and there is a problem of insufficient security. The existence of these shortcomings is mainly due to the limitations of technological development and the degree of attention paid to the level of security measures. With the advancement of technology and the improvement of security awareness, more complete and efficient server security solutions are expected to appear in the future.

[0003] Therefore, how to improve the security of the server, especially when facing hardware-level attacks, and how to effectively protect the server from unauthorized access and malicious attacks have become urgent issues to be solved. Summary of the invention

[0004] In view of the above technical problems in the related art, the present invention proposes a server-based security authentication system and method.

[0005] In order to achieve the above-mentioned invention object, the present invention adopts the following technical scheme: In a first aspect, the present invention provides a server-based security authentication system, wherein the server includes BIOS, CPLD and BMC, and the security authentication system includes: A first security authentication module, used for judging whether the authentication between the BIOS and the CPLD is successful according to the mutual authentication password between the BIOS and the CPLD, if successful, the first security authentication is successful, if not, the first security authentication fails; The second security authentication module is used to determine whether the authentication between the BMC and the CPLD is successful according to the mutual authentication password between the BMC and the CPLD. If successful, the second security authentication is successful; if not, the second security authentication fails; The third security authentication module is used to determine whether the authentication between the BIOS and the BMC is successful according to the mutual authentication password between the BIOS and the BMC, and determine that the third security authentication is successful when the authentication is successful and the first security authentication and the second security authentication are both successful.

[0006] Specifically, the mutual authentication password between the BIOS and the CPLD includes a first authentication password sent by the BIOS to the CPLD and a second authentication password sent back by the CPLD to the BIOS; when the first authentication password and the second authentication password are both correct, the authentication between the BIOS and the CPLD succeeds, otherwise the authentication fails.

[0007] Specifically, the mutual authentication password between the BMC and the CPLD includes a third authentication password sent by the BMC to the CPLD and a fourth authentication password sent back by the CPLD to the BMC; when the third authentication password and the fourth authentication password are both correct, the authentication between the BMC and the CPLD succeeds, otherwise the authentication fails.

[0008] Specifically, the mutual authentication password between the BIOS and the BMC includes the fifth authentication password sent by the BIOS to the BMC and the sixth authentication password sent back by the BMC to the BIOS; when the fifth authentication password and the sixth authentication password are both correct, the authentication between the BIOS and the BMC is successful, and when the authentication between the BIOS to the CPLD is successful and the authentication between the BMC to the CPLD is successful, the final authentication result is considered successful, otherwise the authentication fails.

[0009] Specifically, when the first authentication password and the second authentication password are both correct, the authentication between the BIOS and the CPLD is successful; otherwise, the authentication fails as follows: After the server is powered on, the BIOS starts up first, and the BIOS performs a self-check. If it passes, the BIOS sends the first authentication password to the CPLD. After the CPLD receives the first authentication password sent by the BIOS, it determines whether the first authentication password is correct. If it is correct, the CPLD sends the second authentication password back to the BIOS. If it is incorrect, the CPLD directly powers off the system, which means that the authentication between the BIOS and the CPLD fails.

[0010] After receiving the second authentication password sent back by CPLD, BIOS determines whether the second authentication password is correct. If it is correct, that is, the authentication between BIOS and CPLD is successful, then the first security authentication is successful and the subsequent process is executed. If it is incorrect, that is, the authentication between BIOS and CPLD fails, then the first security authentication fails and BIOS notifies the system to power off.

[0011] Specifically, when the third authentication password and the fourth authentication password are both correct, the authentication between the BMC and the CPLD is successful; otherwise, the authentication fails as follows: After the BMC is started, it sends the third authentication password to the CPLD. After receiving the third authentication password, the CPLD determines whether the third authentication password is correct. If it is correct, the CPLD sends the fourth authentication password back to the BMC. If it is incorrect, the CPLD executes a system power-off, that is, the authentication between the CPLD and the BMC fails. After receiving the fourth authentication password sent back by CPLD, BMC determines whether the fourth authentication password is correct. If it is correct, that is, the authentication between CPLD and BMC is successful, then the second security authentication is successful and the subsequent process is executed. If it is incorrect, that is, the authentication between CPLD and BMC fails, then the second security authentication fails and BMC notifies the system to power off.

[0012] Specifically, when the fifth authentication password and the sixth authentication password are both correct, the authentication between BIOS and BMC is successful, and when the authentication between BIOS and CPLD is successful and the authentication between BMC and CPLD is successful, the final authentication result is considered successful, otherwise the authentication failure is specifically: After the BIOS self-check is completed, the fifth authentication password is sent to the BMC at the same time. After receiving the fifth authentication password, the BMC determines whether the fifth authentication password is correct. If it is correct, the BMC sends the sixth authentication password back to the BIOS; if it is incorrect, the BMC notifies the system to power off, that is, the authentication between the BIOS and the BMC fails; After receiving the sixth authentication password sent back by BMC, BIOS determines whether the sixth password is correct. If it is correct, that is, the authentication between BIOS and BMC is successful, and after determining that the authentication between BIOS and CPLD is successful and the authentication between BMC and CPLD is successful, it is determined that the third security authentication is successful. At this time, the security authentication is considered to be completed and the operating system boot is entered; if it is incorrect, that is, the authentication between BIOS and BMC fails, then the third security authentication fails, and BIOS notifies the system to power off.

[0013] The present invention provides a server-based security authentication system, which realizes a multi-level and multi-dimensional security protection mechanism by combining three different hardware combinations of CPLD, BIOS and BMC. This mechanism can not only authenticate the hardware components when the server is started to ensure their integrity and authenticity, but also verify the security of key components during the startup of the operating system, and can protect the server from unauthorized access and malicious infringement at different stages of server startup, especially hardware-level attacks, effectively improving the security of the server, thereby providing comprehensive security protection for the server.

[0014] In a second aspect, the present invention provides a server-based security authentication method, wherein the server includes BIOS, CPLD and BMC, and comprises the following steps: S1, BIOS sends the first authentication password to CPLD, after receiving the first authentication password, CPLD determines whether the password is correct. If it is correct, CPLD sends the second authentication password back to BIOS; if it is incorrect, the system is powered off; S2. After receiving the second authentication password, the BIOS determines whether the password is correct. If it is correct, the first security authentication is successful; if it is incorrect, the first security authentication fails and the system is powered off. S3, BMC sends the third authentication password to CPLD, and CPLD determines whether the password is correct after receiving the third authentication password. If it is correct, CPLD sends the fourth authentication password back to BMC; if it is incorrect, the system is powered off; S4. After receiving the fourth authentication password, the BMC determines whether the password is correct. If it is correct, the second security authentication succeeds; if it is incorrect, the second security authentication fails; the system is powered off; S5, BIOS sends the fifth authentication password to BMC, and BMC determines whether the password is correct after receiving the fifth authentication password. If it is correct, BMC sends the sixth authentication password back to BIOS; if it is incorrect, the system is powered off; S6. After receiving the sixth authentication password, BIOS determines whether the password is correct. If it is correct, and both the first security authentication and the second security authentication are successful, the third security authentication is successful and the security authentication is completed; if it is incorrect, the system is powered off.

[0015] Specifically, after the security authentication in step S6 is completed, the operating system is booted.

[0016] The present invention provides a server-based security authentication method, which aims to provide a server three-defense authentication solution. By combining the mutual authentication results among CPLD, BIOS and BMC, including the authentication of key hardware components of the server, in-depth protection of server hardware is achieved, which makes up for the deficiencies and loopholes of previous traditional solutions and can effectively resist hardware-level attacks. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 is a schematic diagram of a server-based security authentication system provided according to an embodiment of the present invention; Figure 2 It is a schematic diagram of a server-based security authentication method provided according to an embodiment of the present invention. DETAILED DESCRIPTION

[0019] The following will be combined with the accompanying drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field belong to the scope of protection of the present invention.

[0020] In the description of the present invention, if there is a description of first, second, etc., it is only for the purpose of distinguishing technical features, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features or implicitly indicating the order of the indicated technical features.

[0021] In the description of the present invention, it should be noted that, unless otherwise clearly defined, terms such as setting, installing, connecting, etc. should be understood in a broad sense, and technicians in the relevant technical field can reasonably determine the specific meanings of the above terms in the present invention in combination with the specific content of the technical solution.

[0022] Embodiment 1

[0023] refer to Figure 1 This embodiment provides a server-based security authentication system, wherein the server includes BIOS, CPLD and BMC, and BIOS and BMC are core basic components of a computer.

[0024] BIOS (Basic Input Output System) is a startup program that cannot be tampered with and is engraved on the motherboard ROM chip. BIOS is responsible for calculating the system self-test program (POST, Power On Self Test) and the system self-starting program, so it is the first program after the computer system starts. Due to its non-tamperability, the program is stored in the ROM chip and can still maintain the original settings after power failure.

[0025] BMC (Baseboard Management Controller) is a small operating system independent of the server system. It is a chip integrated on the motherboard. Some products are plugged into the motherboard through PCIE and other forms. The external form is just a standard RJ45 network port with an independent IP firmware system. Server clusters generally use BMC instructions for large-scale unattended operations, including remote management, monitoring, installation, and restart of servers.

[0026] CPLD (Complex Programmable Logic Device) is a programmable logic device that contains multiple logic units and programmable interconnection resources. It is usually used in servers for logic configuration and signal processing to ensure stable operation of the system.

[0027] The security authentication system comprises: A first security authentication module, used for judging whether the authentication between the BIOS and the CPLD is successful according to the mutual authentication password between the BIOS and the CPLD, if successful, the first security authentication is successful, if not, the first security authentication fails; The mutual authentication password between the BIOS and the CPLD includes a first authentication password sent by the BIOS to the CPLD and a second authentication password sent back by the CPLD to the BIOS; when the first authentication password and the second authentication password are both correct, the authentication between the BIOS and the CPLD succeeds, otherwise the authentication fails; After the server is powered on, the BIOS starts up first, and the BIOS performs a self-check. If it passes, the BIOS sends the first authentication password to the CPLD. After the CPLD receives the first authentication password sent by the BIOS, it determines whether the first authentication password is correct. If it is correct, the CPLD sends the second authentication password back to the BIOS. If it is incorrect, the CPLD directly powers off the system, which means that the authentication between the BIOS and the CPLD fails.

[0028] After receiving the second authentication password sent back by CPLD, BIOS determines whether the second authentication password is correct. If it is correct, that is, the authentication between BIOS and CPLD is successful, then the first security authentication is successful and the subsequent process is executed. If it is incorrect, that is, the authentication between BIOS and CPLD fails, then the first security authentication fails and BIOS notifies the system to power off.

[0029] The second security authentication module is used to determine whether the authentication between the BMC and the CPLD is successful according to the mutual authentication password between the BMC and the CPLD. If successful, the second security authentication is successful; if not, the second security authentication fails; The mutual authentication password between the BMC and the CPLD includes a third authentication password sent by the BMC to the CPLD and a fourth authentication password sent back by the CPLD to the BMC; when the third authentication password and the fourth authentication password are both correct, the authentication between the BMC and the CPLD succeeds, otherwise the authentication fails; After the BMC is started, it sends the third authentication password to the CPLD. After receiving the third authentication password, the CPLD determines whether the third authentication password is correct. If it is correct, the CPLD sends the fourth authentication password back to the BMC. If it is incorrect, the CPLD executes a system power-off, that is, the authentication between the CPLD and the BMC fails. After receiving the fourth authentication password sent back by CPLD, BMC determines whether the fourth authentication password is correct. If it is correct, that is, the authentication between CPLD and BMC is successful, then the second security authentication is successful and the subsequent process is executed. If it is incorrect, that is, the authentication between CPLD and BMC fails, then the second security authentication fails and BMC notifies the system to power off.

[0030] The third security authentication module is used to determine whether the authentication between the BIOS and the BMC is successful according to the mutual authentication password between the BIOS and the BMC, and determine that the third security authentication is successful when the authentication is successful and the first security authentication and the second security authentication are both successful.

[0031] If the third security authentication is passed, it means that the first security authentication, the second security authentication and the third security authentication are all successful. At this time, it is considered that the full authentication is successful, the authentication is successfully completed, and the subsequent process begins to execute.

[0032] The mutual authentication password between the BIOS and the BMC includes the fifth authentication password sent by the BIOS to the BMC and the sixth authentication password sent back by the BMC to the BIOS; when the fifth authentication password and the sixth authentication password are both correct, the authentication between the BIOS and the BMC is successful, and when the authentication between the BIOS and the CPLD is successful and the authentication between the BMC and the CPLD is successful, the final authentication result is considered successful, otherwise the authentication fails; After the BIOS self-check is completed, the fifth authentication password is sent to the BMC at the same time. After receiving the fifth authentication password, the BMC determines whether the fifth authentication password is correct. If it is correct, the BMC sends the sixth authentication password back to the BIOS; if it is incorrect, the BMC notifies the system to power off, that is, the authentication between the BIOS and the BMC fails; After receiving the sixth authentication password sent back by BMC, BIOS determines whether the sixth password is correct. If it is correct, that is, the authentication between BIOS and BMC is successful, and after determining that the authentication between BIOS and CPLD is successful and the authentication between BMC and CPLD is successful, it is determined that the third security authentication is successful. At this time, the security authentication is considered to be completed, and then the subsequent process is executed and the operating system boot is normally entered; if it is incorrect, that is, the authentication between BIOS and BMC fails, then the third security authentication fails, and BIOS notifies the system to power off.

[0033] The present embodiment provides a server-based security authentication system, which realizes a multi-level and multi-dimensional security protection mechanism by combining three different hardware combinations of CPLD, BIOS and BMC. This mechanism can not only authenticate the hardware components when the server is started to ensure their integrity and authenticity, but also verify the security of key components during the operating system startup process, and can protect the server from unauthorized access and malicious attacks at different stages of server startup, especially hardware-level attacks, effectively improving the security of the server, thereby providing comprehensive security protection for the server.

[0034] Embodiment 2

[0035] refer to Figure 2 This embodiment provides a server-based security authentication method, wherein the server includes BIOS, CPLD and BMC, and includes the following steps: S1, BIOS sends the first authentication password to CPLD, after receiving the first authentication password, CPLD determines whether the password is correct. If it is correct, CPLD sends the second authentication password back to BIOS; if it is incorrect, the system is powered off; After the server is powered on, the BIOS starts up first, and the BIOS performs a self-check. If it passes, the BIOS sends the first authentication password to the CPLD. After the CPLD receives the first authentication password sent by the BIOS, it determines whether the first authentication password is correct. If it is correct, the CPLD sends the second authentication password back to the BIOS. If it is incorrect, the CPLD directly powers off the system, which means that the authentication between the BIOS and the CPLD fails.

[0036] S2. After receiving the second authentication password, the BIOS determines whether the password is correct. If it is correct, the first security authentication is successful; if it is incorrect, the first security authentication fails and the system is powered off. After receiving the second authentication password sent back by CPLD, BIOS determines whether the second authentication password is correct. If it is correct, that is, the authentication between BIOS and CPLD is successful, then the first security authentication is successful and the subsequent process is executed. If it is incorrect, BIOS notifies the system to power off, that is, the authentication between BIOS and CPLD fails.

[0037] S3, BMC sends the third authentication password to CPLD, and CPLD determines whether the password is correct after receiving the third authentication password. If it is correct, CPLD sends the fourth authentication password back to BMC; if it is incorrect, the system is powered off; After the BMC is started, it sends the third authentication password to the CPLD. After receiving the third authentication password, the CPLD determines whether the third authentication password is correct. If it is correct, the CPLD sends the fourth authentication password back to the BMC. If it is incorrect, the CPLD executes a system power-off, that is, the authentication between the CPLD and the BMC fails. S4. After receiving the fourth authentication password, the BMC determines whether the password is correct. If it is correct, the second security authentication succeeds; if it is incorrect, the second security authentication fails; the system is powered off; After receiving the fourth authentication password sent back by CPLD, BMC determines whether the fourth authentication password is correct. If it is correct, that is, the authentication between CPLD and BMC is successful, then the second security authentication is successful and the subsequent process is executed. If it is incorrect, BMC notifies the system to power off, that is, the authentication between CPLD and BMC fails.

[0038] S5, BIOS sends the fifth authentication password to BMC, and BMC determines whether the password is correct after receiving the fifth authentication password. If it is correct, BMC sends the sixth authentication password back to BIOS; if it is incorrect, the system is powered off; After the BIOS self-check is completed, the fifth authentication password is sent to the BMC at the same time. After receiving the fifth authentication password, the BMC determines whether the fifth authentication password is correct. If it is correct, the BMC sends the sixth authentication password back to the BIOS; if it is incorrect, the BMC notifies the system to power off, that is, the authentication between the BIOS and the BMC fails; S6. After receiving the sixth authentication password, the BIOS determines whether the password is correct. If it is correct, and the first security authentication and the second security authentication are both successful, then the third security authentication is successful and the security authentication is completed; if it is incorrect, the system is powered off; After receiving the sixth authentication password sent back by BMC, BIOS determines whether the sixth password is correct. If it is correct, that is, the authentication between BIOS and BMC is successful, and after determining that the authentication between BIOS and CPLD is successful and the authentication between BMC and CPLD is successful, it is determined that the third security authentication is successful. At this time, the security authentication is considered to be completed, and then the subsequent process is executed and the operating system boot is normally entered; if it is incorrect, that is, the authentication between BIOS and BMC fails, then the third security authentication fails, and BIOS notifies the system to power off.

[0039] A server-based security authentication method provided in this embodiment is intended to provide a server three-defense authentication solution, which combines the mutual authentication results among CPLD, BIOS and BMC, including the authentication of key hardware components of the server, to achieve deep protection of server hardware, make up for the deficiencies and loopholes of previous traditional solutions, and effectively resist hardware-level attacks.

[0040] It will be appreciated by those skilled in the art that all or some of the steps and systems in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. Some or all physical components may be implemented as a microprocessor, such as a central processing unit, a digital signal processor, or software executed by a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or transient medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and can be accessed by a computer. Furthermore, it is well known to those skilled in the art that communication media typically embodies computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0041] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A server-based security authentication system, characterized in that: The server includes BIOS, CPLD and BMC, and the security authentication system includes: A first security authentication module, used for judging whether the authentication between the BIOS and the CPLD is successful according to the mutual authentication password between the BIOS and the CPLD, if successful, the first security authentication is successful, if not, the first security authentication fails; The second security authentication module is used to determine whether the authentication between the BMC and the CPLD is successful according to the mutual authentication password between the BMC and the CPLD. If successful, the second security authentication is successful; if not, the second security authentication fails; The third security authentication module is used to determine whether the authentication between the BIOS and the BMC is successful according to the mutual authentication password between the BIOS and the BMC, and determine that the third security authentication is successful when the authentication is successful and the first security authentication and the second security authentication are both successful.

2. The security authentication system according to claim 1, characterized in that: The mutual authentication password between the BIOS and the CPLD includes a first authentication password sent by the BIOS to the CPLD and a second authentication password sent back by the CPLD to the BIOS; when the first authentication password and the second authentication password are both correct, the authentication between the BIOS and the CPLD succeeds, otherwise the authentication fails.

3. The security authentication system according to claim 1, characterized in that: The mutual authentication password between the BMC and the CPLD includes a third authentication password sent by the BMC to the CPLD and a fourth authentication password sent back by the CPLD to the BMC; When the third authentication password and the fourth authentication password are both correct, the authentication between the BMC and the CPLD succeeds; otherwise, the authentication fails.

4. The security authentication system according to claim 1, characterized in that: The mutual authentication password between the BIOS and the BMC includes a fifth authentication password sent by the BIOS to the BMC and a sixth authentication password sent back by the BMC to the BIOS; When the fifth authentication password and the sixth authentication password are both correct, the authentication between BIOS and BMC is successful, and when the authentication between BIOS and CPLD is successful and the authentication between BMC and CPLD is successful, the final authentication result is considered successful, otherwise the authentication fails.

5. The security authentication system according to claim 2, characterized in that: When the first authentication password and the second authentication password are both correct, the authentication between the BIOS and the CPLD is successful; otherwise, the authentication fails as follows: After the server is powered on, the BIOS starts up first, and the BIOS performs a self-check. If the self-check passes, the BIOS sends the first authentication password to the CPLD. After receiving the first authentication password from the BIOS, the CPLD determines whether the first authentication password is correct. If it is correct, the CPLD sends the second authentication password back to the BIOS. If it is incorrect, the CPLD directly powers off the system, which means that the authentication between the BIOS and the CPLD fails. After receiving the second authentication password sent back by CPLD, BIOS determines whether the second authentication password is correct. If it is correct, that is, the authentication between BIOS and CPLD is successful, then the first security authentication is successful and the subsequent process is executed. If it is incorrect, that is, the authentication between BIOS and CPLD fails, then the first security authentication fails and BIOS notifies the system to power off.

6. The security authentication system according to claim 3, characterized in that: When the third authentication password and the fourth authentication password are both correct, the authentication between the BMC and the CPLD is successful; otherwise, the authentication fails. Specifically: After the BMC is started, it sends the third authentication password to the CPLD. After receiving the third authentication password, the CPLD determines whether the third authentication password is correct. If it is correct, the CPLD sends the fourth authentication password back to the BMC. If it is incorrect, the CPLD executes a system power-off, which means that the authentication between the CPLD and the BMC fails; After receiving the fourth authentication password sent back by CPLD, BMC determines whether the fourth authentication password is correct. If it is correct, that is, the authentication between CPLD and BMC is successful, then the second security authentication is successful and the subsequent process is executed. If it is incorrect, that is, the authentication between CPLD and BMC fails, then the second security authentication fails and BMC notifies the system to power off.

7. The security authentication system according to claim 4, characterized in that: When the fifth authentication password and the sixth authentication password are both correct, the authentication between BIOS and BMC is successful, and the authentication between BIOS and CPLD is successful and the authentication between BMC and CPLD is successful, then the final authentication result is considered successful. Otherwise, the authentication failure is specifically: After the BIOS self-check is completed, the fifth authentication password is sent to the BMC at the same time. After receiving the fifth authentication password, the BMC determines whether the fifth password is correct. If it is correct, the BMC sends the sixth authentication password back to the BIOS. If it is incorrect, the BMC notifies the system to power off, which means that the authentication between BIOS and BMC fails; After receiving the sixth authentication password sent back by BMC, BIOS determines whether the sixth password is correct. If it is correct, that is, the authentication between BIOS and BMC is successful, and after determining that the authentication between BIOS and CPLD is successful and the authentication between BMC and CPLD is successful, it is determined that the third security authentication is successful. At this time, the security authentication is considered to be completed and the operating system boot is entered; if it is incorrect, that is, the authentication between BIOS and BMC fails, then the third security authentication fails, and BIOS notifies the system to power off.

8. A server-based security authentication method, characterized in that: The server includes BIOS, CPLD and BMC, and includes the following steps: S1, BIOS sends the first authentication password to CPLD, after receiving the first authentication password, CPLD determines whether the password is correct. If it is correct, CPLD sends the second authentication password back to BIOS; if it is incorrect, the system is powered off; S2. After receiving the second authentication password, the BIOS determines whether the password is correct. If it is correct, the first security authentication is successful; if it is incorrect, the first security authentication fails and the system is powered off. S3, BMC sends the third authentication password to CPLD, and CPLD determines whether the password is correct after receiving the third authentication password. If it is correct, CPLD sends the fourth authentication password back to BMC; if it is incorrect, the system is powered off; S4. After receiving the fourth authentication password, the BMC determines whether the password is correct. If it is correct, the second security authentication succeeds; if it is incorrect, the second security authentication fails; the system is powered off; S5, BIOS sends the fifth authentication password to BMC, and BMC determines whether the password is correct after receiving the fifth authentication password. If it is correct, BMC sends the sixth authentication password back to BIOS; if it is incorrect, the system is powered off; S6. After receiving the sixth authentication password, BIOS determines whether the password is correct. If it is correct, and both the first security authentication and the second security authentication are successful, the third security authentication is successful and the security authentication is completed; if it is incorrect, the system is powered off.

9. The security authentication method according to claim 8, characterized in that: After the security authentication in step S6 is completed, the operating system is booted.

Images