BMC cluster user authority management method and system

Abstract

The invention relates to the technical field of BMC management, in particular to a BMC cluster user authority management method and system. A user group comprising a plurality of first sub-users is uniformly configured through a management device, user information of each first sub-user is determined, and the user information comprises a user name of the first sub-user, a node device corresponding to the first sub-user, and an operation authority of the first sub-user for a BMC module of the corresponding node device; when a first sub-user manages node equipment based on management equipment, the management equipment judges BMC operation information input by the first sub-user firstly, and only when the BMC operation information meets a preset condition, it can be proved that an operation object managed by the first sub-user at this time is correct and an operation instruction conforms to an operation authority, so that the management efficiency of the node equipment is improved. The BMC operation information is sent to the corresponding node equipment only when the BMC operation information is sent to the corresponding node equipment, and the corresponding node equipment can execute corresponding operation, so that the execution efficiency of the whole system is greatly improved.

Description

Technical Field

[0001] The present invention relates to the technical field of BMC management, and in particular to a BMC cluster user authority management method and system. Background Art

[0002] BMC (BaseBoard Management Controller), also known as baseboard management system in Chinese, is installed on node devices and is an independent system that does not rely on other hardware on the device. BMC can monitor and manage the power supply, temperature information, etc. of the device. BMC has user management function, that is, the corresponding user and the corresponding management authority of the user are set through BMC. When the user performs management operations on BMC, the BMC system will verify the user's authority to determine whether the user has the authority to perform the operation.

[0003] As the number of node devices (equipped with BMC) increases, multiple levels of management platforms are often configured to perform BMC management on each node device. When a user on the top-level management platform performs a BMC management operation on a node device, the management operation instruction will be forwarded down layer by layer along the network until it reaches the final node device. When the user does not have operation authority on the final node device, the node device needs to return the information without execution authority to the top-level management platform layer by layer. Therefore, when there are many levels of device networking, this round-trip transmission mode of BMC management instructions will greatly reduce the execution efficiency of the entire system. Summary of the invention

[0004] The main purpose of the present invention is to provide a BMC cluster user authority management method and system, aiming to solve the problem that when there are many levels of device networking, the round-trip transmission mode of BMC management instructions will greatly reduce the execution efficiency of the entire system.

[0005] The technical solution proposed by the present invention is: A BMC cluster user rights management method is applied to a BMC cluster user rights management system; the system includes a node device and a management device; the node device is equipped with a BMC module; the management device is communicatively connected to a plurality of node devices; the method includes: The management device creates a plurality of first sub-users and groups the plurality of first sub-users into a user group, wherein the first sub-users can operate the BMC module of at least one node device; The management device establishes a correspondence between the first sub-user and the node device capable of operating the BMC module, and determines user information of the first sub-user, wherein the user information of the first sub-user includes a user name of the first sub-user, a node device corresponding to the first sub-user, and an operation authority of the first sub-user for the BMC module of the corresponding node device; The management device obtains BMC operation information input by the first sub-user, wherein the BMC operation information includes an operation object and an operation instruction; The management device determines whether a preset condition is met based on the BMC operation information input by the first sub-user, wherein the preset condition is: the operation object in the BMC operation information is any one of the node devices corresponding to the first sub-user, and the operation instruction in the BMC operation information complies with the operation authority of the first sub-user for the BMC module of the corresponding node device; If yes, the management device sends the BMC operation information to the node device corresponding to the operation object; If not, the management device generates an invalid operation feedback message.

[0006] Preferably, the management device and the node device are connected via a soft bus communication; the management device establishes a correspondence between the first sub-user and the node device capable of operating the BMC module, and determines the user information of the first sub-user, and then further includes: The management device sends the user information of the first sub-user to the node device corresponding to the first sub-user through the soft bus; The method further comprises: The node device creates a second sub-user who can operate the BMC module of the node device, and determines the user information of the second sub-user, wherein the user information of the second sub-user includes the user name of the second sub-user, the node device corresponding to the second sub-user, and the operation authority of the second sub-user on the BMC module of the corresponding node device; The node device sends the user information of the second sub-user to the management device through the soft bus.

[0007] Preferably, it also includes: After the management device modifies the user information of the first sub-user, the modified user information of the first sub-user is sent to the node device corresponding to the first sub-user through the soft bus, wherein the modification of the user information of the first sub-user includes: modifying the node device corresponding to the first sub-user, and modifying the operation authority of the first sub-user on the BMC module of the corresponding node device; After the node device modifies the user information of the second sub-user, the modified user information of the second sub-user is sent to the management device through the soft bus, wherein modifying the user information of the second sub-user includes: modifying the second sub-user's operation authority for the BMC module of the corresponding node device.

[0008] Preferably, the system further includes a top-level device; the number of management devices is multiple; all management devices are connected to the top-level device through soft bus communication; the management device is equipped with the Hongmeng operating system; the Hongmeng operating system includes an atomic functional component; the management device establishes a corresponding relationship between the first sub-user and the node device capable of operating the BMC module, and determines the user information of the first sub-user, and then further includes: The management device sends the user information of the first sub-user and the second sub-user to the top-level device through the soft bus; The management device generates an identity authentication function component, a permission application function component and a permission review function component based on the atomic function component, wherein the identity authentication function component is used to authenticate the first sub-user or the second sub-user, the permission application function component is used to obtain the management permission applied by the first sub-user or the second sub-user to perform operations on the BMC module of the node device, and the permission review function component is used to review the management permission applied by the first sub-user or the second sub-user.

[0009] Preferably, the user information of the first sub-user also includes a user password of the first sub-user; and the management device obtains the BMC operation information input by the first sub-user, and before that, the management device also includes: The management device obtains the input user name and user password; The management device obtains the first sub-user corresponding to the input user name and marks it as a user to be verified; The management device determines whether the input user password is consistent with the user password in the user information of the user to be verified; If yes, executing the step of obtaining the BMC operation information input by the first sub-user by the management device; If not, the management device generates identity error feedback information, wherein the identity error feedback information includes user information of the corresponding first sub-user.

[0010] Preferably, the management device further includes a camera; the user information further includes a preset face image corresponding to the first sub-user; the management device determines whether the preset condition is met based on the BMC operation information input by the first sub-user, and then further includes: If yes, the management device determines whether the operation instruction in the BMC operation information is a sensitive operation instruction, wherein the sensitive operation includes: restarting the node device, obtaining the operation log of the node device, and shutting down all fans of the node device; If the operation instruction is a sensitive operation instruction, the management device starts the camera and obtains the actual face image captured by the camera; The management device determines, through image analysis, whether the actual facial image is consistent with a preset facial image corresponding to the first sub-user; If they are consistent, executing the management device to send the BMC operation information to the node device corresponding to the operation object; If there is inconsistency, the management device generates a warning message for indicating that there is a security risk in the management device.

[0011] Preferably, the management device further includes a display screen and a microphone; the management device determines whether the operation instruction in the BMC operation information is a sensitive operation instruction, and then further includes: If the operation instruction is a sensitive operation instruction, the management device starts the camera and marks the time when the camera is started as the starting time; The management device generates a first random number, a second random number, and an operation symbol, wherein the first random number and the second random number are both integers greater than 1 and less than 9, and the operation symbol is a plus sign or a minus sign; The management device generates a preset formula based on the first random number, the second random number and the operation symbol, and displays the preset formula on the display screen, wherein the preset formula is arranged in the order of: the first random number, the operation symbol, the second random number and the equal sign; The management device marks the moment when the preset formula is displayed on the display screen for more than the preset time as the end moment; The management device obtains the video between the start time and the end time shot by the camera and marks it as a video to be verified; The management device obtains the audio between the start time and the end time obtained by the microphone, and marks it as audio to be verified; The management device obtains a security verification result based on the video to be verified and the audio to be verified, wherein the security verification result is verification success or verification failure; When the security verification result is successful, the management device sends the BMC operation information to the node device corresponding to the operation object.

[0012] Preferably, the management device obtains a security verification result based on the video to be verified and the audio to be verified, including: The management device obtains the calculation result of the preset formula; The management device performs audio recognition on the audio to be verified to obtain the actual number spoken by the first sub-user; The management device determines whether the actual number spoken by the first sub-user is consistent with the calculation result; If they are consistent, the management device determines the security verification result as successful verification; If they are inconsistent, the management device determines the security verification result as verification failure.

[0013] Preferably, the management device determines whether the actual number spoken by the first sub-user is consistent with the calculation result, and then further includes: The management device divides the video to be verified to obtain multiple frame images; The management device performs image recognition on the frame image to obtain a frame image in which the mouth of the human face is open, and marks it as a target frame image; The management device marks the moment corresponding to the earliest target frame image in the time sequence as the first moment, and marks the moment corresponding to the latest target frame image in the time sequence as the second moment; The management device performs audio recognition on the audio to be verified to obtain the starting time corresponding to the actual number spoken by the user, and marks it as the third time; The management device performs audio recognition on the audio to be verified to obtain the end time corresponding to the actual number spoken by the user, and marks it as the fourth time; The management device marks the time period between the first moment and the second moment as a first target time period, and marks the time period between the third moment and the fourth moment as a second target time period; The management device obtains the overlapping duration of the first target time period and the second target time period, and calculates the duration ratio: , In the formula, is the duration ratio; The overlapping time of the first target time period and the second target time period; is the duration of the first target time period; When the duration ratio is greater than or equal to the preset ratio, the management device determines the security verification result as successful verification; When the duration ratio is less than the preset ratio, the management device determines the security verification result as verification failure.

[0014] The present invention also proposes a BMC cluster user authority management system, which applies the BMC cluster user authority management method; the system includes a node device and a management device; the node device is equipped with a BMC module; and the management device is communicatively connected to a plurality of node devices.

[0015] Through the above technical solution, the following beneficial effects can be achieved: The BMC cluster user authority management method proposed in the present invention can solve the problem that when there are many levels of device networking, the round-trip transmission mode of BMC management instructions will greatly reduce the execution efficiency of the entire system; by setting a management device that is connected to each node device for communication, a user group including multiple first sub-users is uniformly configured through the management device, there are multiple first sub-users in the user group, each first sub-user corresponds to one actual management personnel, and the first sub-user can manage at least one node device, and the user information of each first sub-user is determined, the user information includes the user name of the first sub-user, the node device corresponding to the first sub-user, and the first sub-user's operation authority for the BMC module of the corresponding node device; in this way, the management device is aware of each first sub-user's authority for the corresponding Management authority of node devices. When the first sub-user manages the node devices based on the management device, the management device will first judge the BMC operation information input by the first sub-user. Only when the BMC operation information meets the preset conditions can it be proved that the operation object managed by the first sub-user this time is correct and the operation instruction complies with the operation authority. Only then will the BMC operation information be sent to the corresponding node device, and the corresponding node device can perform the corresponding operation. It is no longer necessary to forward the BMC operation information to the corresponding node device as in the traditional solution. The node device determines whether the BMC operation information has the corresponding operation authority. If there is no operation authority, the feedback information will be returned to the management device. The transmission mode is streamlined, the number of invalid communications of information is reduced, and the execution efficiency of the entire system is greatly improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the structures shown in these drawings without paying creative work.

[0017] Figure 1 This is a flowchart of the steps of the first embodiment of a BMC cluster user rights management method proposed by the present invention. DETAILED DESCRIPTION

[0018] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0019] The present invention provides a BMC cluster user authority management method and system.

[0020] As attached Figure 1As shown, in a first embodiment of a BMC cluster user authority management method proposed by the present invention, the method is applied to a BMC cluster user authority management system; the system includes a node device (such as a business server) and a management device (such as a management server); the node device is equipped with a BMC module; the management device is communicatively connected to a plurality of node devices; this embodiment includes the following steps: Step S110: the management device creates a plurality of first sub-users, and groups the plurality of first sub-users into a user group, wherein the first sub-users can operate the BMC module of at least one node device.

[0021] Specifically, the first sub-user here is a user who needs to manage the BMC module of the corresponding node device; there are multiple first sub-users in the user group (each first sub-user corresponds to 1 actual management personnel), and different first sub-users can manage different node devices, thereby realizing personalized management configuration.

[0022] Step S120: The management device establishes a correspondence between the first sub-user and the node device that can operate the BMC module, and determines the user information of the first sub-user, wherein the user information of the first sub-user includes the user name of the first sub-user, the node device corresponding to the first sub-user, and the operation authority of the first sub-user for the BMC module of the corresponding node device.

[0023] Specifically, the management device determines the user information of each first sub-user, so that the management device knows the management authority of each first sub-user for the corresponding node device (the management authority here includes but is not limited to: turning on / off the node device, restarting the node device, obtaining the operation log of the node device, turning on / off all fans of the node device, obtaining the temperature of the node device, controlling the fan speed of the node device, etc.).

[0024] Step S130: the management device obtains BMC operation information input by the first sub-user, wherein the BMC operation information includes an operation object and an operation instruction.

[0025] Step S140: The management device determines whether a preset condition is met based on the BMC operation information input by the first sub-user, wherein the preset condition is: the operation object in the BMC operation information is any one of the node devices corresponding to the first sub-user, and the operation instruction in the BMC operation information complies with the first sub-user's operation authority for the BMC module of the corresponding node device.

[0026] Specifically, only when the preset conditions are met can it be proved that the operation object managed by the first sub-user this time is correct and the operation instruction complies with the operation authority.

[0027] If yes, execute step S150: the management device sends the BMC operation information to the node device corresponding to the operation object.

[0028] Specifically, only when the preset conditions are met, the management device will send the BMC operation information to the corresponding node device, and the corresponding node device can perform the corresponding operation.

[0029] If not, executing step S160: the management device generates invalid operation feedback information.

[0030] The BMC cluster user authority management method proposed in the present invention can solve the problem that when there are many levels of device networking, the round-trip transmission mode of BMC management instructions will greatly reduce the execution efficiency of the entire system; by setting a management device that is connected to each node device for communication, a user group including multiple first sub-users is uniformly configured through the management device, there are multiple first sub-users in the user group, each first sub-user corresponds to one actual management personnel, and the first sub-user can manage at least one node device, and the user information of each first sub-user is determined, the user information includes the user name of the first sub-user, the node device corresponding to the first sub-user, and the first sub-user's operation authority for the BMC module of the corresponding node device; in this way, the management device is aware of each first sub-user's authority for the corresponding Management authority of node devices. When the first sub-user manages the node devices based on the management device, the management device will first judge the BMC operation information input by the first sub-user. Only when the BMC operation information meets the preset conditions can it be proved that the operation object managed by the first sub-user this time is correct and the operation instruction complies with the operation authority. Only then will the BMC operation information be sent to the corresponding node device, and the corresponding node device can perform the corresponding operation. It is no longer necessary to forward the BMC operation information to the corresponding node device as in the traditional solution. The node device determines whether the BMC operation information has the corresponding operation authority. If there is no operation authority, the feedback information will be returned to the management device. The transmission mode is streamlined, the number of invalid communications of information is reduced, and the execution efficiency of the entire system is greatly improved.

[0031] In addition, since the permissions of all node devices that the first sub-user can manage can be directly configured through the management device in this solution, it is no longer necessary to configure the corresponding management user in each node device in turn, which greatly improves the configuration efficiency of the management user.

[0032] In a second embodiment of a BMC cluster user authority management method proposed by the present invention, based on the first embodiment, the management device and the node device are connected via a soft bus communication; step S120, and then further comprising the following steps: Step S210: the management device sends the user information of the first sub-user to the node device corresponding to the first sub-user through the soft bus.

[0033] This embodiment also includes the following steps: Step S220: The node device creates a second sub-user who can operate the BMC module of the node device, and determines the user information of the second sub-user, wherein the user information of the second sub-user includes the user name of the second sub-user, the node device corresponding to the second sub-user, and the operation authority of the second sub-user for the BMC module of the corresponding node device.

[0034] Step S230: the node device sends the user information of the second sub-user to the management device via the soft bus.

[0035] Specifically, the node device can also create a second sub-user who can manage itself, and synchronize the user information of the second sub-user to the management device, so as to maintain the consistency of user rights.

[0036] In a third embodiment of a BMC cluster user rights management method proposed by the present invention, based on the second embodiment, this embodiment further includes the following steps: Step S310: After the management device modifies the user information of the first sub-user, the modified user information of the first sub-user is sent to the node device corresponding to the first sub-user through the soft bus, wherein modifying the user information of the first sub-user includes: modifying the node device corresponding to the first sub-user, and modifying the first sub-user's operation authority for the BMC module of the corresponding node device.

[0037] Specifically, after the user information of the first sub-user is modified through the management device, the modified content can be synchronized to the corresponding node device through the soft bus, so as to maintain the consistency of user rights.

[0038] Step S320: After the node device modifies the user information of the second sub-user, the modified user information of the second sub-user is sent to the management device through the soft bus, wherein modifying the user information of the second sub-user includes: modifying the second sub-user's operation authority for the BMC module of the corresponding node device.

[0039] Specifically, after the user information of the second sub-user is modified through the node device, the modified content can be synchronized to the management device through the soft bus, thereby maintaining the consistency of user rights.

[0040] In a fourth embodiment of a BMC cluster user authority management method proposed by the present invention, based on the second embodiment, the system further includes a top-level device (e.g., a server with the highest management authority); the number of management devices is multiple; all management devices are connected to the top-level device through soft bus communication; the management device is equipped with a Hongmeng operating system; the Hongmeng operating system includes an atomic functional component; step S120, and then further includes the following steps: Step S410: the management device sends the user information of the first sub-user and the second sub-user to the top-level device through the soft bus.

[0041] Specifically, the user information of the first sub-user and the second sub-user is sent to the top-level device through the soft bus for backup storage.

[0042] Step S420: The management device generates an identity authentication function component, a permission application function component and a permission review function component based on the atomic function component, wherein the identity authentication function component is used to authenticate the first sub-user or the second sub-user, the permission application function component is used to obtain the management permission applied by the first sub-user or the second sub-user to perform operations on the BMC module of the node device, and the permission review function component is used to review the management permission applied by the first sub-user or the second sub-user.

[0043] Specifically, independent atomic services (such as identity authentication, permission application and permission review in this embodiment) are generated through atomic functional components, so that users can flexibly add, delete and modify the permission configuration of each first sub-user and second sub-user in the user group according to actual application scenarios and needs, and send them to the corresponding node devices to complete synchronization.

[0044] In a fifth embodiment of a BMC cluster user rights management method proposed by the present invention, based on the fourth embodiment, the user information of the first sub-user further includes the user password of the first sub-user; step S130, before which, further includes the following steps: Step S510: The management device obtains the input user name and user password.

[0045] Step S520: The management device obtains the first sub-user corresponding to the input user name, and marks it as a user to be verified.

[0046] Step S530: The management device determines whether the input user password is consistent with the user password in the user information of the user to be verified.

[0047] If so, execute step S130.

[0048] Specifically, only when the user password input by the actual user is consistent with the user password in the user information of the user to be verified, can the management device obtain the input BMC operation information, thereby improving security and reducing the number of times invalid information is obtained.

[0049] If not, executing step S540: the management device generates identity error feedback information, wherein the identity error feedback information includes user information of the corresponding first sub-user.

[0050] Step S550: the management device marks the first sub-user, whose corresponding number of identity error feedback information is greater than a preset number (eg, 3), as a risky user.

[0051] Step S560: The management device sends the user information of the risky user to the top-level device.

[0052] Specifically, when the number of identity error feedback information corresponding to the first sub-user is greater than a preset number, it indicates that the first sub-user is at risk of being stolen, and therefore the first sub-user is marked as a risky user to remind the management personnel to conduct timely investigation.

[0053] In a sixth embodiment of a BMC cluster user authority management method proposed by the present invention, based on the first embodiment, the management device further includes a camera; the user information further includes a preset face image corresponding to the first sub-user; step S140, and then further includes the following steps: If yes, execute step S610: the management device determines whether the operation instruction in the BMC operation information is a sensitive operation instruction, wherein the sensitive operation includes: restarting the node device, obtaining the operation log of the node device, and turning off all fans of the node device.

[0054] Step S620: If the operation instruction is a sensitive operation instruction, the management device starts the camera and obtains the actual face image taken by the camera.

[0055] Step S630: The management device determines whether the actual facial image is consistent with the preset facial image corresponding to the first sub-user through image analysis.

[0056] Step S640: If they are consistent, the management device sends the BMC operation information to the node device corresponding to the operation object.

[0057] Step S650: If there is inconsistency, the management device generates warning information for indicating that there is a security risk in the management device.

[0058] Specifically, when the operation instructions in the BMC operation information are sensitive operation instructions, further security verification is required to ensure the data security of the node device. In this embodiment, face verification is used to ensure that the sensitive operation instructions are indeed executed by the administrator himself, thereby ensuring security.

[0059] In a seventh embodiment of a BMC cluster user rights management method proposed by the present invention, based on the sixth embodiment, the management device further includes a display screen, a microphone and a speaker; step S610, and then further includes the following steps: Step S710: If the operation instruction is a sensitive operation instruction, the management device starts the camera and marks the time when the camera is started as the starting time.

[0060] Step S720: The management device generates a first random number, a second random number, and an operation symbol, wherein the first random number and the second random number are both integers greater than 1 and less than 9, and the operation symbol is a plus sign or a minus sign.

[0061] Step S730: The management device generates a preset formula based on the first random number, the second random number and the operation symbol, and displays the preset formula on the display screen, wherein the preset formula is arranged in the order of: the first random number, the operation symbol, the second random number and the equal sign.

[0062] Step S731: the management device plays a preset voice through a speaker, wherein the preset voice is used to remind the first sub-user to answer the calculation result of the preset formula.

[0063] Step S740: The management device marks the moment when the preset formula is displayed on the display screen for more than a preset time (eg, 3 seconds) as the end moment.

[0064] Specifically, the preset time length here is the time length left for the first sub-user to answer the calculation result of the preset formula.

[0065] Step S750: The management device obtains the video captured by the camera between the start time and the end time, and marks it as a video to be verified.

[0066] Step S760: The management device obtains the audio between the start time and the end time obtained by the microphone, and marks it as audio to be verified.

[0067] Specifically, there is a phenomenon in the market of using AI to generate facial images to impersonate and commit fraud; by generating a random preset formula and obtaining the video of the actual user between the start time and the end time, and the audio between the start time and the end time. If the first sub-user is an impersonator (for example, the digital face of the first sub-user generated by AI), the impersonator will not be able to correctly answer the calculation result of the randomly generated preset formula, so that the situation of forging and impersonating the first sub-user can be identified in time, improving security.

[0068] Step S770: The management device obtains a security verification result based on the video to be verified and the audio to be verified, wherein the security verification result is verification success or verification failure.

[0069] Step S780: When the security verification result is successful, the management device sends the BMC operation information to the node device corresponding to the operation object.

[0070] Specifically, when the operation instructions in the BMC operation information are sensitive operation instructions, further security verification is required to ensure the data security of the node device. In this embodiment, the video to be verified taken by the camera and the audio to be verified obtained by the microphone are used to verify whether the administrator performing the operation is himself, thereby ensuring security.

[0071] In an eighth embodiment of a BMC cluster user rights management method proposed by the present invention, based on the seventh embodiment, step S770 includes the following steps: Step S810: The management device obtains the calculation result of the preset formula.

[0072] Step S820: The management device performs audio recognition on the audio to be verified to obtain the actual number spoken by the first sub-user.

[0073] Step S830: The management device determines whether the actual number spoken by the first sub-user is consistent with the calculation result.

[0074] Step S840: If they are consistent, the management device determines the security verification result as successful verification.

[0075] Step S850: If they are inconsistent, the management device determines the security verification result as verification failure.

[0076] Specifically, when the first sub-user is a facial image generated by AI, it cannot accurately respond to the randomly generated preset formula and issue the correct result number; therefore, when the actual number spoken by the first sub-user is inconsistent with the calculation result, it proves that the face currently in front of the camera is not the real face of the first sub-user, so the security verification result is determined as verification failure.

[0077] In a ninth embodiment of a BMC cluster user rights management method proposed by the present invention, based on the eighth embodiment, step S830 further includes the following steps: Step S910: The management device divides the video to be verified to obtain multiple frame images.

[0078] Step S920: the management device performs image recognition on the frame image to obtain a frame image in which the mouth of the human face is open, and marks it as a target frame image.

[0079] Step S930: the management device marks the moment corresponding to the earliest target frame image in the time sequence as the first moment, and marks the moment corresponding to the latest target frame image in the time sequence as the second moment.

[0080] Step S940: The management device performs audio recognition on the audio to be verified to obtain the starting time corresponding to the actual number spoken by the user, and marks it as the third time.

[0081] Step S950: The management device performs audio recognition on the audio to be verified to obtain the end time corresponding to the actual number spoken by the user, and marks it as the fourth time.

[0082] Step S960: the management device marks the time period between the first moment and the second moment as the first target time period, and marks the time period between the third moment and the fourth moment as the second target time period.

[0083] Specifically, the first target time period here is the time period occupied by the audio information corresponding to the result number spoken by the first sub-user, and the second target time period here is the time period occupied by the image information process corresponding to the result number spoken by the first sub-user.

[0084] Under normal circumstances, if the first sub-user is a real person, the audio and video must be synchronized (or there will be a small deviation); if the video captured by the camera is a facial image generated by AI, even if the pretending operator next to him speaks the calculation result himself, there will be a time difference with the mouth movement in the AI-generated facial image, or the AI-generated facial image does not show mouth movement (in this case, the duration of the first target time period is 0). In these two cases, it can be inferred that the operator in front of the camera is not the real first sub-user. In order to ensure the data security of the node device, the security verification result is determined as verification failure.

[0085] Step S970: The management device obtains the overlapping duration of the first target time period and the second target time period, and calculates the duration ratio: , In the formula, is the duration ratio; The overlapping time of the first target time period and the second target time period; is the duration of the first target time period.

[0086] Step S980: When the duration ratio is greater than or equal to a preset ratio (eg, 0.95), the management device determines the security verification result as a successful verification.

[0087] Specifically, the closer the duration ratio is to 1, the higher the overlap between the first time period and the second time period. Based on the above analysis, it can be proved that the first sub-user is a real person. Therefore, when the duration ratio is greater than or equal to the preset ratio, the management device determines the security verification result as successful verification.

[0088] Step S990: When the duration ratio is less than the preset ratio, the management device determines the security verification result as verification failure.

[0089] Step S991: When the first target time period is 0, the management device determines the security verification result as verification failure.

[0090] Specifically, based on the foregoing analysis, if the AI-generated facial image does not show any mouth movement (i.e., it does not answer the calculation result of the preset formula), it can be inferred that the operator in front of the camera is not the real first sub-user (or the first sub-user responds negatively to this verification process). In order to ensure the data security of the node device, the security verification result is determined as verification failure.

[0091] The present invention also proposes a BMC cluster user authority management system, which applies the BMC cluster user authority management method; the system includes a node device and a management device; the node device is equipped with a BMC module; and the management device is communicatively connected to a plurality of node devices.

[0092] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0093] The embodiments of the present invention are described above in conjunction with the accompanying drawings, but the present invention is not limited to the above-mentioned specific implementation modes, which are merely illustrative rather than restrictive. Under the guidance of the present invention, ordinary technicians in this field can also make many forms without departing from the scope of protection of the present invention and the claims, all of which are within the protection of the present invention.

Claims

1. A BMC cluster user rights management method, characterized in that: Applied to BMC cluster user authority management system; the system includes node equipment and management equipment; The node device is equipped with a BMC module; The management device is communicatively connected to a plurality of node devices; the method comprises: The management device creates a plurality of first sub-users and groups the plurality of first sub-users into a user group, wherein the first sub-users can operate the BMC module of at least one node device; The management device establishes a correspondence between the first sub-user and the node device capable of operating the BMC module, and determines user information of the first sub-user, wherein the user information of the first sub-user includes a user name of the first sub-user, a node device corresponding to the first sub-user, and an operation authority of the first sub-user for the BMC module of the corresponding node device; The management device obtains BMC operation information input by the first sub-user, wherein the BMC operation information includes an operation object and an operation instruction; The management device determines whether a preset condition is met based on the BMC operation information input by the first sub-user, wherein the preset condition is: the operation object in the BMC operation information is any one of the node devices corresponding to the first sub-user, and the operation instruction in the BMC operation information complies with the operation authority of the first sub-user for the BMC module of the corresponding node device; If yes, the management device sends the BMC operation information to the node device corresponding to the operation object; If not, the management device generates an invalid operation feedback message.

2. A BMC cluster user rights management method according to claim 1, characterized in that: The management device and the node device are connected via a soft bus communication; the management device establishes a correspondence between the first sub-user and the node device capable of operating the BMC module, and determines the user information of the first sub-user, and then further includes: The management device sends the user information of the first sub-user to the node device corresponding to the first sub-user through the soft bus; The method further comprises: The node device creates a second sub-user who can operate the BMC module of the node device, and determines the user information of the second sub-user, wherein the user information of the second sub-user includes the user name of the second sub-user, the node device corresponding to the second sub-user, and the operation authority of the second sub-user on the BMC module of the corresponding node device; The node device sends the user information of the second sub-user to the management device through the soft bus.

3. A BMC cluster user rights management method according to claim 2, characterized in that: Also includes: After the management device modifies the user information of the first sub-user, the modified user information of the first sub-user is sent to the node device corresponding to the first sub-user through the soft bus, wherein the modification of the user information of the first sub-user includes: modifying the node device corresponding to the first sub-user, and modifying the operation authority of the first sub-user on the BMC module of the corresponding node device; After the node device modifies the user information of the second sub-user, the modified user information of the second sub-user is sent to the management device through the soft bus, wherein modifying the user information of the second sub-user includes: modifying the second sub-user's operation authority for the BMC module of the corresponding node device.

4. A BMC cluster user rights management method according to claim 2, characterized in that: The system also includes a top-level device; the number of management devices is multiple; all management devices are connected to the top-level device via soft bus communication; The management device is equipped with Hongmeng operating system; Hongmeng operating system includes atomic functional components; The management device establishes a correspondence between the first sub-user and the node device capable of operating the BMC module, and determines the user information of the first sub-user, and then further includes: The management device sends the user information of the first sub-user and the second sub-user to the top-level device through the soft bus; The management device generates an identity authentication function component, a permission application function component and a permission review function component based on the atomic function component, wherein the identity authentication function component is used to authenticate the first sub-user or the second sub-user, the permission application function component is used to obtain the management permission applied by the first sub-user or the second sub-user to perform operations on the BMC module of the node device, and the permission review function component is used to review the management permission applied by the first sub-user or the second sub-user.

5. A BMC cluster user rights management method according to claim 4, characterized in that: The user information of the first sub-user also includes the user password of the first sub-user; the management device obtains the BMC operation information input by the first sub-user, and the process also includes: The management device obtains the input user name and user password; The management device obtains the first sub-user corresponding to the input user name and marks it as a user to be verified; The management device determines whether the input user password is consistent with the user password in the user information of the user to be verified; If yes, executing the step of obtaining the BMC operation information input by the first sub-user by the management device; If not, the management device generates identity error feedback information, wherein the identity error feedback information includes user information of the corresponding first sub-user.

6. A BMC cluster user rights management method according to claim 1, characterized in that: The management device further includes a camera; the user information further includes a preset face image corresponding to the first sub-user; the management device determines whether a preset condition is met based on the BMC operation information input by the first sub-user, and then further includes: If yes, the management device determines whether the operation instruction in the BMC operation information is a sensitive operation instruction, wherein the sensitive operation includes: restarting the node device, obtaining the operation log of the node device, and shutting down all fans of the node device; If the operation instruction is a sensitive operation instruction, the management device starts the camera and obtains the actual face image captured by the camera; The management device determines, through image analysis, whether the actual facial image is consistent with a preset facial image corresponding to the first sub-user; If they are consistent, executing the step of sending the BMC operation information from the management device to the node device corresponding to the operation object; If there is inconsistency, the management device generates a warning message for indicating that there is a security risk in the management device.

7. A BMC cluster user rights management method according to claim 6, characterized in that: The management device further includes a display screen and a microphone; the management device determines whether the operation instruction in the BMC operation information is a sensitive operation instruction, and then further includes: If the operation instruction is a sensitive operation instruction, the management device starts the camera and marks the time when the camera is started as the starting time; The management device generates a first random number, a second random number, and an operation symbol, wherein the first random number and the second random number are both integers greater than 1 and less than 9, and the operation symbol is a plus sign or a minus sign; The management device generates a preset formula based on the first random number, the second random number and the operation symbol, and displays the preset formula on the display screen, wherein the preset formula is arranged in the order of: the first random number, the operation symbol, the second random number and the equal sign; The management device marks the moment when the preset formula is displayed on the display screen for more than the preset time as the end moment; The management device obtains the video between the start time and the end time shot by the camera and marks it as a video to be verified; The management device obtains the audio between the start time and the end time obtained by the microphone, and marks it as audio to be verified; The management device obtains a security verification result based on the video to be verified and the audio to be verified, wherein the security verification result is verification success or verification failure; When the security verification result is successful, the management device sends the BMC operation information to the node device corresponding to the operation object.

8. A BMC cluster user rights management method according to claim 7, characterized in that: The management device obtains a security verification result based on the video to be verified and the audio to be verified, including: The management device obtains the calculation result of the preset formula; The management device performs audio recognition on the audio to be verified to obtain the actual number spoken by the first sub-user; The management device determines whether the actual number spoken by the first sub-user is consistent with the calculation result; If they are consistent, the management device determines the security verification result as successful verification; If they are inconsistent, the management device determines the security verification result as verification failure.

9. A BMC cluster user rights management method according to claim 8, characterized in that: The management device determines whether the actual number spoken by the first sub-user is consistent with the calculation result, and then further includes: The management device divides the video to be verified to obtain multiple frame images; The management device performs image recognition on the frame image to obtain a frame image in which the mouth of the human face is open, and marks it as a target frame image; The management device marks the moment corresponding to the earliest target frame image in the time sequence as the first moment, and marks the moment corresponding to the latest target frame image in the time sequence as the second moment; The management device performs audio recognition on the audio to be verified to obtain the starting time corresponding to the actual number spoken by the user, and marks it as the third time; The management device performs audio recognition on the audio to be verified to obtain the end time corresponding to the actual number spoken by the user, and marks it as the fourth time; The management device marks the time period between the first moment and the second moment as a first target time period, and marks the time period between the third moment and the fourth moment as a second target time period; The management device obtains the overlapping duration of the first target time period and the second target time period, and calculates the duration ratio: ， In the formula, is the duration ratio; The overlapping time of the first target time period and the second target time period; is the duration of the first target time period; When the duration ratio is greater than or equal to the preset ratio, the management device determines the security verification result as successful verification; When the duration ratio is less than the preset ratio, the management device determines the security verification result as verification failure.

10. A BMC cluster user rights management system, characterized in that: The BMC cluster user authority management method described in any one of claims 1 to 9 is applied; the system includes a node device and a management device; the node device is equipped with a BMC module; and the management device is communicatively connected to multiple node devices.

Images