Method for improving system firmware data security, computer equipment and storage medium

Abstract

The embodiment of the invention provides a method for improving the security of system firmware data, computer equipment and a storage medium, and the method comprises the following steps: obtaining to-be-operated data; when a preset condition is met, first operation processing is executed on the to-be-operated data, and the preset condition at least comprises one of the following conditions: the power-on period is smaller than a preset period, the P / E frequency is smaller than a preset P / E frequency, the power-on time is smaller than a preset power-on time, and the power-on frequency is smaller than a preset power-on frequency; obtaining first information of the to-be-operated data according to the first operation and recording a region position of the to-be-operated data; and writing the to-be-operated data into the region position according to the first information and the region position. According to the embodiment of the invention, the first information of the to-be-operated data is obtained according to the first operation and the region position of the to-be-operated data is recorded under the preset condition, so that the to-be-operated data is written into the corresponding region position, autonomous prediction is realized for partitioning, and the data security is improved.

Description

Technical Field

[0001] The present application relates to the field of firmware data technology, and in particular to a method for improving the security of system firmware data, a computer device, and a storage medium. Background Art

[0002] In the related art, the firmware data of the embedded storage device itself is generally stored in the physical block (block storage) of the pslc, but the system firmware data on the host side cannot be guaranteed to be stored in the pslc (pseudo single-level cell). Currently, embedded storage devices based on MLC (multi-level cell flash), TLC (triple-level cell flash) or QLC (quadruple-level cell flash) provide a function of dividing enhance partitions. Currently, the physical flash area where the enhance partition data is stored is fixed to the pslc mode. If the host does not set the enhance partition for the storage device, the system data will be stored together with the normal data, and the system data security will be relatively poor. Summary of the invention

[0003] The present application aims to solve at least one of the technical problems existing in the prior art. To this end, the present application proposes a method, a computer device and a storage medium for improving the security of system firmware data, aiming to achieve autonomous prediction of partitioning and improve data security.

[0004] In a first aspect, an embodiment of the present application provides a method for improving the security of system firmware data, including: Get the data to be operated; When a preset condition is met, a first operation process is performed on the data to be operated, wherein the preset condition includes at least one of the following: a power-on cycle is less than a preset cycle, a P / E number is less than a preset P / E number, a power-on time is less than a preset power-on time, and a power-on number is less than a preset power-on number; Obtaining, according to the first operation, first information of the data to be operated and a region location where the data to be operated is recorded; The data to be operated is written into the area location according to the first information and the area location.

[0005] According to some embodiments of the present application, after performing the first operation on the data to be operated, the method further includes: When the logical address for executing the first operation is from the first logical address to the second logical address, the area location of the data to be operated is obtained as the first area and the power-on cycle for executing the first operation is obtained as the first power-on cycle, wherein the first area is from the first logical address to the second logical address.

[0006] According to some embodiments of the present application, the method further includes: Performing a second operation on the data to be operated; Obtaining second information of the data to be operated according to the second operation and recording a second area position of the data to be operated, wherein the second area position of the data to be operated is a second area; When the overlap between the second area and the first area is greater than or equal to a first preset value, the second information of the data to be operated is obtained to be the same as the first information of the data to be operated.

[0007] According to some embodiments of the present application, the method further includes: The first area is detected, and when the second operation is executed within the first area and the logical address for executing the second operation is from the third logical address to the fourth logical address, it is obtained that the second area is from the third logical address to the fourth logical address and the power-on time for executing the second operation is the first power-on time.

[0008] According to some embodiments of the present application, the method further includes: Performing a third operation on the data to be operated; Obtaining third information of the data to be operated and recording a third area position of the data to be operated according to the third operation, wherein the third area position of the data to be operated is a third area; When the third operation is not performed on the third region, the third information of the data to be operated is the same as the first information of the data to be operated.

[0009] According to some embodiments of the present application, during the second power-on cycle and the first power-on time, the method further includes: The second area is detected, and when the third operation is performed within the second area and the logical address for performing the third operation is from the fifth logical address to the sixth logical address, the third area is obtained to be from the fifth logical address to the sixth logical address.

[0010] According to some embodiments of the present application, when the power-on number of the data to be operated is greater than the first preset power-on number and less than the second preset power-on number, wherein the second preset power-on number is greater than the first preset power-on number, the method further includes: When the area position of the data to be operated is the target area position and the power-on time of the data to be operated is less than the second preset power-on time, updating the target area position; When the area position of the data to be operated is the target area position and the power-on time of the data to be operated is greater than or equal to the second preset power-on time, the updating of the target area position is finished.

[0011] According to some embodiments of the present application, it further includes: When the power-on times of the data to be operated are less than the first preset power-on times or greater than the second preset power-on times, the data of the regional position is recovered.

[0012] In a second aspect, an embodiment of the present application provides a computer device, including: at least one memory; at least one processor; at least one computer program; The at least one computer program is stored in the at least one memory, and the at least one processor executes the at least one computer program to implement the method for improving the security of system firmware data as described in the first aspect above.

[0013] In a third aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and the computer program is used to enable a computer to execute the method for improving the security of system firmware data as described in the first aspect above.

[0014] According to the technical solution of the embodiment of the present application, at least the following beneficial effects are achieved: obtaining data to be operated; when the preset conditions are met, performing a first operation on the data to be operated, wherein the preset conditions include at least one of the following: the power-on cycle is less than the preset cycle, the number of P / E times is less than the preset P / E times, the power-on time is less than the preset power-on time, and the number of power-ons is less than the preset number of power-ons; obtaining first information of the data to be operated and the regional location where the data to be operated is recorded according to the first operation; writing the data to be operated into the regional location according to the first information and the regional location. The embodiment of the present application writes the data to be operated into the corresponding regional location by obtaining the first information of the data to be operated and the regional location where the data to be operated is recorded according to the first operation within the preset conditions, thereby realizing automatic writing of key data into the pslc area, realizing autonomous prediction for partitioning, and improving data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The accompanying drawings are used to provide further understanding of the technical solution of the present application and constitute a part of the specification. Together with the embodiments of the present application, they are used to explain the technical solution of the present application and do not constitute a limitation on the technical solution of the present application.

[0016] Figure 1 It is a flowchart of a method for improving system firmware data security provided by an embodiment of the present application; Figure 2 is a flowchart of a method for performing a second operation provided by an embodiment of the present application; Figure 3is a flowchart of a method for performing a third operation provided by an embodiment of the present application; Figure 4 It is a schematic diagram of a method area for executing a method for improving system firmware data security according to an embodiment of the present application; Figure 5 It is an overall flow chart of a method for improving system firmware data security provided by an embodiment of the present application; Figure 6 It is a schematic diagram of the hardware structure of a computer device provided in one embodiment of the present application. DETAILED DESCRIPTION

[0017] The embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present application, and cannot be understood as limiting the present application.

[0018] In the description of the present application, it should be understood that descriptions involving orientation, such as up, down, front, back, left, right, etc., indicating orientations or positional relationships, are based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present application and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as a limitation on the present application.

[0019] In the description of this application, "several" means one or more, "more" means more than two, "greater than", "less than", "exceed", etc. are understood to exclude the number itself, and "above", "below", "within", etc. are understood to include the number itself. If there is a description of "first" or "second", it is only used for the purpose of distinguishing technical features, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features or implicitly indicating the order of the indicated technical features.

[0020] In the description of this application, unless otherwise clearly defined, terms such as setting, installing, connecting, etc. should be understood in a broad sense, and technicians in the relevant technical field can reasonably determine the specific meanings of the above terms in this application based on the specific content of the technical solution.

[0021] First, some nouns involved in this application are analyzed: Flash (non-volatile storage technology): Flash memory can maintain its stored data even when the power is off. Flash memory supports fast read and write operations, which makes it very suitable for use as auxiliary storage for computers and other devices. Each storage unit of Flash memory has a limited number of erase and write times, usually between a few thousand and tens of thousands of times. Flash memory is usually erased and written in blocks. This means that when updating data, the entire block must be erased before the new data can be written.

[0022] Block storage: is a data storage method in which data is stored as blocks or sectors and can be accessed through a unique identifier (such as a logical unit number LUN). Block storage allows users to operate storage volumes like hard disks, creating, deleting, and modifying files.

[0023] Pslc (Pseudo-Single Level Cell): is a NAND flash memory technology that simulates the working mode of SLC (single-level cell) storage cells on MLC (multi-level cell) or TLC (triple-level cell) flash memory chips through special control algorithms and management methods.

[0024] P / E cycles (Program / Erase cycles): refers to the number of programming and erasing cycles of the flash memory in the solid-state drive (SSD). Every time the entire SSD is programmed (written) and erased once, it is counted as one P / E cycle.

[0025] The firmware data of the embedded storage device itself is generally stored in the physical block of pslc, but the system firmware data on the host side cannot be guaranteed to be stored in pslc. Currently, embedded storage devices based on MLC, TLC or QLC provide a function of dividing enhance partitions. Currently, the flash physical area where the enhance partition data is stored is fixed to pslc mode. If the host does not set enhance partitions for the storage device, the system data will be stored together with ordinary users. With the occurrence of GC behavior, the data will be moved to a non-pslc physical block, and the system data security will be relatively poor.

[0026] The method for improving the security of system firmware data, computer equipment and storage medium provided in the embodiments of the present application are specifically illustrated through the following embodiments. First, the method for improving the security of system firmware data in the embodiments of the present application is described.

[0027] The embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Artificial Intelligence (AI) is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0028] AI basic technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, big data processing technology, operation / interaction systems, mechatronics, etc. AI software technologies mainly include computer vision technology, robotics technology, biometrics technology, speech processing technology, natural language processing technology, and machine learning / deep learning.

[0029] The method for improving the security of system firmware data, computer equipment and storage medium provided in the embodiments of the present application relate to the field of firmware data technology. The method for improving the security of system firmware data provided in the embodiments of the present application can be applied to a terminal, can also be applied to a server side, and can also be software running in a terminal or a server side. In some embodiments, the terminal can be a smart phone, a tablet computer, a laptop computer, a desktop computer, etc.; the server side can be configured as an independent physical server, or can be configured as a server cluster or a distributed system composed of multiple physical servers, and can also be configured as a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms; the software can be an application of the method for improving the security of system firmware data, etc., but is not limited to the above forms.

[0030] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0031] It should be noted that in each specific implementation of the present application, when it is necessary to perform relevant processing based on data related to user identity or characteristics such as user information, user behavior data, user historical data, and user location information, the user's permission or consent will be obtained first, and the collection, use, and processing of these data will comply with relevant laws, regulations, and standards. In addition, when the embodiment of the present application needs to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or by jumping to a confirmation page. After clearly obtaining the user's separate permission or consent, the necessary user-related data for the normal operation of the embodiment of the present application will be obtained.

[0032] See also Figure 1 , Figure 1 is a flow chart of a method for improving the security of system firmware data provided by an embodiment of the present application; Figure 1 As shown, a method for improving the security of system firmware data provided by an embodiment of the present application includes but is not limited to steps S110-S140, and each step is introduced in turn below. Step S110, obtaining data to be operated; Step S120, when a preset condition is met, performing a first operation process on the operation data, wherein the preset condition includes at least one of the following: a power-on cycle is less than a preset cycle, a P / E number is less than a preset P / E number, a power-on time is less than a preset power-on time, and a power-on number is less than a preset power-on number; Step S130, obtaining first information of the data to be operated and a region location for recording the data to be operated according to the first operation; Step S140: write the data to be operated into the regional location according to the first information and the regional location.

[0033] In one embodiment, after the system obtains the data of the data to be operated, the system will check whether the preset conditions are met, and the preset conditions include that the power-on cycle is less than the preset cycle, the P / E number is less than the preset P / E number, the power-on time is less than the preset power-on time, and the power-on number is less than the preset power-on number. When the system meets one of the above conditions, the system will perform a first operation process on the acquired data. After performing the first operation process, the system will obtain information about the data to be operated, and the system will also record the location information of the storage area where the data to be operated should be written. The system writes the processed data to the previously recorded area location. The system can realize autonomous prediction and partitioning according to the first operation to improve the security of the data.

[0034] In one embodiment, after performing the first operation on the data to be operated, when the logical address for executing the first operation is from the first logical address to the second logical address, the area position of the data to be operated is obtained as the first area and the power-on cycle for executing the first operation is obtained as the first power-on cycle, wherein the first area is from the first logical address to the second logical address.

[0035] See also Figure 4 , Figure 4 It is a schematic diagram of an area of ​​a method for executing to improve the security of system firmware data according to an embodiment of the present application.

[0036] In one embodiment, within the first five recorded power-ons, the maximum P / E times of the block in the flash is less than 3, and within 5 minutes from the start of power-on, a sequential write from logical address A to logical address B occurs. The storage device firmware records that the event occurred at the third power-on, and the write area is from A to B.

[0037] See also Figure 2 , Figure 2 is a flowchart of a method for performing a second operation provided by an embodiment of the present application; Figure 2 As shown, a method for improving the security of system firmware data provided by an embodiment of the present application includes but is not limited to steps S210-S230, and each step is introduced in turn below. Step S210, performing a second operation on the data to be operated; Step S220, obtaining second information of the data to be operated according to the second operation and recording the second area position of the data to be operated, wherein the second area position of the data to be operated is the second area; Step S230: When the overlap between the second area and the first area is greater than or equal to the first preset value, the second information of the data to be operated is the same as the first information of the data to be operated.

[0038] In one embodiment, the system processes the data for a second time on which the first operation has been performed. After the second operation is completed, the system obtains second information about the data. The system also records the second area location of the data. The system compares the degree of overlap between the second area and the first area. If the degree of overlap is greater than or equal to a preset threshold (first preset value), this indicates that the two areas have enough common parts, and the second information is the same as the first information.

[0039] It should be noted that within the predetermined power-on time, prediction is made based on the read and write behavior to determine whether a large number of read operations hit the recording area. If so, the storage device determines that the host is booting up to read system data, and further determines that the recorded area stores host system data.

[0040] In one embodiment, the first area is detected, and when the second operation is executed within the first area and the logical address of the second operation is from the third logical address to the fourth logical address, the second area is obtained to be from the third logical address to the fourth logical address and the power-on time of executing the second operation is the first power-on time.

[0041] See also Figure 4 , Figure 4 It is a schematic diagram of an area of ​​a method for executing to improve the security of system firmware data according to an embodiment of the present application.

[0042] In one embodiment, in the subsequent power-on cycles, under predetermined conditions, the read behavior occurring between the A and B areas is monitored and recorded, the aforementioned write event is recorded, and in the 4th to 6th power-on cycles, a read operation is detected between the A and B areas within 1 minute from the start of power-on, and the maximum read range is C to D, and the storage device records the read area as C to D.

[0043] See also Figure 3 , Figure 3 is a flowchart of a method for performing the third operation provided by an embodiment of the present application; Figure 3 As shown, a method for improving the security of system firmware data provided by an embodiment of the present application includes but is not limited to steps S310-S330, and each step is introduced in turn below. Step S310, performing a third operation on the data to be operated; Step S320, obtaining third information of the data to be operated according to the third operation and recording the third area position of the data to be operated, wherein the third area position of the data to be operated is the third area; Step S330: When the third operation is not performed in the third region, the third information of the data to be operated is the same as the first information of the data to be operated.

[0044] In one embodiment, the system processes the data for a third time on which the first and second operations have been performed. After the third operation is completed, the system obtains new information about the data (third information). The system also records the data in a third area on the storage medium. The system compares whether the third operation has been performed in the third area. If the third operation has not been performed in the third area, the system concludes that the third information is the same as the first information.

[0045] In one embodiment, it is determined whether the logical area of ​​this record is overwritten and updated based on the write operation behavior. If not, it meets the read-only feature of the system partition and is further confirmed to be host system data.

[0046] In one embodiment, during the second power-on cycle and the first power-on time, the second area is detected, and when the third operation is performed within the second area and the logical address for performing the third operation is from the fifth logical address to the sixth logical address, the third area is obtained as the fifth logical address to the sixth logical address.

[0047] See also Figure 4 , Figure 4 It is a schematic diagram of an area of ​​a method for executing to improve the security of system firmware data according to an embodiment of the present application.

[0048] In one embodiment, the aforementioned write event and read event records have occurred, and the read event can be repeatedly detected (within 1 minute from power-on and in the next 3 power-on cycles, it can still be detected that there is a read operation between areas A and B, and the maximum read range is C to D). And the unrewritten areas in C to D are monitored as E to F. The storage device records the unrewritten areas as E to F (unrewritten events).

[0049] In one embodiment, when the power-on times of the data to be operated are greater than the first preset power-on times and less than the second preset power-on times, wherein the second preset power-on times are greater than the first preset power-on times, the method includes: When the area position of the data to be operated is the target area position and the power-on time of the data to be operated is less than the second preset power-on time, updating the target area position; When the area position of the data to be operated is the target area position and the power-on time of the data to be operated is greater than or equal to the second preset power-on time, the updating of the target area position is finished.

[0050] In one embodiment, when the data to be operated has a regional location, the system first checks whether the power-on times of the data to be operated fall between the first preset power-on times and the second preset power-on times. When the power-on times are greater than the first preset power-on times and less than the second preset power-on times, the system will enter the next step of judgment. The system then checks whether the power-on time of the data to be operated is less than the second preset power-on time. When the regional location of the data to be operated is the target regional location and the power-on time is less than the second preset power-on time, the system will update the target regional location. The system can adopt different data processing strategies at different stages of device use, thereby improving efficiency and reliability.

[0051] In one embodiment, when the data to be operated has a regional location, the system first checks whether the power-on times of the data to be operated fall between a first preset power-on times and a second preset power-on times. When the power-on times are greater than the first preset power-on times and less than the second preset power-on times, the system will proceed to the next step of judgment. The system then checks whether the power-on time of the data to be operated is greater than or equal to the second preset power-on time. When the regional location of the data to be operated is the target regional location, and the power-on time is greater than or equal to the second preset power-on time, the system will end updating the target regional location.

[0052] In one embodiment, when the power-on times of the data to be operated are less than the first preset power-on times or greater than the second preset power-on times, the data of the regional location is recycled.

[0053] In one embodiment, the system sets two thresholds, namely, a first preset power-on number and a second preset power-on number, wherein the second preset power-on number is greater than the first preset power-on number, and the two thresholds define a range of "normal" power-on numbers. The system monitors the power-on number of the data to be operated in real time, and this monitoring can be achieved through a hardware counter. Each time the device is powered on, the counter increases. When it is detected that the power-on number exceeds the preset range, the system will perform a recovery operation on the data in the area where the data to be operated is located.

[0054] See also Figure 5 , Figure 5 This is an overall flow chart of a method for improving system firmware data security provided by an embodiment of the present application, including but not limited to steps S5001-S5014, and each step is introduced in turn below. Step S5001, start; Step S5002: determine whether there is no target interval record, if yes, execute step S5003, if no, execute step S5009; Step S5003, determine whether the number of power-on times is less than a set threshold, if so, execute step S5004, if not, execute step S5014; Step S5004, determine whether the maximum PE number is less than the set threshold, if so, execute step S5005, if not, execute step S5014; Step S5005: determine whether it is sequential writing, if so, execute step S5006, if not, execute step S5014; Step S5006: determine whether the power-on time is less than a set threshold, if so, execute step S5007, if not, execute step S5014; Step S5007, record or update the start address and target interval; Step S5008, record the number of power-on times N; Step S5009, determine whether the number of power-on times is less than the set threshold value N+i, if so, execute step S5010, if not, execute step S5013; Step S5010, determine whether the read / write operation hits the recorded target interval, if yes, execute step S5011, if no, execute step S5010; Step S5011, determine whether the power-on time is less than the set threshold 2, if so, execute step S5012, if not, execute step S5014; Step S5012: Update the target interval according to the read and write operations; Step S5013: Recycle the data in the target interval to the block, mark the attribute, and no longer participate in the subsequent recycling; Step S5014, end.

[0055] In one embodiment, first determine whether there is no target interval record. If there is no target interval record, determine whether the power-on times are less than the set threshold. If there is a target interval record, determine whether the power-on times are less than the set threshold N+i. When the power-on times are less than the set threshold, continue to determine whether the maximum PE times are less than the set threshold. If the power-on times are greater than or equal to the set threshold, then end. When the maximum PE times are less than the set threshold, continue to determine whether it is sequential writing. When the maximum PE times are greater than or equal to the set threshold, then end. When it is determined to be sequential writing, continue to determine whether the power-on time is less than the set threshold. When the power-on time is less than the set threshold, record or update the start address and the target interval. When the power-on time is greater than or equal to the set threshold, value, it ends. After recording or updating the start address and target interval, record the number of power-on times N; when the number of power-on times is less than the set threshold N+i, determine whether the read and write operations hit the recorded target interval. When the number of power-on times is greater than or equal to the set threshold N+i, recycle the data in the target interval to the block, mark the attribute, and no longer participate in recycling in the future. When the read and write operations hit the recorded target interval, continue to determine whether the power-on time is less than the set threshold 2. When the read and write operations do not hit the recorded target interval, re-determine. When the power-on time is less than the set threshold 2, update the target interval according to the read and write operations, and then determine whether the read and write operations hit the recorded target interval. When the power-on time is greater than or equal to the set threshold 2, it ends.

[0056] The embodiment of the present application also provides a computer device, which includes: at least one memory, at least one processor, and at least one computer program, wherein the at least one computer program is stored in the at least one memory, and the at least one processor executes the at least one computer program to implement any of the methods for improving the security of system firmware data in the above embodiments. The computer device can be any intelligent terminal including a tablet computer, a vehicle-mounted computer, etc.

[0057] See also Figure 6 , Figure 6 The hardware structure of a computer device according to another embodiment is illustrated. The computer device includes: The processor 610 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present application; The memory 620 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 520 can store an operating system and other applications. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 620, and the processor 610 calls and executes the method for improving the data security of the system firmware in the embodiment of this application; Input / output interface 630, used to implement information input and output; Communication interface 640, used to realize communication interaction between the device and other devices, which can be realized through wired mode (such as USB, network cable, etc.) or wireless mode (such as mobile network, WIFI, Bluetooth, etc.); bus 650 , which transmits information between the various components of the device (e.g., processor 610 , memory 620 , input / output interface 630 , and communication interface 640 ); The processor 610 , the memory 620 , the input / output interface 630 , and the communication interface 640 are connected to each other in communication within the device via a bus 650 .

[0058] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the method for improving the security of system firmware data is implemented.

[0059] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely disposed relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0060] The embodiments described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Those skilled in the art will appreciate that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0061] Those skilled in the art will appreciate that the technical solutions shown in the figures do not constitute a limitation on the embodiments of the present application, and may include more or fewer steps than shown in the figures, or a combination of certain steps, or different steps.

[0062] The device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0063] Those skilled in the art will appreciate that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices may be implemented as software, firmware, hardware, or a suitable combination thereof.

[0064] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0065] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0066] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the above units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0067] The units described above as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0068] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0069] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including multiple instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), disk or optical disk and other media that can store programs.

[0070] The preferred embodiments of the present application are described above with reference to the accompanying drawings, but the scope of the rights of the present application is not limited thereto. Any modification, equivalent substitution and improvement made by those skilled in the art without departing from the scope and essence of the present application should be within the scope of the rights of the present application.

Claims

1. A method for improving the security of system firmware data, characterized in that: include: Get the data to be operated; When a preset condition is met, a first operation process is performed on the data to be operated, wherein the preset condition includes at least one of the following: a power-on cycle is less than a preset cycle, a P / E number is less than a preset P / E number, a power-on time is less than a preset power-on time, and a power-on number is less than a preset power-on number; Obtaining, according to the first operation, first information of the data to be operated and a region location where the data to be operated is recorded; The data to be operated is written into the area location according to the first information and the area location.

2. The method according to claim 1, characterized in that After performing the first operation on the data to be operated, the method further includes: When the logical address for executing the first operation is from the first logical address to the second logical address, the area location of the data to be operated is obtained as the first area and the power-on cycle for executing the first operation is obtained as the first power-on cycle, wherein the first area is from the first logical address to the second logical address.

3. The method according to claim 2, characterized in that The method further comprises: Performing a second operation on the data to be operated; Obtaining second information of the data to be operated according to the second operation and recording a second area position of the data to be operated, wherein the second area position of the data to be operated is a second area; When the overlap between the second area and the first area is greater than or equal to a first preset value, the second information of the data to be operated is obtained to be the same as the first information of the data to be operated.

4. The method according to claim 3, characterized in that The method further comprises: The first area is detected, and when the second operation is executed within the first area and the logical address for executing the second operation is from the third logical address to the fourth logical address, it is obtained that the second area is from the third logical address to the fourth logical address and the power-on time for executing the second operation is the first power-on time.

5. The method according to claim 4, characterized in that The method further comprises: Performing a third operation on the data to be operated; Obtaining third information of the data to be operated and recording a third area position of the data to be operated according to the third operation, wherein the third area position of the data to be operated is a third area; When the third operation is not performed on the third region, the third information of the data to be operated is the same as the first information of the data to be operated.

6. The method according to claim 5, characterized in that During the second power-on cycle and the first power-on time, the method further includes: The second area is detected, and when the third operation is performed within the second area and the logical address for performing the third operation is from the fifth logical address to the sixth logical address, the third area is obtained to be from the fifth logical address to the sixth logical address.

7. The method according to claim 1, characterized in that In a case where the power-on times of the data to be operated are greater than the first preset power-on times and less than the second preset power-on times, wherein the second preset power-on times are greater than the first preset power-on times, the method further includes: When the area position of the data to be operated is the target area position and the power-on time of the data to be operated is less than the second preset power-on time, updating the target area position; When the area position of the data to be operated is the target area position and the power-on time of the data to be operated is greater than or equal to the second preset power-on time, the updating of the target area position is finished.

8. The method according to claim 1, characterized in that Also includes: When the power-on times of the data to be operated are less than the first preset power-on times or greater than the second preset power-on times, the data of the regional position is recovered.

9. A computer device, characterized in that: include: at least one memory; at least one processor; at least one computer program; The at least one computer program is stored in the at least one memory, and the at least one processor executes the at least one computer program to implement: the method according to any one of claims 1 to 8.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and the computer program is used to make a computer execute: the method according to any one of claims 1 to 8.

Images