Intelligent network card starting method and device, equipment and storage medium

Abstract

The invention relates to the technical field of communication internet, and discloses an intelligent network card starting method and device, equipment and a storage medium, and the method comprises the steps: responding to a received starting instruction for an intelligent network card, and obtaining the number of starting failures of the intelligent network card and a first safety verification password, input by a user, of the intelligent network card; second security verification passwords corresponding to the starting failure times are obtained, and when the starting failure times of the intelligent network card are different, the corresponding second security verification passwords are not completely the same; and starting the intelligent network card under the condition that the first security verification password is matched with the second security verification password corresponding to the starting failure times. And the network security of the intelligent network card is high.

Description

Technical Field

[0001] The present disclosure relates to the field of communication Internet technology, and in particular to a smart network card startup method, device, equipment and storage medium. Background Art

[0002] Smart NICs can assist the CPU and other components in the server to handle network loads. In practical applications, network virtualization, load balancing and other low-level functions can be removed from the CPU and other components. Smart NICs can quickly process data at the network input end and then transmit the processed data to the CPU and other components, which can greatly reduce the performance pressure of the CPU and other components.

[0003] Since smart network cards need to continuously process data at the network input end, they are often targeted by network attacks, resulting in low network security. Summary of the invention

[0004] In view of this, the present disclosure provides a smart network card startup method, a smart network card startup device, an electronic device and a computer-readable storage medium, which can improve the network security of the smart network card.

[0005] In a first aspect, the present disclosure provides a method for starting a smart network card, the method comprising:

[0006] In response to receiving a startup instruction for the smart network card, obtaining the number of startup failures of the smart network card and a first security verification password of the smart network card input by a user;

[0007] Obtaining a second security verification password corresponding to the number of startup failures, wherein the number of startup failures of the smart network card is different, and the corresponding second security verification passwords are not completely the same;

[0008] When the first security verification password matches the second security verification password corresponding to the number of startup failures, the smart network card is started.

[0009] In a second aspect, the present disclosure provides a smart network card startup device, the device comprising:

[0010] A first password acquisition module, configured to, in response to receiving a startup instruction for the smart network card, acquire the number of startup failures of the smart network card and a first security verification password of the smart network card input by a user;

[0011] A second password acquisition module, used to acquire a second security verification password corresponding to the number of startup failures, wherein the number of startup failures of the smart network card is different, and the corresponding second security verification passwords are not completely the same;

[0012] The network card startup module is used to start the smart network card when the first security verification password matches the second security verification password corresponding to the number of startup failures.

[0013] In a third aspect, the present disclosure provides an electronic device, comprising: a memory and a processor, wherein the memory and the processor are communicatively connected to each other, computer instructions are stored in the memory, and the processor executes the above method by executing the computer instructions.

[0014] In a fourth aspect, the present disclosure provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the above method.

[0015] In some embodiments of the present disclosure, due to different startup failure times of the smart network card, the corresponding second security verification password may not be exactly the same. Therefore, the user needs to dynamically adjust the input first security verification password based on the startup failure times of the smart network card. Thus, when the smart network card is attacked by the network, if the network intruder obtains the security verification password of the smart network card by continuous trial and error, the difficulty will inevitably increase, thereby improving the network security of the smart network card. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the specific embodiments of the present disclosure or the technical solutions in the related technologies, the drawings required for use in the specific embodiments or the related technical descriptions will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0017] Figure 1 It is a flowchart of a method for starting a smart network card provided by an embodiment of the present disclosure;

[0018] Figure 2 It is a flowchart of a method for starting a smart network card provided by an embodiment of the present disclosure;

[0019] Figure 3 It is a module schematic diagram of a smart network card startup device provided by an embodiment of the present disclosure;

[0020] Figure 4 It is a schematic diagram of the structure of an electronic device provided by some embodiments of the present disclosure. DETAILED DESCRIPTION

[0021] In order to make the purpose, technical solution and advantages of the embodiments of the present disclosure clearer, the technical solution in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, rather than all the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present disclosure.

[0022] Embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as being limited to the embodiments set forth herein. On the contrary, these embodiments are provided to provide a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are only for exemplary purposes and are not intended to limit the scope of protection of the present disclosure.

[0023] In the description of the embodiments of the present disclosure, the term "including" and similar terms should be understood as open inclusion, that is, "including but not limited to". The term "based on" should be understood as "based at least in part on". The term "some embodiments" or "the embodiment" should be understood as "at least some embodiments". The term "some embodiments" should be understood as "at least some embodiments". Other explicit and implicit definitions may also be included below.

[0024] Herein, unless explicitly stated, executing a step “in response to A” does not mean executing the step immediately after “A” but may include one or more intermediate steps.

[0025] It is understandable that the data involved in this technical solution (including but not limited to the data itself, the acquisition, use, storage or deletion of the data) shall comply with the requirements of relevant laws, regulations and relevant provisions.

[0026] It is understandable that before using the technical solutions disclosed in the various embodiments of the present disclosure, the types, scopes of use, usage scenarios, etc. of the information involved in the present disclosure should be informed to relevant users and their authorization should be obtained in an appropriate manner in accordance with relevant laws and regulations. The relevant users may include any type of right holders, such as individuals, enterprises, and groups.

[0027] For example, in response to receiving an active request from a user, a prompt message is sent to the relevant user to clearly prompt the relevant user that the operation requested to be performed will require obtaining and using the information of the relevant user, so that the relevant user can independently choose whether to provide information to software or hardware such as an electronic device, application, server or storage medium that executes the operation of the technical solution of the present disclosure based on the prompt message.

[0028] As an optional but non-limiting implementation, in response to receiving an active request from a relevant user, a prompt message is sent to the relevant user, for example, in the form of a pop-up window, in which the prompt message may be presented in text form. In addition, the pop-up window may also carry a selection control for the user to select "agree" or "disagree" to provide information to the electronic device.

[0029] It is understandable that the above notification and the process of obtaining user authorization are merely illustrative and do not constitute a limitation on the implementation of the present disclosure. Other methods that meet the relevant laws and regulations may also be applied to the implementation of the present disclosure.

[0030] With the development of technology, some smart network cards begin to configure the Basic Input / Output System (BIOS) to achieve higher-level functions and more flexible configurations. During the startup process of the smart network card, the BIOS is generally started first, and then the BIOS guides the smart network card to complete the startup. The BIOS can complete the hardware initialization, firmware loading, configuration loading, security verification and other related operations of the smart network card.

[0031] In order to improve network security, a BIOS password is usually set to protect the firmware of the basic input and output system. Before starting the smart network card or entering the BIOS setup interface, you need to enter the BIOS password first, and only when the BIOS password is correct can you continue with subsequent operations. For example, before starting the smart network card, you need to enter the BIOS password first. Only when the BIOS password is correct can you start the basic input and output system, and then the basic input and output system can guide the smart network card to complete the startup.

[0032] The method of setting the BIOS password can be as follows: when the smart network card without a BIOS password is started, press a designated key (such as F2) to enter the BIOS setup interface, and then enter the password setting page to set and confirm the BIOS password. In this way, when the smart network card is started next time, it will prompt to enter the BIOS password.

[0033] Currently, during the startup process of the smart network card, if the user enters the wrong BIOS password three times in a row, the smart network card will crash, but after restarting the smart network card, you can continue to try to enter the BIOS password. Based on this technical implementation, when the smart network card is attacked by the network, especially when the network intruder has obtained part of the BIOS password, the network intruder can obtain the correct BIOS password of the smart network card through continuous trial and error. Therefore, the network security of the smart network card needs to be improved.

[0034] In view of this, the present disclosure provides a smart network card startup method, which can improve the network security of the smart network card. The smart network card startup method can be applied to electronic devices. The electronic devices may include but are not limited to servers, controllers, etc. Figure 1 , which is a flow chart of a smart network card startup method provided by an embodiment of the present disclosure. Figure 1 In the method for starting the smart network card, the steps include:

[0035] Step S101, in response to receiving a startup instruction for a smart network card, obtaining the number of startup failures of the smart network card and a first security verification password of the smart network card input by a user.

[0036] Specifically, the startup instruction for the smart network card can be triggered in multiple scenarios. For example, during the startup process of the first server where the smart network card is currently located, the startup instruction for the smart network card can be triggered. For another example, the startup instruction for the smart network card can be triggered through the operating system or management software.

[0037] The number of startup failures of the smart network card can refer to the number of consecutive downtimes caused by incorrect password input during the startup process of the smart network card. Each downtime of the smart network card can be understood as a startup failure of the smart network card. For example, if the user enters the wrong password three times in a row, the smart network card will crash once. Then, if the number of startup failures of the smart network card is 3 times, it means that the user has entered the wrong password for 9 consecutive times.

[0038] In this embodiment, the smart network card may include a times register. In the times register, the times of startup failures of the smart network card may be recorded. Therefore, after receiving a startup instruction for the smart network card, the times of startup failures of the smart network card may be obtained from the times register.

[0039] During the startup process of the smart network card, a password input interface may be displayed. The first security verification password may refer to the security verification password for starting the basic input and output system input by the user through the password input interface. When the smart network card is attacked by a network, the network intruder may remotely input the first security verification password from the password input interface through a network device.

[0040] In this embodiment, the security verification password for starting the basic input and output system may change dynamically with the number of startup failures of the smart network card. The number of startup failures of the smart network card is different, and the corresponding second security verification password is not exactly the same. For example, when the number of startup failures of the smart network card is 0, the security verification password for starting the basic input and output system may be XX1; when the number of startup failures of the smart network card is 1, the security verification password for starting the basic input and output system may be YY1, and when the number of startup failures of the smart network card is 1, the security verification password for starting the basic input and output system may be ZZ1. In this example, the security verification passwords corresponding to each number of startup failures are different.

[0041] In some other embodiments, the security verification passwords corresponding to some startup failure times may be the same, and the security verification passwords corresponding to some startup failure times may be different. For example, when the startup failure times of the smart network card are 1 and 5, the corresponding security verification passwords may both be MM1, and when the startup times of the smart network card are 2, the corresponding security verification password may be NN1.

[0042] For non-network intrusion users, the correspondence between the number of failed startups of the smart network card and the security verification password may be known to them in advance. For network intrusion users, the correspondence between the number of failed startups of the smart network card and the security verification password may be unknown to them. Therefore, when network intrusion users obtain the security verification password of the smart network card through trial and error, the difficulty will inevitably increase.

[0043] Step S102, obtaining a second security verification password corresponding to the number of startup failures.

[0044] Specifically, the storage area of ​​the smart network card may include a correspondence between the number of startup failures and the second security verification password. This correspondence is a correspondence between the number of startup failures and the security verification password of the smart network card that a non-network intrusion user can know in advance, and may be similar to that shown in Table 1.

[0045] Table 1 Correspondence between the number of startup failures and the second security verification password

[0046] Number of startup failures Second security verification password 0 XX1 1 YY1 2 ZZ1

[0047] Based on the number of startup failures of the smart network card obtained in step S101 and the corresponding relationship shown in a similar table, a second security verification password corresponding to the number of startup failures can be obtained.

[0048] Step S103 , when the first security verification password matches the second security verification password corresponding to the number of startup failures, the smart network card is started.

[0049] Specifically, if the first security verification password matches the second security verification password corresponding to the number of startup failures, it can mean that the first security verification password entered by the user is correct. Therefore, the basic input and output system can be started and the startup of the smart network card can be guided by the basic input and output system.

[0050] On the contrary, if the first security verification password does not match the second security verification password corresponding to the number of startup failures, it may indicate that the first security verification password entered by the user is incorrect. In the case where the first security verification password entered by the user is incorrect, if the number of times the user has entered the first security verification password has not reached the threshold (for example, 3 times), the password input interface may continue to be displayed to prompt the user to enter the first security verification password again. If the number of times the user enters the first security verification password reaches the threshold, the smart network card may crash. At the same time, in the number register, the value is increased by 1, that is, the number of startup failures of the smart network card is increased by 1. In conjunction with Table 1, it can be understood that after the number of startup failures of the smart network card is increased by 1, the first security verification password that the user needs to enter will change.

[0051] In summary, in some embodiments of the present disclosure, due to different startup failure times of the smart network card, the corresponding second security verification password may not be exactly the same. Therefore, the user needs to dynamically adjust the input first security verification password based on the startup failure times of the smart network card. Thus, when the smart network card is attacked by the network, if the network intruder obtains the security verification password of the smart network card by continuous trial and error, the difficulty will inevitably increase, thereby improving the network security of the smart network card.

[0052] In some embodiments, obtaining the second security verification password corresponding to the number of startup failures in step S102 may include:

[0053] If the number of startup failures is less than or equal to the first number threshold, the security verification password stored in the first storage area is used as the second security verification password corresponding to the number of startup failures, and the first storage area is used to store the security verification password set by the user;

[0054] If the number of startup failures is greater than the first threshold value, a second security verification password corresponding to the number of startup failures is determined according to the corresponding relationship between the number of startup failures and the second security verification code stored in the second storage area.

[0055] Specifically, the first count threshold can be determined based on the number of downtimes that may be caused by non-network intrusion users entering the wrong first security verification password. For example, under normal circumstances, the number of downtimes caused by non-network intrusion users entering the wrong first security verification password does not exceed 2 times, so the first count threshold can be determined as 2. This means that when the number of startup failures is less than or equal to the first count threshold, it may be caused by the non-network intrusion user entering the security verification password incorrectly. When the number of startup failures is greater than the first count threshold, there is a high possibility that it is caused by a network attack initiated by a non-network intrusion user.

[0056] Based on the above description, the security verification password configured by the user in the BIOS setup interface can be saved in the first storage area. When the number of startup failures is less than or equal to the first number threshold, since the risk of network attack is small, the user can start the smart network card through the security verification password configured in the BIOS setup interface. In this way, the difficulty of the user to remember the security verification password can be reduced. When the number of startup failures is greater than the first number threshold, since the risk of network attack is large, it is necessary to dynamically adjust the security verification password based on the correspondence between the number of startup failures and the security verification code to improve the network security of the smart network card.

[0057] In this embodiment, considering that the user has three opportunities to enter the first security verification password each time the smart network card goes down, if the user enters the first security verification password incorrectly three times, then the probability that the user is a network intruder is high. Therefore, the first number threshold can be set to 0. That is, starting from the value in the number register becoming 1, the security verification password needs to be dynamically adjusted based on the corresponding relationship between the number of startup failures and the security verification code.

[0058] In some embodiments, obtaining a second security verification password corresponding to the number of startup failures in step S102 may further include:

[0059] The number of startup failures is input into the trained model, and the model randomly outputs a corresponding second security verification password based on the number of startup failures.

[0060] Compared with establishing a corresponding relationship between the number of startup failures and the security verification password in the storage area of ​​the smart network card, the second security verification password obtained in a random manner has uncertainty, making network attacks on the smart network card more difficult, and thus, the network security of the smart network card can be higher.

[0061] Combined with reference Figure 2 , which is a flow chart of a smart network card startup method provided by an embodiment of the present disclosure. Figure 2 In the method for starting the smart network card, the steps include:

[0062] Step S201: Acquire network card information of the smart network card and first server information of the first server where the smart network card is currently located.

[0063] Specifically, the network card information may include but is not limited to the network card manufacturer, network card model, network card serial number, network card identification, etc. The first server information may include but is not limited to the server manufacturer, server model, server serial number, server identification, etc. of the first server.

[0064] Step S202: Generate a first information string based on the network card information and the first server information.

[0065] Specifically, the first information string can uniquely identify the corresponding relationship between the smart network card and the first server. The network card information and the first server information can be concatenated to obtain the first information string, or part of the information can be extracted from the network card information and the first server information to assemble the first information string. The present disclosure does not limit the generation method of the first information string, as long as it can uniquely identify the corresponding relationship between the smart network card and the first server.

[0066] Step S203: compare the first information string with the second information string in the third storage area, where the second information string is generated based on the network card information of the smart network card and the second server information of the second server bound to the smart network card.

[0067] Specifically, under normal circumstances, the smart network card should be located on the server to which it is bound, that is, the first server and the second server should be the same server. If the first server and the second server are not the same server, it may indicate that the smart network card is lost, that is, the smart network card is moved from the bound second server to the first server that is different from the second server.

[0068] It is understandable that if the first server and the second server are the same server, the first information string and the second information string should be the same; if the first server and the second server are not the same server, the first information string and the second information string should be different. Therefore, by comparing the first information string with the second information string, it can be determined whether the smart network card is located in the bound server.

[0069] In this embodiment, if the first information string does not match the second information string, step S204 may be continued to be executed. If the first information string matches the second information string, step S205 may be continued to be executed.

[0070] Step S204, determining whether the number of failed startups of the smart network card is greater than a second threshold value. If the number of failed startups is greater than the second threshold value, executing step S2041; if the number of failed startups is not greater than the second threshold value, executing step S2042.

[0071] Step S2041, locking the smart network card.

[0072] Specifically, if the number of startup failures is greater than the second threshold, it means that the user has tried to enter the security verification password for many times, and the entered security verification passwords are all incorrect. In this case, it can be said that the user does not know the security verification password of the smart network card, and further it can be said that the smart network card was moved normally from the second server to the first server by the user in an illegal manner. Therefore, the smart network card can be locked to avoid data loss of the smart network card. After locking the smart network card, the startup or access to the smart network card can be invalid.

[0073] Step S2042, verifying whether the first security verification password matches the second security verification password corresponding to the number of failed startup times.

[0074] Specifically, if the number of startup failures is not greater than the second number threshold, there may be two situations. One situation is that the smart network card is moved from the second server to the first server by the user in a legal manner, but the security verification password is temporarily forgotten. Another situation is that the smart network card is moved from the second server to the first server by the user in an illegal manner. In order to distinguish the above two situations, the method of the above steps S101 to S103 can be used to continue to determine whether the first security verification password newly input by the user matches the second security verification password corresponding to the number of startup failures. If the first security verification password matches the second security verification password, it means that the user knows the security verification password of the smart network card, and then it can be indicated that the smart network card is moved from the second server to the first server by the user in a legal manner. In this case, the smart network card can be started. If the first security verification password does not match the second security verification password, it can continue to determine whether the number of inputs of the smart first security verification password reaches the threshold. If the threshold is reached, the smart network card can be shut down and the value in the number register is increased by 1. If the threshold is not reached, the password input interface continues to be displayed to facilitate the user to continue to enter a new first security verification password.

[0075] In this embodiment, the second numerical threshold is 3.

[0076] In summary, when the first information string does not match the second information string (i.e., when the smart network card is lost), based on whether the number of failed startups of the smart network card is greater than the second number threshold, it can be determined whether the smart network card was normally moved from the second server to the first server by the user in an illegal manner. If the number of startup failures of the smart network card is greater than the second number threshold, the smart network card is locked in time to ensure the data security of the smart network card. If the number of startups of the smart network card is not greater than the second number threshold, the user can continue to enter a new first security verification password, and continue to verify whether the first security verification password matches the second security verification password corresponding to the number of startup failures. In this way, it is ensured that the smart network card can be legally moved between different servers.

[0077] Step S206, determining whether the number of startup failures is greater than the third threshold value. If the number of startup failures is greater than the third threshold value, executing step S2061; if the number of startup failures is not greater than the third threshold value, executing step S2062.

[0078] Step S2061, determining that the smart network card is under network attack, and performing a backup operation on the data in the smart network card, while continuing to verify whether the first security verification password matches the second security verification password corresponding to the number of startup failures.

[0079] Specifically, if the first information string matches the second information string, it means that the smart network card has not been moved, that is, the smart network card is still on the server to which it is bound. If in this case, the number of startup failures of the smart network card is greater than the third number threshold, it can indicate that it is likely to be attacked by a network attack. Therefore, the data on the smart network card can be backed up to the storage of the first server where it is located, so as to prevent data loss. Of course, in order to prevent the problem that the user enters the security verification password incorrectly multiple times, it is also possible to continue to verify whether the first security verification password newly entered by the user matches the second security verification password corresponding to the number of startup failures according to the method of steps S101 to S103 above. That is, when the first information string matches the second information string, if the user enters the first security verification password incorrectly multiple times, the smart network card may not be locked.

[0080] Specifically, in some embodiments, if the first information string matches the second information string, and the number of startup failures of the smart network card is greater than the third number threshold, the data in the smart network card may be backed up in the following manner:

[0081] Starting from the time point when the number of startup failures is greater than the third number threshold, if the first security verification password is obtained multiple times, the frequency of mismatch between the first security verification password and the corresponding second security verification password is counted;

[0082] Based on the statistically obtained frequency, determine the current level of network attacks suffered by the Smart NIC;

[0083] Based on the network attack level and the importance of each part of the data in the smart network card, a backup operation is performed on at least part of the target data in the smart network card.

[0084] For example, suppose that the time point when the number of startup failures is greater than the third threshold is 10 o'clock. After 10 o'clock, if the first security verification password input by the user is received multiple times, the frequency of the mismatch between the first security verification password and the corresponding second security verification password is counted. For example, after 10 o'clock, the first security verification password input by the user will be received three times per hour on average, and each time the first security verification password received does not match the corresponding second security verification password, then the frequency is 3 times per hour. It can be understood that in the presence of a network attack, the higher the frequency obtained by statistics, the higher the level of network attack currently suffered by the smart network card.

[0085] In this embodiment, the level of network attacks suffered by the smart network card can be divided into n levels based on the frequency obtained by statistics. For example, 1 to 3 times per hour is the first network attack level, 4 to 8 times per hour is the second network attack level, and so on. The nth network attack level is the highest network attack level. At the same time, the importance of the data in the smart network card can also be divided according to the network attack level. When the level of network attack suffered is relatively low, the more important data in the smart network card can be backed up first; when the level of network attack suffered gradually increases, the data with relatively low importance can continue to be backed up. When the level of network attack suffered rises to the highest level, all data that has not been backed up by the smart network card can be backed up. In this way, according to the network attack level, the data in the smart network card is gradually backed up, which can save data backup and storage space.

[0086] In some embodiments, after determining that the smart network card is subject to a network attack, the method of the present disclosure may further include:

[0087] Determine the level of cyber attacks to which the SmartNIC is exposed;

[0088] If the network attack level reaches a preset level, determining a device network address of a target device that has sent the first security verification password multiple times;

[0089] Block the device network address of the target device to prevent the target device from accessing the SmartNIC.

[0090] Specifically, when the network attack level reaches a preset level, it can be determined that the target device that sends the first security verification password multiple times is a device that implements the network attack. By shielding the device network address of the target device, the target device can be prevented from continuing to launch network attacks on the smart network card, thereby providing network security for the smart network card.

[0091] In some embodiments, the smart network card includes multiple basic input and output systems, each of which has its own corresponding security level and can be used to boot the smart network card. Specifically, the smart network card can use one of the basic input and output systems to boot the smart network card at a time. The higher the security level of the basic input and output system, the greater the impact on the performance of the smart network card, but its network security is higher. In order to achieve a balance between network security and device performance, the method disclosed herein may also include:

[0092] Starting from the time point when the number of startup failures is greater than the third threshold, if the level of network attack suffered by the smart network card reaches a preset level within a preset time period, a first system switching request is sent to the management unit in the first server to trigger the management unit to switch the basic input and output system currently used by the smart network card to a basic input and output system with a higher security level.

[0093] If the network attack level suffered by the smart network card does not reach the preset level within the preset time, a second system switching request is sent to the management unit in the first server to trigger the management unit to switch the basic input and output system currently used by the smart network card to a basic input and output system with a lower security level.

[0094] In this way, a balance can be achieved between network security and device performance.

[0095] Step S2062, verifying whether the first security verification password matches the second security verification password corresponding to the number of failed startup times.

[0096] Specifically, if the number of startup failures of the smart network card is not greater than the third threshold, it can be said that it is highly likely that it has not been attacked by a network attack. Therefore, it is possible to continue to verify whether the first security verification password matches the second security verification password corresponding to the number of startup failures.

[0097] This completes the entire description of the disclosed method.

[0098] Corresponding to the smart network card startup method, the present disclosure also provides a smart network card startup device. Figure 3 , which is a module diagram of a smart network card startup device provided by an embodiment of the present disclosure.

[0099] Figure 3 In the embodiment, the smart network card startup device includes:

[0100] A first password acquisition module 301 is used to obtain the number of startup failures of the smart network card and a first security verification password of the smart network card input by a user in response to receiving a startup instruction for the smart network card;

[0101] A second password acquisition module 302 is used to acquire a second security verification password corresponding to the number of startup failures, wherein the number of startup failures of the smart network card is different, and the corresponding second security verification password is not completely the same;

[0102] The network card startup module 303 is used to start the smart network card when the first security verification password matches the second security verification password corresponding to the number of startup failures.

[0103] In some embodiments, the second password acquisition module 302 is specifically used to:

[0104] If the number of startup failures is less than or equal to the first number threshold, the security verification password stored in the first storage area is used as the second security verification password corresponding to the number of startup failures, and the first storage area is used to store the security verification password set by the user;

[0105] If the number of startup failures is greater than the first threshold value, a second security verification password corresponding to the number of startup failures is determined according to the corresponding relationship between the number of startup failures and the second security verification code stored in the second storage area.

[0106] In some embodiments, after receiving the start instruction, the first password acquisition module 301 is further used to:

[0107] Obtain network card information of the smart network card and first server information of the first server where the smart network card is currently located;

[0108] Generate a first information string based on the network card information and the first server information;

[0109] Compare the first information string with the second information string in the third storage area, where the second information string is generated based on the network card information of the smart network card and the second server information of the second server bound to the smart network card;

[0110] If the first information string does not match the second information string, and the number of startup failures is greater than the second number threshold, the smart network card is locked;

[0111] If the first information string does not match the second information string, and the number of startup failures is not greater than the second threshold value, then verify whether the first security verification password matches the second security verification password corresponding to the number of startup failures;

[0112] If the first information string matches the second information string, and the number of startup failures is greater than the third number threshold, it is determined that the smart network card is under a network attack, and a backup operation is performed on the data in the smart network card.

[0113] In some embodiments, the first password obtaining module 301 is further used to:

[0114] Starting from the time point when the number of startup failures is greater than the third number threshold, if the first security verification password is obtained multiple times, the frequency of mismatch between the first security verification password and the corresponding second security verification password is counted;

[0115] Based on the statistically obtained frequency, determine the current level of network attacks suffered by the Smart NIC;

[0116] Based on the network attack level and the importance of each part of the data in the smart network card, a backup operation is performed on at least part of the target data in the smart network card.

[0117] In some embodiments, after determining that the smart network card is subjected to a network attack, the first password acquisition module 301 is further used to:

[0118] Determine the level of cyber attacks to which the SmartNIC is exposed;

[0119] If the network attack level reaches a preset level, determining a device network address of a target device that has sent the first security verification password multiple times;

[0120] Block the device network address of the target device to prevent the target device from accessing the SmartNIC.

[0121] In some embodiments, the smart network card includes multiple basic input and output systems, each basic input and output system has its own corresponding security level and can be used to guide the smart network card to start up; the network card startup module 303 is also used to:

[0122] Starting from the time point when the number of startup failures is greater than the third threshold, if the level of network attack suffered by the smart network card reaches a preset level within a preset time period, a first system switching request is sent to the management unit in the first server to trigger the management unit to switch the basic input and output system currently used by the smart network card to a basic input and output system with a higher security level.

[0123] In some embodiments, if the network attack level suffered by the smart network card does not reach the preset level within the preset time period, the network card startup module 303 is further used to:

[0124] A second system switching request is sent to the management unit in the first server to trigger the management unit to switch the basic input / output system currently used by the smart network card to a basic input / output system with a lower security level.

[0125] The smart network card startup device in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0126] The smart network card startup device disclosed in the present invention has the same beneficial effects as the above-mentioned smart network card startup method, which will not be described in detail here.

[0127] The present disclosure also provides an electronic device having the above Figure 3 The smart network card startup device shown.

[0128] Combined with reference Figure 4 , is a schematic diagram of the structure of an electronic device provided by some embodiments of the present disclosure. Figure 4 As shown, the electronic device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. The various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process instructions executed in the electronic device, including instructions stored in or on the memory to display graphical information of the GUI on an external input / output device (such as a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple electronic devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 4 A processor 10 is taken as an example.

[0129] The processor 10 may be a first PCIe device, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0130] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0131] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the electronic device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the electronic device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0132] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0133] The electronic device further comprises a communication interface 30 for the electronic device to communicate with other devices or a communication network.

[0134] The embodiments of the present disclosure also provide a computer-readable storage medium. The above-mentioned method according to the embodiments of the present disclosure can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium and downloaded through a network, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state drive, etc.; further, the storage medium can also include a combination of the above-mentioned types of memory. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0135] A part of the present disclosure may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present disclosure through the operation of the computer. Those skilled in the art should understand that the existence of computer program instructions in computer-readable media includes, but is not limited to, source files, executable files, installation package files, etc., and accordingly, the way in which computer program instructions are executed by a computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium can be any available computer-readable storage medium or communication medium accessible to the computer.

[0136] Although the embodiments of the present disclosure have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present disclosure, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A method for starting a smart network card, characterized in that: The method comprises: In response to receiving a startup instruction for the smart network card, obtaining the number of startup failures of the smart network card and a first security verification password of the smart network card input by a user; Obtaining a second security verification password corresponding to the number of startup failures, wherein the number of startup failures of the smart network card is different, and the corresponding second security verification passwords are not completely the same; When the first security verification password matches the second security verification password corresponding to the number of startup failures, the smart network card is started.

2. The method according to claim 1, characterized in that: The obtaining of a second security verification password corresponding to the number of startup failures includes: If the number of startup failures is less than or equal to the first number threshold, the security verification password stored in the first storage area is used as the second security verification password corresponding to the number of startup failures, and the first storage area is used to store the security verification password set by the user; If the number of startup failures is greater than the first threshold, a second security verification password corresponding to the number of startup failures is determined according to the correspondence between the number of startup failures and the second security verification code stored in the second storage area.

3. The method according to claim 1 or 2, characterized in that: After receiving the start instruction, the method further includes: Acquire network card information of the smart network card and first server information of a first server where the smart network card is currently located; Generate a first information string based on the network card information and the first server information; Compare the first information string with a second information string in a third storage area, where the second information string is generated based on the network card information of the smart network card and the second server information of the second server bound to the smart network card; If the first information string does not match the second information string, and the number of startup failures is greater than a second number threshold, locking the smart network card; If the first information string does not match the second information string, and the number of startup failures is not greater than the second number threshold, verifying whether the first security verification password matches the second security verification password corresponding to the number of startup failures; If the first information string matches the second information string, and the number of startup failures is greater than a third threshold, it is determined that the smart network card is under a network attack, and a backup operation is performed on the data in the smart network card.

4. The method according to claim 3, characterized in that If the first information string matches the second information string, and the number of startup failures is greater than a third threshold, it is determined that the smart network card is under a network attack, and a backup operation is performed on the data in the smart network card, including: Starting from the time point when the number of startup failures is greater than the third number threshold, if the first security verification password is obtained multiple times, counting the frequency of mismatch between the first security verification password and the corresponding second security verification password; Determine the current network attack level suffered by the smart network card based on the statistically obtained frequency; Based on the network attack level and the importance of each portion of data in the smart network card, a backup operation is performed on at least a portion of target data in the smart network card.

5. The method according to claim 3, characterized in that: After determining that the smart network card is subject to a network attack, the method further includes: Determining a level of network attack to which the smart network card is subjected; If the network attack level reaches a preset level, determining a device network address of a target device that has sent the first security verification password multiple times; The device network address of the target device is shielded to prevent the target device from accessing the smart network card.

6. The method according to claim 3, characterized in that The smart network card includes a plurality of basic input and output systems, each of which has a corresponding security level and can be used to guide the smart network card to start up; the method further includes: Starting from the time point when the number of startup failures is greater than the third number threshold, if the network attack level suffered by the smart network card reaches a preset level within a preset time period, a first system switching request is sent to the management unit in the first server to trigger the management unit to switch the basic input and output system currently used by the smart network card to a basic input and output system with a higher security level.

7. The method according to claim 6, characterized in that If the network attack level suffered by the smart network card does not reach the preset level within the preset time period, the method further includes: A second system switching request is sent to the management unit in the first server to trigger the management unit to switch the basic input / output system currently used by the smart network card to a basic input / output system with a lower security level.

8. A smart network card startup device, characterized in that: The device comprises: A first password acquisition module, configured to, in response to receiving a startup instruction for the smart network card, acquire the number of startup failures of the smart network card and a first security verification password of the smart network card input by a user; A second password acquisition module, used to acquire a second security verification password corresponding to the number of startup failures, wherein the number of startup failures of the smart network card is different, and the corresponding second security verification passwords are not completely the same; The network card startup module is used to start the smart network card when the first security verification password matches the second security verification password corresponding to the number of startup failures.

9. An electronic device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the smart network card startup method according to any one of claims 1 to 7 by executing the computer instructions.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the smart network card startup method according to any one of claims 1 to 7.

Images