Firmware starting control system of server

Abstract

The invention relates to a firmware starting control system of a server. The firmware starting control system comprises a storage module, an entity storage medium and a data processing device. The storage module comprises a basic input / output system and an initial encryption key, and the entity storage medium comprises a self-defined database and a secondary encryption key. And the data processing device loads and executes the basic input / output system additional module through verification of the initial encryption key and the secondary encryption key. The system adopts a dynamic security token generated by an independent security module for authentication, and dynamically adjusts an authentication process based on a system environment and security requirements. And the updating module is used for dynamically updating the encryption key to improve the security of the system. The intelligent algorithm evaluates and adjusts the key and security token strategy in real time, and optimizes the system performance through log recording and a feedback mechanism.

Description

Technical Field

[0001] The present invention relates to the technical field of servers, and in particular to a firmware startup control system of a server. Background Art

[0002] With the rapid development of information technology, servers are increasingly used in various fields. As the core equipment for information processing and storage, the security and reliability of the server's firmware boot control system directly affects the stable operation of the entire system and the security protection of data. The firmware boot control system mainly includes the basic input / output system, which is the interface between computer hardware and the operating system, responsible for system startup and hardware initialization.

[0003] Since the 1980s, the traditional BIOS has been the standard for computer system startup. It executes a series of preset programs when the computer is powered on, including hardware detection, self-test (POST), and booting the operating system. However, with the continuous development of computer and network technology, the traditional BIOS faces many new challenges and deficiencies in terms of security and flexibility.

[0004] Traditional BIOS have fixed codes and boot processes, which makes them easy targets for attacks. Once attackers gain control of the BIOS, they can implant malicious code, which will be automatically executed when the system starts, threatening the entire system. Common attack methods include BIOS viruses, firmware tampering, and malicious code injection.

[0005] In addition, the traditional basic input / output system lacks an effective security authentication mechanism, and any unauthorized code may be executed, which further increases the security risk of the system. In order to deal with these problems, modern basic input / output systems have gradually introduced a variety of security mechanisms, such as program authentication based on cryptographic signatures and hardware-based security modules, to improve the security of the system.

[0006] Traditional BIOS is highly closed and fixed in design, lacking flexibility and scalability. This design approach cannot adapt to the ever-changing hardware environment and user needs. For example, when new hardware devices or peripherals are added to the system, the traditional BIOS may not be able to recognize and correctly configure these devices, requiring manual settings and adjustments. Summary of the invention

[0007] In order to solve the above problems in the prior art, the present invention proposes a firmware startup control system for a server, comprising: a storage module 101, the storage module 101 includes a basic input / output system and a database 103, the database 103 includes an initial encryption key 104, which is used to authenticate an initial program executable by the basic input / output system by verifying an initial encryption identifier;

[0008] A physical storage medium 102, the physical storage medium 102 including a custom database 105, the custom database 105 including a secondary encryption key 106 for authenticating a secondary program executable by a basic input / output system by verifying a secondary encryption identifier;

[0009] The data processing device 107 is used to load the basic input / output system additional module into the basic input / output system through the following steps:

[0010] Determine that the initial encryption key 104 does not contain a key for authenticating the basic input / output system additional module; determine that the secondary encryption key 106 contains a dedicated key for authenticating the basic input / output system additional module; authenticate the basic input / output system additional module through the dedicated key and a dynamically generated security token; after authentication, load and execute the basic input / output system additional module.

[0011] The security token is a request made by the data processing device 107 to an independent security module through a recorded private key. The independent security module uses the private key to perform encryption operations, and generates a unique identifier based on the dynamic parameters of the system's current timestamp and hardware status, and combines the encryption operation result and the unique identifier to generate a dynamic security token. The independent security module returns the generated dynamic security token to the data processing device 107.

[0012] The storage module 101 and the physical storage medium 102 both include an update module for dynamically updating encryption keys. The update module is connected to the security module to receive a security token generated by the security module and trigger a dynamic update process based on the verification result of the security token. When a potential security threat is detected or a technical update requirement is received, the update module automatically generates a new encryption key and distributes it to the corresponding storage module 101 and the physical storage medium 102 through a secure channel to replace the old encryption key.

[0013] The loading and authentication process of the basic input / output system additional module is dynamically adjusted according to changes in the system environment and security requirements. The data processing device 107 integrates an intelligent algorithm to evaluate the current security status in real time, and dynamically adjusts the key and security token generation strategy during the authentication process; the intelligent algorithm analyzes the system's operating data in real time, and based on the evaluation results, dynamically adjusts the key update frequency, key strength and security token generation strategy; a detailed log of each authentication and key update is recorded through a feedback mechanism, and the parameters and strategies of the intelligent algorithm are adjusted according to the analysis results.

[0014] The security module is configured with a timer, and the timer is set to periodically trigger the security token generation process. When the timer is triggered, the security module collects current system status information, obtains the current timestamp (T) and system status information (S), generates a hash value H1=SHA-256(T||S), and uses a private key K to generate a final token L=HMAC(K,H1). The generated security token is sent to the update module and the data processing device 107 through a secure channel.

[0015] The intelligent algorithm collects system operation data in real time, and the operation data includes: CPU utilization, memory usage, network traffic, hardware status, and external threats.

[0016] After the intelligent algorithm collects the operating data, it uses a smoothing algorithm to remove random fluctuations and noise in the data; converts data from different sources into a unified standard range, extracts key features such as CPU load average, memory usage peak, and network traffic change rate from the original data, analyzes the pre-processed data, and evaluates the current security status.

[0017] The intelligent algorithm determines the frequency of key updates based on the system's security status and threat assessment results; selects a stronger encryption algorithm and a longer key length according to the current threat level, and dynamically adjusts the generation parameters of the security token.

[0018] The data processing device 107 modifies the time interval and conditions for key update according to the adjustment strategy provided by the intelligent algorithm, generates and distributes new keys; modifies the generation algorithm and parameters of the security token, and adjusts the configuration parameters of the system.

[0019] The firmware startup control system is applied to a server.

[0020] The server firmware startup control system of the present invention has the following beneficial effects:

[0021] Through the initial and secondary encryption key authentication mechanism, only trusted programs can be executed to prevent unauthorized code from running. Dynamic security tokens and update modules are used to dynamically update encryption keys and improve the system's responsiveness to potential security threats. Intelligent algorithms are integrated to evaluate and adjust key and security token generation strategies during the authentication process in real time to enhance the system's adaptability and security. Independent security modules are used to generate unique dynamic security tokens to improve the security and reliability of encryption operations. Through detailed logging and feedback mechanisms, intelligent algorithms are continuously optimized to improve the overall security performance and operating efficiency of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of the present application, but do not constitute an improper limitation of the present invention. In the drawings:

[0023] Figure 1 It is a structural diagram of a firmware startup control system of a server of the present invention. DETAILED DESCRIPTION

[0024] The present invention will be described in detail below in conjunction with the accompanying drawings and specific embodiments, wherein the illustrative embodiments and descriptions are only used to explain the present invention but are not intended to limit the present invention.

[0025] Example 1: Server firmware startup control system structure

[0026] like Figure 1 As shown, this embodiment provides a firmware boot control system for a server. The system includes a storage module 101 and a physical storage medium 102, wherein the storage module 101 includes a basic input / output system and a database 103, and the database 103 includes one or more groups of initial encryption keys 104, which can be used to authenticate the initial program executable by the basic input / output system by verifying one or more initial encryption identifiers associated with the initial program.

[0027] The physical storage medium 102 is different from the storage module 101, and includes a custom database 105, which contains one or more sets of secondary encryption keys 106, which can be used to authenticate secondary programs executable by the basic input / output system by verifying one or more secondary encryption identifiers associated with the secondary programs.

[0028] The data processing device 107 is configured to load the basic input / output system additional module into the basic input / output system by the following steps:

[0029] 1. Key determination:

[0030] a. The data processing device 107 first accesses the database 103 in the storage module 101.

[0031] b. The data processing device 107 retrieves the initial encryption key 104 stored in the database 103 .

[0032] c. The data processing device 107 verifies whether the initial encryption key 104 contains a key capable of authenticating the basic input / output system add-on module.

[0033] d. If the initial encryption key 104 does not contain any key that can be used to authenticate the BIOS add-on module, the data processing device 107 records this status.

[0034] 2. Private key verification:

[0035] a. The data processing device 107 accesses the custom database 105 in the physical storage medium 102.

[0036] b. The data processing device 107 retrieves the secondary encryption key 106 stored in the custom database 105 .

[0037] c. The data processing device 107 verifies whether the secondary encryption key 106 contains a dedicated key capable of authenticating the BIOS add-on module.

[0038] d. If the secondary encryption key 106 contains a dedicated key that can be used to authenticate the BIOS add-on module, the data processing device 107 records the key.

[0039] 3. Dynamically generate security tokens:

[0040] a. The data processing device 107 sends a request to the independent security module through the recorded private key to generate a dynamic security token.

[0041] b. The independent security module generates a unique dynamic security token based on the current system status and the dedicated key. The generation process includes:

[0042] Use a private key to perform encryption operations;

[0043] Generate a unique identifier based on dynamic parameters such as the system's current timestamp and hardware status;

[0044] The result of the encryption operation is combined with the unique identifier to generate a dynamic security token.

[0045] c. The independent security module returns the generated dynamic security token to the data processing device 107 .

[0046] 4. Load and execute:

[0047] a. The data processing device 107 authenticates the basic input / output system add-on module using the dynamic security token and the dedicated key.

[0048] b. If the authentication is successful, the data processing device 107 loads the BIOS additional module into the BIOS.

[0049] c. The data processing device 107 starts and executes the loaded basic input / output system additional module to expand the functions of the basic input / output system.

[0050] In this embodiment, the above content ensures the security and reliability of the server firmware startup control system. The dynamically generated security token provides uniqueness and security during each loading process, avoiding the potential security risks caused by static keys. The data processing device 107 works in conjunction with the independent security module to achieve a dynamic and secure authentication and loading process through intelligent algorithms and encryption technology. This implementation ensures the flexible adaptability of the system under different operating environments and security requirements.

[0051] Example 2: Dynamic key update and dynamic authentication adjustment

[0052] The control system of the present invention also includes a dynamic key update mechanism and a dynamic authentication adjustment mechanism, which are specifically implemented as follows:

[0053] 1. Dynamic key update:

[0054] a. Both the storage module 101 and the physical storage medium 102 include an update module for dynamically updating the encryption key. The update module is connected to the security module to receive the security token generated by the security module and trigger the dynamic update process based on the verification result of the security token.

[0055] b. The update module is configured to periodically check the validity of the initial encryption key 104 and the secondary encryption key 106. The checking process includes:

[0056] Read each key in the initial encryption key 104 and the secondary encryption key 106;

[0057] Verify the integrity of each key to see if there is any sign of tampering or expiration;

[0058] Determine the validity and security of the key based on preset security policies and standards.

[0059] c. When a potential security threat is detected or a technical update request is received, the update module automatically generates a new encryption key. The process of generating a new encryption key includes:

[0060] Select an appropriate encryption algorithm, such as AES, RSA, or Elliptic Curve Cryptography (ECC);

[0061] Generate a key pair or symmetric key according to the selected encryption algorithm;

[0062] The newly generated encryption key is encrypted and protected to prevent unauthorized access during transmission and storage.

[0063] d. The new encryption key is distributed to the corresponding storage module 101 and physical storage medium 102 through a secure channel to replace the old encryption key. The distribution process includes:

[0064] Use security tokens generated by the security module for encrypted communication;

[0065] Ensure confidentiality and integrity of key transmission;

[0066] Replace the old key on the target storage device and perform storage verification on the new key.

[0067] 2. Dynamic authentication adjustment:

[0068] a. Basic input / output system additional module loading and authentication process is dynamically adjusted according to changes in system environment and security requirements. The data processing device 107 integrates intelligent algorithms, which can evaluate the current security status in real time and dynamically adjust the key and security token generation strategy during the authentication process.

[0069] b. Intelligent algorithms analyze system operation data in real time, including hardware status, software configuration, and external threats. The analysis process includes:

[0070] Collect system hardware status data, such as CPU utilization, memory usage, hard disk read and write speed, etc.

[0071] Collect software configuration data, such as operating system version, installed applications, currently running services, etc.;

[0072] Monitor external threat information, such as network attack logs, abnormal access records, system vulnerability reports, etc.

[0073] c. Based on the evaluation results, the intelligent algorithm dynamically adjusts the key update frequency, key strength and security token generation strategy. The adjustment process includes:

[0074] Determine the frequency and timing of key updates based on current system security requirements;

[0075] Adjust the encryption algorithm and key length for key generation to ensure that the key strength meets current security standards;

[0076] Dynamically adjust the security token generation strategy, including the token generation algorithm, validity period and complexity, to adapt to different security requirements.

[0077] d. Intelligent algorithms continuously optimize and improve the authentication process through feedback mechanisms. The feedback mechanisms include:

[0078] Record detailed logs of each authentication and key update, including time, operation content, results, etc.;

[0079] Analyze log data to identify possible security vulnerabilities and optimization points;

[0080] Based on the analysis results, adjust the parameters and strategies of the intelligent algorithm to improve the overall security and adaptability of the system.

[0081] Through the above detailed steps, the security and reliability of the server firmware startup control system in a dynamic environment are ensured. The combination of dynamic key update mechanism and dynamic authentication adjustment mechanism enables the system to respond to security threats and technical requirements in real time, providing efficient and secure key management and authentication services.

[0082] Example 3: Security module and real-time monitoring

[0083] The independent security module plays a key role in the present invention, and its functions and specific implementations are as follows:

[0084] 1. Security Token Generation:

[0085] a. The security module is equipped with a timer, which is set to trigger the security token generation process regularly. The time interval of the generation process can be adjusted according to system requirements, such as every 1 hour or every 24 hours.

[0086] b. When the timer is triggered, the security module collects the current system status information, including timestamp, system load, network status, etc.

[0087] c. The security module uses a preset encryption algorithm (such as SHA-256, HMAC, etc.) to combine system status information with a specific private key to generate a unique security token. The specific algorithm steps are as follows:

[0088] Get the current timestamp (T) and system status information (S).

[0089] Generate a hash value H1=SHA-256(T||S).

[0090] The private key K is used to generate the final token L = HMAC(K, H1).

[0091] d. The generated security token is sent to the update module and the data processing device 107 through a secure channel for subsequent authentication and key update processes.

[0092] 2. Real-time monitoring and recording:

[0093] a. The security module is equipped with multiple sensors and monitoring units to monitor the operating status of the system in real time. The monitoring content includes but is not limited to:

[0094] Usage of encryption keys: Record the generation, use, and destruction time of each key.

[0095] Security token generation and verification process: Record the time of each security token generation, the system status information involved, the generated hash value and the final token.

[0096] System security events and abnormal behaviors: monitor and record security events such as abnormal login attempts, unauthorized access, and data tampering.

[0097] b. Real-time monitoring data is stored in the built-in database of the security module and protected by encryption to ensure data integrity and confidentiality.

[0098] 3. Records and Audits:

[0099] a. The security module keeps detailed records of all authentication and key update operations, including operation time, operation type, keys and tokens involved, operation results, etc.

[0100] b. The recorded data is stored in a structured manner to facilitate subsequent query and analysis. For example, each record includes the following fields:

[0101] Timestamp: The time when the operation occurred.

[0102] Operation type: such as key generation, key verification, security token generation, etc.

[0103] Participation Key / Token: Identification of the key and token used in the operation.

[0104] Operation result: success or failure, and related error information.

[0105] c. System administrators can access and analyze these records through the audit interface provided by the security module. The audit interface supports a variety of query and filtering conditions, such as filtering by time range, operation type, operation result, etc.

[0106] d. The security module generates audit reports regularly, including the security status of the system, common security events, potential security issues, etc. The reports are sent to the system administrator via encrypted email or secure communication channels.

[0107] Through the above detailed steps, this embodiment ensures the security and auditability of the server firmware startup control system. The security module achieves comprehensive monitoring and management of the system operation status by generating security tokens, real-time monitoring and detailed recording, and provides reliable security protection and problem tracing capabilities. These functions ensure that the system can always maintain a high level of security and reliability when facing complex and changing security environments.

[0108] Example 4: Application of intelligent algorithms

[0109] In order to achieve dynamic adjustment and optimization, the system of the present invention integrates intelligent algorithms, and its specific applications are as follows:

[0110] 1. Real-time evaluation:

[0111] a. Intelligent algorithms collect system operation data in real time. Data sources include:

[0112] CPU utilization: Use system monitoring tools to obtain real-time CPU usage and record the utilization at each time point.

[0113] Memory usage: Monitors memory usage, including used memory, free memory, and memory usage trends.

[0114] Network traffic: Obtain the system's network traffic data through network monitoring tools and record the inflow and outflow traffic in each time period.

[0115] Hardware status: monitor the operating status of hardware devices, including hard disk read and write speeds, temperature sensor data, fan speed, etc.

[0116] External threats: Collect and analyze threat intelligence provided by system firewall logs, intrusion detection systems (IDS), and intrusion prevention systems (IPS).

[0117] b. After data collection, intelligent algorithms preprocess the data, including noise removal, data standardization, and feature extraction. The preprocessing steps are as follows:

[0118] Noise Removal: Use smoothing algorithms (such as moving average) to remove random fluctuations and noise in the data.

[0119] Data standardization: Convert data from different sources into a unified standard range for subsequent processing.

[0120] Feature extraction: Extract key features from raw data, such as CPU load average, memory usage peak, network traffic change rate, etc.

[0121] c. Intelligent algorithms analyze the pre-processed data to assess the current security status. The analysis methods include:

[0122] Statistical analysis: Calculate the statistical characteristics of various indicators, such as mean, variance, peak value, etc.

[0123] Anomaly Detection: Detect unusual patterns in data using machine learning algorithms like Isolation Forest, Support Vector Machines, etc.

[0124] Threat assessment: Based on external threat intelligence, evaluate the potential threats currently facing the system.

[0125] 2. Dynamic adjustment strategy:

[0126] a. Based on the real-time evaluation results, the intelligent algorithm formulates a dynamic adjustment strategy. The strategy includes:

[0127] Adjust the frequency of key updates: Determine the frequency of key updates based on the system's security status and threat assessment results. For high-risk status, increase the update frequency; for low-risk status, appropriately reduce the update frequency.

[0128] Enhance key strength: Select a stronger encryption algorithm and longer key length based on the current threat level. Algorithm options include AES-256, RSA-4096, etc.

[0129] Modify security token generation rules: Dynamically adjust security token generation parameters such as token validity period, complexity, and generation algorithm.

[0130] b. Intelligent algorithms use optimization algorithms (such as genetic algorithms, particle swarm optimization, etc.) to optimize the adjustment strategy to ensure that the impact on system performance is minimized while meeting security requirements.

[0131] 3. Execution Adjustment:

[0132] a. The data processing device 107 adjusts the system configuration and authentication process in real time according to the adjustment strategy provided by the intelligent algorithm. The specific operations include:

[0133] Update key management policy: modify the time interval and conditions for key updates, and generate and distribute new keys.

[0134] Adjust security token generation strategy: Modify the security token generation algorithm and parameters to ensure that the generated tokens meet new security requirements.

[0135] Configure system parameters: Adjust system configuration parameters, such as memory allocation, process priority, etc., to optimize system performance.

[0136] b. The data processing device 107 communicates with the storage module 101 and the physical storage medium 102 through a secure channel to ensure that the execution process of the adjustment strategy is safe and reliable.

[0137] 4. User Interaction:

[0138] a. Intelligent algorithms provide a user interface that allows system administrators to view analysis results and adjust strategies. The user interface includes:

[0139] Real-time monitoring dashboard: displays key system indicators and current security status.

[0140] Adjustment strategy recommendations: Provide dynamic adjustment recommendations based on intelligent algorithm analysis results.

[0141] Historical data query: allows administrators to query and analyze historical operation data and adjustment records.

[0142] b. System administrators can manually intervene and optimize through the user interface. Operations include:

[0143] Manually adjust the key update policy: Modify the frequency and conditions of key updates based on specific needs.

[0144] Adjust security token generation rules: Manually modify token generation parameters based on actual conditions.

[0145] Optimize system configuration: Manually adjust system configuration parameters according to operating status to ensure optimal performance.

[0146] Through the above detailed steps, this embodiment ensures the dynamic adjustment and optimization capabilities of the server firmware startup control system. The intelligent algorithm provides a flexible and efficient security management solution through real-time evaluation, dynamic adjustment and user interaction, ensuring that the system always maintains high security and high performance in different environments.

[0147] Through the above implementation, the server firmware startup control system provided by the present invention can not only dynamically update encryption keys and security tokens, but also dynamically adjust through intelligent algorithms to further improve the security, reliability and operating efficiency of the system. The system is suitable for various complex server environments and can effectively respond to changing security threats and technical requirements.

[0148] The above description is only a preferred embodiment of the present invention, so all equivalent changes or modifications made according to the structure, characteristics and principles described in the scope of the patent application of the present invention are included in the scope of the patent application of the present invention.

Claims

1. A firmware startup control system, characterized in that: The control system comprises a storage module (101), the storage module (101) comprises a basic input / output system and a database (103), the database (103) comprises an initial encryption key (104) for authenticating an initial program executable by the basic input / output system by verifying an initial encryption identifier; a physical storage medium (102), the physical storage medium (102) comprising a custom database (105), the custom database (105) containing a secondary encryption key (106) for authenticating a secondary program executable by a basic input / output system by verifying a secondary encryption identifier; A data processing device (107), wherein the data processing device (107) is used to load a basic input / output system additional module into a basic input / output system by the following steps: Determine that the initial encryption key (104) does not contain a key for authenticating the basic input / output system additional module; determine that the secondary encryption key (106) contains a dedicated key for authenticating the basic input / output system additional module; authenticate the basic input / output system additional module through the dedicated key and a dynamically generated security token; after authentication, load and execute the basic input / output system additional module.

2. A server firmware startup control system as claimed in claim 1, characterized in that: The security token is a request made by the data processing device (107) to an independent security module through a recorded private key. The independent security module uses the private key to perform encryption operations, and generates a unique identifier based on the current timestamp of the system and the dynamic parameters of the hardware status, and combines the encryption operation result and the unique identifier to generate a dynamic security token. The independent security module returns the generated dynamic security token to the data processing device (107).

3. A server firmware startup control system as claimed in claim 2, characterized in that: The storage module (101) and the physical storage medium (102) both include an update module for dynamically updating the encryption key. The update module is connected to the security module to receive a security token generated by the security module and trigger a dynamic update process based on a verification result of the security token. When a potential security threat is detected or a technical update requirement is received, the update module automatically generates a new encryption key and distributes it to the corresponding storage module (101) and the physical storage medium (102) through a secure channel to replace the old encryption key.

4. A server firmware startup control system as claimed in claim 1, characterized in that: The loading and authentication process of the basic input / output system additional module is dynamically adjusted according to changes in the system environment and security requirements, and the data processing device (107) integrates an intelligent algorithm to evaluate the current security status in real time and dynamically adjusts the key and security token generation strategy in the authentication process; The intelligent algorithm analyzes the system's operating data in real time and dynamically adjusts the key update frequency, key strength and security token generation strategy based on the evaluation results; A feedback mechanism is used to record detailed logs of each authentication and key update, and the parameters and strategies of the intelligent algorithm are adjusted based on the analysis results.

5. A server firmware startup control system as claimed in claim 2 or 3, characterized in that: The security module is configured with a timer, and the timer is set to periodically trigger the security token generation process. When the timer is triggered, the security module collects current system status information, obtains the current timestamp T and system status information S, generates a hash value H1=SHA-256(T||S), and uses a private key K to generate a final token L=HMAC(K,H1). The generated security token is sent to the update module and the data processing device (107) through a secure channel.

6. A server firmware startup control system as claimed in claim 4, characterized in that: The intelligent algorithm collects system operation data in real time, and the operation data includes: CPU utilization, memory usage, network traffic, hardware status, and external threats.

7. A server firmware startup control system as claimed in claim 6, characterized in that: After the intelligent algorithm collects the operating data, it uses a smoothing algorithm to remove random fluctuations and noise in the data; converts data from different sources into a unified standard range, extracts key features such as CPU load average, memory usage peak, and network traffic change rate from the original data, analyzes the pre-processed data, and evaluates the current security status.

8. A server firmware startup control system as claimed in claim 4, characterized in that: The intelligent algorithm determines the frequency of key updates based on the system's security status and threat assessment results; selects a stronger encryption algorithm and a longer key length according to the current threat level, and dynamically adjusts the generation parameters of the security token.

9. A server firmware startup control system as claimed in claim 4, 6 or 7, characterized in that: The data processing device (107) modifies the time interval and conditions for key update according to the adjustment strategy provided by the intelligent algorithm, generates and distributes new keys; modifies the generation algorithm and parameters of the security token, and adjusts the configuration parameters of the system.

10. A server firmware startup control system according to any one of claims 1 to 4, characterized in that: The firmware startup control system is applied to a server.

Images