Server data security interaction method, device, equipment, medium and program product

Abstract

The embodiment of the invention provides a server data security interaction method and device, equipment, a medium and a program product, and relates to the technical field of data security, the method comprises the following steps: establishing a data sharing file in a BIOS system; wherein the data sharing file is connected with a BMS (Battery Management System) through an interface; controlling the BIOS system to write the first data into the data sharing file in real time, and controlling the BMS system to write the second data into the data sharing file in real time; wherein the first data and the second data are encrypted; calling second data from the data sharing file through the BIOS system and decrypting the second data; calling the first data from the data sharing file through the BMS and decrypting the first data; through a file sharing mechanism, fragmentation and scattered performance of traditional data transmission are avoided, integrity and consistency of data transmission are ensured, data transmission efficiency is improved, and meanwhile, an encryption mechanism is set, so that data security is ensured.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a server data security interaction method, device, equipment, medium and program product. Background Art

[0002] During the operation of the server system, a large amount of data transmission and communication is required between the BIOS system and the BMC system. The collaboration between BIOS and BMS is a key link in the high availability design of the server, especially in power disaster recovery, data protection and hardware maintenance. The data interaction between the two needs to rely on standardized protocols, real-time communication mechanisms and reliable fault handling logic. However, the traditional data transmission method has the following problems: Data transmission fragmentation: The data transmission protocols and methods are intertwined, resulting in serious data transmission fragmentation. A complete data content often needs to be sent multiple times, which reduces the transmission efficiency; Insufficient data security: The traditional data transmission method lacks an effective security mechanism, and the data is easily tampered with or stolen. Summary of the invention

[0003] The purpose of the embodiments of the present application is to provide a server data security interaction method, device, equipment, medium and program product to solve the problems of low transmission efficiency and low security of the existing BIOS system and BMC system data interaction method.

[0004] In a first aspect, an embodiment of the present application provides a server data security interaction method, which is applied to a server, the server including a BIOS basic input and output system and a BMS battery management system, the method comprising: Establishing a data sharing file in the BIOS system; wherein the data sharing file is connected to the BMS system through an interface; Control the BIOS system to write the first data to the data sharing file in real time, and control the BMS system to write the second data to the data sharing file in real time; wherein both the first data and the second data are encrypted; calling the second data from the data sharing file through the BIOS system and performing decryption processing on the second data; The first data is called from the data sharing file through the BMS system and the first data is decrypted.

[0005] In the above implementation process, a data sharing file is established in the BIOS system; wherein the data sharing file is connected to the BMS system through an interface; the BIOS system is controlled to write the first data to the data sharing file in real time, and the BMS system is controlled to write the second data to the data sharing file in real time; wherein the first data and the second data are both encrypted; the second data is called from the data sharing file by the BIOS system and the second data is decrypted; the first data is called from the data sharing file by the BMS system and the first data is decrypted; through the file sharing mechanism, the fragmentation and dispersion of traditional data transmission are avoided, the integrity and consistency of data transmission are ensured, the data transmission efficiency is improved, and an encryption mechanism is set at the same time to ensure the security of data.

[0006] Further, the controlling the BIOS system to write the first data to the data sharing file in real time, and the controlling the BMS system to write the second data to the data sharing file in real time, comprises: The BIOS system is controlled to write first data in a set format to a data sharing file in real time, and the BMS system is controlled to write second data in a set format to a data sharing file in real time.

[0007] In the above implementation process, data is stored in a fixed area format to ensure that the BIOS system and the BMC system can accurately read and write data.

[0008] Furthermore, calling the second data from the data sharing file through the BIOS system and decrypting the second data includes: If the second data is called from the data sharing file through the BIOS system for the first time, the second data is copied and decrypted; If it is not the first time that the second data is called from the data sharing file through the BIOS system, the called second data is decrypted and then compared with the second data called in the past; If there is duplicate data between the called second data and the second data called historically, the duplicate data of the second data called historically is removed.

[0009] In the above implementation process, during the data transmission process, the duplicate data called by the BIOS system is removed or overwritten, thereby ensuring the real-time and consistency of the data.

[0010] Furthermore, calling the first data from the data sharing file through the BMS system and decrypting the first data includes: If the first data is called from the data sharing file through the BMS system for the first time, the first data is copied and the second data is decrypted; If it is not the first time that the first data is called from the data sharing file through the BMS system, the called first data is decrypted and compared with the first data called in the history; If there is duplicate data between the called first data and the first data called historically, the duplicate data of the first data called historically is removed.

[0011] In the above implementation process, during the data transmission process, the duplicate data called by the BMS system is removed or overwritten, thereby ensuring the real-time and consistency of the data.

[0012] Further, the controlling the BIOS system to write the first data to the data sharing file in real time, and the controlling the BMS system to write the second data to the data sharing file in real time, comprises: Control the BIOS system to write the first data and the first verification package to the data sharing file in real time, and control the BMS system to write the second data and the second verification package to the data sharing file in real time; The calling of the second data from the data sharing file through the BIOS system and decrypting the second data includes: Calling the second data and the second verification package from the data sharing file through the BIOS system and decrypting the second data, and verifying the second data based on the second verification package; The calling the first data from the data sharing file through the BMS system and decrypting the first data includes: The first data and the first verification package are called from the data sharing file through the BMS system, the first data is decrypted, and the first data is verified based on the first verification package.

[0013] In the above implementation process, a data verification mechanism (such as CRC verification) is set to ensure the integrity and accuracy of data transmission.

[0014] Furthermore, after controlling the BIOS system to write the first data to the data sharing file in real time, the method further includes: The BIOS system is controlled to modify the first data of the data sharing file in real time.

[0015] After the controlling BMS system writes the second data into the data sharing file in real time, the method further includes: The BMS system is controlled to modify the second data of the data sharing file in real time.

[0016] In the above implementation process, the flexibility, integrity and real-time nature of the data are ensured.

[0017] In a second aspect, an embodiment of the present application further provides a server data security interaction device, which is integrated in a server, the server including a BIOS basic input and output system and a BMS battery management system, the device including: A file creation module, used to create a data sharing file in the BIOS system; wherein the data sharing file is connected to the BMS system through an interface; A data writing module, used to control the BIOS system to write the first data to the data sharing file in real time, and control the BMS system to write the second data to the data sharing file in real time; wherein both the first data and the second data are encrypted; A first calling module, used for calling the second data from the data sharing file through the BIOS system and performing decryption processing on the second data; The second calling module is used to call the first data from the data sharing file through the BMS system and decrypt the first data.

[0018] In a third aspect, an embodiment of the present application provides an electronic device, including: A processor, a memory and a bus, wherein the processor is connected to the memory via the bus, and the memory stores computer-readable instructions. When the computer-readable instructions are executed by the processor, they are used to implement the server data security interaction method as described above.

[0019] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a server, the server data security interaction method as described above is implemented.

[0020] In a fifth aspect, an embodiment of the present invention provides a computer program product, which includes instructions, and when the instructions are executed by a computer, the computer implements the server data security interaction method as described above. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments of the present application will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0022] Figure 1 A flow chart of a server data security interaction method provided in an embodiment of the present application; Figure 2 A schematic diagram of a flow chart of a server data security interaction device provided in an embodiment of the present application; Figure 3 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0023] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.

[0024] It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings. At the same time, in the description of this application, the terms "first", "second", etc. are only used to distinguish the description and cannot be understood as indicating or implying relative importance.

[0025] BMS (Battery Management System) is a core component in the new energy field, mainly used for real-time monitoring, protection, optimization and diagnosis of battery packs.

[0026] BIOS (Basic Input / Output System) is the core firmware during the computer startup process, responsible for hardware initialization, self-test, and booting the operating system.

[0027] During the operation of the server system, a large amount of data transmission and communication is required between the BIOS and BMC systems. The traditional data transmission method has the following problems: 1. Data transmission fragmentation: The data transmission protocols and methods are intertwined, resulting in serious data transmission fragmentation. A complete data content often needs to be sent multiple times, which reduces the transmission efficiency. 2. Insufficient data security: The traditional data transmission method lacks an effective security mechanism, and the data is easily tampered or stolen. 3. Data integrity is difficult to guarantee: Due to the fragmentation of data transmission, errors are prone to occur during the data transmission process, resulting in the inability to guarantee data integrity. 4. High system resource usage: Frequent data sending commands occupy a large amount of system resources, affecting the overall performance of the system.

[0028] Based on this, an embodiment of the present application provides a server data security interaction method to solve the above problem.

[0029] Please see Figure 1 , Figure 1 A flow chart of a server data security interaction method provided in an embodiment of the present application. The server data security interaction method is applied to a server, which includes a BIOS basic input and output system and a BMS battery management system, and includes: 100. Establish a data sharing file in the BIOS system; wherein the data sharing file is connected to the BMS system through an interface.

[0030] Exemplarily, a data sharing file (BIOS_For_BMC.dat) is established in the BIOS system, and the data to be transmitted between the BIOS system and the BMC system is written into the file; through the file sharing mechanism, the fragmentation and dispersion of traditional data transmission are avoided, and the integrity and consistency of data transmission are ensured.

[0031] Optionally, the BMS system is connected to the data sharing file through an SPI interface (serial peripheral interface), and performs data interaction with the data sharing file in the BIOS storage area through the SPI interface.

[0032] Optionally, the server may be a general-purpose server or a storage server. The embodiment of the present application adopts a storage server.

[0033] 200. Control the BIOS system to write the first data to the data sharing file in real time, and control the BMS system to write the second data to the data sharing file in real time; wherein both the first data and the second data are encrypted.

[0034] Optionally, the BIOS system is controlled to write first data in a set format to a data sharing file in real time, and the BMS system is controlled to write second data in a set format to a data sharing file in real time; thus, the first data and the second data are stored in a fixed area format, ensuring that the BIOS system and the BMC system can accurately read and write data.

[0035] At the same time, during the data transmission process, the first data and the second data are protected by an encryption mechanism to ensure the security of the data.

[0036] 300. Call the second data from the data sharing file through the BIOS system and decrypt the second data.

[0037] 310. If the second data is called from the data sharing file through the BIOS system for the first time, the second data is copied and decrypted.

[0038] 320. If it is not the first time that the second data is called from the data sharing file through the BIOS system, the called second data is decrypted and then compared with the second data called historically.

[0039] 330. If there is duplicate data between the called second data and the second data called historically, remove the duplicate data of the second data called historically.

[0040] It can be understood that the BIOS system calls the second data from the data sharing file for the first time and copies the second data as a whole. When the second data is called from the data sharing file for the second time or the Nth time, the second data called each time can be compared with the stored historical second data. If there is duplicate data, the duplicate data will be removed and overwritten. If there is no duplicate data, all the data will be retained.

[0041] Therefore, during the data transmission process, the duplicate data called by the BIOS system is removed or overwritten, ensuring the real-time and consistency of the data.

[0042] 400. Call first data from a data sharing file through a BMS system and decrypt the first data.

[0043] 410. If the first data is called from the data sharing file through the BMS system for the first time, the first data is copied and the second data is decrypted.

[0044] 420. If it is not the first time that the first data is called from the data sharing file through the BMS system, the called first data is decrypted and compared with the first data called historically.

[0045] 430. If there is duplicate data between the called first data and the first data called historically, remove the duplicate data of the first data called historically.

[0046] It can be understood that the BMS system calls the first data from the data sharing file for the first time through the SPI interface and copies the first data as a whole. When the first data is called from the data sharing file for the second or Nth time, the first data called each time can be compared with the stored historical first data. If there is duplicate data, the duplicate data is removed and overwritten. If there is no duplicate data, all the data are retained.

[0047] Therefore, during the data transmission process, the duplicate data called by the BMS system is removed or overwritten, ensuring the real-time and consistency of the data.

[0048] As described above, the embodiment of the present application establishes a data sharing file in the BIOS system; wherein the data sharing file is connected to the BMS system through an interface; the BIOS system is controlled to write the first data to the data sharing file in real time, and the BMS system is controlled to write the second data to the data sharing file in real time; wherein the first data and the second data are both encrypted; the BIOS system calls the second data from the data sharing file and decrypts the second data; the BMS system calls the first data from the data sharing file and decrypts the first data; through the file sharing mechanism, the fragmentation and dispersion of traditional data transmission are avoided, the integrity and consistency of data transmission are ensured, the data transmission efficiency is improved, and an encryption mechanism is set at the same time to ensure the security of data.

[0049] Based on the above embodiment, the server data security interaction method can also be embodied as follows: the BIOS system is controlled to write the first data to the data sharing file in real time, and the BMS system is controlled to write the second data to the data sharing file in real time, including: The BIOS system is controlled to write the first data and the first verification package to the data sharing file in real time, and the BMS system is controlled to write the second data and the second verification package to the data sharing file in real time.

[0050] Exemplarily, when the BIOS system writes the first data in real time, a first verification package for verifying the first data is attached through a verification tool, and the first data can be verified for data length, format, or type. Similarly, when the BMS system writes the second data in real time through the SPI interface, a second verification package for verifying the second data is attached through a verification tool, and the second data can be verified for data length, format, or type.

[0051] It can be understood that calling the second data from the data sharing file through the BIOS system and decrypting the second data includes: The second data and the second verification package are called from the data sharing file through the BIOS system, the second data is decrypted, and the second data is verified based on the second verification package.

[0052] Exemplarily, after the BIOS system decrypts the called second data, it verifies the second data through a verification tool to determine whether the data length, data format or data type of the second data is consistent with the second verification package. If they are consistent, it means that the verification is successful. If they are inconsistent, it means that the second data has been lost during the transmission process. The BMS system is controlled to rewrite the second data and / or the BIOS system is controlled to reread the second data until the verification result shows that the second data is complete.

[0053] It can be understood that calling the first data from the data sharing file through the BMS system and decrypting the first data includes: The first data and the first verification package are called from the data sharing file through the BMS system, the first data is decrypted, and the first data is verified based on the first verification package.

[0054] Exemplarily, after the BMS system decrypts the called first data, it verifies the first data through a verification tool to determine whether the data length, data format or data type of the first data is consistent with that of the first verification package. If they are consistent, it means that the verification is successful. If they are inconsistent, it means that there is data loss in the transmission process of the first data. In this case, the BMS system is controlled to rewrite the first data and / or the BIOS system is controlled to reread the first data until the verification result shows that the first data is complete.

[0055] Therefore, a data verification mechanism (such as CRC verification) is set up to ensure the integrity and accuracy of data transmission.

[0056] Based on the above embodiment, the server data security interaction method can also be embodied as follows: after the BIOS system is controlled to write the first data to the data sharing file in real time, the method further includes: The BIOS system is controlled to modify the first data of the data sharing file in real time.

[0057] Specifically, when the first data of the BIOS system changes, the first data in the data sharing file can be modified in real time, and after the BIOS system ends running, the BMC system reads and writes the content of the file in real time.

[0058] After the controlling BMS system writes the second data into the data sharing file in real time, the method further includes: The BMS system is controlled to modify the second data of the data sharing file in real time.

[0059] Specifically, when the second data of the BMS system changes, the second data in the data sharing file can be modified in real time, for example, by modifying and editing the content of a single byte of the file through an SPI command, and after the BMS system ends, the BIOS system reads and writes the file content in real time.

[0060] In the above implementation process, the flexibility, integrity and real-time nature of the data are ensured.

[0061] Optionally, add a logging function to the BIOS system and BMC system to record detailed information of each data interaction for subsequent troubleshooting and auditing. Add an exception handling mechanism to the data reading and writing process of the BIOS system and BMC system to ensure timely recovery or alarm when data is damaged or transmitted incorrectly.

[0062] Exemplarily, a data sharing file (BIOS_For_BMC.dat) is created in the BIOS system, and the data that the BIOS system and the BMC system need to transfer is written into the file in a fixed area format. The file supports real-time modification by the BIOS system, and after the BIOS system ends, the BMC system reads and writes the content of the file in real time. When the BIOS system is running, the BMC information that needs to be called is read from the file, and this part of the information supports real-time modification by the BMC system. When the BIOS system needs to send information to the BMC system, the information to be sent is updated in the fixed area of ​​the file, and the BMC system obtains the updated data from the area. The BMC system supports direct copying and transferring of the file through SPI to ensure the efficiency and integrity of data transfer. The BMC system supports modifying and editing the content of a single byte of the file through SPI commands to ensure the flexibility and real-time nature of the data. File encryption mechanism: Add an encryption mechanism (such as AES encryption) during file transfer to ensure that the data will not be tampered with or stolen during the transmission process. In the process of file transfer, add a data verification mechanism (such as CRC verification) to ensure the integrity and accuracy of the data.

[0063] Exemplarily, the running procedures of the BIOS system include component initialization, power management, time management, security management, CPU information and configuration, DIMM information and configuration, and other functions; the BMS system retrieves BIOS information, CPU status and information, DIMM status and information, BIOSlog information, BIOS time setting, BIOS startup item setting, BIOSsetup item modification, BIOS user configuration and other functional information from the data sharing file, and obtains PCIE card status and information at the same time; the BIOS system retrieves BMC information and configuration, BMC network information and configuration, other functional information, etc. from the data sharing file.

[0064] The above steps are not to be performed in a strict order as described in the numbers, but should be understood as an overall solution.

[0065] In the second aspect, based on the above embodiment, the embodiment of the present application also provides a server data security interaction device, which is integrated in the server, and the server includes a BIOS basic input and output system and a BMS battery management system, referring to Figure 2 The server data security interaction device provided in this embodiment specifically includes: a file creation module 301, a data writing module 302, a first calling module 303 and a second calling module 304.

[0066] Among them, the file creation module 301 is used to create a data sharing file in the BIOS system; wherein, the data sharing file is connected to the BMS system through an interface; the data writing module 302 is used to control the BIOS system to write the first data to the data sharing file in real time, and control the BMS system to write the second data to the data sharing file in real time; wherein, both the first data and the second data are encrypted; the first calling module 303 is used to call the second data from the data sharing file through the BIOS system and decrypt the second data; the second calling module 304 is used to call the first data from the data sharing file through the BMS system and decrypt the first data.

[0067] As described above, the embodiment of the present application establishes a data sharing file in the BIOS system; wherein the data sharing file is connected to the BMS system through an interface; the BIOS system is controlled to write the first data to the data sharing file in real time, and the BMS system is controlled to write the second data to the data sharing file in real time; wherein the first data and the second data are both encrypted; the BIOS system calls the second data from the data sharing file and decrypts the second data; the BMS system calls the first data from the data sharing file and decrypts the first data; through the file sharing mechanism, the fragmentation and dispersion of traditional data transmission are avoided, the integrity and consistency of data transmission are ensured, the data transmission efficiency is improved, and an encryption mechanism is set at the same time to ensure the security of data.

[0068] In a third aspect, an embodiment of the present application further provides an electronic device, which can integrate the server data security interaction device of the user-mode polling mechanism provided in the embodiment of the present application. Figure 3 Schematic diagram of the structure of an electronic device provided by an embodiment of the present application. Figure 3 The electronic device includes: an input device 43, an output device 44, a memory 42 and one or more processors 41; the memory 42 is used to store one or more programs; when the one or more programs are executed by the one or more processors 41, the one or more processors 41 implement the server data security interaction method of the user-mode polling mechanism provided in the above embodiment. The input device 43, the output device 44, the memory 42 and the processor 41 can be connected by a bus or other means. Figure 3 The example of connecting through bus is taken in the following.

[0069] The processor 41 executes various functional applications and data processing of the device by running the software programs, instructions and modules stored in the memory 42, that is, implements the above-mentioned server data security interaction method of the user-mode polling mechanism.

[0070] The electronic device provided above can be used to execute the server data security interaction method of the user-mode polling mechanism provided in the above embodiment, and has corresponding functions and beneficial effects.

[0071] In a fourth aspect, an embodiment of the present application also provides a computer-readable storage medium, which includes a stored computer program; wherein, when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute the server data security interaction method as described above, and can achieve the same beneficial effects.

[0072] Of course, the storage medium containing computer executable instructions provided in an embodiment of the present application, whose computer executable instructions are not limited to the server data security interaction method described above, can also execute related operations in the server data security interaction method provided in any embodiment of the present application.

[0073] In a fifth aspect, the embodiments of the present application also provide a computer program product, and the methods described in the various embodiments of the present application can be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs or instructions. When the computer program or instruction is loaded and executed on a computer, the processes or functions described in the various embodiments of the present application are executed in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user device, a core network device, an OAM (Open Application Model) or other programmable device.

[0074] The computer program or instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer program or instructions may be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired or wireless means. The computer-readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server or data center that integrates one or more available media. The available medium may be a magnetic medium, such as a floppy disk, a hard disk, or a magnetic tape; it may also be an optical medium, such as a digital video disk; it may also be a semiconductor medium, such as a solid-state drive. The computer-readable storage medium may be a volatile or non-volatile storage medium, or may include both volatile and non-volatile types of storage media.

[0075] In several embodiments provided in the present application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely schematic. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architecture, functions and operations of the devices, methods and computer program products according to multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of a code, and the module, a program segment or a part of a code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or action, or can be implemented with a combination of dedicated hardware and computer instructions.

[0076] In addition, the functional modules in the various embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.

[0077] If the function is implemented in the form of a software function module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, and other media that can store program codes.

[0078] The above description is only an embodiment of the present application and is not intended to limit the scope of protection of the present application. For those skilled in the art, the present application may have various changes and variations. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application should be included in the scope of protection of the present application. It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in the subsequent drawings.

[0079] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0080] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

Claims

1. A server data security interaction method, characterized in that: Applied to a server, the server includes a BIOS basic input and output system and a BMS battery management system, the method includes: Establishing a data sharing file in the BIOS system; wherein the data sharing file is connected to the BMS system through an interface; Control the BIOS system to write the first data to the data sharing file in real time, and control the BMS system to write the second data to the data sharing file in real time; wherein both the first data and the second data are encrypted; Control the BIOS system to modify the first data of the data sharing file in real time, and control the BMS system to modify the second data of the data sharing file in real time; calling the second data from the data sharing file through the BIOS system and performing decryption processing on the second data; The first data is called from the data sharing file through the BMS system and the first data is decrypted.

2. The server data security interaction method according to claim 1, characterized in that: The controlling the BIOS system to write the first data to the data sharing file in real time, and the controlling the BMS system to write the second data to the data sharing file in real time, comprises: The BIOS system is controlled to write first data in a set format to a data sharing file in real time, and the BMS system is controlled to write second data in a set format to a data sharing file in real time.

3. The server data security interaction method according to claim 1, characterized in that: The calling of the second data from the data sharing file through the BIOS system and decrypting the second data includes: If the second data is called from the data sharing file through the BIOS system for the first time, the second data is copied and decrypted; If it is not the first time that the second data is called from the data sharing file through the BIOS system, the called second data is decrypted and then compared with the second data called in the past; If there is duplicate data between the called second data and the second data called historically, the duplicate data of the second data called historically is removed.

4. The server data security interaction method according to claim 1, characterized in that: The calling the first data from the data sharing file through the BMS system and decrypting the first data includes: If the first data is called from the data sharing file through the BMS system for the first time, the first data is copied and the second data is decrypted; If it is not the first time that the first data is called from the data sharing file through the BMS system, the called first data is decrypted and compared with the first data called in the history; If there is duplicate data between the called first data and the first data called historically, the duplicate data of the first data called historically is removed.

5. The server data security interaction method according to claim 1, characterized in that: The controlling the BIOS system to write the first data to the data sharing file in real time, and the controlling the BMS system to write the second data to the data sharing file in real time, comprises: Control the BIOS system to write the first data and the first verification package to the data sharing file in real time, and control the BMS system to write the second data and the second verification package to the data sharing file in real time; The calling of the second data from the data sharing file through the BIOS system and decrypting the second data includes: Calling the second data and the second verification package from the data sharing file through the BIOS system and decrypting the second data, and verifying the second data based on the second verification package; The calling the first data from the data sharing file through the BMS system and decrypting the first data includes: The first data and the first verification package are called from the data sharing file through the BMS system, the first data is decrypted, and the first data is verified based on the first verification package.

6. A server data security interaction device, characterized in that: Integrated in a server, the server includes a BIOS basic input and output system and a BMS battery management system, the device includes: A file creation module, used to create a data sharing file in the BIOS system; wherein the data sharing file is connected to the BMS system through an interface; A data writing module, used to control the BIOS system to write the first data to the data sharing file in real time, and control the BMS system to write the second data to the data sharing file in real time; wherein both the first data and the second data are encrypted; A first calling module, used for calling the second data from the data sharing file through the BIOS system and performing decryption processing on the second data; The second calling module is used to call the first data from the data sharing file through the BMS system and decrypt the first data.

7. An electronic device, characterized in that: include: A processor, a memory and a bus, wherein the processor is connected to the memory via the bus, and the memory stores computer-readable instructions. When the computer-readable instructions are executed by the processor, they are used to implement the server data security interaction method as described in any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, which, when executed by the server, implements the server data security interaction method as described in any one of claims 1-5.

9. A computer program product, characterized in that The computer program product comprises instructions which, when executed by a computer, cause the computer to implement the method according to any one of claims 1-5.

Images