Server Data Security Interaction Method, Apparatus, Device, Medium and Program Product

Abstract

An embodiment of the present application provides a server data security interaction method, device, equipment, medium and program product, which relates to the field of data security technology. The method includes: establishing a data sharing file in the BIOS system; wherein, the data sharing file is connected to the BMS system through an interface; controlling the BIOS system to write the first data into the data sharing file in real time, and controlling the BMS system to write the second data into the data sharing file in real time; wherein, both the first data and the second data are encrypted; calling the second data from the data sharing file through the BIOS system and decrypting the second data; calling the first data from the data sharing file through the BMS system and decrypting the first data; through the file sharing mechanism, the fragmentation and scatter of traditional data transmission are avoided, the integrity and consistency of data transmission are ensured, the data transmission efficiency is improved, and at the same time, an encryption mechanism is set to ensure the security of data.

Description

Technical Field

[0001] This application relates to the field of data security technologies, and in particular, to a method, apparatus, device, medium, and program product for secure data interaction of a server. Background Art

[0002] During the operation of a server system, a large amount of data transfer and communication is required between the BIOS system and the BMC system. The cooperation between the BIOS and the BMS is a key link in the high-availability design of the server, and is particularly indispensable in power disaster recovery, data protection, and hardware maintenance. The data interaction between the two depends on a standardized protocol, a real-time communication mechanism, and a reliable fault handling logic. However, the traditional data transfer method has the following problems: Fragmented data transfer: The data transfer protocols and methods are interlaced, resulting in serious fragmentation of data transfer. A complete data content often needs to be sent multiple times, reducing the transfer efficiency; Insufficient data security: The traditional data transfer method lacks an effective security mechanism, and the data is easily tampered with or stolen. Summary of the Invention

[0003] The purpose of the embodiments of this application is to provide a method, apparatus, device, medium, and program product for secure data interaction of a server, so as to solve the problems of low transmission efficiency and low security of the existing data interaction method between the BIOS system and the BMC system.

[0004] In a first aspect, the embodiments of this application provide a method for secure data interaction of a server, which is applied to a server. The server includes a BIOS (Basic Input Output System) and a BMS (Battery Management System). The method includes:

[0005] Create a data sharing file in the BIOS system; wherein, the data sharing file is connected to the BMS system through an interface;

[0006] Control the BIOS system to write first data to the data sharing file in real time, and control the BMS system to write second data to the data sharing file in real time; wherein, both the first data and the second data are encrypted;

[0007] Call the second data from the data sharing file through the BIOS system and decrypt the second data;

[0008] Call the first data from the data sharing file through the BMS system and decrypt the first data.

[0009] In the above implementation process, a data sharing file is established in the BIOS system; wherein, the data sharing file is connected to the BMS system through an interface; the BIOS system is controlled to write the first data to the data sharing file in real time, and the BMS system is controlled to write the second data to the data sharing file in real time; wherein, both the first data and the second data are encrypted; the second data is called from the data sharing file by the BIOS system and decrypted; the first data is called from the data sharing file by the BMS system and decrypted; through the file sharing mechanism, the fragmentation and scatter of traditional data transfer are avoided, the integrity and consistency of data transfer are ensured, the data transfer efficiency is improved, and at the same time, an encryption mechanism is set to ensure the security of data.

[0010] Further, the controlling the BIOS system to write the first data to the data sharing file in real time and controlling the BMS system to write the second data to the data sharing file in real time includes:

[0011] Controlling the BIOS system to write the first data in a set format to the data sharing file, and controlling the BMS system to write the second data in a set format to the data sharing file.

[0012] In the above implementation process, the data is stored in a fixed area format to ensure that the BIOS system and the BMC system can accurately read and write data.

[0013] Further, the calling the second data from the data sharing file by the BIOS system and decrypting the second data includes:

[0014] If the second data is called from the data sharing file by the BIOS system for the first time, then copy the second data and decrypt the second data;

[0015] If the second data is called from the data sharing file by the BIOS system not for the first time, then after decrypting the called second data, perform a comparison operation with the historically called second data;

[0016] If there are duplicate data in the called second data and the historically called second data, then remove the duplicate data of the historically called second data.

[0017] In the above implementation process, during the data transfer process, the duplicate data called by the BIOS system is removed or overwritten, ensuring the real-time and consistency of the data.

[0018] Further, the calling the first data from the data sharing file by the BMS system and decrypting the first data includes:

[0019] If the first data is called from the data sharing file through the BMS system for the first time, copy the first data and decrypt the second data;

[0020] If the first data is not called from the data sharing file through the BMS system for the first time, after decrypting the called first data, compare it with the previously called first data;

[0021] If there are duplicate data in the called first data and the previously called first data, remove the duplicate data of the previously called first data.

[0022] In the above implementation process, during the data transfer process, the BMS system removes or overwrites the duplicate data in the call, ensuring the real-time and consistency of the data.

[0023] Further, controlling the BIOS system to write the first data to the data sharing file in real time and controlling the BMS system to write the second data to the data sharing file includes:

[0024] Controlling the BIOS system to write the first data and the first check package to the data sharing file in real time, and controlling the BMS system to write the second data and the second check package to the data sharing file in real time;

[0025] The process of calling the second data from the data sharing file through the BIOS system and decrypting the second data includes:

[0026] Calling the second data and the second check package from the data sharing file through the BIOS system, decrypting the second data, and verifying the second data based on the second check package;

[0027] The process of calling the first data from the data sharing file through the BMS system and decrypting the first data includes:

[0028] Calling the first data and the first check package from the data sharing file through the BMS system, decrypting the first data, and verifying the first data based on the first check package.

[0029] In the above implementation process, a data verification mechanism (such as CRC verification) is set to ensure the integrity and accuracy of data transfer.

[0030] Further, after controlling the BIOS system to write the first data to the data sharing file in real time, it also includes:

[0031] Controlling the BIOS system to modify the first data in the data sharing file in real time.

[0032] After controlling the BMS system to write the second data to the data sharing file in real time, it also includes:

[0033] Control the second data of the data sharing file modified by the BMS system in real time.

[0034] In the above implementation process, ensure the flexibility, integrity, and real-time nature of the data.

[0035] In a second aspect, an embodiment of the present application further provides a server data security interaction device integrated in a server. The server includes a BIOS (Basic Input Output System) and a BMS (Battery Management System). The device includes:

[0036] A file creation module for creating a data sharing file in the BIOS system; wherein, the data sharing file is connected to the BMS system through an interface.

[0037] A data writing module for controlling the BIOS system to write first data to the data sharing file in real time and controlling the BMS system to write second data to the data sharing file in real time; wherein, both the first data and the second data are encrypted.

[0038] A first call module for calling the second data from the data sharing file through the BIOS system and decrypting the second data.

[0039] A second call module for calling the first data from the data sharing file through the BMS system and decrypting the first data.

[0040] In a third aspect, an embodiment of the present application provides an electronic device, including:

[0041] A processor, a memory, and a bus. The processor is connected to the memory through the bus. The memory stores computer-readable instructions. When the computer-readable instructions are executed by the processor, they are used to implement the server data security interaction method as described above.

[0042] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium. A computer program is stored on the computer-readable storage medium. When the computer program is executed by a server, it implements the server data security interaction method as described above.

[0043] In a fifth aspect, an embodiment of the present invention provides a computer program product. The computer program product includes instructions. When the instructions are executed by a computer, the computer implements the server data security interaction method as described above. Description of the Drawings

[0044] To more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the accompanying drawings required in the embodiments of the present application. It should be understood that the following drawings only show some embodiments of the present application, and therefore should not be regarded as a limitation of the scope. For those of ordinary skill in the art, without creative efforts, other related drawings can also be obtained based on these drawings.

[0045] Figure 1 It is a schematic flowchart of a method for secure interaction of server data provided by an embodiment of the present application;

[0046] Figure 2 It is a schematic flowchart of a device for secure interaction of server data provided by an embodiment of the present application;

[0047] Figure 3 It is a schematic structural diagram of an electronic device provided by an embodiment of the present application. Specific embodiments

[0048] The following will describe the technical solutions in the embodiments of the present application in conjunction with the accompanying drawings in the embodiments of the present application.

[0049] It should be noted that similar reference numerals and letters represent similar items in the following drawings. Therefore, once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings. At the same time, in the description of the present application, terms such as "first" and "second" are only used for differential description and cannot be understood as indicating or implying relative importance.

[0050] BMS (Battery Management System) is a core component in the new energy field, mainly used for real-time monitoring, protection, optimization and diagnosis of battery packs.

[0051] BIOS (Basic Input / Output System) is the core firmware during the computer startup process, responsible for hardware initialization, self-check and booting the operating system.

[0052] During the operation of the server system, a large amount of data transfer and communication is required between the BIOS and BMC systems. The traditional data transfer methods have the following problems: 1. Fragmented data transfer: The data transfer protocols and methods are interlaced, resulting in serious fragmentation of data transfer. A complete data content often needs to be sent multiple times, reducing the transfer efficiency. 2. Insufficient data security: The traditional data transfer methods lack effective security mechanisms, and data is easily tampered with or stolen. 3. Difficulty in ensuring data integrity: Due to the fragmentation of data transfer, errors are likely to occur during the data transfer process, resulting in the inability to guarantee data integrity. 4. High system resource occupancy: Frequent data sending commands occupy a large amount of system resources, affecting the overall performance of the system.

[0053] Based on this, an embodiment of the present application provides a server data security interaction method to solve the above problems.

[0054] Please refer to Figure 1 , Figure 1 which is a schematic flowchart of a server data security interaction method provided by an embodiment of the present application. This server data security interaction method is applied to a server, which includes a BIOS (Basic Input / Output System) and a BMS (Battery Management System). The method includes:

[0055] 100. Establish a data sharing file in the BIOS system; wherein, the data sharing file is connected to the BMS system through an interface.

[0056] Exemplarily, a data sharing file (BIOS_For_BMC.dat) is established in the BIOS system, and the data that needs to be transferred between the BIOS system and the BMC system is written into this file; through the file sharing mechanism, the fragmentation and scatter of traditional data transfer are avoided, ensuring the integrity and consistency of data transfer.

[0057] Optionally, the BMS system is connected to the data sharing file through an SPI interface (Serial Peripheral Interface) and performs data interaction with the data sharing file in the BIOS storage area through the SPI interface.

[0058] Optionally, the server can be a general-purpose server or a storage server. In this embodiment of the present application, a storage server is adopted.

[0059] 200. Control the BIOS system to write the first data into the data sharing file in real time, and control the BMS system to write the second data into the data sharing file in real time; wherein, both the first data and the second data are encrypted.

[0060] Optionally, control the BIOS system to write the first data in the set format to the data sharing file in real time, and control the BMS system to write the second data in the set format to the data sharing file in real time; thereby, the first data and the second data are stored in a fixed area format, ensuring that the BIOS system and the BMC system can accurately read and write data.

[0061] Meanwhile, during the data transfer process, the first data and the second data are protected by an encryption mechanism to ensure data security.

[0062] 300. Call the second data from the data sharing file through the BIOS system and decrypt the second data.

[0063] 310. If the second data is called from the data sharing file through the BIOS system for the first time, copy the second data and decrypt the second data.

[0064] 320. If the second data is called from the data sharing file through the BIOS system not for the first time, after decrypting the called second data, perform a comparison operation with the historically called second data.

[0065] 330. If there are duplicate data in the called second data and the historically called second data, remove the duplicate data of the historically called second data.

[0066] It can be understood that when the BIOS system calls the second data from the data sharing file for the first time, it makes an overall copy of the second data. When the second or Nth time it calls the second data from the data sharing file, it can perform a comparison operation between the called second data each time and the stored historical second data. If there are duplicate data, remove and overwrite the duplicate data. If there are no duplicate data, retain all the data.

[0067] Thus, during the data transfer process, remove or overwrite the duplicate data called by the BIOS system, ensuring data timeliness and consistency.

[0068] 400. Call the first data from the data sharing file through the BMS system and decrypt the first data.

[0069] 410. If the first data is called from the data sharing file through the BMS system for the first time, copy the first data and decrypt the second data.

[0070] 420. If the first data is called from the data sharing file through the BMS system not for the first time, after decrypting the called first data, perform a comparison operation with the historically called first data.

[0071] 430. If there are duplicate data between the first data called and the first data called historically, the duplicate data of the historically called first data shall be removed.

[0072] It can be understood that the BMS system first calls the first data from the data sharing file through the SPI interface and makes an overall copy of the first data. When the first data is called from the data sharing file for the second time or the Nth time, the first data called each time can be compared with the stored historical first data. If there are duplicate data, the duplicate data shall be removed and overwritten. If there are no duplicate data, all the data shall be retained.

[0073] Thus, during the data transfer process, the BMS system removes or overwrites the duplicate data called, ensuring the real-time and consistency of the data.

[0074] In the above, a data sharing file is established in the BIOS system in the embodiment of the present application; wherein, the data sharing file is connected to the BMS system through an interface; the BIOS system is controlled to write the first data into the data sharing file in real time, and the BMS system is controlled to write the second data into the data sharing file in real time; wherein, both the first data and the second data are encrypted; the second data is called from the data sharing file by the BIOS system and decrypted; the first data is called from the data sharing file by the BMS system and decrypted; through the file sharing mechanism, the fragmentation and scatter of traditional data transfer are avoided, ensuring the integrity and consistency of data transfer, improving the data transfer efficiency, and at the same time setting an encryption mechanism to ensure the security of the data.

[0075] On the basis of the above embodiment, the server data security interaction method can be further specified as: the control of the BIOS system to write the first data into the data sharing file in real time and the control of the BMS system to write the second data into the data sharing file in real time include:

[0076] Controlling the BIOS system to write the first data and the first check package into the data sharing file in real time, and controlling the BMS system to write the second data and the second check package into the data sharing file in real time.

[0077] Exemplarily, when the BIOS system writes the first data in real time, a first check package for checking the first data is attached through a check tool, and data length check, format check or type check, etc. can be performed on the first data. Similarly, when the BMS system writes the second data in real time through the SPI interface, a second check package for checking the second data is attached through a check tool, and data length check, format check or type check, etc. can be performed on the second data.

[0078] It can be understood that the process of calling the second data from the data sharing file through the BIOS system and decrypting the second data includes:

[0079] Calling the second data and the second check package from the data sharing file through the BIOS system, decrypting the second data, and verifying the second data based on the second check package.

[0080] Exemplarily, after the BIOS system decrypts the called second data, it verifies the second data through a verification tool to determine whether the data length, data format, or data type of the second data is consistent with that of the second check package. If they are consistent, it indicates that the verification is successful. If they are inconsistent, it indicates that data loss occurred during the transmission of the second data. Then, it controls the BMS system to rewrite the second data and / or controls the BIOS system to reread the second data until the verification result shows that the second data is complete.

[0081] It can be understood that the process of calling the first data from the data sharing file through the BMS system and decrypting the first data includes:

[0082] Calling the first data and the first check package from the data sharing file through the BMS system, decrypting the first data, and verifying the first data based on the first check package.

[0083] Exemplarily, after the BMS system decrypts the called first data, it verifies the first data through a verification tool to determine whether the data length, data format, or data type of the first data is consistent with that of the first check package. If they are consistent, it indicates that the verification is successful. If they are inconsistent, it indicates that data loss occurred during the transmission of the first data. Then, it controls the BMS system to rewrite the first data and / or controls the BIOS system to reread the first data until the verification result shows that the first data is complete.

[0084] Thus, a data verification mechanism (such as CRC verification) is set up to ensure the integrity and accuracy of data transmission.

[0085] Based on the above embodiments, the server data security interaction method can be further specified as: after controlling the BIOS system to write the first data to the data sharing file in real time, it further includes:

[0086] Controlling the BIOS system to modify the first data in the data sharing file in real time.

[0087] Specifically, when the first data of the BIOS system changes, it can modify the first data in the data sharing file in real time, and after the BIOS system runs to completion, the BMC system reads and writes the file content in real time.

[0088] After the control BMS system writes the second data to the data sharing file in real time, it further includes:

[0089] The control BMS system modifies the second data of the data sharing file in real time.

[0090] Specifically, when the second data of the BMS system changes, the second data in the data sharing file can be modified in real time. For example, the content of a single byte of the file can be modified and edited through an SPI command, and after the BMS system runs to completion, the BIOS system reads and writes the content of this file in real time.

[0091] In the above implementation process, the flexibility, integrity, and real-time nature of the data are ensured.

[0092] Optionally, a logging function is added to the BIOS system and the BMC system to record the detailed information of each data interaction, which is convenient for subsequent problem troubleshooting and auditing. During the data reading and writing processes of the BIOS system and the BMC system, an exception handling mechanism is added to ensure that in case of data corruption or transmission errors, timely recovery or alarm can be achieved.

[0093] Exemplarily, a data sharing file (BIOS_For_BMC.dat) is created in the BIOS system, and the data that needs to be transmitted between the BIOS system and the BMC system is written into this file according to a fixed area format. This file supports real-time modification by the BIOS system, and after the BIOS system runs to completion, the BMC system reads and writes the content of this file in real time. When the BIOS system is running, the BMC information that needs to be called is read from this file, and this part of the information supports real-time modification by the BMC system. When the BIOS system needs to send information to the BMC system, the sent information is updated in the fixed area of this file, and the BMC system obtains the updated data from this area. The BMC system supports directly copying and transmitting this file through SPI to ensure the efficiency and integrity of data transmission. The BMC system supports modifying and editing the content of a single byte of this file through an SPI command to ensure the flexibility and real-time nature of the data. File encryption mechanism: An encryption mechanism (such as AES encryption) is added during the file transmission process to ensure that the data will not be tampered with or stolen during transmission. During the file transfer process, a data verification mechanism (such as CRC verification) is added to ensure the integrity and accuracy of the data.

[0094] Exemplarily, the operating program of the BIOS system includes component initialization, power management, time management, security management, CPU information and configuration, DIMM information and configuration, and other functions, etc.; the BMS system retrieves BIOS information, CPU status and information, DIMM status and information, BIOS log information, BIOS time setting, BIOS startup item setting, BIOS setup item modification, BIOS user configuration and other function information, etc. from the data sharing file, and at the same time obtains the PCIE card status and information; the BIOS system retrieves BMC information and configuration, BMC network information and configuration, and other function information, etc. from the data sharing file.

[0095] The above steps are not executed strictly in the order described by the numbers, and they should be understood as an overall solution.

[0096] In a second aspect, on the basis of the above embodiments, the embodiments of the present application further provide a server data security interaction device, integrated in the server, and the server includes a BIOS (Basic Input Output System) and a BMS (Battery Management System). Refer to Figure 2 , the server data security interaction device provided in this embodiment specifically includes: a file creation module 301, a data writing module 302, a first calling module 303, and a second calling module 304.

[0097] Among them, the file creation module 301 is used to create a data sharing file in the BIOS system; among them, the data sharing file is connected to the BMS system through an interface; the data writing module 302 is used to control the BIOS system to write the first data to the data sharing file in real time, and control the BMS system to write the second data to the data sharing file in real time; among them, both the first data and the second data are encrypted; the first calling module 303 is used to call the second data from the data sharing file through the BIOS system and decrypt the second data; the second calling module 304 is used to call the first data from the data sharing file through the BMS system and decrypt the first data.

[0098] As described above, the embodiments of the present application create a data sharing file in the BIOS system; among them, the data sharing file is connected to the BMS system through an interface; control the BIOS system to write the first data to the data sharing file in real time, and control the BMS system to write the second data to the data sharing file in real time; among them, both the first data and the second data are encrypted; call the second data from the data sharing file through the BIOS system and decrypt the second data; call the first data from the data sharing file through the BMS system and decrypt the first data; through the file sharing mechanism, it avoids the fragmentation and scatter of traditional data transfer, ensures the integrity and consistency of data transfer, improves data transfer efficiency, and at the same time sets an encryption mechanism to ensure data security.

[0099] In a third aspect, an embodiment of the present application further provides an electronic device, which may integrate the server data security interaction device of the user-mode polling mechanism provided in the embodiment of the present application. Figure 3 It is a schematic structural diagram of an electronic device provided in an embodiment of the present application. Refer to Figure 3 , the electronic device includes: an input device 43, an output device 44, a memory 42, and one or more processors 41; the memory 42 is used to store one or more programs; when the one or more programs are executed by the one or more processors 41, the one or more processors 41 implement the server data security interaction method of the user-mode polling mechanism provided in the above embodiment. Wherein, the input device 43, the output device 44, the memory 42, and the processor 41 may be connected through a bus or other means, Figure 3 Taking the connection through the bus as an example.

[0100] The processor 41 executes various functional applications and data processing of the device by running software programs, instructions, and modules stored in the memory 42, that is, implements the above-mentioned server data security interaction method of the user-mode polling mechanism.

[0101] The above-provided electronic device can be used to execute the server data security interaction method provided in the above embodiment, and has corresponding functions and beneficial effects.

[0102] In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium, which includes a stored computer program; wherein, when the computer program runs, it controls the device where the computer-readable storage medium is located to execute the server data security interaction method as described above, and can achieve the same beneficial effects.

[0103] Of course, the computer-executable instructions of a storage medium provided in an embodiment of the present application are not limited to the server data security interaction method as described above, and can also execute related operations in the server data security interaction methods provided in any embodiment of the present application.

[0104] Fifth aspect, embodiments of the present application further provide a computer program product. The methods described in various embodiments of the present application can be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs or instructions. When the computer program or instructions are loaded and executed on a computer, the processes or functions described in various embodiments of the present application are executed in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user device, a core network device, an OAM (Open Application Model), or other programmable devices.

[0105] The computer program or instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer program or instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center in a wired or wireless manner. The computer-readable storage medium can be any available medium that can be accessed by a computer, or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium, such as a floppy disk, a hard disk, or a magnetic tape; it can also be an optical medium, such as a digital video disc; or it can be a semiconductor medium, such as a solid-state drive. The computer-readable storage medium can be a volatile or non-volatile storage medium, or can include both volatile and non-volatile types of storage media.

[0106] In several embodiments provided by the present application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architectures, functions, and operations of the devices, methods, and computer program products according to multiple embodiments of the present application. In this regard, each block in the flowchart or block diagram can represent a module, a program segment, or a part of code that contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks may occur in a different order than marked in the accompanying drawings. For example, two consecutive blocks can actually be executed substantially in parallel, and they can sometimes be executed in the reverse order, depending on the functions involved. It should also be noted that each block in the block diagram and / or flowchart, and the combination of blocks in the block diagram and / or flowchart, can be implemented by a dedicated hardware-based system for performing the specified functions or actions, or can be implemented by a combination of dedicated hardware and computer instructions.

[0107] In addition, each functional module in various embodiments of the present application may be integrated together to form an independent part, or each module may exist alone, or two or more modules may be integrated to form an independent part.

[0108] If the above-mentioned function is implemented in the form of a software functional module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art, or a part of this technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in various embodiments of the present application. The aforementioned storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memories (ROM, Read-Only Memory), random access memories (RAM, Random Access Memory), magnetic disks, or optical discs that can store program codes.

[0109] The above are only the embodiments of the present application and are not used to limit the protection scope of the present application. For those skilled in the art, the present application can have various changes and modifications. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application. It should be noted that similar reference numerals and letters represent similar items in the following drawings. Therefore, once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings.

[0110] The above is only the specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of changes or replacements within the technical scope disclosed by the present application, and all should be covered by the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

[0111] It should be noted that in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprising", "including" or any other variant thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements not only includes those elements, but also includes other elements not expressly listed, or further includes elements inherent to such process, method, article or device. Without further limitation, an element defined by the statement "comprising an..." does not exclude the presence of additional identical elements in the process, method, article or device comprising said element.

Claims

1. A server data security interaction method, characterized in that: Applied to a server, the server includes a BIOS basic input and output system and a BMS battery management system, the method includes: Establishing a data sharing file in the BIOS system; wherein the data sharing file is connected to the BMS system through an interface; Control the BIOS system to write the first data to the data sharing file in real time, and control the BMS system to write the second data to the data sharing file in real time; wherein both the first data and the second data are encrypted; Control the BIOS system to modify the first data of the data sharing file in real time, and control the BMS system to modify the second data of the data sharing file in real time; calling the second data from the data sharing file through the BIOS system and performing decryption processing on the second data; The first data is called from the data sharing file through the BMS system and the first data is decrypted.

2. The server data security interaction method according to claim 1, characterized in that: The controlling the BIOS system to write the first data to the data sharing file in real time, and the controlling the BMS system to write the second data to the data sharing file in real time, comprises: The BIOS system is controlled to write first data in a set format to a data sharing file in real time, and the BMS system is controlled to write second data in a set format to a data sharing file in real time.

3. The server data security interaction method according to claim 1, characterized in that: The calling of the second data from the data sharing file through the BIOS system and decrypting the second data includes: If the second data is called from the data sharing file through the BIOS system for the first time, the second data is copied and decrypted; If it is not the first time that the second data is called from the data sharing file through the BIOS system, the called second data is decrypted and then compared with the second data called in the past; If there is duplicate data between the called second data and the second data called historically, the duplicate data of the second data called historically is removed.

4. The server data security interaction method according to claim 1, characterized in that: The calling the first data from the data sharing file through the BMS system and decrypting the first data includes: If the first data is called from the data sharing file through the BMS system for the first time, the first data is copied and the second data is decrypted; If it is not the first time that the first data is called from the data sharing file through the BMS system, the called first data is decrypted and compared with the first data called in the history; If there is duplicate data between the called first data and the first data called historically, the duplicate data of the first data called historically is removed.

5. The server data security interaction method according to claim 1, characterized in that: The controlling the BIOS system to write the first data to the data sharing file in real time, and the controlling the BMS system to write the second data to the data sharing file in real time, comprises: Control the BIOS system to write the first data and the first verification package to the data sharing file in real time, and control the BMS system to write the second data and the second verification package to the data sharing file in real time; The calling of the second data from the data sharing file through the BIOS system and decrypting the second data includes: Calling the second data and the second verification package from the data sharing file through the BIOS system and decrypting the second data, and verifying the second data based on the second verification package; The calling the first data from the data sharing file through the BMS system and decrypting the first data includes: The first data and the first verification package are called from the data sharing file through the BMS system, the first data is decrypted, and the first data is verified based on the first verification package.

6. A server data security interaction device, characterized in that: Integrated in a server, the server includes a BIOS basic input and output system and a BMS battery management system, the device includes: A file creation module, used to create a data sharing file in the BIOS system; wherein the data sharing file is connected to the BMS system through an interface; A data writing module, used to control the BIOS system to write the first data to the data sharing file in real time, and control the BMS system to write the second data to the data sharing file in real time; wherein both the first data and the second data are encrypted; A first calling module, used for calling the second data from the data sharing file through the BIOS system and performing decryption processing on the second data; The second calling module is used to call the first data from the data sharing file through the BMS system and decrypt the first data.

7. An electronic device, characterized in that: include: A processor, a memory and a bus, wherein the processor is connected to the memory via the bus, and the memory stores computer-readable instructions. When the computer-readable instructions are executed by the processor, they are used to implement the server data security interaction method as described in any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, which, when executed by the server, implements the server data security interaction method as described in any one of claims 1-5.

9. A computer program product, characterized in that The computer program product comprises instructions which, when executed by a computer, cause the computer to implement the method according to any one of claims 1-5.

Images