Processing device, processing system, processing method, and program

Abstract

To provide a processing device that can improve security. [Solution] The processing unit comprises a power supply that supplies power to the processing unit, a memory, an acquisition means for acquiring a BIOS (Basic Input / Output System) image from an external storage device, and an expansion means for expanding the BIOS image acquired by the acquisition means into the memory. When the power supply is stopped, the power supply to the memory is stopped and the BIOS image is erased.

Description

Technical Field

[0001] This disclosure relates to a processing device, a processing system, a processing method, and a program.

Background Art

[0002] Computers are used in various technical fields. In many computers, the BIOS (Basic Input / Output System) is utilized to perform basic input / output control and hardware initialization. Patent Document 1 discloses a technology related to enabling the recovery of BIOS data and an information processing device that does not require a dedicated device for BIOS data recovery.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In the technical field related to Patent Document 1, there is a need for a technology that can improve security, such as preventing tampering of the BIOS.

[0005] One of the objectives of each aspect of this disclosure is to provide a processing device, a processing system, a processing method, and a program that can solve the above problems.

Means for Solving the Problems

[0006] According to one aspect of the present disclosure, the processing device comprises a power supply that supplies power to the processing device, a memory, an acquisition means for acquiring a BIOS (Basic Input / Output System) image from an external storage device, and an expansion means for expanding the BIOS image acquired by the acquisition means into the memory, wherein the memory is powered off and the BIOS image is erased when the power supply is stopped.

[0007] According to another aspect of this disclosure, the processing system comprises the processing device described above and the external storage device.

[0008] According to another aspect of this disclosure, a processing method is a processing method performed by a processing unit comprising a power supply for supplying power to the processing unit and a memory, and includes: acquiring a BIOS (Basic Input / Output System) image from an external storage device; expanding the acquired BIOS image into the memory; and, if the power supply is stopped, stopping the power supply and erasing the BIOS image.

[0009] According to another aspect of this disclosure, the program causes a computer of a processing unit, which includes a power supply that supplies power to the processing unit and memory, to perform the following actions: acquire a BIOS (Basic Input / Output System) image from an external storage device; expand the acquired BIOS image into the memory; and, if the power supply is stopped, stop the power supply and erase the BIOS image. [Effects of the Invention]

[0010] Each aspect of this disclosure can improve security. [Brief explanation of the drawing]

[0011] [Figure 1] This figure shows an example of the configuration of a processing system according to some embodiments of the present disclosure. [Figure 2]This figure shows a first example of the processing flow of a processing system according to one embodiment of the present disclosure. [Figure 3] This figure shows a second example of the processing flow of a processing system according to one embodiment of the present disclosure. [Figure 4] This figure shows an example of the configuration of a processing system according to some embodiments of the present disclosure. [Figure 5] This figure shows an example of the configuration of an apparatus according to some embodiments of the present disclosure. [Figure 6] This figure shows an example of the processing flow of a processing apparatus according to some embodiments of the present disclosure. [Figure 7] This is a schematic block diagram showing the configuration of a computer according to at least one embodiment. [Modes for carrying out the invention]

[0012] The embodiments will be described in detail below with reference to the drawings. <Embodiment> A processing system 1 according to one embodiment of this disclosure will be described with reference to the drawings. Processing system 1 is a system that can improve security.

[0013] (Processing system configuration) A processing system 1 according to one embodiment of the present disclosure will be described with reference to the drawings. Figure 1 is a diagram showing an example of the configuration of a processing system 1 according to several embodiments of the present disclosure. As shown in Figure 1, the processing system 1 comprises a processing unit 10, an external device 20, and an external IF (Interface) 30.

[0014] As shown in Figure 1, the processing unit 10 includes a power button 101, a power control unit 102, a chipset 103, a CPU (Central Processing Unit) 104, a BIOS (Basic Input / Output System) load module 105, a power supply 106, and an SPI (Serial Peripheral Interface) 107.

[0015] As shown in FIG. 1, the BIOS load module 105 includes a Firmware 1051, a CPU 1052, a RAM (Random Access Memory) 1053, an external IF control unit 1054, and an SPI control unit 1055.

[0016] The CPU 1052 realizes various processes by executing the Firmware 1051. Examples of various processes realized by the CPU 1052 include controlling the external IF control unit 1054, reading the BIOS image 2021 from the external device 20, storing the read BIOS image 2021 in the RAM 1053, and transmitting the data in the RAM 1053 to the Chipset 103 via the SPI 107 controlled by the SPI control unit 1055 in response to a BIOS image read request by the Chipset 103.

[0017] The BIOS load module 105 is connected to the external device 20 via the external IF control unit 1054. Also, the BIOS load module 105 is connected to the Chipset 103 via the SPI 107. The SPI control unit 1055 controls the SPI 107 to communicate between the BIOS load module 105 and the Chipset 103.

[0018] As shown in FIG. 1, the external device 20 includes an external IF control unit 201 and a storage 202. As shown in FIG. 1, the storage 202 stores a BIOS image 2021. Details of the processes performed by the processing device 10 and the external device 20 will be described later.

[0019] Note that the processes performed by the processing system 1 according to an embodiment of the present disclosure are not limited to the above-described processes. For example, the processing system 1 may perform the processes described below.

[0020] Figure 2 is a diagram showing a first example of the processing flow of a processing system 1 according to one embodiment of the present disclosure. Here, with reference to Figure 2, the process of starting the processing device 10 performed by the processing system 1 will be described.

[0021] The user presses the power button 101 of the processing unit 10 to start the processing unit 10. This action presses the power button 101 (step S1). When the power button 101 is pressed, the power control unit 102 controls the power supply 106 to supply power to the BIOS load module 105 (step S2). The power supply 106 supplies power to the BIOS load module 105 in accordance with the control by the power control unit 102 (step S3).

[0022] When power is supplied to the BIOS load module 105, the CPU 1052 executes Firmware 1051. While executing Firmware 1051, the CPU 1052 initializes the RAM 1053, the external IF control unit 1054, and the SPI control unit 1055 located inside the BIOS load module 105 (step S4). In the following description, even if it is not explicitly stated that the CPU 1052 is executing Firmware 1051, it will be assumed that the CPU 1052 is executing Firmware 1051.

[0023] When the processing unit 10 starts up, the CPU 1052 reads the BIOS image 2021 from the storage 202 in the external device 20 (step S5). The CPU 1052 loads the read BIOS image 2021 into the RAM 1053 inside the BIOS load module 105 (step S6). The BIOS load module 105 then instructs the power control unit 102 to supply power to the chipset 103 and CPU 104 inside the processing unit 10 (step S7). The power supply 106 supplies power to the chipset 103 and CPU 104 under the control of the power control unit 102 in response to the instruction. After power is supplied to the chipset 103 and CPU 104, the CPU 104 inside the processing unit 10 fetches the BIOS image from the RAM 1053 in the BIOS load module 105 via the chipset 103 (step S8). Chipset 103 requests a read from CPU 104 at the time CPU 104 fetches data during step S8. In response to the read request from Chipset 103, CPU 104 sends the BIOS image from RAM 1053 to Chipset 103 via SPI control unit 1055 (step S9). Next, CPU 104 executes the sent BIOS image. This starts POST (step S10). After POST is complete, the OS starts (step S11). The processing performed by the processing system 1 described above is performed each time the processing unit 10 starts up.

[0024] Figure 3 is a diagram showing a second example of the processing flow of processing system 1 according to one embodiment of the present disclosure. Here, with reference to Figure 3, the process of stopping the processing device 10 performed by processing system 1 will be described.

[0025] The user presses the power button 101 on the processing unit 10. This action presses the power button 101 (step S21). When the power button 101 is pressed, the power control unit 102 instructs the power supply 106 to stop supplying power to the chipset 103 and CPU 104 inside the processing unit 10 (step S22). The power supply 106 stops supplying power to the chipset 103 and CPU 104 inside the processing unit 10 in response to the control by the power control unit 102 (step S23).

[0026] The power supply to the Chipset 103 and CPU 104 inside the processing unit 10 is cut off, which erases the BIOS image in RAM 1053 within the BIOS load module 105 (step S24). Then, the processing unit 10 stops (step S25).

[0027] In each embodiment of this disclosure, specific examples of the external IF30 include a USB (Universal Serial Bus) interface and an Ethernet interface. Figure 4 is a diagram showing an example of the configuration of a processing system 1 according to several embodiments of this disclosure. As shown in Figure 4, when the processing unit 10 of the processing system 1 is equipped with a network interface, the external IF control unit 1054 and the external IF control unit 201 are specifically the network IF control unit 1054 and the network IF control unit 201, respectively. In this case, the external device 20 is assumed to be a server or a cloud system. A server is equipped with a processor (CPU), memory (RAM), storage drive, network interface, and power supply unit. A cloud system can be considered to be essentially a type of server. Therefore, a cloud system is equipped with a processor (CPU), memory (RAM), storage drive, network interface, and power supply unit, similar to a server.

[0028] (advantage) The above describes a processing system 1 according to one embodiment of the present disclosure. The processing unit 10 of the processing system 1 includes a power supply 106, RAM 1053 (an example of memory), and CPU 1052 (an example of acquisition means, an example of deployment means). In the processing unit 10, the power supply 106 supplies power to the processing unit 10. The CPU 1052 acquires a BIOS image 2021 from storage 202 (an example of an external storage device). The CPU 1052 also deploys the acquired BIOS image 2021 to RAM 1053. When the power supply 106 stops, the power supply to RAM 1053 is stopped, and the BIOS image is erased. In this case, since the BIOS data is completely lost when the power supply 106 stops, it cannot be physically tampered with. Therefore, this processing unit 10 can improve security.

[0029] Furthermore, when the processing unit 10 starts up, the CPU 1052 reads the BIOS image 2021 from the storage 202 in the external device 20. In this case, the BIOS image 2021 read by the CPU 1052 is the latest image. Therefore, this processing unit 10 can improve the maintainability of the processing system 1.

[0030] <Modified examples of embodiments> A modified version of the embodiment of this disclosure, processing system 1, will now be described. In one embodiment of the processing system 1 of this disclosure, the processing unit 10 was described as being equipped with a volatile memory, RAM 1053 (an example of memory). However, the processing unit 10 of the modified version of the embodiment of this disclosure may be equipped with non-volatile memory (for example, ROM (Read Only Memory) (an example of memory)) instead of RAM 1053. If the processing unit 10 is equipped with non-volatile memory, the processing unit 10 may include in the firmware of the BIOS load module 105 an operation to delete the contents of the non-volatile memory when the power supply 106 is stopped.

[0031] Next, a processing unit 10 according to some embodiments of the present disclosure will be described. Figure 5 is a diagram showing an example of the configuration of a processing unit 10 according to some embodiments of the present disclosure. As shown in Figure 5, the processing unit 10 comprises a power supply 701, a memory 702, an acquisition means 703, and an unpacking means 704.

[0032] The power supply 701 supplies power to the processing unit 10. The acquisition means 703 acquires a BIOS image from an external storage device. The deployment means 704 deploys the BIOS image acquired by the acquisition means 703 into the memory 702. If the power supply 701 stops, the power supply to the memory 702 is stopped and the BIOS image is erased.

[0033] The power supply 701 can be implemented, for example, using the functions of the power supply 106 illustrated in Figures 1 and 4. The memory 702 can be implemented, for example, using the functions of the RAM 1053 illustrated in Figures 1 and 4, or the non-volatile memory (e.g., ROM) described in the modified embodiment. The acquisition means 703 and the unpacking means 704 can each be implemented, for example, using the functions of the CPU 1052 illustrated in Figures 1 and 4.

[0034] In addition, in a modified embodiment of the present disclosure, the CPU 1052 may read a BIOS image 2021 arbitrarily selected by the user from the storage 202 in the external device 20 when the processing unit 10 is started.

[0035] Specifically, the external device 20 stores multiple BIOS images for different purposes, such as a maintenance BIOS, a general-purpose BIOS, and a performance-oriented BIOS, in its storage 202. Each time the processing unit 10 starts up, the CPU 1052 notifies the user of the multiple BIOS images stored in the storage 202. For example, the CPU 1052 uses a dedicated application program to display a list of multiple BIOS images for different purposes on an external monitor or the user's smartphone. The user then selects the desired BIOS image from the displayed list. This selection process involves, for example, using a mouse or touch panel to identify one of the BIOS images displayed on the external monitor or the user's smartphone. In response to this user action, the CPU 1052 retrieves the BIOS image selected by the user from the multiple BIOS images according to its intended use. In this way, the CPU 1052 can retrieve any BIOS image suitable for its intended purpose.

[0036] (advantage) In a modified embodiment of this disclosure, the CPU 1052 reads a BIOS image 2021 arbitrarily selected by the user from the storage 202 in the external device 20 each time the processing unit 10 is started. In this case, the BIOS image 2021 read by the CPU 1052 is the image selected by the user, and different access rights and settings are possible for administrators and general users. Therefore, this processing unit 10 can improve the convenience of the processing system 1.

[0037] Next, the processing performed by the processing apparatus 10 according to some embodiments of the present disclosure will be described. Figure 6 is a diagram showing an example of the processing flow of the processing apparatus 10 according to some embodiments of the present disclosure. Here, the processing of the processing apparatus 10 will be described with reference to Figure 6.

[0038] The power supply 701 supplies power to the processing unit 10 (step S101). The acquisition means 703 acquires a BIOS image from an external storage device (step S102). The deployment means 704 deploys the BIOS image acquired by the acquisition means 703 into the memory 702 (step S103). If the power supply 106 stops, the power supply to the memory 702 is stopped and the BIOS image is erased (step S104).

[0039] (advantage) Several embodiments of the processing device 10 according to this disclosure have been described above. This processing device 10 can improve security.

[0040] In addition, the order of the processes in each embodiment of this disclosure may be changed, as long as appropriate processing is performed.

[0041] Although each embodiment of this disclosure has been described, the processing system 1, processing unit 10, external device 20, and other control devices described above may have a computer system inside. The processing steps described above are stored in program form on a computer-readable recording medium, and the processing is performed when the computer reads and executes this program. A specific example of a computer is shown below.

[0042] Figure 7 is a schematic block diagram showing the configuration of a computer according to at least one embodiment. As shown in Figure 7, the computer 5 includes a CPU (Central Processing Unit) 6, main memory 7, storage 8, and interface 9.

[0043] For example, the processing system 1, processing unit 10, external device 20, and other control devices described above are each implemented in the computer 5. The operation of each processing unit described above is stored in storage 8 in the form of a program. The CPU 6 reads the program from storage 8, loads it into main memory 7, and executes the above processing according to the program. The CPU 6 also allocates memory areas in main memory 7 corresponding to each of the above-mentioned storage units according to the program.

[0044] Examples of storage 8 include HDDs (Hard Disk Drives), SSDs (Solid State Drives), magnetic disks, magneto-optical disks, CD-ROMs (Compact Disc Read Only Memory), DVD-ROMs (Digital Versatile Disc Read Only Memory), and semiconductor memory. Storage 8 may be an internal medium directly connected to the bus of computer 5, or an external medium connected to computer 5 via interface 9 or a communication line. Furthermore, if this program is distributed to computer 5 via a communication line, computer 5, upon receiving the program, may expand it into main memory 7 and execute the above processing. In at least one embodiment, storage 8 is a tangible storage medium that is not temporary.

[0045] Furthermore, the above program may implement some of the functions described above. Moreover, the above program may be a file that can implement the above functions in combination with a program already recorded in the computer system, a so-called differential file (differential program).

[0046] While several embodiments of this disclosure have been described, these embodiments are illustrative and do not limit the scope of the disclosure. These embodiments may be modified in various ways, without departing from the gist of the disclosure.

[0047] Furthermore, some or all of the above embodiments may also be described as follows, but are not limited to these.

[0048] (Note 1) A power supply that provides power to the self-processing unit, Memory and A means of obtaining a BIOS (Basic Input / Output System) image from an external storage device, The acquisition means expands the BIOS image acquired by the acquisition means into the memory, Equipped with, The aforementioned memory is If the aforementioned power supply fails, the power supply is cut off and the BIOS image is erased. Processing device.

[0049] (Note 2) The processing apparatus described in Appendix 1, The aforementioned external storage device, A processing system equipped with the following features.

[0050] (Note 3) The acquisition means is, When the self-processing unit starts up, the BIOS image is obtained from the external storage device. The processing apparatus described in Appendix 1.

[0051] (Note 4) The acquisition means is, Each time the self-processing unit is started, an arbitrary BIOS image is obtained from the external storage device. The processing apparatus described in Appendix 1.

[0052] (Note 5) The system includes an SPI (Serial Peripheral Interface) that enables communication between the acquisition means and the external storage device. The processing apparatus described in Appendix 1.

[0053] (Note 6) A processing method performed by a processing unit comprising a power supply for supplying power to the processing unit and memory, Obtaining a BIOS (Basic Input / Output System) image from an external storage device, The acquired BIOS image is loaded into the memory, If the aforementioned power supply fails, the power supply will be cut off and the BIOS image will be erased. A processing method that includes this.

[0054] (Note 7) A computer for a processing unit, which includes a power supply that provides power to the processing unit and memory, Obtaining a BIOS (Basic Input / Output System) image from an external storage device, The acquired BIOS image is loaded into the memory, If the aforementioned power supply fails, the power supply will be cut off and the BIOS image will be erased. A program that executes the command. [Explanation of symbols]

[0055] 1. Processing System 5. Computers 6, 104, 1052...CPU 7. Main Memory 8,202...Storage 9. Interface 10. Processing Unit 20. External devices 30...External IF 101... Power button 102...Power supply control unit 103...Chipset 105...BIOS Load Module 106, 701...Power supply 107···SPI 201, 1054... External IF control unit (Network external IF control unit) 702...memory 703...Method of acquisition 704...Deployment means 1051···Firmware 1053...RAM 1055...SPI Control Unit 2021 BIOS image

Claims

1. A power supply that provides power to the self-processing unit, Memory and A means for acquiring a BIOS (Basic Input / Output System) image from an external storage device, The acquisition means expands the BIOS image acquired by the acquisition means into the memory, Equipped with, The aforementioned memory is If the aforementioned power supply fails, the power supply will be stopped and the BIOS image will be erased. Processing device.

2. The acquisition means is, When the self-processing unit starts up, the BIOS image is acquired from the external storage device. The apparatus according to claim 1.

3. The acquisition means is, Each time the self-processing unit is started, an arbitrary BIOS image is obtained from the external storage device. The apparatus according to claim 1.

4. The system includes an SPI (Serial Peripheral Interface) that enables communication between the acquisition means and the external storage device. The apparatus according to claim 1.

5. The apparatus according to claim 1, The aforementioned external storage device, A processing system equipped with the following features.

6. A processing method performed by a processing unit comprising a power supply for supplying power to the processing unit and memory, This involves obtaining a BIOS (Basic Input / Output System) image from an external storage device, The acquired BIOS image is loaded into the memory, If the aforementioned power supply fails, the power supply will be stopped and the BIOS image will be erased. A processing method that includes this.

7. A computer for a processing unit, which includes a power supply that provides power to the processing unit and memory, This involves obtaining a BIOS (Basic Input / Output System) image from an external storage device, The acquired BIOS image is loaded into the memory, If the aforementioned power supply fails, the power supply will be stopped and the BIOS image will be erased. A program that executes the command.

Images