Method of basic input output system configuration

Abstract

A basic input / output system (BIOS) configuration method utilizes a computer to be configured to perform the following steps: obtaining a product number (PIN) of the computer to be configured; determining whether the PIN of the computer to be configured matches a product number of a computer to be compared; if a mismatch is found, updating a product number change flag to a desired change flag; verifying an operating system image file to be verified using a secure boot method; if the operating system image file is successfully verified, determining whether the product number change flag is the desired change flag; if a mismatch is found, updating the product number of the computer to be compared with the product number of the computer to be configured; and configuring the basic input / output system (BIOS) of the computer to be configured using BIOS configuration data corresponding to the computer to be configured.

Description

Technical Field

[0001] This invention relates to a system configuration method, and more particularly to a basic input / output system configuration method. Prior Technology

[0002] In the past, different computer manufacturers required dedicated Basic Input Output System (BIOS) for their different computers. This meant that motherboard manufacturers had to configure different BIOSes for different computer motherboards, making the production process complex and prone to errors.

[0003] However, since a single BIOS that supports multiple computer configurations often stores information related to different computer manufacturers (such as logos, computer manufacturer names, computer product names, customized BIOS functions, etc.), this information may be leaked due to human error or intentional manipulation by malicious individuals during the process of switching the BIOS to be compatible with different products.

[0004] Therefore, how to protect the relevant information of the computer manufacturers involved when using a single BIOS that is compatible with various computer configurations has become one of the issues that the relevant technical fields want to solve. Summary of the Invention

[0005] Therefore, the object of the present invention is to provide a basic input / output system configuration method that overcomes at least one drawback of the prior art.

[0006] Therefore, the present invention provides a Basic Input / Output System (BIOS) configuration method, which is executed using a computer to be configured. The computer to be configured includes a processor and a flash memory connected to the processor. The flash memory stores a BIOS, multiple BIOS configuration data corresponding to multiple computer product numbers, and multiple public keys corresponding to those computer product numbers. The BIOS configuration method includes the following steps: (A) obtaining a computer product number to be configured corresponding to the computer to be configured; (B) determining whether the computer product number to be configured matches a computer product number to be compared; (C) when it is determined that the computer product number to be configured does not match the computer product number to be compared, updating a product number change flag to a desired change flag; (D) obtaining, based on the computer product number to be configured, a public key corresponding to the same computer product number to be compared from the flash memory; (E) obtaining an operating system image file to be verified, the operating system image file containing a private key. (F) Using the public key and the private key, verify the operating system image file using a secure boot method; (G) When the operating system image file is successfully verified, determine whether the product number change mark is the desired change mark; (H) When it is determined that the product number change mark is the desired change mark, update the comparison computer product number with the computer product number to be configured; (I) Obtain basic input / output system configuration data from the flash memory that corresponds to the computer product number and is the same as the computer product number to be configured; and (J) Configure the basic input / output system with the basic input / output system configuration data obtained in step (I).

[0007] The advantage of this invention is that, since only the computer manufacturer of the computer to be configured or a few authorized manufacturers possess the operating system image file corresponding to the computer to be configured, only when the operating system image file to be verified is verified with the public key corresponding to the computer to be configured can it be considered that the operator holding the operating system image file belongs to the manufacturer corresponding to the computer to be configured. Only then will the computer to be configured reconfigure the BIOS with the basic input / output system configuration data corresponding to the computer to be configured, thus preventing the information stored in the BIOS by the computer manufacturer of the computer to be configured from being stolen by malicious individuals or unintentionally leaked. Simple Explanation of the Diagram

[0008] Other features and effects of the present invention will be clearly presented in the embodiments with reference to the drawings, wherein: Figure 1 is a block diagram illustrating, exemplarily, a computer to be configured used in a basic input / output system configuration method according to an embodiment of the present invention; Figure 2 is a flowchart illustrating, exemplarily, how a processor of the computer to be configured in this embodiment executes a pre-process portion of the basic input / output system configuration method; and Figure 3 is a flowchart illustrating, by way of example, how the processor of the computer to be configured in this embodiment executes a configuration flow portion of the basic input / output system configuration method. Implementation

[0009] Before the invention is described in detail, it should be noted that similar elements are represented by the same numbers in the following description.

[0010] Referring to Figure 1, a basic input / output system configuration method according to an embodiment of the present invention is executed using a computer to be configured 1. The computer to be configured 1 includes a flash memory 11, a field replacement unit 12 (FRU) and a processor 13 connecting the flash memory 11 and the field replacement unit 12.

[0011] The flash memory 11 stores a basic input / output system (BIS), multiple BIS configuration records corresponding to multiple stock keeping units (SKUs), and multiple public keys corresponding to these SKUs, and is used to store a SKU to be compared. The flash memory 11 is, for example, a non-volatile random-access memory (NVRAM).

[0012] The field replacement unit 12 is used to store the product number of the computer to be configured corresponding to the computer to be configured 1.

[0013] The operation of the processor 13 will be explained in detail below.

[0014] Referring to Figures 2 and 3, an exemplary illustration is provided of how the processor 13 of the computer 1 to be configured executes a pre-process portion and a configuration process portion of the basic input / output system configuration method. The pre-process portion includes steps S21 to S27, and the configuration process portion includes steps S301 to S311.

[0015] In step S21, the processor 13 determines whether the flash memory 11 stores the product number of the computer to be compared. If it is determined that the flash memory 11 stores the product number of the computer to be compared, the process proceeds to step S22; otherwise, the process proceeds to step S25.

[0016] It is worth noting that this step is necessary because when the Basic Input / Output System (BIOS) of the computer to be configured 1 has not yet been customized, the BIOS is in a generic mode set by the motherboard manufacturer. In this generic mode, the flash memory 11 does not store any product number of the computer to be compared, or only stores a preset number value. Only when the BIOS of the computer to be configured 1 has been customized will it store a product number of the computer to be compared that is different from the preset number value. Therefore, this step can be used to identify whether the BIOS is in generic mode or in a customized configuration mode corresponding to the product number of the computer to be compared.

[0017] In step S22, the processor 13 obtains the product number of the computer to be compared from the flash memory 11.

[0018] In step S23, the processor 13 determines whether the field replacement unit 12 stores the product number of the computer to be configured. If it is determined that the field replacement unit 12 stores the product number of the computer to be configured, the process proceeds to step S24; otherwise, the process proceeds to step S27.

[0019] It is worth mentioning that, since the field replacement unit 12 may sometimes experience situations such as an incorrect format of the pre-written computer product number to be configured, the processor 13 will only determine that the field replacement unit 12 stores the computer product number to be configured if the computer product number to be configured exists and is in the correct format. Conversely, if the field replacement unit 12 does not store the computer product number to be configured or the format of the computer product number to be configured stored by the field replacement unit 12 is incorrect, the processor 13 will determine that the field replacement unit 12 does not store the computer product number to be configured.

[0020] In step S24, the processor 13 obtains the product number of the computer to be configured corresponding to the computer to be configured 1 from the field replacement unit 12. At this time, both the product number of the computer to be configured and the product number of the computer to be compared have been obtained, and the process enters the configuration process part, proceeding to step S301.

[0021] In step S25, the processor 13 determines whether the field replacement unit 12 stores the product number of the computer to be configured. If it is determined that the field replacement unit 12 stores the product number of the computer to be configured, the process proceeds to step S302; otherwise, the process proceeds to step S26.

[0022] In step S26, the processor 13 generates a request failure message indicating that the request for the computer to be configured 1 number failed. Afterwards, the operator can exit the process, for example, by pressing any key, or return to step S25 for re-evaluation after correcting the computer to be configured product number in the field replacement unit 12 (not shown).

[0023] In step S27, the processor 13 uses the computer product number to be compared as the computer product number to be configured, and the subsequent process begins from step S304.

[0024] In step S301, the processor 13 determines whether the product number of the computer to be configured matches the product number of the computer to be compared. If it is determined that the product number of the computer to be configured matches the product number of the computer to be compared, the process proceeds to step S304; otherwise, the process proceeds to step S302.

[0025] In step S302, a product number change flag corresponding to the computer product number to be compared is updated to a change flag. This step is used to indicate that the computer product number to be configured is different from the computer product number to be compared, so as to indicate that the computer product number to be compared is in a state that needs to be updated, and that the computer product number to be compared will be replaced by the computer product number to be configured in the future.

[0026] In step S303, the processor 13 selectively disables the hotkey function of the basic input / output system (PIS) based on the product number change mark, and selectively stops displaying any manufacturer information that can identify any computer manufacturer. This step ensures that the operator can correctly operate the PIS and that the PIS can be operated safely by a qualified operator. Therefore, when the product number change mark is a preset change mark, it indicates successful verification, and the processor 13 is in a state where it can display manufacturer information; conversely, when the product number change mark is the desired change mark, it indicates failed verification. In this case, the processor 13 disables the hotkey function of the PIS based on the desired change mark and stops displaying any manufacturer information that can identify any computer manufacturer. This ensures that the operator cannot operate the PIS or see any manufacturer information before successful verification, preventing the leakage of manufacturer information.

[0027] In step S304, the processor 13 obtains from the flash memory 11 the public key corresponding to the computer product number to be compared, which is the same as the computer product number to be configured.

[0028] In step S305, an operating system image file (OS image) to be verified is obtained. The OS image file contains a private key. The OS image file is, for example, input by an operator to the computer to be configured 1 via a Universal Serial Bus (USB).

[0029] In step S306, the processor 13 verifies the operating system image file using the Secure Boot method based on the public key and the private key. If the operating system image file is successfully verified, the process proceeds to step S307; if the operating system image file fails to be verified, the process proceeds to step S311.

[0030] It is worth noting that the Secure Boot method primarily utilizes a digital signature mechanism to identify the trustworthiness of the operating system. Previously, this signature was used to verify whether the operating system could be used to boot the computer. However, in this step, it is applied to determine the legitimacy of the operator attempting to customize the Basic Input / Output System (BIOS) configuration data corresponding to the computer to be configured (e.g., verifying whether the operator belongs to the computer manufacturer of the computer to be configured (BIOS) or one of the few authorized manufacturers). This is because only the computer manufacturer of the computer to be configured (BIOS) or one of the few authorized manufacturers possess the operating system image file corresponding to the computer to be configured (BIOS), and only the operating system image file corresponding to the computer to be configured (BIOS) can be verified by the public key corresponding to the computer to be configured (BIOS) in the Secure Boot method. Therefore, if the operating system image file is verified, it means that the operator who inputs the operating system image file is legitimized; conversely, if the operating system image file fails to be verified, it means that the operator who inputs the operating system image file is not legitimized. This step applies the existing and mature technology of Secure Boot to a new purpose, reducing the time spent developing new verification methods, and enhancing its versatility in practical applications since most computers have Secure Boot built-in.

[0031] In step S307, the processor 13 determines whether the product number change mark is the mark to be changed. When it is determined that the product number change mark is the mark to be changed, that is, when the product number change mark matches the mark to be changed, the process proceeds to step S308; when it is determined that the product number change mark is not the mark to be changed, the processor 13 proceeds to the subsequent power-on process.

[0032] In step S308, the processor 13 updates the comparison computer product number with the configuration computer product number. More specifically, the comparison computer product number stored in the flash memory 11 is replaced with the configuration computer product number.

[0033] In step S309, the processor 13 obtains basic input / output system configuration data from the flash memory 11, which corresponds to the computer product number and is the same as the computer product number to be configured.

[0034] In step S310, the processor 13 configures the basic input / output system (PIS) using the PIS configuration data obtained in step S309. This step successfully customizes the PIS and allows the processor 13 to continue with the subsequent boot process.

[0035] In step S311, the processor 13 generates a verification failure message indicating that the operating system image file has failed to be verified. Afterwards, the operator can exit the process by pressing any key, or enter another operating system image file to return the process to step S306 for re-verification (not shown).

[0036] In summary, firstly, by disabling the hotkey function of the Basic Input / Output System (BIOS) and stopping the display of any manufacturer's information before the operator is verified, the information of each manufacturer is initially protected. Secondly, since only the computer manufacturer of the computer to be configured 1 or a few authorized manufacturers possess the operating system image file corresponding to the computer to be configured 1, only when the operating system image file to be verified is it confirmed that the operator holding the operating system image file belongs to the manufacturer corresponding to the computer to be configured 1. Only then will the computer to be configured 1 reconfigure the BIOS with the BIOS configuration data corresponding to the computer to be configured 1, thus preventing the information stored in the BIOS by the computer manufacturer of the computer to be configured 1 from being stolen by malicious individuals or unintentionally leaked. Therefore, the purpose of this invention is indeed achieved.

[0037] However, the above description is merely an embodiment of the present invention and should not be construed as limiting the scope of the present invention. Any simple equivalent changes and modifications made in accordance with the scope of the patent application and the contents of the patent specification shall still fall within the scope of the patent of the present invention.

[0038] 1: Computer to be configured 11: Flash Memory 12: Field Replacement Unit 13: Processor S21~S27: Steps S301~S311: Steps

Claims

1. A basic input / output system (PIS) configuration method, executed using a computer to be configured, the computer including a processor and a flash memory connected to the processor, the flash memory storing an PIS, multiple PIS configuration data corresponding to multiple computer product numbers, and multiple public keys corresponding to the computer product numbers, the PIS configuration method comprising the following steps: (A) obtaining a product number of the computer to be configured corresponding to the computer to be configured; (B) determining whether the product number of the computer to be configured matches a product number of a computer to be compared; (C) when it is determined that the product number of the computer to be configured does not match the product number of the computer to be compared, updating a product number change flag to a change flag; (K) disabling the hotkey function of the PIS and stopping the display of any manufacturer information that can be used to identify any computer manufacturer; (D) obtaining, based on the product number of the computer to be configured, the public key corresponding to the product number of the computer to be compared, identical to the product number of the computer to be configured, from the flash memory; (E) Obtain an operating system image file to be verified, the operating system image file containing a private key; (F) Verify the operating system image file using a secure boot method based on the public key and the private key; (G) When the operating system image file is successfully verified, determine whether the product number change mark is the desired change mark; (H) When it is determined that the product number change mark is the desired change mark, update the comparison computer product number with the computer product number to be configured; (I) Obtain basic input / output system configuration data from the flash memory that corresponds to the computer product number and is the same as the computer product number to be configured; and (J) Configure the basic input / output system using the basic input / output system configuration data obtained in step (I).

2. The basic input / output system configuration method as described in request item 1 further includes the following steps after step (B): (L) When it is determined that the product number of the computer to be configured matches the product number of the computer to be compared, the process proceeds to step (D).

3. The basic input / output system configuration method as described in claim 1 further includes the following steps before step (A): (M) determining whether the flash memory stores the computer product number to be compared; and (N) when it is determined that the flash memory stores the computer product number to be compared, obtaining the computer product number to be compared from the flash memory.

4. The basic input / output system configuration method as described in claim 3, wherein the computer to be configured further includes a field replacement unit connected to the processor, and after step (N) further includes the following steps: (O) determining whether the field replacement unit stores the product number of the computer to be configured; (P) when it is determined that the field replacement unit stores the product number of the computer to be configured, proceeding to step (A); and (Q) when it is determined that the field replacement unit does not store the product number of the computer to be configured, using the product number of the computer to be compared as the product number of the computer to be configured, proceeding to step (D).

5. The basic input / output system configuration method as described in request item 4, wherein, In step (A), the computer to be configured is obtained from the field replacement unit with the corresponding computer product number.

6. The basic input / output system configuration method as described in claim 3, wherein the computer to be configured further includes a field replacement unit connected to the processor, and after step (M) further includes the following steps: (R) when it is determined that the flash memory does not store the product number of the computer to be compared, determining whether the field replacement unit stores the product number of the computer to be configured; (S) when it is determined that the field replacement unit stores the product number of the computer to be configured, updating the product number change mark to the desired change mark; and (T) process execution step (D).

7. The basic input / output system configuration method as described in claim 6 further includes the following steps between step (S) and step (T): (U) disabling the hotkey function of the basic input / output system and stopping the display of any manufacturer information that can be used to identify any computer manufacturer.

Images