Electronic device and method for recovering CSME using BIOS in electronic device

Abstract

An electronic device according to various embodiments of the present disclosure may comprise at least one memory for storing instructions and at least one processor operatively connected to the at least one memory. The instructions, when executed individually or collectively by the at least one processor, may cause the electronic device to: execute BIOS firmware and CSME firmware stored in the at least one memory on the basis of the electronic device being powered on; identify whether a CSME operation mode by execution of the CSME firmware is a normal mode on the basis of execution of the BIOS firmware; if the CSME operation mode is the normal mode, acquire a first backup image corresponding to the normal mode and store the first backup image in a designated storage area of the at least one memory; and if the CSME operation mode is not the normal mode, acquire a second backup image stored in the designated storage area and perform restoration using the second backup image so that the CSME operation mode becomes the normal mode. Other embodiments may also be possible.

Description

How to restore CSME using BIOS in electronic devices and electronic devices

[0001] Embodiments of the present disclosure relate to a method for restoring CSME in an electronic device.

[0002] Thanks to the remarkable advancements in information and communication technology and semiconductor technology, the proliferation and use of various electronic devices is rapidly increasing. In particular, recent electronic devices are being developed to be portable and capable of communication. Electronic devices can refer to devices that perform specific functions based on installed programs, such as home appliances, electronic notebooks, portable multimedia players, mobile communication terminals, tablet PCs, audio / video devices, desktop / laptop computers, and vehicle navigation systems. An electronic device includes a main processor (e.g., a central processing unit (CPU) or an application processor (AP)) and memory, and can execute programs (e.g., software) stored in the memory through the main processor. These electronic devices may further include a security management processor that operates separately from the main processor and provides security and management functions for the electronic device.

[0003] The above information may be provided as background art to aid in understanding the present disclosure. No claim or determination is made as to whether any of the above is applicable as prior art related to the present disclosure.

[0004] A security and management processor (e.g., a converged security and management engine (CSME) or CSME processor) that operates separately from a main processor in an electronic device and provides security and management functions of the electronic device performs overall management functions within a processor (e.g., a chipset) that includes the main processor, and can provide input / output (I / O) management functions within the main chipset and security functions of the platform. The electronic device can execute security and management firmware (e.g., CSME firmware) stored in memory through the CSME processor independently from the main processor and perform operations by the CSME firmware.

[0005] The CSME processor of an electronic device may detect abnormal behavior due to a combination of reasons, such as an update error of the CSME firmware, a one-time operation error of the CSME firmware, or a hardware defect of the electronic device, during operation by the CSME firmware (e.g., CSME normal operation mode). The CSME firmware of an electronic device may not provide a function to return to the normal operation mode, but may provide a self-recovery function that restores only some functions (e.g., the minimum (or basic functions) required for booting the electronic device) out of the total functions of the CSME firmware in the abnormal operation mode when it is not in the CSME normal operation mode (or when it is in the abnormal operation mode). However, it may not provide a function to return to the normal operation mode. The CSME processor of an electronic device may operate in the CSME abnormal mode, where it performs only some basic functions without returning to the CSME normal mode, even though it cannot perform security functions in the CSME abnormal mode. The electronic device may not be able to provide information to the user even when the CSME processor is operating in the CSME abnormal mode, and the user may need to manually reinstall the CSME firmware to return the CSME abnormal mode to the CSME normal mode.

[0006] According to one embodiment of the present disclosure, an electronic device can store a backup image in a CSME normal mode through a main processor using a BIOS (basic input output system), and when a CSME abnormal mode is detected, the electronic device can restore the CSME abnormal mode to the CSME normal mode using the stored backup image, and a method for restoring CSME using a BIOS in the electronic device can be provided.

[0007] According to one embodiment of the present disclosure, an electronic device may include at least one memory storing commands, and at least one processor operatively connected to the at least one memory. The commands, when individually or collectively executed by the at least one processor, may cause the electronic device to execute BIOS firmware and CSME firmware stored in the at least one memory based on a power-on of the electronic device. The commands, when individually or collectively executed by the at least one processor, may cause the electronic device to identify whether a CSME operation mode by execution of the CSME firmware is a normal mode based on execution of the BIOS firmware. The commands, when individually or collectively executed by the at least one processor, may cause the electronic device to acquire a first backup image corresponding to the normal mode if the CSME operation mode is the normal mode, and to store the first backup image in a designated storage area of ​​the at least one memory. The above commands, when executed individually or collectively by the at least one processor, may cause the electronic device to obtain a second backup image stored in the designated storage area if the CSME operation mode is not the normal mode and perform a restoration using the second backup image so that the CSME operation mode becomes the normal mode.

[0008] According to one embodiment of the present disclosure, a method for restoring CSME using BIOS in an electronic device may include an operation of executing BIOS firmware and CSME firmware stored in at least one memory based on power-on of the electronic device. The method may include an operation of identifying whether a CSME operation mode by execution of the CSME firmware is a normal mode based on execution of the BIOS firmware. If the CSME operation mode is the normal mode, the method may include an operation of acquiring a first backup image corresponding to the normal mode and storing the first backup image in a designated storage area of ​​the at least one memory. If the CSME operation mode is not the normal mode, the method may include an operation of acquiring a second backup image stored in the designated storage area and performing restoration using the second backup image so that the CSME operation mode becomes the normal mode.

[0009] In a non-transitory storage medium storing commands according to one embodiment of the present disclosure, the commands are configured to cause the electronic device to perform at least one operation when executed by the electronic device, wherein the at least one operation may include: executing BIOS firmware and CSME firmware stored in the at least one memory based on power-on of the electronic device; identifying whether a CSME operation mode by execution of the CSME firmware is a normal mode based on execution of the BIOS firmware; acquiring a first backup image corresponding to the normal mode if the CSME operation mode is the normal mode and storing the first backup image in a designated storage area of ​​the at least one memory if the CSME operation mode is not the normal mode; and acquiring a second backup image stored in the designated storage area if the CSME operation mode is not the normal mode and performing a restoration using the second backup image so that the CSME operation mode becomes the normal mode.

[0010] FIG. 1 is a block diagram of an electronic device within a network environment according to one embodiment.

[0011] Figure 2 is a block diagram of an electronic device according to one embodiment.

[0012] FIG. 3 is a diagram showing a storage area of ​​a first memory according to one embodiment.

[0013] FIG. 4 is a diagram illustrating a UEFI BIOS-CSME Recovery Solution according to one embodiment.

[0014] FIG. 5a is a diagram for explaining a backup operation when the CSME operation mode is a normal operation mode and the BIOS operation mode is not an update mode according to one embodiment.

[0015] FIG. 5b is a diagram for explaining a backup operation when the CSME operation mode is a normal operation mode and the BIOS operation mode is an update mode according to one embodiment.

[0016] FIG. 5c is a diagram for explaining a restoration operation when the CSME operation mode according to one embodiment is not a normal operation mode.

[0017] FIG. 6 is a flowchart illustrating a CSME operation mode restoration operation using BIOS in an electronic device according to one embodiment.

[0018] FIG. 7a is a flowchart illustrating a backup operation when the BIOS operation mode is an update mode and when the CSME operation mode is a normal operation mode in an electronic device according to one embodiment.

[0019] FIG. 7b is a flowchart illustrating a restoration operation when the CSME operation mode is not a normal operation mode in an electronic device according to one embodiment.

[0020] FIG. 8 is a diagram showing an example of a boot screen when restoring the CSME operation mode from an abnormal mode to a normal mode according to one embodiment.

[0021] In connection with the description of the drawings, the same or similar reference numerals may be used for identical or similar components.

[0022] The terms used in this document are used only to describe specific embodiments and may not be intended to limit the scope of other embodiments. The singular expression may include the plural expression unless the context clearly indicates otherwise. All terms used herein, including technical or scientific terms, may have the same meaning as commonly understood by those of ordinary skill in the art of the present invention. Terms defined in commonly used dictionaries may be interpreted as having the same or similar meaning in the context of the relevant technology, and shall not be interpreted in an idealized or overly formal sense unless explicitly defined in this document. In some cases, even if a term is defined in this document, it cannot be interpreted to exclude embodiments of the present invention.

[0023] FIG. 1 is a block diagram of an electronic device (101) within a network environment (100) according to one embodiment.

[0024] Referring to FIG. 1, in a network environment (100), an electronic device (101) may communicate with an electronic device (102) via a first network (198) (e.g., a short-range wireless communication network), or may communicate with at least one of an electronic device (104) or a server (108) via a second network (199) (e.g., a long-range wireless communication network). According to one embodiment, the electronic device (101) may communicate with the electronic device (104) via the server (108). According to one embodiment, the electronic device (101) may include a processor (120), a memory (130), an input module (150), an audio output module (155), a display module (160), an audio module (170), a sensor module (176), an interface (177), a connection terminal (178), a haptic module (179), a camera module (180), a power management module (188), a battery (189), a communication module (190), a subscriber identification module (196), or an antenna module (197). In some embodiments, the electronic device (101) may omit at least one of these components (e.g., the connection terminal (178)), or may have one or more other components added. In some embodiments, some of these components (e.g., the sensor module (176), the camera module (180), or the antenna module (197)) may be integrated into one component (e.g., the display module (160)).

[0025] The processor (120) may control at least one other component (e.g., a hardware or software component) of the electronic device (101) connected to the processor (120) by executing, for example, software (e.g., a program (140)), and may perform various data processing or calculations. According to one embodiment, as at least a part of the data processing or calculation, the processor (120) may store a command or data received from another component (e.g., a sensor module (176) or a communication module (190)) in a volatile memory (132), process the command or data stored in the volatile memory (132), and store the resulting data in a non-volatile memory (134). According to one embodiment, the processor (120) may include a main processor (121) (e.g., a central processing unit or an application processor) or a secondary processor (123) (e.g., a graphics processing unit, a neural processing unit (NPU), an image signal processor, a sensor hub processor, or a communication processor) that can operate independently or together therewith. For example, if the electronic device (101) includes a main processor (121) and a secondary processor (123), the secondary processor (123) may be configured to use less power than the main processor (121) or to be specialized for a specified function. The secondary processor (123) may be implemented separately from the main processor (121) or as a part thereof.

[0026] The auxiliary processor (123) may control at least a part of functions or states associated with at least one component (e.g., a display module (160), a sensor module (176), or a communication module (190)) of the electronic device (101), for example, on behalf of the main processor (121) while the main processor (121) is in an inactive (e.g., sleep) state, or together with the main processor (121) while the main processor (121) is in an active (e.g., application execution) state. In one embodiment, the auxiliary processor (123) (e.g., an image signal processor or a communication processor) may be implemented as a part of another functionally related component (e.g., a camera module (180) or a communication module (190)). In one embodiment, the auxiliary processor (123) (e.g., a neural network processing unit) may include a hardware structure specialized for processing artificial intelligence models. The artificial intelligence models may be generated through machine learning. This learning can be performed, for example, on the electronic device (101) itself where the artificial intelligence model is executed, or can be performed through a separate server (e.g., server (108)). The learning algorithm can include, for example, supervised learning, unsupervised learning, semi-supervised learning, or reinforcement learning, but is not limited to the examples described above. The artificial intelligence model can include multiple artificial neural network layers.The artificial neural network may be one of a deep neural network (DNN), a convolutional neural network (CNN), a recurrent neural network (RNN), a restricted Boltzmann machine (RBM), a deep belief network (DBN), a bidirectional recurrent deep neural network (BRDNN), a deep Q-network, or a combination of two or more of the above, but is not limited to the examples described above. In addition to, or alternatively to, a hardware structure, an artificial intelligence model may include a software structure.

[0027] The memory (130) can store various data used by at least one component (e.g., processor (120) or sensor module (176)) of the electronic device (101). The data can include, for example, software (e.g., program (140)) and input data or output data for commands related thereto. The memory (130) can include volatile memory (132) or non-volatile memory (134).

[0028] The program (140) may be stored as software in the memory (130) and may include, for example, an operating system (142), middleware (144), or an application (146).

[0029] The input module (150) can receive commands or data to be used in a component of the electronic device (101) (e.g., a processor (120)) from an external source (e.g., a user) of the electronic device (101). The input module (150) can include, for example, a microphone, a mouse, a keyboard, a key (e.g., a button), or a digital pen (e.g., a stylus pen).

[0030] The audio output module (155) can output audio signals to the outside of the electronic device (101). The audio output module (155) can include, for example, a speaker or a receiver. The speaker can be used for general purposes, such as multimedia playback or recording playback. The receiver can be used to receive incoming calls. According to one embodiment, the receiver can be implemented separately from the speaker or as part of the speaker.

[0031] The display module (160) can visually provide information to an external party (e.g., a user) of the electronic device (101). The display module (160) may include, for example, a display, a holographic device, or a projector and a control circuit for controlling the device. According to one embodiment, the display module (160) may include a touch sensor configured to detect a touch, or a pressure sensor configured to measure the intensity of a force generated by the touch.

[0032] The audio module (170) can convert sound into an electrical signal, or vice versa, convert an electrical signal into sound. According to one embodiment, the audio module (170) can acquire sound through the input module (150), output sound through the sound output module (155), or an external electronic device (e.g., electronic device (102)) (e.g., speaker or headphone) directly or wirelessly connected to the electronic device (101).

[0033] The sensor module (176) can detect the operating status (e.g., power or temperature) of the electronic device (101) or the external environmental status (e.g., user status) and generate an electrical signal or data value corresponding to the detected status. According to one embodiment, the sensor module (176) can include, for example, a gesture sensor, a gyro sensor, a barometric pressure sensor, a magnetic sensor, an acceleration sensor, a grip sensor, a proximity sensor, a color sensor, an IR (infrared) sensor, a biometric sensor, a temperature sensor, a humidity sensor, or an illuminance sensor.

[0034] The interface (177) may support one or more designated protocols that may be used to directly or wirelessly connect the electronic device (101) with an external electronic device (e.g., the electronic device (102)). In one embodiment, the interface (177) may include, for example, a high definition multimedia interface (HDMI), a universal serial bus (USB) interface, an SD card interface, or an audio interface.

[0035] The connection terminal (178) may include a connector through which the electronic device (101) may be physically connected to an external electronic device (e.g., electronic device (102)). According to one embodiment, the connection terminal (178) may include, for example, an HDMI connector, a USB connector, an SD card connector, or an audio connector (e.g., a headphone connector).

[0036] A haptic module (179) can convert electrical signals into mechanical stimuli (e.g., vibration or movement) or electrical stimuli that a user can perceive through tactile or kinesthetic sensations. According to one embodiment, the haptic module (179) can include, for example, a motor, a piezoelectric element, or an electrical stimulation device.

[0037] The camera module (180) can capture still images and videos. According to one embodiment, the camera module (180) may include one or more lenses, image sensors, image signal processors, or flashes.

[0038] The power management module (188) can manage power supplied to the electronic device (101). According to one embodiment, the power management module (188) can be implemented as, for example, at least a part of a power management integrated circuit (PMIC).

[0039] A battery (189) may power at least one component of the electronic device (101). In one embodiment, the battery (189) may include, for example, a non-rechargeable primary battery, a rechargeable secondary battery, or a fuel cell.

[0040] The communication module (190) may support the establishment of a direct (e.g., wired) communication channel or a wireless communication channel between the electronic device (101) and an external electronic device (e.g., electronic device (102), electronic device (104), or server (108)), and the performance of communication through the established communication channel. The communication module (190) may operate independently from the processor (120) (e.g., application processor) and may include one or more communication processors that support direct (e.g., wired) communication or wireless communication. According to one embodiment, the communication module (190) may include a wireless communication module (192) (e.g., a cellular communication module, a short-range wireless communication module, or a global navigation satellite system (GNSS) communication module) or a wired communication module (194) (e.g., a local area network (LAN) communication module, or a power line communication module). Among these communication modules, the corresponding communication module can communicate with an external electronic device (104) via a first network (198) (e.g., a short-range communication network such as Bluetooth, wireless fidelity (WiFi) direct, or infrared data association (IrDA)) or a second network (199) (e.g., a long-range communication network such as a legacy cellular network, a 5G network, a next-generation communication network, the Internet, or a computer network (e.g., a LAN or WAN)). These various types of communication modules can be integrated into a single component (e.g., a single chip) or implemented as multiple separate components (e.g., multiple chips). The wireless communication module (192) can verify or authenticate the electronic device (101) within a communication network such as the first network (198) or the second network (199) by using subscriber information (e.g., an international mobile subscriber identity (IMSI)) stored in the subscriber identification module (196).

[0041] The wireless communication module (192) can support 5G networks and next-generation communication technologies following the 4G network, such as NR access technology (new radio access technology). The NR access technology can support high-speed transmission of high-capacity data (eMBB (enhanced mobile broadband)), minimization of terminal power and connection of multiple terminals (mMTC (massive machine type communications)), or high reliability and low latency (URLLC (ultra-reliable and low-latency communications)). The wireless communication module (192) can support, for example, a high-frequency band (e.g., mmWave band) to achieve a high data transmission rate. The wireless communication module (192) can support various technologies for securing performance in a high-frequency band, such as beamforming, massive multiple-input and multiple-output (MIMO), full dimensional MIMO (FD-MIMO), array antenna, analog beam-forming, or large scale antenna. The wireless communication module (192) can support various requirements specified in the electronic device (101), an external electronic device (e.g., the electronic device (104)), or a network system (e.g., the second network (199)). According to one embodiment, the wireless communication module (192) may support a peak data rate (e.g., 20 Gbps or more) for eMBB realization, a loss coverage (e.g., 164 dB or less) for mMTC realization, or a U-plane latency (e.g., 0.5 ms or less for downlink (DL) and uplink (UL), or 1 ms or less for round trip) for URLLC realization.

[0042] The antenna module (197) can transmit or receive signals or power to or from an external device (e.g., an external electronic device). According to one embodiment, the antenna module (197) may include an antenna including a radiator formed of a conductor or a conductive pattern formed on a substrate (e.g., a PCB). According to one embodiment, the antenna module (197) may include a plurality of antennas (e.g., an array antenna). In this case, at least one antenna suitable for a communication method used in a communication network, such as the first network (198) or the second network (199), may be selected from the plurality of antennas, for example, by the communication module (190). A signal or power may be transmitted or received between the communication module (190) and an external electronic device via the selected at least one antenna. According to some embodiments, in addition to the radiator, another component (e.g., a radio frequency integrated circuit (RFIC)) may be additionally formed as a part of the antenna module (197).

[0043] In one embodiment, the antenna module (197) may form a mmWave antenna module. In one embodiment, the mmWave antenna module may include a printed circuit board, an RFIC disposed on or adjacent to a first side (e.g., a bottom side) of the printed circuit board and capable of supporting a designated high-frequency band (e.g., a mmWave band), and a plurality of antennas (e.g., an array antenna) disposed on or adjacent to a second side (e.g., a top side or a side side) of the printed circuit board and capable of transmitting or receiving signals in the designated high-frequency band.

[0044] At least some of the above components can be interconnected and exchange signals (e.g., commands or data) with each other via a communication method between peripheral devices (e.g., a bus, GPIO (general purpose input and output), SPI (serial peripheral interface), or MIPI (mobile industry processor interface)).

[0045] According to one embodiment, commands or data may be transmitted or received between the electronic device (101) and an external electronic device (104) via a server (108) connected to a second network (199). Each of the external electronic devices (102 or 104) may be the same or a different type of device as the electronic device (101). According to one embodiment, all or part of the operations executed in the electronic device (101) may be executed in one or more of the external electronic devices (102, 104, or 108). For example, when the electronic device (101) is to perform a certain function or service automatically or in response to a request from a user or another device, the electronic device (101) may, instead of or in addition to executing the function or service by itself, request one or more external electronic devices to perform the function or at least a part of the service. One or more external electronic devices that receive the request may execute at least a portion of the requested function or service, or an additional function or service related to the request, and transmit the result of the execution to the electronic device (101). The electronic device (101) may process the result as is or additionally and provide it as at least a portion of a response to the request. For this purpose, cloud computing, distributed computing, mobile edge computing (MEC), or client-server computing technology may be used, for example. The electronic device (101) may provide an ultra-low latency service by using distributed computing or mobile edge computing, for example. In another embodiment, the external electronic device (104) may include an Internet of Things (IoT) device. The server (108) may be an intelligent server utilizing machine learning and / or a neural network. According to one embodiment, the external electronic device (104) or the server (108) may be included in the second network (199).The electronic device (101) can be applied to intelligent services (e.g., smart home, smart city, smart car, or healthcare) based on 5G communication technology and IoT-related technology.

[0046] Figure 2 is a block diagram of an electronic device according to one embodiment.

[0047] Referring to FIG. 2, an electronic device (201) according to an embodiment (e.g., the electronic device (101) of FIG. 1) may include at least one processor (220) and at least one memory (230). The electronic device (201) according to an embodiment is not limited thereto and may further include all or part of the electronic device (101) illustrated in FIG. 1.

[0048] At least one processor (220) according to one embodiment may include a main processor (221) (e.g., a first processor or a central processing unit (CPU) or an application processor (AP)) and a security and management processor (223) (e.g., a second processor or a converged security and management engine (CSME) or a CSME processor or a platform security processor (PSP).

[0049] At least one memory (230) according to an embodiment may store commands that are individually or collectively executed by at least one processor (220). At least one memory (230) according to an embodiment may store commands that, when individually or collectively executed by at least one processor (220), cause the electronic device (201) to execute BIOS firmware (22) and CSME firmware (24) stored in at least one memory (230) based on the power-on of the electronic device (201), identify whether the CSME operation mode by the execution of the CSME firmware (24) is a normal mode based on the execution of the BIOS firmware (22), and, if the CSME operation mode is a normal mode, perform a backup by acquiring a first backup image corresponding to the normal mode and storing it in a designated storage area of ​​at least one memory (230), and, if the CSME operation mode is not a normal mode, perform a restoration by using the second backup image by acquiring a second backup image stored in the designated storage area so that the CSME operation mode becomes the normal mode.

[0050] At least one memory (230) according to one embodiment may include a first memory (231), a second memory (232), and a third memory (236).

[0051] The first memory (231) according to one embodiment may include a ROM (read only memory). The first memory (231) according to one embodiment may include a SPI (serial peripheral interface bus) ROM. The first memory (231) according to one embodiment may store BIOS firmware (22) and CSME firmware (24). For example, the first memory (231) may store the BIOS firmware (22) in a first storage area of ​​the first memory (231) and store the CSME firmware (24) in a second storage area independent of the first storage area of ​​the first memory (231). In another example, the BIOS firmware (22) and the CSME firmware (24) may each be stored in separate memories.

[0052] The second memory (232) according to one embodiment may include a random access memory (RAM). The second memory (232) according to one embodiment may include a main memory primarily used by the main processor (221). The second memory (232) according to one embodiment may provide a storage area where BIOS firmware (22) can be loaded and executed and a storage area where OS execution and user data can be loaded and used.

[0053] The third memory (236) according to one embodiment may include a hard drive disk (HDD) memory or a solid state drive (SSD) memory. The third memory (236) according to one embodiment may store an OS and user data. The third memory (236) according to one embodiment may provide a storage area for storing backup data acquired in a normal mode of CSME operation by execution of the CSME firmware (24) of the security and management processor (223).

[0054] According to one embodiment, the main processor (221) may load and execute BIOS (basic input output system) firmware (22) stored in the first memory (231) based on the power-on of the electronic device (201). The BIOS firmware (22) according to one embodiment may be firmware for controlling all hardware and software mounted on the electronic device (201), and may control booting (e.g., booting method and order), overclocking, and / or power of the electronic device (201). The BIOS firmware (22) according to one embodiment may define a booting method of the electronic device (201), a booting drive, recognized peripheral devices, and a frequency, and may be executed by the main processor (221) before booting of the operating system (OS), so that the main processor (221) may perform operations by the BIOS firmware (22). The BIOS firmware (22) may include legacy firmware or UEFI (unified extensible firmware interface) BIOS firmware. UEFI BIOS firmware can incorporate the features of traditional BIOS firmware (e.g., legacy BIOS firmware) while also enhancing them. For example, UEFI BIOS firmware can display visual objects using graphics and icons, unlike legacy BIOS firmware, which only display text. It can support larger partitions and drives than legacy BIOS firmware. It can include more detailed configuration menus than legacy BIOS firmware, support secure boot, and have a faster boot process.

[0055] According to one embodiment, the security and management processor (223) can load and execute the CSME firmware (24) (or the security and management firmware or the PSP firmware) stored in the first memory (231) based on the power-on of the electronic device (201) independently from the main processor (221). The CSME firmware (24) according to one embodiment can provide the platform trust technology (PTT) of the electronic device (201), secure boot, Intel virtualization technology for directed I / O, anti-theft function, temperature, voltage, current, and / or fan control function, DRM function, network remote management function, and / or remote control function.

[0056] According to an embodiment, the main processor (221) can identify whether the CSME operation mode by the execution of the CSME firmware (24) of the security and management processor (223) is a normal mode while performing a BIOS function (e.g., booting) by executing the BIOS firmware (22). According to an embodiment, the security and management processor (223) can detect an abnormal operation due to a combination of reasons such as an update error of the CSME firmware (24), a one-time operation error of the security and management processor (223), a defect in at least some hardware included in the electronic device (201), etc., during an operation by the CSME firmware (24) (e.g., the CSME normal operation mode). According to an embodiment, the security and management processor (223) can operate in the CSME abnormal mode (or CSME abnormal mode) when an abnormal operation is detected. According to an embodiment, the security and management processor (223) may not be able to provide other functions except for a specified basic function (e.g., a secure boot function) when operating in the CSME abnormal mode.

[0057] According to an embodiment, the main processor (221) may perform a backup by acquiring a first backup image corresponding to the CSME normal mode of the security and management processor (223) when the CSME operation mode of the security and management processor (223) is the normal mode and storing the first backup image in a designated storage area of ​​at least one memory (230). According to an embodiment, the main processor (221) may request the security and management processor (223) for a first backup image corresponding to the CSME normal mode when the CSME operation mode of the security and management processor (223) is the normal mode, and may acquire the first backup image corresponding to the CSME normal mode from the security and management processor (223) and store the first backup image in a designated storage area (e.g., a recovery path) of the third memory (236). The recovery path according to an embodiment may be designated to be located in a system partition of a storage area where an OS is installed. For example, the recovery path may be located in a system partition of a storage area where a Windows operating system is installed. According to an embodiment, the recovery path may be differently specified for each model of the electronic device (201) or each version of the CSME firmware (24). For example, the recovery path may be differently specified for each model of the electronic device (201) or each version of the CSME firmware (24), so that when the third memory (236) used in the electronic device (201) is mounted and used in another electronic device (not shown), the backup image of the recovery path associated with the electronic device (201) may be prevented from being used in the other electronic device. For example, when the version of the CSME firmware of the electronic device of model A is "10.0.0.1", the recovery path may be specified as " / CSME_REC / A_10.0.0.1.bin", and when the version of the CSME firmware of the electronic device of model B is "11.0.0.2", the recovery path may be specified as " / CSME_REC / B_11.0.0.2.bin".

[0058] According to one embodiment, the main processor (221) can identify whether the BIOS operation mode is the update mode if the CSME operation mode of the security and management processor (223) is the normal mode. According to one embodiment, when an update of the BIOS firmware (24) is required during operation using the OS, the main processor (221) can receive update data of the BIOS firmware (24) from an external server (e.g., 108) and store it in the third memory (236). For example, the update data of the BIOS firmware (24) can include data for updating the BIOS firmware (24), and when an update to a new version of the CSME firmware is required, the payload of the update data of the BIOS firmware (24) can include CSME update data for updating the CSME firmware (22) to the new version of the CSME firmware. According to one embodiment, the main processor (221) may operate in a BIOS update mode (or update mode) if update data for the BIOS firmware (24) exists in the third memory (236) when executing the BIOS firmware (22). According to one embodiment, the main processor (221) may operate in a mode other than the update mode (e.g., normal mode) when update data for the BIOS firmware (24) does not exist in the third memory (236) when executing the BIOS firmware (22) or when the update data for the BIOS firmware (24) is not new update data.

[0059] According to one embodiment, the main processor (221) may acquire a first backup image corresponding to the CSME normal mode and store it in a designated storage area of ​​the third memory (236) when the CSME operation mode of the security and management processor (223) is the normal mode and the BIOS operation mode is not the update mode.

[0060] According to one embodiment, the main processor (221) can identify (or confirm) whether the payload of the update data of the BIOS firmware (24) includes CSME update data for updating the CSME firmware (22) to a new version of the CSME firmware if the CSME operation mode of the security and management processor (223) is the normal mode and the BIOS operation mode is the update mode. According to one embodiment, the main processor (221) can obtain a first backup image corresponding to the CSME normal mode of the CSME firmware (22) and store it in a designated storage area of ​​the third memory (236) if the CSME operation mode is the normal mode and the BIOS operation mode is the update mode and the update data of the BIOS firmware (24) does not include CSME update data. In one embodiment, the main processor (221) may use the CSME update data to update the CSME firmware (22) to a new version of the CSME firmware if the CSME operation mode is the normal mode and the BIOS operation mode is the update mode, and the update data of the BIOS firmware (24) includes CSME update data, and may obtain a backup image (e.g., a third backup image) corresponding to the CSME normal mode of the new version of the CSME firmware after the update and store it in another designated storage area of ​​the third memory (236). In one embodiment, if the update of the CSME firmware (22) using the CSME update data fails, the main processor (221) may identify that the CSME operation mode is not the normal mode (e.g., a recovery mode or a restoration mode).

[0061] In one embodiment, the main processor (221) may obtain a second backup image stored in a designated storage area of ​​the third memory (236) when the security and management processor (223) operates in the normal mode if the CSME operation mode is not the normal mode (e.g., the recovery mode or the restoration mode). In one embodiment, the main processor (221) may provide the second backup image to the security and management processor (223) to control the security and management processor (223) to restore the CSME operation mode to the normal mode. In one embodiment, the main processor (221) may receive information indicating the performance status of the restoration (e.g., the current restoration data amount among the total restoration data amount) from the security and management processor (223) while the security and management processor (223) restores the CSME operation mode to the normal mode.

[0062] An electronic device (201) according to one embodiment may further include a display (e.g., the display module (160) of FIG. 1), although not shown in FIG. 2, and a main processor (221) according to one embodiment may visually provide information to an external party (e.g., a user) of the electronic device (201) through the display. The main processor (221) according to one embodiment may display information indicating the status of restoration on the display when the restoration execution time by the security and management processor (223) exceeds a specified time period.

[0063] An electronic device (e.g., an electronic device (101) of FIG. 1 or an electronic device (201) of FIG. 2) according to an embodiment of the present disclosure may include at least one memory (e.g., a memory (130) of FIG. 1 or a memory (230) of FIG. 2)) storing commands, and at least one processor (e.g., a processor (120) of FIG. 1 or a processor (220) of FIG. 2) operatively connected to the at least one memory. The commands, when individually or collectively executed by the at least one processor, may cause the electronic device to execute BIOS firmware and CSME firmware stored in the at least one memory based on power-on of the electronic device. The commands, when individually or collectively executed by the at least one processor, may cause the electronic device to identify whether a CSME operation mode by execution of the CSME firmware is a normal mode based on execution of the BIOS firmware. The above commands, when individually or collectively executed by the at least one processor, may cause the electronic device to, if the CSME operation mode is the normal mode, obtain a first backup image corresponding to the normal mode and store the first backup image in a designated storage area of ​​the at least one memory. The above commands, when individually or collectively executed by the at least one processor, may cause the electronic device to, if the CSME operation mode is not the normal mode, obtain a second backup image stored in the designated storage area and perform restoration using the second backup image so that the CSME operation mode becomes the normal mode.

[0064] According to one embodiment, the at least one memory may include a first memory, a second memory, and a third memory. The first memory may include the BIOS firmware and the CSME firmware, the second memory may provide a storage area for executing the BIOS firmware, and the third memory may provide the designated storage area.

[0065] In one embodiment, the at least one processor may include a main processor that loads the BIOS firmware from the first memory to the second memory based on the power-on of the electronic device and executes the BIOS firmware. The at least one processor may include a security and management processor that loads the CSME firmware from the first memory and executes it based on the power-on of the electronic device.

[0066] The electronic device according to one embodiment may further include a communication circuit. The instructions according to one embodiment, when individually or collectively executed by at least one processor, may cause the electronic device to receive BIOS update data from an external electronic device via the communication circuit and store the BIOS update data in the second memory.

[0067] The commands according to one embodiment, when individually or collectively executed by the at least one processor, may cause the electronic device to obtain the first backup image corresponding to the normal mode and store the first backup image in the designated storage area, if the CSME operation mode is the normal operation mode and the BIOS operation mode by execution of the BIOS firmware is not an update mode.

[0068] The commands according to one embodiment, when individually or collectively executed by the at least one processor, may cause the electronic device to identify an update of the CSME firmware using CSME update data included in BIOS update data if the CSME operation mode is the normal operation mode and the BIOS operation mode by execution of the BIOS firmware is an update mode. The commands, when individually or collectively executed by the at least one processor, may cause the electronic device to obtain a third backup image corresponding to the normal mode of the updated CSME firmware and store the third backup image in another designated storage area of ​​the at least one memory if the update of the CSME firmware is successful.

[0069] According to one embodiment, the BIOS firmware may include a function module for restoring the SME operation mode.

[0070] The functional module according to one embodiment may include a CSME control module, a main control module, and a file system control module. The commands according to one embodiment, when individually or collectively executed by the at least one processor, may cause the electronic device to identify, through the CSME control module, whether the CSME operation mode by execution of the CSME firmware is the normal mode. The commands, when individually or collectively executed by the at least one processor, may cause the electronic device to obtain, through the CSME control module, a first backup image corresponding to the normal mode if the CSME operation mode is the normal mode, transmit the first backup image to the file system control module through the main control module, and store the first backup image in the designated storage area through the file system control module. The above commands, when individually or collectively executed by the at least one processor, may cause the electronic device to obtain a second backup image stored in the designated storage area through the file system control module if the CSME operation mode is not the normal mode, transfer the second backup image to the CSME control module through the main control module, and perform restoration using the second backup image through the CSME control module.

[0071] The electronic device according to one embodiment may further include a display. The instructions, when individually or collectively executed by the at least one processor, may cause the electronic device to display information indicating the status of the restoration on the display when the time period for performing the restoration exceeds a specified time period.

[0072] According to one embodiment, the BIOS firmware may include UEFI BIOS firmware.

[0073] FIG. 3 is a diagram illustrating a storage area of ​​a first memory according to an embodiment. Referring to FIG. 3, the first memory (231) according to an embodiment may include a flash descriptor region, a CSE region (CES region) (302), and a BIOS region (BIOS region) (304). The flash descriptor region according to an embodiment may include information indicating the CES region (302) and the BIOS region (304) of the first memory (231). The CES region (302) and the BIOS region (304) according to an embodiment may be independent regions. The CES region (302) according to an embodiment may include CSME firmware (22). The BIOS region (304) according to an embodiment may include BIOS firmware (24). The CES region (302) according to an embodiment may include a CSE layout table, boot partition1, an ME data partition, boot partition2, and boot partition3.

[0074] According to an embodiment, a security and management processor (223) may operate by loading data (e.g., CSE layout table, boot partition1, ME data partition, boot partition2, boot partition3) of a CES region (302) corresponding to the CSME firmware (24) of a first memory (231) based on power-on. According to an embodiment, a security and management processor (223) may detect abnormal operation due to a complex reason such as an update error of the CSME firmware (24), a one-time operation error of the security and management processor (223), a defect in at least some hardware included in the electronic device (201), etc. during an operation (e.g., CSME normal operation mode) using data of the CES region (302). In one embodiment, the security and management processor (223) may perform backup functions (e.g., code resiliency function and / or data resiliency function) only for some functions (e.g., basic functions (boot partition1 and ME data partition)) when abnormal operation is detected, but may provide the main processor (221) with a first backup image for all functions operating in the normal mode of the CSME firmware (24) in the CSME normal mode so that the first backup image is stored in a designated storage area of ​​the third memory (230). In one embodiment, the main processor (221) may identify whether the security and management processor (223) is in the CSME normal mode at each boot performed after the first backup image is stored in the designated storage area of ​​the third memory (230). According to one embodiment, the main processor (221) may provide the first backup image stored in the designated storage area of ​​the third memory (230) to the security and management processor (223) when the operating mode of the security and management processor (223) is identified as not being the CSME normal mode after the first backup image is stored in the designated storage area of ​​the third memory (230).In one embodiment, the security and management processor (223) can restore the CSME operation mode to the normal mode using the first backup image received from the main processor (221) when the CSME is not in the normal mode.

[0075] FIG. 4 is a diagram illustrating a UEFI BIOS-CSME Recovery Solution according to one embodiment.

[0076] Referring to FIG. 4, the BIOS firmware (24) according to one embodiment may include a UEFI BIOS-CSME Recovery Solution (400), which is a CSME operation mode recovery function module (or software module) as part of the BIOS firmware (24). According to one embodiment, the UEFI BIOS-CSME Recovery Solution (400) may include commands (or software modules (e.g., 410, 420, 430)) that, when executed by the main processor (221), cause the electronic device (201) to identify whether the CSME operation mode by the execution of the CSME firmware (24) is the normal mode based on the execution of the BIOS firmware (22) based on the power-on of the electronic device (201), and, if the CSME operation mode is the normal mode, perform a backup by acquiring a first backup image corresponding to the normal mode and storing it in a designated storage area of ​​at least one memory (230), and, if the CSME operation mode is not the normal mode, perform a restoration by using the second backup image by acquiring a second backup image stored in the designated storage area so that the CSME operation mode becomes the normal mode.

[0077] According to one embodiment, the UEFI BIOS-CSME Recovery Solution (400) may include at least one control module. For example, the UEFI BIOS-CSME Recovery Solution (400) may include a main control module (410), a CSME control module (420), and a file system control module (430).

[0078] According to an embodiment, the main processor (221) may call the main module (410) during booting by the BIOS firmware (24), and may perform a main control operation for performing a CSME operation mode restoration function using the main module (410). According to an embodiment, the main processor (221) may read a register of a chipset including at least one processor (230) using the CSME control module (420) to identify whether the CSME operation mode of the security and management (223) is a normal operation mode. According to an embodiment, the main processor (221) may identify update data of the CSME firmware (24) using the CSME control module (420). According to an embodiment, the main processor (221) may request the security and management processor (223) to update the CSME firmware (24) using the update data of the CSME firmware (24) through the CSME control module (420). According to one embodiment, the main processor (221) may use the file system control module (430) to read a backup image stored in a designated storage area (e.g., recovery path) of the third memory (236) or store the backup image in a designated storage area (e.g., recovery path) of the third memory (236).

[0079] FIG. 5a is a diagram for explaining a backup operation when the CSME operation mode is a normal operation mode and the BIOS operation mode is not an update mode according to one embodiment.

[0080] Referring to FIG. 5A, the main processor (221) according to one embodiment loads the BIOS firmware (22) stored in the first memory (231) into the second memory (232) based on the power-on of the electronic device (201), and may call the UEFI BIOS-CSME Recovery Solution (400) while performing a BIOS function (e.g., booting) by executing the BIOS firmware (22). The main processor (221) according to one embodiment may read the register of the chipset including at least one processor (230) using the CSME control module (420) of the UEFI BIOS-CSME Recovery Solution (400) to identify whether the CSME operation mode of the security and management processor (223) is a normal operation mode. According to one embodiment, the main processor (221) can use the main control module (410) to identify whether update data of the BIOS firmware (24) exists when the CSME operation mode is the normal operation mode, and if the update data of the BIOS firmware (24) does not exist or the update data of the BIOS firmware (24) is not new update data, the main processor (221) can operate in a mode other than the update mode (e.g., normal mode).

[0081] According to one embodiment, the main processor (221) may request the security and management processor (223) for a first backup image corresponding to the CSME normal mode using the CSME control module (420) when the CSME operation mode of the security and management processor (223) is the normal mode and the BIOS operation mode is not the update mode (①). According to one embodiment, the main processor (221) may identify whether a backup image of the latest version exists in a designated storage area of ​​the third memory (236) through the file system control module (430) when the CSME operation mode of the security and management processor (223) is the normal mode and the BIOS operation mode is not the update mode, and may request the security and management processor (223) for a first backup image corresponding to the CSME normal mode using the CSME control module (420) when the backup image of the latest version does not exist.

[0082] According to one embodiment, the CSME control module (420) can obtain a first backup image (510) corresponding to the CSME normal mode from the security and management processor (223) and transmit it to the main control module (410) (②).

[0083] According to one embodiment, the main processor (221) can transmit the first backup image (510) to the file system control module (430) via the main control module (410) (③).

[0084] According to one embodiment, the main processor (221) can store the first backup image (510) in a designated storage area (e.g., recovery path) of the third memory (236) using the file system control module (430) (④).

[0085] FIG. 5b is a diagram for explaining a backup operation when the CSME operation mode is a normal operation mode and the BIOS operation mode is an update mode according to one embodiment.

[0086] Referring to FIG. 5b, the main processor (221) according to one embodiment may load the BIOS firmware (22) stored in the first memory (231) into the second memory (232) based on the power-on of the electronic device (201), and call the UEFI BIOS-CSME Recovery Solution (400) while performing a BIOS function (e.g., booting) by executing the BIOS firmware (22). The main processor (221) according to one embodiment may read the register of the chipset including at least one processor (230) using the CSME control module (420) of the UEFI BIOS-CSME Recovery Solution (400) to identify whether the CSME operation mode of the security and management processor (223) is a normal operation mode. According to one embodiment, the main processor (221) can identify whether update data for the BIOS firmware (24) exists using the main control module (410) when the CSME operation mode is the normal operation mode, and can operate in the update mode if update data for the BIOS firmware (24) exists.

[0087] According to one embodiment, the main processor (221) can identify (or confirm) whether the payload (501) of the update data of the BIOS firmware (24) includes CSME update data (503) for updating the CSME firmware (22) to a new version of the CSME firmware by using the main control module (410) when the CSME operation mode of the security and management processor (223) is the normal mode and the BIOS operation mode is the update mode. According to one embodiment, the main processor (221) can obtain the CSME update data (503) through the main control module (410) when the payload (501) of the update data of the BIOS firmware (24) includes the CSME update data (503) (①).

[0088] According to an embodiment, the main processor (221) may request the security and processor (223) to update the CSME firmware (22) to a new version of the CSME firmware using CSME update data through the CSME control module (420) (②). According to an embodiment, the CSME control module (420) of the main processor (221) may identify the update result of the CSME firmware (22). According to an embodiment, the CSME control module (420) of the main processor (221) may identify whether the update result of the CSME firmware (22) is an error. According to an embodiment, if the update result of the CSME firmware (22) is not an error, the CSME control module (420) of the main processor (221) may acquire a backup image (e.g., a third backup image) corresponding to the CSME normal mode of the new version of the CSME firmware.

[0089] According to one embodiment, the main processor (221) can transmit a backup image (e.g., a third backup image) corresponding to the CSME normal mode of the new version of CSME firmware to the file system control module (430) through the main control module (410) (③).

[0090] According to one embodiment, the main processor (221) can store a third backup image (520) in a designated storage area (a storage area different from the storage area before the update) corresponding to the updated CSME firmware of the third memory (236) through the file system control module (430) (④).

[0091] FIG. 5c is a diagram for explaining a restoration operation when the CSME operation mode according to one embodiment is not a normal operation mode.

[0092] Referring to FIG. 5C, the main processor (221) according to one embodiment loads the BIOS firmware (22) stored in the first memory (231) into the second memory (232) based on the power-on of the electronic device (201), and may call the UEFI BIOS-CSME Recovery Solution (400) while performing a BIOS function (e.g., booting) by executing the BIOS firmware (22). The main processor (221) according to one embodiment may read the register of the chipset including at least one processor (230) using the CSME control module (420) of the UEFI BIOS-CSME Recovery Solution (400) to identify whether the CSME operation mode of the security and management processor (223) is a normal operation mode (①). The main processor (221) according to one embodiment may identify the CSME operation mode as a recovery mode (or restoration mode) when the CSME operation mode is not a normal operation mode.

[0093] According to one embodiment, the main processor (221) can obtain the second backup image (530) stored in the designated storage area of ​​the third memory (236) when the security and management processor (223) operates in the normal mode through the file system control module (430) if the CSME operation mode of the security and management processor (223) is not the normal mode (e.g., the recovery mode or the restoration mode) (②).

[0094] According to one embodiment, the main processor (221) can provide the second backup image (530) to the CSME control module (420) through the main control module (410) (③).

[0095] According to one embodiment, the main processor (221) may provide a second backup image (530) to the security and management processor (223) via the CSME control module (420) and request the security and management processor (223) to restore the CSME operation mode to the normal mode (④). According to one embodiment, the security and management processor (223) may restore the CSME operation mode to the normal mode using the second backup image (530).

[0096] FIG. 6 is a flowchart illustrating a CSME operation mode restoration operation using BIOS in an electronic device according to one embodiment.

[0097] In the embodiment of FIG. 6 below, the operations may be performed sequentially, but are not necessarily performed sequentially. For example, the order of the operations may be changed, and at least two operations may be performed in parallel.

[0098] Referring to FIG. 6, a main processor (221) of an electronic device (201) (e.g., the electronic device (101) of FIG. 1) according to one embodiment may perform at least one of operations 610 to 640.

[0099] In operation 610, the main processor (221) according to an embodiment may load and execute BIOS (basic input output system) firmware (22) stored in the first memory (231) based on the power-on of the electronic device (201). The BIOS firmware (22) according to an embodiment may be firmware for controlling all hardware and software mounted on the electronic device (201), and may control booting (e.g., booting method and order), overclocking, and / or power of the electronic device (201). The BIOS firmware (22) according to an embodiment may define a booting method of the electronic device (201), a booting drive, a recognized peripheral device, and a frequency, and may be executed by the main processor (221) before booting of the operating system (OS) so that the main processor (221) performs an operation by the BIOS firmware (22). The BIOS firmware (22) may include legacy firmware or UEFI (unified extensible firmware interface) BIOS firmware. UEFI BIOS firmware can incorporate the features of traditional BIOS firmware (e.g., legacy BIOS firmware) while also enhancing them. For example, UEFI BIOS firmware can display visual objects using graphics and icons, unlike legacy BIOS firmware, which only display text. It can support larger partitions and drives than legacy BIOS firmware. It can include more detailed configuration menus than legacy BIOS firmware, support secure boot, and have a faster boot process.

[0100] In operation 620, the main processor (221) according to an embodiment can identify whether the CSME operation mode is a normal mode. The main processor (221) according to an embodiment can identify whether the CSME operation mode by the execution of the CSME firmware (24) of the security and management processor (223) is a normal mode while performing a BIOS function (e.g., booting) by executing the BIOS firmware (22). The security and management processor (223) according to an embodiment can detect an abnormal operation due to a complex reason such as an update error of the CSME firmware (24), a one-time operation error of the security and management processor (223), a defect in at least some hardware included in the electronic device (201), etc., during an operation by the CSME firmware (24) (e.g., CSME normal operation mode). The security and management processor (223) according to an embodiment can operate in the CSME abnormal mode (or CSME abnormal mode) when an abnormal operation is detected.

[0101] In operation 630, the main processor (221) according to one embodiment may perform a backup by obtaining a first backup image corresponding to the CSME normal mode of the security and management processor (223) when the CSME operation mode is the normal mode and storing the first backup image in a designated storage area of ​​at least one memory (230). The main processor (221) according to one embodiment may request the security and management processor (223) for a first backup image corresponding to the CSME normal mode when the CSME operation mode of the security and management processor (223) is the normal mode, and may obtain the first backup image corresponding to the CSME normal mode from the security and management processor (223) and store the first backup image in a designated storage area (e.g., a recovery path) of the third memory (236). The recovery path according to one embodiment may be designated to be located in a system partition of a storage area where an OS is installed. For example, the recovery path may be located in a system partition of a storage area where a Windows operating system is installed. According to an embodiment, the recovery path may be differently specified for each model of the electronic device (201) or each version of the CSME firmware (24). For example, the recovery path may be differently specified for each model of the electronic device (201) or each version of the CSME firmware (24), so that when the third memory (236) used in the electronic device (201) is mounted and used in another electronic device (not shown), the backup image of the recovery path associated with the electronic device (201) may be prevented from being used in the other electronic device. For example, when the version of the CSME firmware of the electronic device of model A is "10.0.0.1", the recovery path may be specified as " / CSME_REC / A_10.0.0.1.bin", and when the version of the CSME firmware of the electronic device of model B is "11.0.0.2", the recovery path may be specified as " / CSME_REC / B_11.0.0.2.bin".

[0102] According to one embodiment, the main processor (221) can identify whether the BIOS operation mode is the update mode if the CSME operation mode of the security and management processor (223) is the normal mode. According to one embodiment, when an update of the BIOS firmware (24) is required during operation using the OS, the main processor (221) can receive update data of the BIOS firmware (24) from an external server (e.g., 108) and store it in the third memory (236). For example, the update data of the BIOS firmware (24) can include data for updating the BIOS firmware (24), and when an update to a new version of the CSME firmware is required, the payload of the update data of the BIOS firmware (24) can include CSME update data for updating the CSME firmware (22) to the new version of the CSME firmware. According to one embodiment, the main processor (221) may operate in a BIOS update mode (or update mode) if update data for the BIOS firmware (24) exists in the third memory (236) when executing the BIOS firmware (22). According to one embodiment, the main processor (221) may operate in a mode other than the update mode (e.g., normal mode) when update data for the BIOS firmware (24) does not exist in the third memory (236) when executing the BIOS firmware (22) or when the update data for the BIOS firmware (24) is not new update data.

[0103] According to one embodiment, the main processor (221) may acquire a first backup image corresponding to the CSME normal mode and store it in a designated storage area of ​​the third memory (236) when the CSME operation mode of the security and management processor (223) is the normal mode and the BIOS operation mode is not the update mode.

[0104] According to one embodiment, the main processor (221) can identify (or confirm) whether the payload of the update data of the BIOS firmware (24) includes CSME update data for updating the CSME firmware (22) to a new version of the CSME firmware if the CSME operation mode of the security and management processor (223) is the normal mode and the BIOS operation mode is the update mode. According to one embodiment, the main processor (221) can obtain a first backup image corresponding to the CSME normal mode of the CSME firmware (22) and store it in a designated storage area of ​​the third memory (236) if the CSME operation mode is the normal mode and the BIOS operation mode is the update mode and the update data of the BIOS firmware (24) does not include CSME update data. In one embodiment, the main processor (221) may use the CSME update data to update the CSME firmware (22) to a new version of the CSME firmware if the CSME operation mode is the normal mode and the BIOS operation mode is the update mode, and the update data of the BIOS firmware (24) includes CSME update data, and may obtain a backup image (e.g., a third backup image) corresponding to the CSME normal mode of the new version of the CSME firmware after the update and store it in another designated storage area of ​​the third memory (236). In one embodiment, if the update of the CSME firmware (22) using the CSME update data fails, the main processor (221) may identify that the CSME operation mode is not the normal mode (e.g., a recovery mode or a restoration mode).

[0105] In operation 640, the main processor (221) according to one embodiment may, if the CSME operation mode is not the normal mode (e.g., if it is the recovery mode or the restoration mode), obtain a second backup image stored in a designated storage area of ​​the third memory (236) when the security and management processor (223) operates in the normal mode, and restore the CSME operation mode to the normal mode using the second backup image. The main processor (221) according to one embodiment may receive information indicating the execution status of the restoration (e.g., the current amount of restoration data among the total amount of restoration data) from the security and management processor (223) while the security and management processor (223) restores the CSME operation mode to the normal mode. The main processor (221) according to one embodiment may display information indicating the execution status of the restoration on a display when the restoration execution time by the security and management processor (223) exceeds a designated time period.

[0106] According to an embodiment of the present disclosure, a method for restoring CSME using BIOS in an electronic device (e.g., the electronic device (101) of FIG. 1 or the electronic device (201) of FIG. 2) may include an operation of executing BIOS firmware and CSME firmware stored in at least one memory based on power-on of the electronic device. The method may include an operation of identifying whether a CSME operation mode by execution of the CSME firmware is a normal mode based on execution of the BIOS firmware. If the CSME operation mode is the normal mode, the method may include an operation of acquiring a first backup image corresponding to the normal mode and storing the first backup image in a designated storage area of ​​the at least one memory. If the CSME operation mode is not the normal mode, the method may include an operation of acquiring a second backup image stored in the designated storage area and performing restoration using the second backup image so that the CSME operation mode becomes the normal mode.

[0107] In the method according to one embodiment, the at least one memory may include a first memory, a second memory, and a third memory. The first memory may include the BIOS firmware and the CSME firmware, the second memory may provide a storage area for executing the BIOS firmware, and the third memory may provide the designated storage area.

[0108] The method according to one embodiment may include loading the BIOS firmware from the first memory into the second memory and executing the BIOS firmware using a main processor based on the power-on of the electronic device. The method may include loading the CSME firmware from the first memory and executing the CSME firmware using a security and management processor based on the power-on of the electronic device.

[0109] The method according to one embodiment may include receiving BIOS update data from an external electronic device via a communication circuit of the electronic device and storing the BIOS update data in the second memory.

[0110] The method according to one embodiment may include an operation of acquiring the first backup image corresponding to the normal mode and storing the first backup image in the designated storage area, if the CSME operation mode is the normal operation mode and the BIOS operation mode by execution of the BIOS firmware is not an update mode.

[0111] The method according to one embodiment may include an operation of identifying an update of the CSME firmware using CSME update data included in BIOS update data when the CSME operation mode is the normal operation mode and the BIOS operation mode by execution of the BIOS firmware is an update mode. The method may include an operation of acquiring a third backup image corresponding to the normal mode of the updated CSME firmware and storing the third backup image in another designated storage area of ​​the at least one memory when the update of the CSME firmware is successful.

[0112] According to one embodiment, the BIOS firmware may include a functional module for restoring the SME operation mode. According to one embodiment, the functional module may include a CSME control module, a main control module, and a file system control module.

[0113] According to one embodiment, the method may include an operation of identifying, through the CSME control module, whether the CSME operation mode by execution of the CSME firmware is the normal mode. If the CSME operation mode is the normal mode, the method may include an operation of obtaining a first backup image corresponding to the normal mode through the CSME control module, transmitting the first backup image to the file system control module through the main control module, and storing the first backup image in the designated storage area through the file system control module. If the CSME operation mode is not the normal mode, the method may include an operation of obtaining a second backup image stored in the designated storage area through the file system control module, transmitting the second backup image to the CSME control module through the main control module, and performing restoration using the second backup image through the CSME control module.

[0114] The method according to one embodiment may include an action of displaying information indicating a status of performing the restoration on a display of the electronic device when a time period for performing the restoration exceeds a specified time period.

[0115] FIG. 7a is a flowchart illustrating a backup operation in an electronic device according to an embodiment of the present invention when the CSME operation mode is the normal operation mode and the BIOS operation mode is the update mode. FIG. 7b is a flowchart illustrating a restore operation in an electronic device according to an embodiment of the present invention when the CSME operation mode is not the normal operation mode.

[0116] In the embodiments according to FIGS. 7A and 7B, the operations may be performed sequentially, but are not necessarily performed sequentially. For example, the order of the operations may be changed, and at least two operations may be performed in parallel.

[0117] First, referring to FIG. 7A, a main processor (221) of an electronic device (201) (e.g., the electronic device (101) of FIG. 1) according to one embodiment may perform at least one of operations 710, 720, 730, 732, 734, 736, and 738.

[0118] In operation 710, the main processor (221) according to an embodiment may load and execute BIOS (basic input output system) firmware (22) stored in the first memory (231) based on the power-on of the electronic device (201). The BIOS firmware (22) according to an embodiment may be firmware for controlling all hardware and software mounted on the electronic device (201), and may control booting (e.g., booting method and order), overclocking, and / or power of the electronic device (201). The BIOS firmware (22) according to an embodiment may define a booting method of the electronic device (201), a booting drive, a recognized peripheral device, and a frequency, and may be executed by the main processor (221) before booting of the operating system (OS) so that the main processor (221) performs an operation by the BIOS firmware (22). The BIOS firmware (22) may include legacy firmware or UEFI (unified extensible firmware interface) BIOS firmware. UEFI BIOS firmware can incorporate the features of traditional BIOS firmware (e.g., legacy BIOS firmware) while also enhancing them. For example, UEFI BIOS firmware can display visual objects using graphics and icons, unlike legacy BIOS firmware, which only display text. It can support larger partitions and drives than legacy BIOS firmware. It can include more detailed configuration menus than legacy BIOS firmware, support secure boot, and have a faster boot process.

[0119] In operation 720, the main processor (221) according to an embodiment can identify whether the CSME operation mode is a normal mode. The main processor (221) according to an embodiment can identify whether the CSME operation mode by the execution of the CSME firmware (24) of the security and management processor (223) is a normal mode while performing a BIOS function (e.g., booting) by executing the BIOS firmware (22). The security and management processor (223) according to an embodiment can detect an abnormal operation due to a complex reason such as an update error of the CSME firmware (24), a one-time operation error of the security and management processor (223), a defect in at least some hardware included in the electronic device (201), etc., during an operation by the CSME firmware (24) (e.g., the CSME normal operation mode). The security and management processor (223) according to an embodiment can operate in the CSME abnormal mode (or CSME abnormal mode) when an abnormal operation is detected. According to one embodiment, the main processor (221) may perform operation 740 of FIG. 7B if the CSME operation mode of the security and management processor (223) is not the normal mode. According to one embodiment, the main processor (221) may perform operation 730 if the CSME operation mode of the security and management processor (223) is the normal mode.

[0120] In operation 730, the main processor (221) according to one embodiment can identify whether the BIOS operation mode is the update mode if the CSME operation mode of the security and management processor (223) is the normal mode. The main processor (221) according to one embodiment can receive update data of the BIOS firmware (24) from an external server (e.g., 108) and store it in the third memory (236) when an update of the BIOS firmware (24) is required during operation using the OS. For example, the update data of the BIOS firmware (24) can include data for updating the BIOS firmware (24), and when an update to a new version of the CSME firmware is required, the payload of the update data of the BIOS firmware (24) can include CSME update data for updating the CSME firmware (22) to the new version of the CSME firmware. According to one embodiment, the main processor (221) may operate in a BIOS update mode (or update mode) if update data for the BIOS firmware (24) exists in the third memory (236) when executing the BIOS firmware (22). According to one embodiment, the main processor (221) may operate in a mode other than the update mode (e.g., normal mode) when update data for the BIOS firmware (24) does not exist in the third memory (236) when executing the BIOS firmware (22) or when the update data for the BIOS firmware (24) is not new update data.

[0121] In operation 732, the main processor (221) according to one embodiment may identify whether a backup image corresponding to the CSME normal mode (e.g., the latest backup image) exists in the designated storage area when the CSME operation mode of the security and management processor (223) is the normal mode and the BIOS operation mode is not the update mode. The main processor (221) according to one embodiment may terminate the backup operation when a backup image corresponding to the CSME normal mode (e.g., the latest backup image) exists in the designated storage area when the CSME operation mode of the security and management processor (223) is the normal mode and the BIOS operation mode is not the update mode.

[0122] In operation 734, the main processor (221) according to one embodiment may acquire a first backup image corresponding to the CSME normal mode and store the first backup image in a designated storage area (e.g., a recovery path) of the third memory (236) if the CSME operation mode of the security and management processor (223) is the normal mode and the BIOS operation mode is not the update mode and there is no backup image (e.g., the latest backup image) corresponding to the CSME normal mode in the designated storage area while the main processor (221) according to one embodiment is the security and management processor (223) in the normal mode and the BIOS operation mode is not the update mode. The main processor (221) may acquire a first backup image corresponding to the CSME normal mode and store the first backup image in a designated storage area (e.g., a recovery path) of the third memory (236) while the backup image is not in the designated storage area (e.g., a recovery path) when the backup image is in the designated storage area (e.g., a recovery path) when the Windows operating system is installed. For example, the recovery path may be located in a system partition of the storage area where the Windows operating system is installed. The recovery path according to one embodiment may be differently designated for each model of the electronic device (201) or each version of the CSME firmware (24). For example, since the recovery path is designated differently for each model of the electronic device (201) or each version of the CSME firmware (24), when the third memory (236) used in the electronic device (201) is mounted and used in another electronic device (not shown), the backup image of the recovery path associated with the electronic device (201) can be prevented from being used in the other electronic device. For example, if the version of the CSME firmware of the electronic device of model A is "10.0.0.1", the recovery path can be designated as " / CSME_REC / A_10.0.0.1.bin", and if the version of the CSME firmware of the electronic device of model B is "11.0.0.2", the recovery path can be designated as " / CSME_REC / B_11.0.0.2.bin".

[0123] In operation 736, the main processor (221) according to one embodiment may identify CSME update data included in BIOS update data for updating the BIOS firmware (24) if the CSME operation mode of the security and management processor (223) is the normal mode and the BIOS operation mode is the update mode. The main processor (221) according to one embodiment may identify (or confirm) whether the payload of the update data of the BIOS firmware (24) includes CSME update data for updating the CSME firmware (22) to a new version of the CSME firmware. The main processor (221) according to one embodiment may obtain a first backup image corresponding to the CSME normal mode of the CSME firmware (22) and store it in a designated storage area of ​​the third memory (236) if the CSME operation mode is the normal mode and the BIOS operation mode is the update mode and the update data of the BIOS firmware (24) does not include CSME update data.

[0124] In operation 738, the main processor (221) according to one embodiment may obtain a backup image (e.g., a third backup image) corresponding to the CSME normal mode of the updated new version of the CSME firmware using the CSME update data if the CSME operation mode is the normal mode and the BIOS operation mode is the update mode and the update data of the BIOS firmware (24) includes CSME update data, and store the backup image in another designated storage area of ​​the third memory (236).

[0125] Referring to FIG. 7b, the main processor (221) of an electronic device (201) (e.g., the electronic device (101) of FIG. 1) according to one embodiment may perform at least one of operations 740, 742, and 744.

[0126] In operation 740, the main processor (221) according to one embodiment may identify whether a second backup image stored when the security and management processor (223) operates in the normal mode exists in the designated storage area of ​​the third memory (236) if the CSME operation mode is not the normal mode (e.g., if it is the recovery mode or the restore mode). The main processor (221) according to one embodiment may terminate the restore operation and operate in the abnormal mode if the CSME operation mode is not the normal mode and the second backup image does not exist in the designated storage area of ​​the third memory (236).

[0127] In operation 742, the main processor (221) according to one embodiment may obtain a second backup image from a designated storage area of ​​the third memory (236).

[0128] In operation 746, the main processor (221) according to one embodiment may provide a second backup image obtained from a designated storage area of ​​the third memory (236) to the security and management processor (223) and cause the security and management processor (223) to restore the CSME operation mode from an abnormal mode to a normal mode using the second backup image.

[0129] FIG. 8 is a diagram showing an example of a boot screen when restoring the CSME operation mode from an abnormal mode to a normal mode according to one embodiment.

[0130] Referring to FIG. 8, the main processor (221) according to one embodiment may receive information indicating the execution status of restoration (e.g., the current amount of restoration data among the total amount of restoration data) from the security and management processor (223) while the security and management processor (223) restores the CSME operation mode to the normal mode during booting using the BIOS firmware (22). The main processor (221) according to one embodiment may display an image or phrase (801) corresponding to the information indicating the execution status of restoration together with a boot logo (Samsung galaxy) on the boot screen (800) on a display (e.g., the display module (160)) when the execution time of restoration by the security and management processor (223) exceeds a specified time period. The form and content of the image or phrase (801) corresponding to the information indicating the execution status of restoration may not be limited to the example illustrated in FIG. 8.

[0131] According to one embodiment, the main processor (221) checks whether the latest backup image corresponding to the CSME normal operation mode exists in a designated storage area when the security and management processor (223) is in the CSME normal operation mode at each boot using the BIOS firmware (22), and if the latest backup image corresponding to the CSME normal operation mode does not exist, the main processor (221) can store the latest backup image corresponding to the CSME normal operation mode. According to one embodiment, the main processor (221) can provide convenience by reducing user intervention for recovery of the security and management processor (223) by restoring the CSME operation mode to the normal operation mode using a pre-stored backup image when the security and management processor (223) is not in the CSME normal operation mode at each boot using the BIOS firmware (22).

[0132] Electronic devices according to various embodiments disclosed in this document may take various forms. Electronic devices may include, for example, portable communication devices (e.g., smartphones), computer devices, portable multimedia devices, portable medical devices, cameras, wearable devices, or home appliances. Electronic devices according to embodiments of the present disclosure are not limited to the aforementioned devices.

[0133] The various embodiments of the present disclosure and the terminology used therein are not intended to limit the technical features described in this document to specific embodiments, but should be understood to include various modifications, equivalents, or substitutes of the embodiments. In connection with the description of the drawings, similar reference numerals may be used for similar or related components. The singular form of a noun corresponding to an item may include one or more of the items, unless the context clearly indicates otherwise. In this document, each of the phrases "A or B," "at least one of A and B," "at least one of A or B," "A, B, or C," "at least one of A, B, and C," and "at least one of A, B, or C" can include any one of the items listed together in the corresponding phrase among those phrases, or all possible combinations thereof. Terms such as "first," "second," or "first" or "second" may be used merely to distinguish one component from another, and do not limit the components in any other respect (e.g., importance or order). When a component (e.g., a first component) is referred to as "coupled" or "connected" to another (e.g., a second component), with or without the terms "functionally" or "communicatively," it means that the component can be connected to the other component directly (e.g., wired), wirelessly, or through a third component.

[0134] The term "module" as used herein may include a unit implemented in hardware, software, or firmware, and may be used interchangeably with terms such as logic, logic block, component, or circuit. A module may be an integral component, or a minimum unit or part of such a component that performs one or more functions. For example, according to one embodiment, a module may be implemented in the form of an application-specific integrated circuit (ASIC).

[0135] Various embodiments of the present disclosure may be implemented as software (e.g., a program (140)) including one or more commands stored in a storage medium (e.g., an internal memory (136) or an external memory (138)) readable by a machine (e.g., an electronic device (101)). For example, a processor (e.g., a processor (120)) of the machine (e.g., an electronic device (101)) may call at least one command among the one or more commands stored from the storage medium and execute it. This enables the machine to operate to perform at least one function according to the at least one command called. The one or more commands may include code generated by a compiler or code executable by an interpreter. The machine-readable storage medium may be provided in the form of a non-transitory storage medium. Here, 'non-transitory' simply means that the storage medium is a tangible device and does not contain signals (e.g., electromagnetic waves), and the term does not distinguish between cases where data is stored semi-permanently or temporarily on the storage medium.

[0136] According to one embodiment, the method according to the various embodiments disclosed in the present document may be provided as included in a computer program product. The computer program product may be traded as a product between a seller and a buyer. The computer program product may be distributed in the form of a machine-readable storage medium (e.g., compact disc read only memory (CD-ROM)), or may be distributed online (e.g., downloaded or uploaded) via an application store (e.g., Play Store™) or directly between two user devices (e.g., smartphones). In the case of online distribution, at least a portion of the computer program product may be temporarily stored or temporarily generated in a machine-readable storage medium, such as the memory of a manufacturer's server, an application store's server, or an intermediary server.

[0137] According to various embodiments, each component (e.g., a module or a program) of the above-described components may include one or more entities. According to various embodiments, one or more components or operations of the aforementioned components may be omitted, or one or more other components or operations may be added. Alternatively or additionally, a plurality of components (e.g., a module or a program) may be integrated into a single component. In such a case, the integrated component may perform one or more functions of each of the plurality of components identically or similarly to those performed by the corresponding component among the plurality of components prior to the integration. According to various embodiments, the operations performed by a module, program, or other component may be executed sequentially, in parallel, iteratively, or heuristically, or one or more of the operations may be executed in a different order, omitted, or one or more other operations may be added.

[0138] According to one embodiment, a non-transitory storage medium storing commands is provided, wherein the commands are configured to cause the electronic device to perform at least one operation when executed by the electronic device, wherein the at least one operation may include: executing BIOS firmware and CSME firmware stored in the at least one memory based on power-on of the electronic device; identifying whether a CSME operation mode by execution of the CSME firmware is a normal mode based on execution of the BIOS firmware; acquiring a first backup image corresponding to the normal mode if the CSME operation mode is the normal mode and storing the first backup image in a designated storage area of ​​the at least one memory if the CSME operation mode is not the normal mode; and acquiring a second backup image stored in the designated storage area if the CSME operation mode is not the normal mode and performing a restoration using the second backup image so that the CSME operation mode becomes the normal mode.

[0139] And the embodiments of the present disclosure described in this specification and drawings are merely specific examples presented to easily explain the technical contents according to the embodiments of the present disclosure and to help understand the embodiments of the present disclosure, and are not intended to limit the scope of the embodiments of the present disclosure. Therefore, the scope of the various embodiments of the present disclosure should be interpreted as including all changes or modified forms derived based on the technical ideas of the various embodiments of the present disclosure in addition to the embodiments invented herein.

Claims

1. In the electronic device (101, 201), At least one memory (130, 230) for storing commands; and At least one processor (120, 220) operatively connected to at least one memory, The above instructions, when individually or collectively executed by the at least one processor, cause the electronic device to: Executing BIOS firmware and CSME firmware stored in at least one memory based on power-on of the electronic device; Based on the execution of the above BIOS firmware, identify whether the CSME operation mode by the execution of the above CSME firmware is a normal mode, If the CSME operation mode is the normal mode, a first backup image corresponding to the normal mode is acquired and the first backup image is stored in a designated storage area of ​​the at least one memory, and An electronic device that acquires a second backup image stored in the designated storage area when the CSME operation mode is not the normal mode and performs restoration using the second backup image so that the CSME operation mode becomes the normal mode.

2. In paragraph 1, At least one memory above, 1st memory; Second memory; and Includes a third memory, An electronic device wherein the first memory includes the BIOS firmware and the CSME firmware, the second memory provides a storage area for executing the BIOS firmware, and the third memory provides the designated storage area.

3. In paragraph 1 or 2, At least one processor, A main processor that loads the BIOS firmware from the first memory to the second memory based on the power-on of the electronic device and executes the BIOS firmware; and An electronic device comprising a security and management processor for loading and executing the CSME firmware from the first memory based on the power-on of the electronic device.

4. In any one of paragraphs 1 to 3, The electronic device further comprises a communication circuit, The above instructions, when executed individually or collectively by at least one processor, cause the electronic device to: An electronic device that receives BIOS update data from an external electronic device through the communication circuit and stores the BIOS update data in the second memory.

5. In any one of paragraphs 1 to 4, The above instructions, when individually or collectively executed by the at least one processor, cause the electronic device to: An electronic device that acquires the first backup image corresponding to the normal mode and stores the first backup image in the designated storage area when the CSME operation mode is the normal operation mode and the BIOS operation mode by execution of the BIOS firmware is not an update mode.

6. In any one of paragraphs 1 to 5, The above instructions, when individually or collectively executed by the at least one processor, cause the electronic device to: If the CSME operation mode is the normal operation mode and the BIOS operation mode by execution of the BIOS firmware is the update mode, the update of the CSME firmware is identified using the CSME update data included in the BIOS update data, and An electronic device that, if the update of the CSME firmware is successful, acquires a third backup image corresponding to the normal mode of the updated CSME firmware and stores the third backup image in another designated storage area of ​​the at least one memory.

7. In any one of paragraphs 1 to 6, An electronic device wherein the BIOS firmware includes a function module for restoring the SME operation mode.

8. In any one of paragraphs 1 to 7, The above function module includes a CSME control module, a main control module, and a file system control module, The above instructions, when individually or collectively executed by the at least one processor, cause the electronic device to: Identifying whether the CSME operation mode by executing the CSME firmware through the CSME control module is the normal mode, If the CSME operation mode is the normal mode, a first backup image corresponding to the normal mode is acquired through the CSME control module, the first backup image is transferred to the file system control module through the main control module, and the first backup image is stored in the designated storage area through the file system control module, and An electronic device that obtains a second backup image stored in the designated storage area through the file system control module when the CSME operation mode is not the normal mode, transmits the second backup image to the CSME control module through the main control module, and performs restoration using the second backup image through the CSME control module.

9. In any one of paragraphs 1 to 8, The electronic device further comprises a display, The above instructions, when individually or collectively executed by the at least one processor, cause the electronic device to: An electronic device that displays information indicating the status of performing the restoration on the display when the time period for performing the restoration exceeds a specified time period.

10. In any one of paragraphs 1 to 9, The above BIOS firmware is an electronic device including UEFI (unified extensible firmware interface) BIOS firmware.

11. In a method for restoring CSME (converged security and management engine) using BIOS (base input output system) in an electronic device (101, 201), An operation of executing BIOS firmware and CSME firmware stored in at least one memory based on power-on of the electronic device; An operation for identifying whether the CSME operation mode by execution of the CSME firmware is a normal mode based on execution of the BIOS firmware; If the CSME operation mode is the normal mode, an operation of obtaining a first backup image corresponding to the normal mode and storing the first backup image in a designated storage area of ​​the at least one memory; and A method comprising an operation of obtaining a second backup image stored in the designated storage area when the CSME operation mode is not the normal mode and performing a restoration using the second backup image so that the CSME operation mode becomes the normal mode.

12. In paragraph 11, The at least one memory includes a first memory, a second memory, and a third memory, A method wherein the first memory includes the BIOS firmware and the CSME firmware, the second memory provides a storage area for executing the BIOS firmware, and the third memory provides the designated storage area.

13. In paragraph 11 or 12, An operation of loading the BIOS firmware from the first memory to the second memory and executing the BIOS firmware based on the power-on of the electronic device using the main processor; and A method comprising loading and executing the CSME firmware from the first memory using a security and management processor based on the power-on of the electronic device.

14. In any one of paragraphs 11 to 13, A method comprising receiving BIOS update data from an external electronic device through a communication circuit of the electronic device and storing the BIOS update data in the second memory.

15. In a non-transitory storage medium storing commands, The above commands, when executed by the electronic device (101, 201), are set to cause the electronic device to perform at least one operation, wherein the at least one operation is: An operation of executing BIOS (base input output system) firmware and CSME (converged security and management engine) firmware stored in at least one memory based on power-on of the electronic device; An operation for identifying whether the CSME operation mode by execution of the CSME firmware is a normal mode based on execution of the BIOS firmware; If the CSME operation mode is the normal mode, an operation of obtaining a first backup image corresponding to the normal mode and storing the first backup image in a designated storage area of ​​the at least one memory; and A storage medium including an operation of acquiring a second backup image stored in the designated storage area when the CSME operation mode is not the normal mode and performing a restoration using the second backup image so that the CSME operation mode becomes the normal mode.

Images