2959 results about "Firmware" patented technology

The invention relates to the technical field of hard disk testing and verification, in particular to a multi-thread-based solid state disk reliability automatic testing method and system.The method comprises the steps that firstly, SMART information is deeply analyzed through microsecond-level high-granularity continuous performance monitoring, and multi-thread parallel processing is assisted; according to the method, fine performance fluctuation of the solid state disk under the concurrent load can be quickly captured, a fault mode can be identified, then early warning is realized by utilizing the extracted multi-dimensional features and a machine learning model, and a detailed fault diagnosis report is generated; and through dynamic error correction code strength verification and data integrity verification under pressure, an internal error correction mechanism of the solid state disk is actively detected and optimized. And finally, in combination with prediction reliability modeling, the system can estimate the remaining service life and predict faults, and provides product optimization suggestions for design, manufacturing and firmware optimization of the solid state disk, so that automation, intelligence and full life cycle management of the fault detection reliability of the solid state disk are realized.

The invention discloses a server BMC dynamic security authentication and firmware protection method and system based on a hardware root of trust, relates to the technical field of server remote management security, and discloses the server BMC dynamic security authentication and firmware protection method and system based on the hardware root of trust, which realize dynamic authentication by generating a device fingerprint through a security chip. According to the method, a multi-layer protection mechanism is constructed in combination with fragment encryption, differential hash check and memory integrity verification, and meanwhile, the data credibility is enhanced by using a block chain storage key hash value, so that the problems of static authentication risk, insufficient firmware tampering detection and missing of a trust chain in a traditional scheme are effectively solved, and the security protection capability of a BMC system can be improved.

The invention discloses a vehicle-mounted controller firmware upgrading method, which relates to the technical field of intelligent networked automobiles, and comprises the following steps of: accurately describing a dependency relationship between versions by introducing a directed acyclic graph, providing a clear topological sorting basis for an upgrading process, and improving the upgrading efficiency. The system function conflict and disorder caused by disordered upgrading sequence are fundamentally avoided; a distributed consensus protocol is utilized to ensure that each controller achieves state coordination before upgrading, so that the overall robustness of a multi-controller cluster is effectively improved when the multi-controller cluster faces network delay or individual node abnormity, and upgrading failure or version bifurcation caused by the fact that part of nodes are not ready is avoided; through the combination of the group-level binding token and the atomic switching mechanism, the controller group with a strong function dependency relationship can be ensured to be effective and updated as a unified transaction unit, and the safety and reliability of cross-domain function linkage are remarkably enhanced.

The invention provides a server management method, device and equipment and a storage medium, and belongs to the technical field of computer system architecture.The server management method comprises the steps that first equipment information of PCIe link equipment and second equipment information of SMBus link equipment are obtained; determining a device supporting a management component transport protocol (MCTP) based on the first device information and the second device information; constructing a heterogeneous equipment topological graph in the server based on the equipment supporting the MCTP protocol; determining a global unique logic identifier (EID) of each device in the heterogeneous device topological graph based on the first device information and the second device information, and constructing a global unique logic identifier mapping table based on the EIDs; and managing the internal equipment of the server according to the global unique logic identifier mapping table. According to the method, the unified management strategy of the heterogeneous bus equipment is integrated in the firmware system of the BMC, additional conversion equipment is not needed, and the design and maintenance cost of hardware is reduced.

The embodiment of the invention provides a virtual power plant terminal access control system based on dynamic permission, and the system comprises an identity authentication module which is configured to collect hardware invariant features and firmware signature information of terminal equipment and generate an encryption certificate; the trust evaluation module is in communication connection with the identity authentication module and is configured to continuously monitor communication behavior characteristics and service instruction characteristics of the terminal and output a dynamic trust score; the dynamic authority management module is in data connection with the trust evaluation module and is configured to adjust the access authority level in real time according to the mapping relation of the dynamic trust score in a preset authority level interval; the strategy engine module is configured to generate an access control instruction when abnormal behavior characteristics are detected; and the behavior monitoring module interacts with the strategy engine module and the dynamic authority management module and is configured to execute blocking operation and feed back an execution result to the log auditing module. And the hardware invariant features and the dynamic behavior features are subjected to fusion evaluation, so that the terminal credibility quantification precision is improved.

The invention relates to a method and system for encrypting and isolating storage data of a credential mobile terminal, and belongs to the technical field of information. The method comprises the following steps: encrypting and partitioning the whole storage area, and setting an access strategy according to user permission; when a user requests to access, executing multi-factor authentication containing a password and an external hardware certificate, and adding biological characteristic authentication; after the authentication is passed, an encryption key is taken from the domestic security chip; and encrypting and decrypting data by using the secret key, and opening corresponding partition access according to authority. The system comprises a storage partition module, an identity authentication module, a key management module, an encryption and decryption module and an authority control module and is used for executing the method. The method also comprises the steps of equipment startup trusted boot and firmware upgrade verification, is based on a custom curing system, and is compatible with Android 10 +. The problems of poor hardware controllability and positioning security risk of the creative mobile terminal are solved, and full-link data security protection is realized.

The invention provides a dual-storage system starting method and device. An architecture in which a master control chip SOC works cooperatively with an external memory DDR, a nonvolatile memory SPI NOR and an SD card is adopted. After the SOC is powered on, a BootROM guide code is executed, a system is initialized, ID Blocks containing a DDR initialization program and an SPL secondary loading program are sequentially obtained and verified from multiple storage media, the DDR initialization program is loaded, DDR is initialized, and the SPL secondary loading program is loaded to the DDR to run. The method comprises the following steps of: firstly, loading an SD (Secure Digital) card, then loading U-Boot firmware, completing initialization of residual hardware and security mirror verification, then detecting and verifying a kernel mirror format and Header information in the SD card, then loading a Linux kernel, an equipment tree and a ramdisk, mounting rootfs to an RAM (Random Access Memory) space, and mounting the SD card as a user data storage space. According to the method, high reliability of system guiding is ensured through the SPI NOR, large-capacity storage and flexible upgrading are achieved through the SD card, and the comprehensive performance of the embedded system in the aspects of reliability, storage expansibility and cost effectiveness is remarkably improved.

The invention discloses a firmware-level security protection system and method for a hard disk of industrial automation equipment, particularly relates to the technical field of storage security protection, and is used for solving the problem of abnormal tampering of firmware. According to the method, instruction calling, interface access and interrupt timestamps are collected in a sliding window, a behavior sequence set containing an instruction sequence, calling frequency and sensitive marks is constructed and compared with a reference sequence library, firmware-level judgment on operation abnormity, access border crossing and tampering risks is triggered based on a transfer relation and an offset index, and the operation safety is improved. The method comprises the following steps of: dividing firmware into a control domain, a data domain and a configuration domain, realizing minimum permission and dynamic isolation by relying on state and permission mapping and permission register and interface shielding, forming a flow from detection to isolation to closed loop recovery by combining protected segment integrity verification and local copy hot switching, writing an exception into a protected loop log area for threshold updating, and performing protection on the protected loop log area. And the tamper-proof performance, the operation safety and the maintainability of the firmware are integrally improved.

The invention discloses a high-density NAND storage medium self-adaptive repairing method which comprises the following steps: a main control chip separates a target feature vector representing the real aging trend of a storage unit from original read data containing random physical noise; the main control chip deduces the target feature vector by using a full-integer recursive prediction model to obtain a health state prediction result of the storage unit in a future preset time period; wherein the health state prediction result comprises an optimal read reference voltage offset and an estimated bit error rate growth curve; and the main control chip adjusts the charge distribution pattern and programming voltage parameters of the data on the storage unit in the data writing stage according to the health state prediction result. By means of the mode, the problems of firmware assembly line blocking and performance jitter caused by floating point operation and huge model parameter loading can be solved under the limited hardware environment that the main control chip only supports integer operation and on-chip cache is extremely small.

Techniques are disclosed for sending downloadable software packages that may be executed to perform tests of a network device without requiring the network device to update firmware. In one example, the network device obtains a software package comprising instructions for simulating a network instance and stores the software package in a volatile memory of the network device. The network device simulates, based on the instructions, the network instance to obtain data indicative of a performance of the network instance. The network device sends, via a communication channel established with a network management system (NMS) based on the software package, the data indicative of the performance of the network instance. In some examples, the NMS uses the data indicative of the performance of the network instance to identify a root cause of a failure of the network device or a remedial action to be performed upon the network device.

Systems and methods for distribution and management of certificates in a firmware framework. In some embodiments, an Information Handling System (IHS) may include a controller, where the controller includes firmware that, upon execution by a processing core, causes the processing core to instantiate an orchestrator; and a plurality of devices coupled to the controller, where each device includes firmware that, upon execution by a corresponding processing core, causes the corresponding processing core to instantiate a node of a plurality of nodes of a firmware framework; and where the orchestrator is configured to: store certificates in a local storage of the controller; and distribute one or more other certificates to one or more of the plurality of nodes within the firmware framework, without any involvement by any Operating System (OS) of the IHS.

The invention provides a firmware upgrading method and device and a storage medium, the method is applied to a platform firmware recovery system, the system comprises a first processing module and a second processing module, and the method can be applied to the platform firmware recovery system. The method comprises the steps that a first processing module obtains an upgrading attribute parameter and to-be-upgraded firmware of at least one target system component; the first processing module processes all the to-be-upgraded firmware so as to store all the to-be-upgraded firmware to target storage partitions corresponding to all the target system components; wherein each storage partition corresponds to at least one system component; and the first processing module sends an upgrading instruction to the second processing module based on the upgrading attribute parameter, so that the second processing module flashes each firmware to be upgraded from the target storage partition to the firmware storage area of each target system component based on the upgrading attribute parameter by adopting a concurrent execution mode. Through the technical scheme of the invention, concurrent firmware upgrading of a plurality of system components can be realized.

The invention discloses a data scheduling and control method based on mainboard memory straight-through, and relates to the technical field of computer hardware, the method comprises the following steps: pre-allocating a straight-through memory area for mounting equipment in a firmware initialization stage, establishing a mapping relation between equipment identification and a physical address of an exclusive memory segment, and through address translation and access control rules of a firmware layer, the device bypasses a system cache level and accesses the exclusive memory segment in a direct memory access mode. Constructing a firmware scheduling table based on the mapping relation to manage access requests of all devices, monitoring transmission delay in real time, and dynamically adjusting priority weight and bandwidth allocation in the scheduling table according to a monitoring result; and sequencing the requests according to the updated scheduling table to complete scheduling and control of the memory access behavior of the equipment. According to the method and the device, the delay bottleneck caused by multi-level copying and firmware scheduling lag in mainboard data forwarding is effectively solved.

The invention relates to the technical field of optical modules, and provides a firmware upgrading method, device and equipment for an optical module and a storage medium, and the method comprises the steps: after receiving a firmware upgrading request corresponding to the optical module, extracting a firmware version identifier and a check code, obtaining version information and an operation abstract of operating firmware in the optical module, and storing the version information and the operation abstract in the optical module; the version information and the operation abstract are compared with the firmware version identifier and the check code and analyzed and verified, a comparison result and an analysis result are obtained, if any one of the results is abnormal, the optical module is rolled back to an initial state and an error is reported, if the result is not abnormal, the optical module is subjected to multiple rounds of self-inspection, and if a preset threshold value is met, the optical module is subjected to self-inspection. If yes, the original version data in the optical module is cleared, and if the preset threshold value is not met, the optical module is recovered to the pre-upgrading state. Through a multi-round self-checking and conditional clearing mechanism, the fault recovery capability and the system stability are remarkably enhanced, and the problem of upgrading failure caused by weak checking mechanism and insufficient stability analysis in the firmware upgrading process of the existing optical module is solved.

The invention provides a fault processing method and electronic equipment, and relates to the technical field of computers, when a backboard fault is monitored, a hardware fault and a firmware fault are accurately distinguished based on state parameters, and for the firmware fault, different detection strategies are adopted according to different fault hardware to further judge whether the firmware fault is repairable or not, so that the fault processing efficiency is improved. According to the method and the system, different fault types and fault states are selected, different processing modes including physical isolation and adoption of different firmware recovery strategies according to different fault hardware are executed according to different fault types and fault states, multi-dimensional diagnosis and fine processing of the faults are realized, reasons of the backboard faults can be accurately identified, and effective automatic recovery or isolation measures are executed. The technical effect of improving the accuracy, the automation degree and the overall reliability of hard disk backboard fault processing is achieved.

The invention provides a quick start and security verification method and equipment for an embedded device, a medium and a program product, in the method, firmware is divided into a core start module and a non-core function module in advance, and the core start module and the non-core function module are respectively stored in a high-speed access area and a common storage area of a nonvolatile memory; after the embedded device is powered on, initialization of the key peripheral is completed; when firmware is started or updated for the first time, security verification based on a digital signature is executed on the core starting module, if verification is passed, a mirror image of the core starting module is written into a running cache partition of the nonvolatile memory, and an integrity label is generated; in the subsequent starting process, the mirror image is loaded from the running cache partition, and the integrity label is used for executing rapid verification; after loading of the core starting module is completed, the non-core function module is loaded, and lightweight check is executed. According to the method, the security of the core module is ensured, the performance and security requirements of the non-core module are considered, and the calculation and storage overhead is reduced.

The invention discloses a BMC firmware starting method and device, equipment, a medium and a program product, and relates to the technical field of server management.The BMC firmware starting method comprises the steps that when a main mirror image file is damaged, BMC firmware is restarted on the basis of a standby mirror image file, if starting fails, the BMC firmware is restarted on the basis of a latest mirror image file of a remote server, and if starting fails, the BMC firmware is restarted on the basis of the latest mirror image file of the remote server; if the BMC firmware is started abnormally, the BMC firmware is restarted based on the local minimum mirror image file, so that the problem that a double-mirror image backup mechanism still faces system paralysis can be solved, a multi-stage mirror image file recovery mechanism is constructed through the multiple pre-deployed mirror image files, when the BMC firmware is started abnormally, the system is recovered step by step according to the multi-stage mirror image file recovery mechanism, and the system recovery efficiency is improved. The technical effects of ensuring the minimum availability of the system and improving the reliability and safety of the system are achieved.

The invention discloses an interface design and implementation method of a BMC (Baseboard Management Controller) remote management system based on Redfish. According to the method, a multi-module resource model conforming to Redfish specifications is constructed in a baseboard management controller (BMC), management modules including Systems, Chassis, Managers, Account Service, Session Service, TaskService, Update Service, FRU and the like are integrated, and a unified RESTful interface architecture is formed. The method supports standardized access to management functions such as a server system state, hardware assets, a user account, remote control and firmware upgrading, and meanwhile, a unified authentication mechanism and an asynchronous task mechanism are introduced, so that an efficient and safe out-of-band management process is realized. The system has the advantages of uniform interface, clear structure, safety, controllability, high expandability and the like, and is suitable for various data center and server remote management scenes.

The invention relates to a BMC firmware mirror image recovery method and device and terminal device.The method comprises the steps that a storage area of a preset storage chip is divided into multiple areas, and the multiple areas comprise a first area and a second area; a first file in the firmware mirror image file is coded through a forward error correction algorithm, redundant recovery data is obtained, backup files of second files except the first file in the firmware mirror image file are obtained, and the first file comprises a root file system; the first file and the redundancy recovery data are stored in the first area, and the second file and a backup file of the second file are stored in the second area; when it is detected that the first file is abnormal, the first file is recovered based on the redundant recovery data through a forward error correction algorithm; and when detecting that the second file is abnormal, recovering the second file through the backup file of the second file. According to the method and the device, the problem that the reliability of recovering the firmware mirror image file through out-of-band network transmission is relatively low is solved.

The invention provides a safety starting method, device and equipment and a readable storage medium, and the method comprises the steps: responding to a request for starting chip firmware, and building communication connection with a safety chip through inter-core communication; obtaining a trusted key root from the security component according to the security chip, and performing mutual challenge authentication with the security chip; according to a mutual challenge authentication with the security chip, a mutual legal authentication result is obtained, and the security chip is requested to start security signature verification; and starting the chip firmware according to a result fed back by the security chip that the signature verification is legal through security starting of the security component. Through the technical scheme of the specification, the isolation security component forms a hardware-level protection island, the risk of physical detection or bypass attack is eradicated, the security chip agents all operations to ensure that the root key cannot be directly accessed by the main MCU, the two-way challenge authentication is combined with the dynamic session key to realize tamper-proofing of inter-core communication, and on the premise of completely eradicating the tamper-proofing process from being hijacked, the security of the main MCU is improved. And the starting reliability and timeliness of the chip are ensured.

The invention relates to the technical field of communication equipment operation and maintenance, in particular to a serial port equipment firmware upgrading method and system. The serial port equipment firmware upgrading method comprises the steps that an upgrading task instruction issued by a remote management platform is received, and after equipment identity verification and upgrading file integrity verification are executed, system protection measures are started; creating a security isolation sandbox environment, forbidding a high-risk function module in a script execution environment, and defining addressing parameters of target serial port equipment; standard scripts are loaded, and serial port read-write, file operation and state reporting type security interaction interfaces are injected; calling a mode switching function of the standardized script, so that the serial port equipment is switched to a firmware upgrading mode from an operation mode; cyclically calling a data transmission function of the standardized script to transmit firmware data in blocks, and synchronously implementing timeout monitoring; and after upgrading is completed or abnormal interruption occurs, the security isolation sandbox environment is destroyed, the original business is recovered, and an upgrading result is reported to the remote management platform.

The invention provides a fault diagnosis method, diagnosis device and fault diagnosis equipment, and relates to the technical field of fault diagnosis, and the fault diagnosis method comprises the steps: obtaining test firmware corresponding to the model of a to-be-measured force plate in response to the model selection of the to-be-measured force plate, and displaying a test interface corresponding to the to-be-measured force plate; and in response to a detection operation for the to-be-measured force plate, running the test firmware, and determining the working state of the to-be-measured force plate. According to the method, efficient fault diagnosis is realized through the automatic test process and the user interaction interface, the efficiency and accuracy can be improved, and manual dependence is reduced.

The invention discloses a substrate management controller firmware integrity verification method and electronic equipment, and relates to the technical field of server management, and the method comprises the steps: building a tree structure layered according to a storage path prefix through obtaining the storage path and content data of each function module, the full-coverage verification of all functional modules of the firmware of the baseboard management controller is realized; according to the method, the security level labels in the structured description information are screened, and the verification path is determined for the target function module, so that the redundant operation of full firmware mirror image hash calculation is avoided, and the calculation amount and time consumption in the verification process are reduced; hash is recalculated based on the target function module and path consistency is verified, whether the target function module is tampered or not can be rapidly judged, all firmware data does not need to be traversed, verification comprehensiveness and efficiency are both considered, and bandwidth resource consumption is reduced; all function modules are associated through a storage path and content data, tree structure verification logic is combined, and refinement of firmware verification from a full mirror image level to a function module level is achieved.

The present disclosure relates to a system and method for automated verification of a battery management system for a battery pack, an energy storage device, etc., and the problem to be solved is to enable automated verification for items that should be determined by modifying internal variable information or verifying results with the internal variable information during white box verification of the internal architecture logic of BMS firmware of an ESS. There is provided a system for automated verification of a BMS, including a device for automated verification configured to create a test case sequence for testing firmware operation items of the BMS, perform a simulation on the BMS, and model operation items of the BMS, a BMS controller that is connected to the device for automated verification and controls the BMS to operate by applying modeled data for the operation items to the BMS, and a BMS internal variable acquirer that acquires internal variable information of the BMS during execution of the simulation.

The invention provides a firmware online upgrading method, embedded equipment, a medium and a product, and relates to the technical field of intelligent terminals. The method comprises the following steps: after the embedded equipment is powered on, running a primary bootstrap program, and checking a first mark state: if the state is a state of updating a secondary bootstrap program, executing online updating of the program and resetting a system; and if the state is the default state, loading and running the secondary bootstrap program. Checking a second mark state; if the second mark state is an updating mirror image state, executing firmware mirror image online updating and resetting; and if the state is the default state, determining a target mirror image, copying the target mirror image from the nonvolatile memory to the random access memory, and skipping to run. And the equipment simultaneously monitors the running state of the target mirror image in real time, and executes successful confirmation or abnormal recovery operation according to the state. In this way, quick response of faults is achieved through running state feedback, the stability and reliability of firmware upgrading of the embedded device are effectively improved, and the risk of device paralysis in the upgrading process is reduced.

The invention belongs to the technical field of cache prefetching optimization of a firmware layer of a computer storage system, and particularly provides a memory control method, a storage device, a medium and equipment.The instantaneous flow is effectively filtered and persistent hotspot data is accurately recognized through a three-layer structure of combining a first-stage hotspot filtering module with a window cache, a view queue and a protection queue; the second-stage continuous access filtering module dynamically judges a continuous access mode by means of mean-variance statistics of an annular buffer area, and accidental continuous triggering of prefetching is avoided; and the third-stage random access judgment module prohibits invalid prefetching and effectively distinguishes access modes. The pre-fetching bandwidth is limited through the token bucket algorithm, the global priority queue of the skip list is combined, it is ensured that the priority of the write task is higher than that of the pre-fetching task, pre-fetching and foreground I / O resources are isolated, delay jitter control over foreground key I / O can be achieved during full-load pre-fetching, and the problem that delay soaring is caused when pre-fetching preempts the resources is solved.

The invention discloses a fast data protection method and device for SSD abnormal power failure, equipment and a medium, and relates to the field of SSDs, and the method comprises the steps: monitoring a power supply voltage, and generating an interrupt signal when the power supply voltage is lower than a preset threshold value; in response to the interrupt signal, turning off a power supply of a preset non-data path hardware module through the SSD controller; stopping scheduling all operation commands for the NAND flash memory through the SSD firmware, and emptying a data path in an NAND flash memory controller; writing the user data in the host write cache and the command information corresponding to the user data into a special physical address block reserved in the SSD in advance; after the SSD is powered on again, the address mapping table is recovered by scanning the write-in point in the NAND flash memory, the backup data and the command information in the special physical address block are read, and the backup data are written into the user data area according to the command information. According to the method, the key data backup time during abnormal power failure is shortened, the capacity requirement for the standby capacitor is reduced, and the problem that the cost is increased due to the fact that the backup time is too long is effectively solved.

The invention belongs to the technical field of simulation, and particularly relates to a simulation result display method and device, a storage medium and equipment, and the display method comprises the steps: obtaining a global program counting address and instruction information according to a firmware logic file, and constructing a reference address mapping table based on the global program counting address and the instruction information; wherein the firmware logic file is a file for storing firmware execution logic related information; obtaining a firmware program counting address according to the firmware signal file; wherein the global program counting address comprises the firmware program counting address, and the firmware signal file is a file for storing response signal related information generated when the firmware executes the instruction information; in the execution process of playing back the instruction information, displaying the firmware program counting address based on the firmware program counting address and the reference address mapping table; according to the method, the debugging efficiency between the software and the firmware is improved.

The invention discloses a log management method and device for a solid state disk, equipment and a medium, and relates to the technical field of computers. The method is applied to a device side and comprises the steps that in the firmware compiling generation stage of the solid state disk, a log mapping table is generated through a preset script; in the running process of the solid state disk, persistently storing the generated log data into a nonvolatile storage medium of the solid state disk to obtain an original log text; when log export needs to be carried out, obtaining a log export command issued by the host side through the out-of-band channel, reading the original log text from the nonvolatile storage medium according to the log export command, and converting the original log text into target data containing numerical information; and sending the target data to the host side through the out-of-band channel, so that the host side restores the target data into the original log text according to the log mapping table. According to the technical scheme, the problem that the file transmission time is long in a traditional mode can be solved.

The invention provides a code compiling method and device based on a P4 assembler, the assembler and a medium. The code compiling method comprises the steps that a to-be-processed assembly code file is obtained; splitting and compiling the assembly code file to obtain a plurality of code segment compiling results; according to the auxiliary information, by taking Parser components, Mat components and Deparser components contained in the Ingress unit and the Egress unit as classification types, classifying the code segment compiling results to obtain code segment groups; linking the P4 table item data and the machine instruction code contained in the code segment group, and endowing a link result with a global instruction identifier and code segment header information to obtain a code segment binary code; and generating a firmware file based on the code segment binary code. The compiling process of the network processor can be simplified, so that the development efficiency is improved.