3392 results about "Firmware" patented technology

The invention relates to the technical field of hard disk testing and verification, in particular to a multi-thread-based solid state disk reliability automatic testing method and system.The method comprises the steps that firstly, SMART information is deeply analyzed through microsecond-level high-granularity continuous performance monitoring, and multi-thread parallel processing is assisted; according to the method, fine performance fluctuation of the solid state disk under the concurrent load can be quickly captured, a fault mode can be identified, then early warning is realized by utilizing the extracted multi-dimensional features and a machine learning model, and a detailed fault diagnosis report is generated; and through dynamic error correction code strength verification and data integrity verification under pressure, an internal error correction mechanism of the solid state disk is actively detected and optimized. And finally, in combination with prediction reliability modeling, the system can estimate the remaining service life and predict faults, and provides product optimization suggestions for design, manufacturing and firmware optimization of the solid state disk, so that automation, intelligence and full life cycle management of the fault detection reliability of the solid state disk are realized.

The invention discloses an embedded system construction method and device, and the method comprises the steps: loading a configuration file which is a. Config file generated based on configuration parameters selected by a user through a visual configuration interface; when the CONFIGCONANAUTOUPDATE flag bit is detected to be in an activated state, the Conan warehouse data center is accessed, the latest compatible version of each Conan software package dependency item is inquired, and a semantic version constraint analysis algorithm is adopted to update a version identifier in the configuration file into the latest compatible version; generating a description file containing a dependency item list based on the updated configuration file, and generating a dependency lock file through a Hash locking mechanism; and importing the pre-compiled binary package into the construction environment, calling the corresponding pre-compiled binary package according to the version information and the Hash check value in the dependency lock file in the firmware compiling process, and executing hierarchical compiling operation.

The invention discloses a server BMC dynamic security authentication and firmware protection method and system based on a hardware root of trust, relates to the technical field of server remote management security, and discloses the server BMC dynamic security authentication and firmware protection method and system based on the hardware root of trust, which realize dynamic authentication by generating a device fingerprint through a security chip. According to the method, a multi-layer protection mechanism is constructed in combination with fragment encryption, differential hash check and memory integrity verification, and meanwhile, the data credibility is enhanced by using a block chain storage key hash value, so that the problems of static authentication risk, insufficient firmware tampering detection and missing of a trust chain in a traditional scheme are effectively solved, and the security protection capability of a BMC system can be improved.

The invention discloses an internet of things multi-protocol fusion limo intelligent control system, which relates to the field of limo intelligent control and comprises a hardware irrelevant layer, a multi-protocol adaptation layer, a data abstraction layer, a programmable logic layer, a security and redundancy mechanism and an edge AI module. According to the invention, a physical bus is packaged into an independent module, an MCU / SoC and a protocol transceiver are built in, hot plugging is realized through a standardized PC I e / EdgeConn backboard, a core processing board only exposes a unified backboard interface, module drive localization execution is realized, master control firmware does not need to sense protocol details, only the module needs to be replaced when a protocol is newly added, and the master control firmware or upper software does not need to be modified. The defect that the whole vehicle firmware needs to be refreshed when a bus is replaced in a traditional system is overcome, each protocol corresponds to an independent drive micro-service deployed in a containerization mode, the drive micro-service analyzes a message into a unified data model and uploads the unified data model to a data abstraction layer, a downlink control instruction is packaged and issued according to a target protocol, and it is guaranteed that the protocols are diversified and interfaces are consistent.

The invention discloses a vehicle-mounted controller firmware upgrading method, which relates to the technical field of intelligent networked automobiles, and comprises the following steps of: accurately describing a dependency relationship between versions by introducing a directed acyclic graph, providing a clear topological sorting basis for an upgrading process, and improving the upgrading efficiency. The system function conflict and disorder caused by disordered upgrading sequence are fundamentally avoided; a distributed consensus protocol is utilized to ensure that each controller achieves state coordination before upgrading, so that the overall robustness of a multi-controller cluster is effectively improved when the multi-controller cluster faces network delay or individual node abnormity, and upgrading failure or version bifurcation caused by the fact that part of nodes are not ready is avoided; through the combination of the group-level binding token and the atomic switching mechanism, the controller group with a strong function dependency relationship can be ensured to be effective and updated as a unified transaction unit, and the safety and reliability of cross-domain function linkage are remarkably enhanced.

The invention provides a server management method, device and equipment and a storage medium, and belongs to the technical field of computer system architecture.The server management method comprises the steps that first equipment information of PCIe link equipment and second equipment information of SMBus link equipment are obtained; determining a device supporting a management component transport protocol (MCTP) based on the first device information and the second device information; constructing a heterogeneous equipment topological graph in the server based on the equipment supporting the MCTP protocol; determining a global unique logic identifier (EID) of each device in the heterogeneous device topological graph based on the first device information and the second device information, and constructing a global unique logic identifier mapping table based on the EIDs; and managing the internal equipment of the server according to the global unique logic identifier mapping table. According to the method, the unified management strategy of the heterogeneous bus equipment is integrated in the firmware system of the BMC, additional conversion equipment is not needed, and the design and maintenance cost of hardware is reduced.

The embodiment of the invention provides a virtual power plant terminal access control system based on dynamic permission, and the system comprises an identity authentication module which is configured to collect hardware invariant features and firmware signature information of terminal equipment and generate an encryption certificate; the trust evaluation module is in communication connection with the identity authentication module and is configured to continuously monitor communication behavior characteristics and service instruction characteristics of the terminal and output a dynamic trust score; the dynamic authority management module is in data connection with the trust evaluation module and is configured to adjust the access authority level in real time according to the mapping relation of the dynamic trust score in a preset authority level interval; the strategy engine module is configured to generate an access control instruction when abnormal behavior characteristics are detected; and the behavior monitoring module interacts with the strategy engine module and the dynamic authority management module and is configured to execute blocking operation and feed back an execution result to the log auditing module. And the hardware invariant features and the dynamic behavior features are subjected to fusion evaluation, so that the terminal credibility quantification precision is improved.

The invention provides a fault recovery method and electronic equipment, which can be applied to the field of computers. The fault recovery method comprises the following steps: collecting state information of a substrate management controller; when the state information represents that the substrate management controller breaks down, an isolation circuit connected between the processor and the substrate management controller is controlled, power supply to the substrate management controller is cut off, and the control right of a serial communication bus of the substrate management controller is taken over; target firmware mirror image data of the substrate management controller is obtained from a storage medium, and the target firmware mirror image data is used for restoring the function of the substrate management controller when it is detected that the substrate management controller breaks down; replacing original firmware mirror image data stored in a flash memory of the substrate management controller with the target firmware mirror image data through a serial communication bus so as to perform function recovery on the substrate management controller; and in response to completion of function recovery, controlling the isolation circuit to recover power supply to the substrate management controller.

Systems and methods for runtime selection and distribution of modules in a firmware framework. In some embodiments, an Information Handling System (IHS) may include a controller, where the controller comprises firmware that, upon execution by a processing core, causes the processing core to instantiate an orchestrator; and a plurality of devices coupled to the controller, where each device comprises firmware that, upon execution by a corresponding processing core, causes the corresponding processing core to instantiate a node as part of a firmware framework, and where the orchestrator is configured to distribute a firmware module to a given node in response to a determination that the given node requires the firmware module to provide a capability, without any involvement by any Operating System (OS) of the IHS.

The invention relates to a method and system for encrypting and isolating storage data of a credential mobile terminal, and belongs to the technical field of information. The method comprises the following steps: encrypting and partitioning the whole storage area, and setting an access strategy according to user permission; when a user requests to access, executing multi-factor authentication containing a password and an external hardware certificate, and adding biological characteristic authentication; after the authentication is passed, an encryption key is taken from the domestic security chip; and encrypting and decrypting data by using the secret key, and opening corresponding partition access according to authority. The system comprises a storage partition module, an identity authentication module, a key management module, an encryption and decryption module and an authority control module and is used for executing the method. The method also comprises the steps of equipment startup trusted boot and firmware upgrade verification, is based on a custom curing system, and is compatible with Android 10 +. The problems of poor hardware controllability and positioning security risk of the creative mobile terminal are solved, and full-link data security protection is realized.

The invention relates to the technical field of power distribution automation of a power system, and particularly discloses a general operation and maintenance method and system supporting multiple types of power distribution terminals. According to the method, millisecond-level automatic accurate identification of the power distribution terminal is realized through a multi-layer protocol feature fingerprint extraction technology and a weighted dynamic similarity matching algorithm. On the basis of a double-library cooperation mechanism, after equipment identification succeeds, communication parameters, point table mapping relations and operation and maintenance instructions which conform to international / industrial general standards are automatically triggered, loaded and issued. The plug-and-play and zero-configuration deployment of the power distribution terminal is realized, and the point table configuration error rate is reduced to below 1%. And an unidentified equipment self-learning closed-loop process is designed, so that the system can quickly adapt to a power distribution terminal of a new manufacturer, a new number or a new firmware version. And an automatic parameter read-back and verification comparison mechanism after configuration execution forms an operation and maintenance operation closed loop, so that the accuracy of configuration issuing each time and the controllability of the equipment operation state are ensured.

A data storage device and method are provided for using a dynamic floating flash region to secure a firmware update. In one embodiment, a data storage device is provided comprising a first non-volatile memory, a second non-volatile memory, and a controller. The controller is configured to communicate with the first and second non-volatile memories and further configured to: determine addresses in the second non-volatile memory to store portions of a firmware update, wherein the addresses are determined on-the-fly as opposed to being predetermined; and store the portion of the firmware update in the addresses in the second non-volatile memory. Other embodiments are provided.

The invention relates to the field of vehicle-mounted equipment optimization, in particular to a vehicle-mounted equipment optimization method and system based on firmware updating. The method comprises the following steps: carrying out running state full monitoring on a vehicle-mounted firmware module, carrying out multi-behavior state sensing modeling, and constructing a firmware behavior state map; performing dynamic change trend analysis on the firmware behavior state graph, performing performance attenuation situation modeling, and constructing a performance attenuation situation curve; based on the performance attenuation situation curve, code-level program root cause analysis is carried out, firmware optimization target quantification is carried out, and firmware optimization demand data is generated; based on the firmware optimization demand data, multiple optimization direction decisions are made, multi-index optimization solution is carried out, and a firmware optimization task list is constructed; and performing firmware configuration update parameter simulation based on the firmware optimization task list to obtain a configuration update parameter scheme. According to the method, the optimal progressive equipment updating is realized, and the reliability and deployment safety of the vehicle-mounted equipment are improved.

The invention provides a dual-storage system starting method and device. An architecture in which a master control chip SOC works cooperatively with an external memory DDR, a nonvolatile memory SPI NOR and an SD card is adopted. After the SOC is powered on, a BootROM guide code is executed, a system is initialized, ID Blocks containing a DDR initialization program and an SPL secondary loading program are sequentially obtained and verified from multiple storage media, the DDR initialization program is loaded, DDR is initialized, and the SPL secondary loading program is loaded to the DDR to run. The method comprises the following steps of: firstly, loading an SD (Secure Digital) card, then loading U-Boot firmware, completing initialization of residual hardware and security mirror verification, then detecting and verifying a kernel mirror format and Header information in the SD card, then loading a Linux kernel, an equipment tree and a ramdisk, mounting rootfs to an RAM (Random Access Memory) space, and mounting the SD card as a user data storage space. According to the method, high reliability of system guiding is ensured through the SPI NOR, large-capacity storage and flexible upgrading are achieved through the SD card, and the comprehensive performance of the embedded system in the aspects of reliability, storage expansibility and cost effectiveness is remarkably improved.

The invention belongs to the technical field of computer trusted computing, and particularly relates to a method and system for constructing a TPCM trusted root based on a multi-core BMC, and the method comprises the steps: selecting the multi-core BMC, configuring one core as a trusted core, and achieving the physical and logic isolation with other cores; tPCM related codes are integrated in the trusted core, and a TCM module is combined to provide a running environment for the TPCM; when the system is started, the TPCM performs measurement check on the BMC code and the BIOS code, and if the BMC code and the BIOS code are abnormal, a security policy is started In the system operation process, the TPCM monitors hardware, firmware and software of a calculation part in real time, and discovers abnormal behaviors to block and give an alarm; and meanwhile, the management interface is connected with a trusted management center, so that remote configuration and monitoring are realized. A multi-core BMC is used as a protection component, a server host side is used as a calculation component, and a trust chain model of a star-shaped trusted topological structure is constructed. According to the method, the TPCM trusted root is constructed by using the existing resources of the multi-core BMC, so that the hardware cost is reduced, the real-time performance of trusted measurement and the monitoring comprehensiveness are improved, and the running safety and credibility of the server are improved.

The invention discloses a firmware-level security protection system and method for a hard disk of industrial automation equipment, particularly relates to the technical field of storage security protection, and is used for solving the problem of abnormal tampering of firmware. According to the method, instruction calling, interface access and interrupt timestamps are collected in a sliding window, a behavior sequence set containing an instruction sequence, calling frequency and sensitive marks is constructed and compared with a reference sequence library, firmware-level judgment on operation abnormity, access border crossing and tampering risks is triggered based on a transfer relation and an offset index, and the operation safety is improved. The method comprises the following steps of: dividing firmware into a control domain, a data domain and a configuration domain, realizing minimum permission and dynamic isolation by relying on state and permission mapping and permission register and interface shielding, forming a flow from detection to isolation to closed loop recovery by combining protected segment integrity verification and local copy hot switching, writing an exception into a protected loop log area for threshold updating, and performing protection on the protected loop log area. And the tamper-proof performance, the operation safety and the maintainability of the firmware are integrally improved.

The invention relates to the technical field of firmware upgrading, in particular to an LZ77-based embedded firmware security upgrading method and system, which comprises the following steps: electrifying to obtain guide information and a version identifier, judging a trigger condition and writing in an upgrading mode, generating a start mark to perform LZ77 compression, executing decryption and CRC (Cyclic Redundancy Check) check, and reconstructing a firmware comparison signature. And updating the guide pointer or recovering the snapshot, and monitoring voltage evaluation abnormity to trigger recovery interruption. According to the method, the storage efficiency of the space occupied by the snapshot data is improved through compression ratio evaluation before writing, a data integrity screening mechanism is established in combination with AES encryption head decoding and CRC comparison in the data block receiving process, the data security guarantee in the firmware writing stage is enhanced, decoding recovery is achieved through an original snapshot structure under the condition that comparison fails, and the data integrity screening efficiency is improved. Power supply state dynamic evaluation is realized by combining voltage change rate analysis, snapshot recovery and firmware rollback are triggered through an abnormal trend, and the safety processing capability in a voltage abnormal environment is improved.

The invention discloses a high-density NAND storage medium self-adaptive repairing method which comprises the following steps: a main control chip separates a target feature vector representing the real aging trend of a storage unit from original read data containing random physical noise; the main control chip deduces the target feature vector by using a full-integer recursive prediction model to obtain a health state prediction result of the storage unit in a future preset time period; wherein the health state prediction result comprises an optimal read reference voltage offset and an estimated bit error rate growth curve; and the main control chip adjusts the charge distribution pattern and programming voltage parameters of the data on the storage unit in the data writing stage according to the health state prediction result. By means of the mode, the problems of firmware assembly line blocking and performance jitter caused by floating point operation and huge model parameter loading can be solved under the limited hardware environment that the main control chip only supports integer operation and on-chip cache is extremely small.

Systems and methods for servicing nodes participating in inter-node communications in a firmware framework. In some embodiments, an Information Handling System (IHS) may include: a controller, where the controller comprises firmware that, upon execution by a processing core, causes the processing core to instantiate an orchestrator; and a plurality of devices coupled to the controller, where each device comprises firmware that, upon execution by a corresponding processing core, causes the corresponding processing core to instantiate a node as part of a firmware framework, and where the orchestrator is configured to service a first node in communication with a second node without any involvement by any Operating System (OS) of the IHS.

Techniques are disclosed for sending downloadable software packages that may be executed to perform tests of a network device without requiring the network device to update firmware. In one example, the network device obtains a software package comprising instructions for simulating a network instance and stores the software package in a volatile memory of the network device. The network device simulates, based on the instructions, the network instance to obtain data indicative of a performance of the network instance. The network device sends, via a communication channel established with a network management system (NMS) based on the software package, the data indicative of the performance of the network instance. In some examples, the NMS uses the data indicative of the performance of the network instance to identify a root cause of a failure of the network device or a remedial action to be performed upon the network device.

The invention relates to a system starting method and device based on a UKEY, equipment and a storage medium, and the method comprises the steps: verifying the operation environment of the UKEY when it is detected that the UKEY is triggered to be powered on and started; if the running environment of the UKEY passes the verification, performing multiple rounds of verification on a firmware program in the UKEY; and if the firmware program passes multiple rounds of verification, controlling the UKEY to enter an operation mode so as to enable a user to enter an operation system. Through the method, after the running environment of the UKEY passes the verification, the firmware program in the UKEY is subjected to multiple rounds of verification, an unauthorized user is prevented from entering a system through the UKEY by using a tampered, forged or implanted malicious program, if the firmware program passes the multiple rounds of verification, the UKEY enters the running mode, the user can enter an operating system or use an application program, and the user experience is improved. The safe starting of the operating system or the application program is realized, and the running safety of the operating system or the application program is improved.

Systems and methods for distribution and management of certificates in a firmware framework. In some embodiments, an Information Handling System (IHS) may include a controller, where the controller includes firmware that, upon execution by a processing core, causes the processing core to instantiate an orchestrator; and a plurality of devices coupled to the controller, where each device includes firmware that, upon execution by a corresponding processing core, causes the corresponding processing core to instantiate a node of a plurality of nodes of a firmware framework; and where the orchestrator is configured to: store certificates in a local storage of the controller; and distribute one or more other certificates to one or more of the plurality of nodes within the firmware framework, without any involvement by any Operating System (OS) of the IHS.

The invention discloses a basic input and output system firmware upgrading method and electronic equipment, and relates to the technical field of servers, and the method comprises the following steps: obtaining current configuration data of basic input and output system firmware, and carrying out structured conversion on the current configuration data to obtain a first configuration file; obtaining upgrading configuration data of standard upgrading firmware of the basic input and output system to obtain a second configuration file; comparing the configuration parameter of the first configuration file with the configuration parameter of the second configuration file, and determining a difference configuration item; and processing the difference configuration item according to the difference processing rule to obtain a target configuration file, and upgrading the firmware of the basic input / output system according to the target configuration file, thereby solving the technical problem of firmware upgrading compatibility in related technologies, and achieving the purposes of reserving user configuration as much as possible and improving the user experience. The method has the advantages that upgrading failure or starting failure caused by configuration conflicts is avoided, firmware upgrading is efficiently completed, and the accuracy rate and the automation rate are increased.

The invention provides a firmware upgrading method and device and a storage medium, the method is applied to a platform firmware recovery system, the system comprises a first processing module and a second processing module, and the method can be applied to the platform firmware recovery system. The method comprises the steps that a first processing module obtains an upgrading attribute parameter and to-be-upgraded firmware of at least one target system component; the first processing module processes all the to-be-upgraded firmware so as to store all the to-be-upgraded firmware to target storage partitions corresponding to all the target system components; wherein each storage partition corresponds to at least one system component; and the first processing module sends an upgrading instruction to the second processing module based on the upgrading attribute parameter, so that the second processing module flashes each firmware to be upgraded from the target storage partition to the firmware storage area of each target system component based on the upgrading attribute parameter by adopting a concurrent execution mode. Through the technical scheme of the invention, concurrent firmware upgrading of a plurality of system components can be realized.

Protection for a secure boot procedure can be provided in addition to cryptographic verification of boot firmware associated with the boot procedure. While the boot firmware is being verified and executed at a secure sub-system, an open sub-system can be put into a halt state, during which the open sub-system is prevented from performing the boot procedure. The open sub-system is still prevented from performing the boot procedure even if the boot firmware is verified and / or executed unless the open sub-system is put into the resume state again.

Systems and methods for diagnostics in a firmware framework. In some embodiments, an Information Handling System (IHS) may include: a controller, where the controller comprises firmware that, upon execution by a processing core, causes the processing core to instantiate an orchestrator; and a plurality of devices coupled to the controller, where each device comprises firmware that, upon execution by a corresponding processing core, causes the corresponding processing core to instantiate a node as part of a firmware framework, and where the orchestrator is configured to trigger a diagnostics operation by a selected node to be performed independently of any Operating System (OS) of the IHS.

The invention discloses a data scheduling and control method based on mainboard memory straight-through, and relates to the technical field of computer hardware, the method comprises the following steps: pre-allocating a straight-through memory area for mounting equipment in a firmware initialization stage, establishing a mapping relation between equipment identification and a physical address of an exclusive memory segment, and through address translation and access control rules of a firmware layer, the device bypasses a system cache level and accesses the exclusive memory segment in a direct memory access mode. Constructing a firmware scheduling table based on the mapping relation to manage access requests of all devices, monitoring transmission delay in real time, and dynamically adjusting priority weight and bandwidth allocation in the scheduling table according to a monitoring result; and sequencing the requests according to the updated scheduling table to complete scheduling and control of the memory access behavior of the equipment. According to the method and the device, the delay bottleneck caused by multi-level copying and firmware scheduling lag in mainboard data forwarding is effectively solved.

The invention discloses a resource processing method and electronic equipment, and relates to the technical field of resource management, and the method comprises the following steps: in the starting process of the electronic equipment, analyzing a group of specified registers indicated by configuration space information of connected equipment in a plurality of connected equipment, the method comprises the steps of obtaining resource information of a plurality of connected devices, obtaining resource configuration information, and allocating specified resources to the connected devices in the plurality of connected devices based on the resource configuration information and the resource information of the connected devices in the plurality of connected devices. According to the resource allocation method and device, the technical problem of resource allocation mismatching caused by firmware information misidentification in the prior art is solved, and the technical effect of improving the accuracy of resource allocation is achieved.

A system and methods are provided for encrypting and decrypting data payloads, receiving an unencrypted data payload; generating a random seed value; generating in FPGA firmware an encryption hash key from seed parameters including the seed value, XORing the encryption hash key with the unencrypted data payload to generate an encrypted data payload; transmitting the encrypted data packet with the seed value and the encrypted data payload to a second FPGA that regenerates the hash key from the see parameters and XORing the hash key with the encrypted data payload to regenerate an unencrypted data payload.

The invention relates to the technical field of optical modules, and provides a firmware upgrading method, device and equipment for an optical module and a storage medium, and the method comprises the steps: after receiving a firmware upgrading request corresponding to the optical module, extracting a firmware version identifier and a check code, obtaining version information and an operation abstract of operating firmware in the optical module, and storing the version information and the operation abstract in the optical module; the version information and the operation abstract are compared with the firmware version identifier and the check code and analyzed and verified, a comparison result and an analysis result are obtained, if any one of the results is abnormal, the optical module is rolled back to an initial state and an error is reported, if the result is not abnormal, the optical module is subjected to multiple rounds of self-inspection, and if a preset threshold value is met, the optical module is subjected to self-inspection. If yes, the original version data in the optical module is cleared, and if the preset threshold value is not met, the optical module is recovered to the pre-upgrading state. Through a multi-round self-checking and conditional clearing mechanism, the fault recovery capability and the system stability are remarkably enhanced, and the problem of upgrading failure caused by weak checking mechanism and insufficient stability analysis in the firmware upgrading process of the existing optical module is solved.