CN101470657A - Verification method for BIOS refreshing content - Google Patents

Abstract

The invention discloses a verification method for BIOS refreshing content, which comprises the following steps: establishing a virtual machine in a computer waiting for updating a system BIOS by using a paravirtualization technology; starting a virtual machine; copying the new BIOS file content to an address space in a specified range of a memory of the computer host; executing the start of the host computer by using the content in the new BIOS file, and enabling the semi-virtual operating system to run based on the same hardware platform as the host computer; and verifying whether the virtual operating system applying the new BIOS file content normally runs or not, thereby obtaining whether the content of the new BIOS file is correct and safe or not.

Description

A method for verifying BIOS refresh content

technical field

The invention relates to a security verification method for file content update in a computer system, in particular to a BIOS refresh content verification method for performing security check on the update of the BIOS file content in the computer system.

Background technique

At present, in server management, because the server needs to use the latest hardware, the hardware that can be recognized by the BIOS (Basic Input Output System) at the factory cannot perform the latest hardware after a period of time. Identification and application, so it is necessary to update the BIOS of the server to the latest version of BIOS to support the identification and use of new hardware. Refreshing the BIOS is very dangerous. Once the wrong BIOS file is refreshed, the machine will not start. In severe cases, it may cause damage to the BIOS chip on the server. At the same time, due to the long release process of the BIOS file, it is very likely that the file is damaged and the BIOS file cannot be started.

Therefore, if the BIOS can be updated to the Electrically Erasable Programmable Read-Only Memory (EEPROM) after testing on the actual machine before refreshing the BIOS, the correctness of the refreshing operation can be guaranteed. , to reduce possible server problems. Therefore, the current industry urgently needs to provide a method for verifying the content of BIOS refresh, so as to overcome the problems or defects in the above-mentioned known technologies.

Contents of the invention

The purpose of the present invention is to provide a kind of verification method of BIOS refreshing content, in order to carry out security verification to new BIOS file content before computer BIOS is updated, to solve the problem existing in above-mentioned known technology.

In order to achieve the above object, the invention provides a kind of verification method of BIOS refresh content, comprising the following steps:

Use paravirtualization technology to create a virtual machine in the computer host waiting for the system BIOS update; start the virtual machine; copy the content of the new BIOS file to 1 megabyte (Megabyte) starting from 0000:0000 in the memory of the computer host bytes) address space; use the contents of this new BIOS file to execute the boot process of the host computer, and make the paravirtualized operating system run on the same hardware platform as the host computer; and verify and apply the contents of this new BIOS file Whether the virtual operating system is running normally, if it is running normally, the information of normal operation will be fed back to the user and the verification will end, if it is not running normally, the information of abnormal operation will be fed back to the user and the verification will be ended.

To sum up, the advantage of the present invention is that: a method for verifying the refresh content of the BIOS provided by the present invention realizes the operation of the operating system virtualized by the paravirtualization technology before refreshing the BIOS of the computer. The content of the new BIOS file is verified for safety, thereby avoiding the problems in the known technology that the machine cannot be started and the BIOS chip is damaged due to the wrong content of the BIOS file being updated to the actual machine.

The present invention will be described in detail below in conjunction with the accompanying drawings and specific embodiments, but not as a limitation of the present invention.

Description of drawings

Fig. 1 is the BIOS startup schematic diagram in the verification method of a kind of BIOS refreshing content of the present invention;

Fig. 2 is a schematic diagram of a virtualization solution in a method for verifying BIOS refresh content of the present invention; and

FIG. 3 is a flow chart of a method for verifying BIOS refresh content according to the present invention.

Among them, reference signs:

Step 100 Use paravirtualization technology to create a virtual machine in the computer host waiting for system BIOS update

Step 200 Start the virtual machine

Step 300 Copy the content of the new BIOS file to the address space of 1 megabyte starting from 0000:0000 in the memory of the host computer

Step 400 Use the content in the new BIOS file to execute the startup process of the computer host, and make the paravirtualized operating system run based on the same hardware platform as the computer host

Step 500 verifies whether the virtual operating system applying the new BIOS file content runs normally

Step 600 Feeds back the information of normal operation to the user

Step 700 Feeds back the abnormal information to the user

Implementation

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings.

Please refer to Fig. 1, the BIOS startup principle in the authentication method of a kind of BIOS refreshing content of the present invention is shown in the figure, as shown in Fig. After booting (referring to turning on the power), first copy the BIOS file to the address space of the specified range in the memory, and then the computer will jump to the initial execution address (usually 0xFFFF0) in the specified range of the memory to start executing the code , this address is exactly the start execution address of BIOS, and the content in the BIOS file that is updated to machine is consistent with it, so the method of the present invention is exactly the address space that the content of new BIOS file is copied to the address space of the specified range in the aforementioned memory, so that Use the content in the new BIOS file to execute the booting process of the computer host, and it is possible to test whether the content of the BIOS file used for updating is correct and safe.

According to the method for verifying the BIOS refresh content disclosed in the present invention, it also includes using virtual technology to use the new BIOS content, so as to verify the new BIOS content. Currently, virtualization technologies can be broadly classified into full virtualization and paravirtualization. When using full virtualization, there is a layer between the virtualized operating system and the hardware that determines access. This layer is called the hypervisor or virtual machine monitor (Virtual Machine Monitor, VMM for short). Paravirtualization is similar to full virtualization, but the hypervisor works in a more cooperative manner. This is because each guest operating system is aware that it is running in a virtualized mode, so each guest operating system cooperates with the hypervisor to virtualize the underlying hardware.

In the known technology, examples of full virtualization include commercial virtualization solution VMware (a kind of computer virtualization software, which can make two or more operating systems run simultaneously on a machine), and commercial IBM z series computers. IBM system z9 virtual machine (z/VM, VM is called VirtualMachine in English) operating system, kernel virtual machine (KVM), and other examples, such as Bochs (a virtual machine software that simulates x86 environment), QEMU ( A simulation software that can simulate another operating system in the Windows operating system), VirtualBox (a powerful x86 virtual machine software), etc. Examples of paravirtualization include Xen and User-Mode-Linux (UML), among which: Xen is a paravirtualization (Paravirtualization) virtual machine monitor (VMM), which means that in order to call the system management program, it needs to have a choice Modify the operating system kernel (Kernel) without modifying the applications running on the operating system. Although other virtualization systems such as VMware achieve full virtualization, that is, they do not have to modify the operating system in use, they still require real-time machine code translation, which affects system performance, and Xen is a special virtual hardware Virtual machine, which has most of the characteristics of a virtual hardware virtual machine, and allows users to install and test new upgrade software as in the existing environment, without worrying about destroying the original system; User-Mode-Linux (UML) , is a safe virtual machine that allows one Linux system to run on another Linux system as an independent process, so multiple Linux operating systems can be started on an existing hard disk like a normal program, using With UML, users can run another Linux kernel in user mode in the Linux system kernel of the host computer, and can also run multiple independent virtual computers on a single computer.

The bottom layer of the virtualization solution is the machine hardware (Hardware) to be virtualized. The machine may or may not directly support virtualization. Then you need the support of the hypervisor layer. A system management program (Hypervisor), or called a virtual machine monitor (Virtual Machine Monitor, referred to as VMM), can be regarded as an abstraction of a hardware platform and an operating system. In some cases, this hypervisor is an operating system, in which case it is called the host operating system, see Figure 2.

Above the hypervisor is the guest operating system (Guest OS), also known as a virtual machine (Virtual Machine, referred to as VM) and user space (that is, an application program). These virtual machines are isolated operating systems that treat the underlying hardware platform as their own. But in reality, it is the hypervisor who creates this virtual illusion for them.

Please refer to Fig. 3 now, this figure is the method flowchart of the verification method of a kind of BIOS refreshing content of the present invention, as shown in the figure, the verification method of a kind of BIOS refreshing content of the present invention comprises the following steps:

Use paravirtualization technology to set up a virtual machine (step 100) in the host computer waiting to update the system BIOS, wherein the paravirtualization technology can adopt Xen technology or UML (User-Mode-Linux) technology in the above-mentioned known technology to establish a virtual machine;

Start above-mentioned virtual machine (step 200);

The new BIOS file content is copied (copy) to the address space of 1 megabyte (Mega bytes) starting from 0000:0000 in the memory of the host computer (step 300);

Use the content in the above-mentioned new BIOS file to carry out the startup process of the computer host, and make the paravirtual operating system run based on the same hardware platform as the computer host (step 400); and

Verify that the virtual operating system that applies the above-mentioned new BIOS file content is running normally (step 500), if it is running normally, then the information that is running normally will be fed back to the user (step 600), and then the verification will end; if it is not running normally, it will run The abnormal information is fed back to the user (step 700), and then the verification ends.

Certainly, the present invention also can have other various embodiments, without departing from the spirit and essence of the present invention, those skilled in the art can make various corresponding changes and deformations according to the present invention, but these corresponding changes All changes and modifications should belong to the scope of protection of the appended claims of the present invention.

Claims (3)

1, a kind of verification method of BIOS refreshing content in order to before computer BIOS is upgraded, carries out safety verification to new BIOS file content, it is characterized in that the method includes the steps of:

Use half Intel Virtualization Technology in the main frame that the pending system bios of first-class upgrades, to set up a virtual machine;

Start this virtual machine;

One new BIOS file content is copied in the address space of 1 megabyte that begins by 0000:0000 in the storer of this main frame;

Use the content in this new BIOS file to carry out the startup process of this main frame, and half virtual operating system is moved based on the hardware platform identical with this main frame; And

Whether checking is used the virtual opetrating system of this new BIOS file content and is moved normally, if operation is normal, then will move normal information feedback and give the user and finish checking,, then will move abnormal information feedback and give the user and finish and verify if move undesiredly.

2, the verification method of BIOS refreshing content according to claim 1 is characterized in that, this half Intel Virtualization Technology adopts the Xen technology to set up a virtual machine.

3, the verification method of BIOS refreshing content according to claim 1 is characterized in that, this half Intel Virtualization Technology adopts the UML technology to set up a virtual machine.

Images