CN114417301A - An information processing method, information processing apparatus, electronic device and storage medium - Google Patents

Abstract

The embodiment of the application discloses an information processing method, which comprises the following steps: under the condition that the mainboard is electrified and the in-band access channel is opened, obtaining a detection result of whether the in-band access channel accesses the substrate management controller and is in the running environment of the boot system; and if the detection result represents that the access to the substrate management controller is not in the running environment, informing the substrate management controller to close the in-band access channel. The embodiment of the application also discloses an information processing device, electronic equipment and a storage medium.

Description

An information processing method, information processing apparatus, electronic device and storage medium

technical field

The present application relates to, but is not limited to, the field of information technology, and in particular, relates to an information processing method, an information processing apparatus, an electronic device, and a storage medium.

Background technique

Currently, a baseboard management controller (Baseboard Management Controller, BMC) in-band conventional access channel is mainly used to guide the system and applications under the operating system to communicate with the BMC.

In a scenario where an attacker can access the server entity, it is easy to start the server through an external storage device, so as to easily obtain BMC access rights, thereby easily obtaining data in the BMC, and even modifying the system configuration.

SUMMARY OF THE INVENTION

The embodiments of the present application are expected to provide an information processing method, an information processing apparatus, an electronic device, and a storage medium.

The technical solution of the present application is realized as follows:

An information processing method, the method comprising:

When the mainboard is powered on and the in-band access channel is open, obtain a detection result of whether the baseboard management controller is accessed through the in-band access channel, and whether it is in the operating environment of the boot system;

If the detection result indicates that the access to the baseboard management controller is not in the operating environment, the baseboard management controller is notified to close the in-band access channel.

An information processing device, the information processing device comprising:

Obtaining a module for obtaining a detection result of whether the baseboard management controller is accessed through the in-band access channel and whether it is in the operating environment of the boot system when the mainboard is powered on and the in-band access channel is open;

The processing module is configured to notify the baseboard management controller to close the in-band access channel if the detection result indicates that the access to the baseboard management controller is not in the operating environment.

An electronic device comprising: a processor, a memory and a communication bus;

The communication bus is used to realize the communication connection between the processor and the memory;

The processor is configured to execute the information processing program stored in the memory, so as to realize the steps of the above-mentioned information processing method.

A computer storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of the above-mentioned information processing method.

The information processing method, information processing device, electronic device, and storage medium provided by the embodiments of the present application include: when the main board is powered on and the in-band access channel is opened, obtaining the management control of the substrate through the in-band access channel If the detection result indicates that the access to the baseboard management controller is not in the running environment, the baseboard management controller is notified to close the in-band access channel; that is, as long as it is determined The baseboard management controller is accessed through the in-band access channel, and the detection result is not in the operating environment of the boot system. At this time, it indicates that the access authority does not have the in-band access channel, and the in-band access channel is immediately closed. In this way, even if the attack The attacker can access the server entity. Since the attacker's access to the baseboard management controller is not in the operating environment of the boot system, the in-band access channel is closed, preventing the attacker's access and providing the access of the baseboard management controller. safety.

Description of drawings

1 is a schematic flowchart of an optional information processing method provided by an embodiment of the present application;

2 is a schematic flowchart of an optional information processing method provided by an embodiment of the present application;

3 is a schematic flowchart of an optional information processing method provided by an embodiment of the present application;

4 is a schematic flowchart of an optional information processing method provided by an embodiment of the present application;

5 is a schematic structural diagram of an information processing apparatus according to an embodiment of the present application;

FIG. 6 is a schematic structural diagram of an electronic device according to an embodiment of the present application.

Detailed ways

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application.

Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the technical field to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of the present application, and are not intended to limit the present application.

Before further describing the embodiments of the present application in detail, the terms and terms involved in the embodiments of the present application are described, and the terms and terms involved in the embodiments of the present application are suitable for the following explanations.

The current BMC in-band conventional access channel is mainly used for the boot system and the application under the operating system to communicate with the BMC.

In a scenario where an attacker can access the server entity, it is easy to start the server through an external storage device, so as to easily obtain BMC access rights, thereby easily obtaining data in the BMC, and even modifying the system configuration. For example, if the edge server is not in the computer room, or the security protection is relatively weak, for the edge server, accessing the baseboard management controller poses a major security risk.

The embodiments of the present application provide an information processing method, and the information processing method can be applied to an electronic device. Referring to Figure 1, the method includes the following steps:

Step 101 , when the mainboard is powered on and the in-band access channel is open, obtain a detection result of whether the baseboard management controller is accessed through the in-band access channel and whether it is in the operating environment of the boot system.

In this embodiment of the present application, the in-band access channel includes but is not limited to a keyboard controller style (Keyboard Controller Style, KCS) channel and a block transfer (Block Transfer, BT) channel.

In this embodiment of the present application, the boot system is also referred to as a firmware system, and the firmware system includes but is not limited to a basic input output system (BIOS) of a fixed electronic device such as a personal computer (Personal Computer, PC), a unified extensible firmware An interface system (Unified Extensible Firmware Interface, UEFI), an Extensible Firmware Interface (Extensible Firmware Interface, EFI), and a bootloader system for a mobile electronic device such as a mobile phone. It should be noted that the boot system involved in the embodiments of the present application has a secure boot (Secure Boot) function, and the core of Secure Boot is to use a digital signature to confirm whether the EFI driver or application is trusted, so as to ensure that the system boots safe and reliable.

Exemplarily, when the firmware system is UEFI, most codes in UEFI are written in C language, and UEFI applications and drivers can be written in C++. UEFI shields the underlying hardware details for an operating system (Operating System, OS) and an OS loader through a firmware operating system interface, so that UEFI upper-layer applications can be easily reused. Compared with the traditional BIOS, UEFI has been greatly improved, and the time from booting to entering the operating system is greatly shortened.

In the embodiment of the present application, the mainboard, also called the mainboard, is installed in the chassis and is one of the most basic and important components of the microcomputer. The main board is generally a rectangular circuit board, on which the main circuit systems that make up the computer are installed, generally including a boot system chip, an input/output (I/O) control chip, a keyboard and panel control switch interfaces, and indicator light connectors. , Expansion slots, DC power supply connectors for motherboards and cards and other components. The control chip includes but is not limited to a central processing unit (Central Processing Unit, CPU), a field programmable gate array (Field-Programmable Gate Array, FPGA) or a complex programmable logic device (Complex Programmable Logic Device, CPLD).

In some embodiments, in the scenario where the electronic device is powered on or restarted, the power-on process of the computer will be performed, and when the power-on of the motherboard is completed and the in-band access channel is opened, the baseboard management controller obtained through the in-band access channel is obtained. Access is made to check whether it is in the operating environment of the boot system. Here, the detection result includes the detection result of accessing the baseboard management controller through the in-band access channel and under the operating environment of the boot system; or, accessing the baseboard management controller through the in-band access channel and not in the operation of the boot system test results in the environment.

In the embodiments of the present application, electronic devices include but are not limited to mobile terminal devices such as mobile phones, tablet computers, notebook computers, personal digital assistants (PDAs), cameras, wearable devices, in-vehicle devices, etc., as well as desktop computers, etc. Fixed terminal equipment.

Step 102 , if the detection result indicates that the access to the baseboard management controller is not in the running environment, the baseboard management controller is notified to close the in-band access channel.

In the embodiment of the present application, if the detection result indicates that the access to the baseboard management controller is not in the operating environment of the boot system, the baseboard management controller is notified to close the in-band access channel, that is, the present application restricts the in-band access channel to only Accessed in the operating environment of the boot system, using the security and reliability of the boot system to ensure that the in-band access of the in-band access channel is within the trusted range, once it is found that it is not in the operating environment of the boot system, the in-band access is closed. Access channels to prevent unsafe access from occurring.

In the information processing method provided by the embodiment of the present application, when the main board is powered on and the in-band access channel is open, the detection result of whether the baseboard management controller is accessed through the in-band access channel and whether it is in the operating environment of the boot system is obtained. ; If the detection result indicates that the access to the baseboard management controller is not in the operating environment, the baseboard management controller is notified to close the in-band access channel; The detection result in the operating environment of the boot system indicates that the in-band access channel does not have the access right at this time, and the in-band access channel is immediately closed. In this way, even if the attacker can access the server entity, the attacker cannot control the baseboard management controller. The access is not in the operating environment of the boot system, so the in-band access channel is closed, the access of the attacker is prevented, and the access security of the baseboard management controller is provided.

The embodiments of the present application provide an information processing method, and the information processing method can be applied to an electronic device. Referring to Figure 2, the method includes the following steps:

Step 201 , when the mainboard is powered on and the in-band access channel is open, obtain a detection result that the baseboard management controller is accessed through the in-band access channel and is not in the operating environment of the boot system.

In the embodiment of the present application, in the following two scenarios, detection results that are not in the operating environment of the boot system can be obtained:

Scenario 1. When the mainboard is powered on and the in-band access channel is open, if the boot system self-check is completed, the test result of accessing the baseboard management controller through the in-band access channel and not in the operating environment of the boot system is obtained. .

In scenario 1, in the scenario where the electronic device is powered on or restarted, the power-on process of the computer will be performed. When the motherboard is powered on and the in-band access channel is open, if the boot system self-check is completed, the boot system will take over the system. The system boot and self-check are completed for the control right. Next, the operating system will take over the system control right. At this time, it is determined that the baseboard management controller is accessed through the in-band access channel, and the detection is not in the operating environment of the boot system. result.

In some embodiments, the output signals of the general-purpose input/output (GPIO) pins of the south bridge chip are detected, so as to locate the faulty component according to different combinations of these signal states; the GPIO of the south bridge chip The pin output signal corresponds to the checkpoint code which is continuously output by the guiding system in the self-checking process, and represents the current process and diagnosis result of the system.

During the booting and self-checking process, the booting system continuously outputs the checkpoint code to indicate the current diagnostic process performed by the system. If the system stops at a certain checkpoint code, it means that there is a problem with the system at this time. These problems can be attributed to the motherboard, memory, I/O O device or peripheral component interconnect standard (Peripheral Component Interconnect, PCI) device; if there is a problem with a system component, the system is guided to parse the checkpoint code and attribute the problem to a specific component, such as CPU, or memory, or motherboard. ; and under normal circumstances, a corresponding prompt will appear on the display.

Scenario 2. When the mainboard is powered on and the in-band access channel is open, if the boot system self-check is completed and the baseboard management controller detects the first system interrupt signal, the first system interrupt signal is processed by the boot system; After the system processes the first system interrupt signal, it obtains the detection result that the baseboard management controller is accessed through the in-band access channel and is not in the running environment.

In the second scenario, the first system interrupt signal is also called a first system management interrupt (System Management Interrupt, SMI) signal, and the SMI is a CPU-level interrupt signal.

When the mainboard is powered on and the in-band access channel is open, if the boot system self-check is completed, and the baseboard management controller detects the first system interrupt signal, when entering the first SMI, the control chip on the mainboard notifies the BMC, and the BMC If it is detected that it is currently in SMI mode and the self-check of the boot system is completed, the BMC temporarily opens the in-band access channel, or the boot system actively informs the BMC to open the in-band access channel as needed; the boot system uses the conventional method to use the in-band access channel normally in SMI. channel, process the first system interrupt signal through the bootstrap system; if the bootstrap system finishes processing the first system interrupt signal, at this time, the BMC detects that the SMI exits, and obtains access to the baseboard management controller through the in-band access channel, which is not in the running environment test results. The above-mentioned conventional methods use in-band access channels, including but not limited to using in-band channels to perform various interactive operations with the BMC, including sending data to the BMC, obtaining data and information from the BMC, and performing system control through the BMC.

In the embodiment of the present application, the SMI signal may be generated at any time during the system running period. During the SMI interrupt processing process, the in-band channel is opened before the BMC in-band access channel is required, and the in-band access channel is closed when the in-band access channel is used or the SMI is exited. .

Step 202: Notify the baseboard management controller to close the in-band access channel.

That is to say, in any of the above two scenarios, it belongs to the trusted range that is separated from the operating environment of the boot system. In this case, the in-band access channel is automatically closed immediately to prevent the occurrence of unsafe access.

The embodiments of the present application provide an information processing method, and the information processing method can be applied to an electronic device. Referring to Figure 3, the method includes the following steps:

Step 301 , when the mainboard is powered on and the in-band access channel is open, if the boot system self-check is completed, a detection result of accessing the baseboard management controller through the in-band access channel and not in the running environment is obtained.

In the embodiment of the present application, when the self-check of the boot system is completed, it belongs to the trusted range that is separated from the operating environment of the boot system. At this time, it is detected that the baseboard management controller is accessed through the in-band access channel, and it is not running. According to the detection results in the environment, the in-band access channel is automatically closed immediately to prevent the occurrence of unsafe access.

Step 302: Notify the baseboard management controller to close the in-band access channel.

Step 303 , the baseboard management controller detects the first system interruption signal, and generates an open event that satisfies the authority verification condition.

In the embodiment of the present application, when the main board is powered on and the in-band access channel is open, if the self-check of the boot system is completed, the in-band access channel is closed first; further, when the baseboard management controller detects the first system In the case of an interrupt signal, that is, when entering the first SMI, an open event that satisfies the authorization verification condition is generated.

Step 304: If the open event satisfies the authorization verification condition of the bootstrap system, in response to the open event, open the in-band access channel.

In the embodiment of the present application, it is determined that the opening event indicates that the self-check of the bootstrap system is completed and the first system interrupt signal is detected by the baseboard management controller, then it is determined that the opening event satisfies the authority verification condition of the bootstrap system, and in-band access is enabled in response to the opening event. Channel, at this time, the BMC temporarily opens the in-band access channel, or the boot system actively informs the BMC to open the in-band access channel as needed; the boot system normally uses the in-band access channel in the SMI using the conventional method, and processes the first system through the boot system interrupt signal

In other embodiments of the present application, when the main board is powered on, the following steps may also be performed:

First, open the in-band access channel.

Here, when the mainboard is powered on, the BMC automatically opens the in-band access channel.

Secondly, in the process of guiding the system self-inspection, if the baseboard management controller detects the second system interrupt signal, it accesses the baseboard management controller through the in-band access channel to obtain self-inspection diagnosis information.

Here, during the booting and self-checking process of the booting system, the booting system continuously outputs the checkpoint code to indicate the current diagnostic process performed by the system. If the system stops at a certain checkpoint code, it means that there is a problem with the system at this time, and a second system interrupt signal is generated such as The second SMI signal further enables the boot system to access the baseboard management controller through the in-band access channel to obtain self-check diagnostic information.

The embodiments of the present application provide an information processing method, and the information processing method can be applied to an electronic device. Referring to Figure 4, the method includes the following steps:

Step 401 , when the mainboard is powered on and the in-band access channel is open, if the bootstrap system self-check is completed and the baseboard management controller detects the first system interrupt signal, the bootstrap system processes the first system interrupt signal.

Step 402: If the bootstrap system finishes processing the first system interrupt signal, obtain a detection result that the baseboard management controller is accessed through the in-band access channel and is not in the running environment.

Step 403: Notify the baseboard management controller to close the in-band access channel.

Step 404: Obtain an open event for the in-band access channel.

In this embodiment of the present application, when the boot system self-check is completed and the first system interrupt signal processing is completed, the in-band access channel will be closed to prevent attackers from accessing the baseboard management controller from not being in the operating environment of the boot system. security risks. In order to improve the flexibility of users, it is convenient for users to still expect the guiding system to retain the in-band channel after the self-check is completed, so that the operating system can still ask the BMC. The access of the in-band access channel is carried out in a secure environment, and at the same time, it ensures that the operator itself meets the security verification conditions. In this way, the security management of the in-band access channel is realized, and the access security of the baseboard management controller is further improved. sex.

In the embodiment of the present application, step 404 obtains the opening event of the in-band access channel, which may be implemented by the following steps:

First, obtain security verification information for the boot system and/or the baseboard management controller.

Secondly, if the security verification information satisfies the security verification conditions, the management control of the in-band access channel is displayed in the configuration interface of the booting system; wherein, the management control is used to open the in-band access channel when triggered.

Here, the security verification information may be at least one of the security verification information of the boot system and the security verification information of the baseboard management controller. The security verification information of the boot system includes but is not limited to entering the username and password of the setup interface of the boot system such as UEFI. The security verification information of the baseboard management controller includes but is not limited to entering the username and password of the BMC.

Finally, if the management control is triggered, an open event that satisfies the permission verification conditions is generated.

Step 405: If the open event satisfies the authorization verification condition of the bootstrap system, in response to the open event, open the in-band access channel.

In the embodiment of the present application, when the self-check of the bootstrap system is completed and the processing of the first system interrupt signal is completed, the in-band access channel will be closed. At this time, if you want to open the in-band access channel, the authorization verification of the bootstrap system must be satisfied. conditions before the in-band access channel can be opened.

An embodiment of the present application provides an information processing apparatus, and the information processing apparatus can be applied to an information processing method provided by the embodiments corresponding to FIG. 1 to FIG. 4 . Referring to FIG. 5 , the information processing apparatus 5 includes:

The obtaining module 501 is used to obtain the detection result of whether the baseboard management controller is accessed through the in-band access channel and whether it is in the operating environment of the boot system when the main board is powered on and the in-band access channel is open;

The processing module 502 is configured to notify the baseboard management controller to close the in-band access channel if the detection result indicates that the access to the baseboard management controller is not in the running environment.

In other embodiments of the present application, the obtaining module 501 is configured to obtain the detection result of accessing the baseboard management controller through the in-band access channel and not in the running environment if the self-check of the bootstrap system is completed.

In other embodiments of the present application, the processing module 502 is configured to process the first system interrupt signal through the bootstrap system if the self-check of the bootstrap system is completed and the baseboard management controller detects the first system interrupt signal;

The obtaining module 501 is configured to obtain the detection result that the baseboard management controller is accessed through the in-band access channel and is not in the running environment if the guiding system finishes processing the first system interrupt signal.

In other embodiments of the present application, an obtaining module 501 is configured to obtain an open event for an in-band access channel;

The processing module 502 is configured to open the in-band access channel in response to the open event if the open event satisfies the authorization verification condition of the bootstrap system.

In other embodiments of the present application, the obtaining module 501 is configured to obtain the security verification information of the boot system and/or the baseboard management controller;

Further, the information processing device 5 also includes a display module 503 for displaying the management control of the in-band access channel in the configuration interface of the guidance system if the security verification information satisfies the security verification condition; wherein, the management control is used to open when triggered In-band access channel;

The processing module 502 is configured to generate an open event that satisfies the permission verification condition if the management control is triggered.

In other embodiments of the present application, the processing module 502 is configured to detect the first system interruption signal through the baseboard management controller, and generate an open event that satisfies the authority verification condition.

In other embodiments of the present application, the processing module 502 is configured to open the in-band access channel when the mainboard is powered on;

The processing module 502 is configured to access the baseboard management controller through an in-band access channel to obtain self-inspection diagnosis information if the baseboard management controller detects the second system interrupt signal during the process of guiding the system self-inspection.

The information processing apparatus provided by the embodiment of the present application, when the main board is powered on and the in-band access channel is open, obtains access to the baseboard management controller through the in-band access channel, and detects whether it is in the operating environment of the boot system Result; if the detection result indicates that the access to the baseboard management controller is not in the running environment, the baseboard management controller is notified to close the in-band access channel; that is, as long as it is determined that the baseboard management controller is accessed through the in-band access channel, no The detection result in the operating environment of the boot system indicates that the in-band access channel does not have access rights at this time, and the in-band access channel is immediately closed. In this way, even if the attacker can access the server entity, due to the attacker's control over the baseboard management The access of the baseboard management controller is not in the operating environment of the boot system, so the in-band access channel is closed, the access of the attacker is prevented, and the access security of the baseboard management controller is provided.

An embodiment of the present application provides an electronic device, which can be applied to an information processing method provided by the embodiments corresponding to FIG. 1 to FIG. 4 . Referring to FIG. 6 , the electronic device 6 includes: a processor 601 , memory 602 and communication bus 603, where:

The communication bus 603 is used to realize the communication connection between the processor 601 and the memory 602 .

The processor 601 is configured to execute the information processing program stored in the memory 602 to realize the following steps:

When the mainboard is powered on and the in-band access channel is open, obtain the detection result of whether the baseboard management controller is accessed through the in-band access channel and whether it is in the operating environment of the boot system;

If the detection result indicates that the access to the baseboard management controller is not in the running environment, the baseboard management controller is notified to close the in-band access channel.

In other embodiments of the present application, the processor 601 is configured to execute the information processing program stored in the memory 602 to realize the following steps:

If the self-test of the boot system is completed, the test result that the baseboard management controller is accessed through the in-band access channel and is not in the operating environment is obtained.

In other embodiments of the present application, the processor 601 is configured to execute the information processing program stored in the memory 602 to realize the following steps:

If the boot system self-check is completed, and the baseboard management controller detects the first system interrupt signal, the first system interrupt signal is processed by the boot system;

If the guiding system finishes processing the first system interrupt signal, it obtains a detection result that the baseboard management controller is accessed through the in-band access channel and is not in the running environment.

In other embodiments of the present application, the processor 601 is configured to execute the information processing program stored in the memory 602 to realize the following steps:

Get an open event for an in-band access channel;

If the open event satisfies the authorization verification condition of the boot system, the in-band access channel is opened in response to the open event.

In other embodiments of the present application, the processor 601 is configured to execute the information processing program stored in the memory 602 to realize the following steps:

Obtain security verification information for the boot system and/or baseboard management controller;

If the security verification information satisfies the security verification conditions, the management control of the in-band access channel is displayed in the configuration interface of the boot system; wherein, the management control is used to open the in-band access channel when triggered;

If the management control is triggered, an open event that satisfies the permission verification conditions is generated.

In other embodiments of the present application, the processor 601 is configured to execute the information processing program stored in the memory 602 to realize the following steps:

The first system interruption signal is detected by the baseboard management controller, and an open event that satisfies the authorization verification condition is generated.

In other embodiments of the present application, the processor 601 is configured to execute the information processing program stored in the memory 602 to realize the following steps:

After the mainboard is powered on, open the in-band access channel;

In the process of guiding the system self-inspection, if the baseboard management controller detects the second system interruption signal, the baseboard management controller is accessed through the in-band access channel to obtain self-inspection diagnosis information.

As an example, the processor may be an integrated circuit chip with signal processing capabilities, such as a general-purpose processor, a Digital Signal Processor (DSP), or other programmable logic devices, discrete gate or transistor logic devices, Discrete hardware components, etc., where a general purpose processor may be a microprocessor or any conventional processor or the like.

In the electronic device provided by the embodiment of the present application, when the main board is powered on and the in-band access channel is opened, the detection result of whether the baseboard management controller is accessed through the in-band access channel and whether it is in the operating environment of the boot system is obtained. ; If the detection result indicates that the access to the baseboard management controller is not in the operating environment, the baseboard management controller is notified to close the in-band access channel; The detection result in the operating environment of the boot system indicates that the in-band access channel does not have the access right at this time, and the in-band access channel is immediately closed. In this way, even if the attacker can access the server entity, the attacker cannot control the baseboard management controller. The access is not in the operating environment of the boot system, so the in-band access channel is closed, the access of the attacker is prevented, and the access security of the baseboard management controller is provided.

Embodiments of the present application provide a computer-readable storage medium, where one or more programs are stored in the computer-readable storage medium, and the one or more programs can be executed by one or more processors, so as to realize FIG. 1 to The implementation process in the information processing method provided by the embodiment corresponding to FIG. 4 will not be repeated here.

In the computer-readable storage medium provided by the embodiment of the present application, when the mainboard is powered on and the in-band access channel is open, it is possible to obtain whether the baseboard management controller is accessed through the in-band access channel, and whether it is in the operating environment of the boot system If the detection result indicates that the access to the baseboard management controller is not in the operating environment, the baseboard management controller is notified to close the in-band access channel; that is, as long as it is determined that the baseboard management controller is accessed through the in-band access channel , the detection result that is not in the operating environment of the boot system, at this time, it indicates that the in-band access channel does not have access rights, and the in-band access channel is immediately closed. In this way, even if the attacker can access the server entity, because the attacker has no access to the substrate The access of the management controller is not in the operating environment of the booting system, so the in-band access channel is closed, the access of the attacker is prevented, and the access security of the baseboard management controller is provided.

As will be appreciated by those skilled in the art, the embodiments of the present application may be provided as a method, a system, or a computer program product. Accordingly, the application may take the form of a hardware embodiment, a software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media having computer-usable program code embodied therein, including but not limited to disk storage, optical storage, and the like.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the present application. It will be understood that each process and/or block in the flowchart illustrations and/or block diagrams, and combinations of processes and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce Means for implementing the functions specified in a flow or flow of a flowchart and/or a block or blocks of a block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory result in an article of manufacture comprising instruction means, the instructions The apparatus implements the functions specified in the flow or flow of the flowcharts and/or the block or blocks of the block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing device to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process such that The instructions provide steps for implementing the functions specified in the flow or blocks of the flowcharts and/or the block or blocks of the block diagrams.

The above descriptions are only preferred embodiments of the present application, and are not intended to limit the protection scope of the present application.

Claims (10)

1. An information processing method, the method comprising: When the mainboard is powered on and the in-band access channel is open, obtain a detection result of whether the baseboard management controller is accessed through the in-band access channel, and whether it is in the operating environment of the boot system; If the detection result indicates that the access to the baseboard management controller is not in the operating environment, the baseboard management controller is notified to close the in-band access channel. 2 . The method according to claim 1 , wherein the obtaining a detection result of whether the baseboard management controller is accessed through the in-band access channel and whether it is in the operating environment of the boot system, comprising: 2 . If the self-check of the guidance system is completed, a check result of accessing the baseboard management controller through the in-band access channel and not in the operating environment is obtained. 3 . The method according to claim 1 , wherein the obtaining a detection result of whether the baseboard management controller is accessed through the in-band access channel and under the operating environment of the boot system comprises: 3 . If the boot system self-check is completed and the baseboard management controller detects a first system interrupt signal, process the first system interrupt signal through the boot system; If the guidance system finishes processing the first system interrupt signal, a detection result of accessing the baseboard management controller through the in-band access channel and not being in the operating environment is obtained. 4 . The method according to claim 1 , wherein if the detection result indicates that the access to the baseboard management controller is not in the operating environment, the baseboard management controller is notified to close the in-band access channel after the in-band access channel is notified. 5 . Methods include: obtain an open event for the in-band access channel; If the open event satisfies the authorization verification condition of the boot system, the in-band access channel is opened in response to the open event. 5. The method according to claim 4, wherein the detection result is a detection result obtained by the boot system after processing the first system interrupt signal, and the obtaining an open event for the in-band access channel comprises: obtaining the security verification information of the boot system and/or the baseboard management controller; If the security verification information satisfies the security verification condition, the management control of the in-band access channel is displayed in the configuration interface of the guidance system; wherein, the management control is used to open the in-band access channel when triggered; If the management control is triggered, an open event that satisfies the permission verification condition is generated. 6. The method according to claim 4, wherein the detection result is a detection result obtained by completing a self-check of the guidance system, and the obtaining an open event for the in-band access channel comprises: The first system interruption signal is detected by the baseboard management controller, and an open event satisfying the permission verification condition is generated. 7. The method of any one of claims 1 to 6, further comprising: When the mainboard is powered on, open the in-band access channel; In the process of guiding the system self-check, if the baseboard management controller detects the second system interruption signal, the baseboard management controller is accessed through the in-band access channel to obtain self-check diagnostic information. 8. An information processing device, the information processing device comprising: an obtaining module for obtaining a detection result of whether the baseboard management controller is accessed through the in-band access channel when the mainboard is powered on and the in-band access channel is open, and whether it is in the operating environment of the boot system; The processing module is configured to notify the baseboard management controller to close the in-band access channel if the detection result indicates that the access to the baseboard management controller is not in the operating environment. 9. An electronic device comprising: a processor, a memory and a communication bus; the communication bus is used to realize the communication connection between the processor and the memory; The processor is configured to execute the information processing program stored in the memory to implement the steps of the information processing method according to any one of claims 1 to 7. 10. A storage medium storing executable instructions for causing a processor to implement the steps of the information processing method according to any one of claims 1 to 7 when executed.

Images