CN116701006A - A component communication method and computing device - Google Patents

Abstract

The present application provides a component communication method and a computing device, the computing device at least includes a first component, a second component, and a management module; the first component sends a first request to the management module before accessing the second component; After the access right of the first component is verified, the access credential of the second component is sent to the first component; the first component sends a second request to the second component based on the access credential, and the second request is used to request access to the second component. In this application, a component management module is set in the computing device. The management module is responsible for the generation and management of the access credentials of each component. The risk of tampering, information leakage and illegal access between components ensures the security of bus communication between components.

Description

A component communication method and computing device

technical field

The present application relates to the field of computer technology, in particular to a component communication method and computing equipment.

Background technique

In the fully componentized server architecture, the traditional motherboard is split into basic boards, expansion boards and expansion components. Compared with traditional servers, fully componentized servers have the convenience of easy expansion and maintenance of components, and at the same time, there is a risk that components may be counterfeited and tampered with.

In a fully componentized server, components can be connected through high-speed interconnection buses such as memory interconnection (Compute Express Link, CXL) or unified bus (unified bus, UB or Ubus), and components can directly access their respective memory Data, and therefore, cross-component memory access brings security challenges to both computing components and memory expansion components. Once a counterfeit and tampered component is connected to a computing device, it may lead to hijacking of component capabilities, abuse, and memory data leakage. , there are many security risks.

Contents of the invention

The present application provides a component communication method and a computing device, which are used to improve the security of bus communication between components in the computing device and reduce the risk of data leakage.

In the first aspect, the embodiment of the present application provides a computing device, the computing device at least includes a first component, a second component, and a management module;

Before accessing the second component, the first component is used to send a request (denoted as the first request) to the management module; the management module is used to receive the first request of the first component and pass the access verification of the first component After that, send the access credential of the second component to the first component; the first component is also used to send a request to the second component based on the access credential of the second component (denoted as the second request), and the second request is used to request access to the second component Two components.

Through the above design, the first component sends the first request to the management module before accessing the second component; the management module sends the access credential of the second component to the first component after the access authority verification of the first component is passed; the first The component sends a second request to the second component based on the access credential, and the second request is used to request access to the second component. In this way, the risks of component counterfeiting, data tampering, information leakage and illegal access between components in the multi-vendor component mode can be effectively reduced, and the security and reliability of communication between components on the bus are guaranteed.

In a possible implementation manner, the second component is configured to send a registration request to the management module, where the registration request is used to request registration of the accessible resources of the second component; the management module is configured to generate and store the second component Access credentials for accessible resources.

Through the above design, a component management module is set in the computing device, and the management module is responsible for the generation and management of the access credentials of each component, so as to realize the communication between components based on the access credentials, so as to ensure the security of bus communication between components.

In a possible implementation manner, the access credential of the second component is generated by the management module according to the memory measurement value of the second component.

Through the above design, the memory measurement value of the component is used to generate the access credential of the component, which effectively reduces the risk of counterfeiting that the component may face.

In a possible implementation manner, when the first component sends the second request to the second component based on the access credential of the second component, it is specifically used to: encrypt the access credential with a data key to obtain the encrypted access credential Credentials; wherein, the second request includes encrypted access credentials; the data key is received by the first component from the management module.

Through the above design, the first component uses the data key to encrypt the access credentials of the second component, and sends the encrypted access credentials to the second component through the second request. Through this design, the security of data communication can be enhanced. Through the data key encryption and the access credentials of the second component for inter-component communication, two-layer security protection is realized, which effectively reduces the risk of the access credentials of the second component being leaked.

In a possible implementation manner, the second component is further configured to: receive and store the access credentials sent by the management module; after receiving the second request sent by the first component, the second component is further configured to: use the data The key decrypts the encrypted access credential to obtain the decrypted access credential; the data key is received by the second component from the management module; if the decrypted access credential is the same as the If the access credentials are the same, the second component is further configured to respond to the second request; or, if they are different, the second component is further configured to discard the second request.

In a possible implementation manner, the management module is a baseboard management controller (Baseboard Management Controller, BMC).

In the second aspect, the embodiment of the present application provides a component communication method, which can be executed by a computer, wherein the computer includes at least a baseboard management controller (Baseboard Management Controller, BMC), a first component, and a second component. In the method, the first component is configured to send a first request to the management module before accessing the second component; the first component sends a first request to the management module before accessing the second component; The first request is used to request to obtain the access credentials of the second component; after the access authority verification of the first component is passed, the management module sends the access credentials of the second component to the first component; the first component sends the second component based on the access credentials The component sends a second request, where the second request is used to request access to the second component.

In a possible implementation manner, the method further includes: the management module receives a registration request sent by the second component, and the registration request is used to request to register the accessible resources of the second component; the management module generates and stores the second Access credentials for the component's accessible resources.

In a possible implementation manner, the access credential of the second component is generated by the management module using the memory measurement value of the second component.

In a possible implementation manner, the management module is a BMC.

In a third aspect, the present application provides a computer-readable storage medium. When the computer-readable storage medium is executed by a computing device, the computing device executes the aforementioned first aspect or any possible implementation of the first aspect. Methods. The program is stored in the storage medium. The storage medium includes but not limited to volatile memory, such as random access memory, and non-volatile memory, such as flash memory, hard disk drive (hard disk drive, HDD), and solid state drive (solid state drive, SSD).

In a fourth aspect, the present application provides a computer program product, the computing device program product includes computer instructions, and when executed by the computing device, the computing device executes the aforementioned first aspect or any possible implementation of the first aspect method provided in . The computer program product may be a software installation package, and if the method provided in the aforementioned first aspect or any possible implementation of the first aspect needs to be used, the computer program product may be downloaded and executed on a computing device. program product.

In a fifth aspect, the present application further provides a chip, which is configured to implement the method described in the above first aspect and each possible implementation manner of the first aspect by executing a software program.

Please refer to the description of the first aspect for the beneficial effect of any implementation manner in the second aspect to the fifth aspect, and details are not repeated here.

Description of drawings

FIG. 1 is a schematic structural diagram of a computing device provided by an embodiment of the present application;

FIG. 2 is a schematic flowchart of a component communication method provided by an embodiment of the present application.

Detailed ways

In order to facilitate the understanding of the lock management method provided by the embodiment of the present application, the concepts and terms involved in the embodiment of the present application are briefly described first.

1. Baseboard Management Controller (BMC), as a platform management system, its hardware is usually the first component to be powered on and started on the motherboard of a computing device, and has a series of monitoring and control functions. Specifically, The BMC is connected to various sensors, and these sensors are distributed on several components of the computing device. The BMC manages various components of the computer through these sensors, such as enabling components to be powered on and off.

2. The first, second, and other numbers involved in this application are only for the convenience of description, and are not used to limit the scope of the embodiments of this application, and also indicate the sequence. "And/or" describes the association relationship of associated objects, indicating that there may be three types of relationships, for example, A and/or B may indicate: A exists alone, A and B exist simultaneously, and B exists independently. The character "/" generally indicates that the contextual objects are an "or" relationship. "At least one" means one or more. At least two means two or more.

The computing device involved in this application may be an independent physical machine, such as a server, a desktop computer, a notebook computer, and the like. The computing device can be deployed on the user side as user equipment. It can also be deployed on the server side, which can be an independent server, or a server cluster or distributed system composed of multiple physical servers.

FIG. 1 is a schematic structural diagram of a computing device 10 provided by an embodiment of the present application. In this architecture, the traditional mainboard is split into a basic computing unit (Basic Computing Unit, BCU) 100, an expansion board 200 (Extension Unit, EXU) 200 and a number of extension components, and the basic computing unit 100 cooperates with the expansion board 200. The specifications and forms of motherboards required for different scenarios are supported. Specifically, the same computing device 10 may include one base board 100 and one expansion board 200, or the same computing device 10 may also include multiple base boards 100 and one expansion board 200, or the same computing device 10 may also include a A base board 100 and a plurality of expansion boards 200 . Alternatively, the same computing device 10 may also include multiple base boards 100 and multiple expansion boards 200 .

The base board 100 includes a CPU 1011 , a double data rate (DDR) 1012 and related power supply 1013 , providing general computing capability and peripheral storage, input/output (IO), acceleration and other expansion interfaces. Baseboard 100 support And other different series of CPU. Optionally, the base board 100 supports heterogeneous processors, that is, the base board 100 can support different types of processors, for example, the base board 100 supports one or more CPUs 1011 (only one is shown in FIG. limited), and application-specific integrated circuit (ASIC), programmable logic device (programmable logic device, PLD), complex program logic device (complex programmable logical device, CPLD), field programmable gate array (field- programmable gate array (FPGA), generic array logic (GAL), system on chip (SoC), software-defined architecture (software-defined infrastructure, SDI) chips, artificial intelligence (AI) chips Any processor or any combination thereof. Optionally, the base board 100 may also include other components, such as a BIOS chip 1014 .

Furthermore, according to business requirements and hardware attributes, the embodiment of the present application provides at least six different types of basic boards 100 , respectively aiming at different computing performance and memory configurations. For the convenience of description, these six types of base plates 100 are called A1, A2, B1, B2, C1, and C2 respectively. In addition, in this embodiment, "P" is used to represent the number of processors, P is an integer greater than 0, and "DPC" represents a dual in-line memory module per channel (DIMM Per Channel) of each channel. Channel). For example, the base board 100 of A1 form supports one processor, and each channel inserts one DIMM (abbreviated as 1P1DPC); the base board 100 of A2 form supports one processor, and each channel inserts one or two DIMMs (abbreviated as 1P2DPC). or 1P1DPC); the basic board 100 of B1 form supports two processors, and each channel inserts one DIMM (abbreviated as 2P1DPC), or, one processor, each channel inserts one or two DIMMs (abbreviated as 1P2DPC or 1P1DPC) ; The basic board 100 of B2 form supports two processors, and each channel inserts one or two DIMMs (abbreviated as 2P2DPC or 2P1DPC), or one processor, and each channel inserts one or two DIMMs (abbreviated as 1P2DPC or 2P1DPC). 1P1DPC); the basic board 100 of C1 form supports four processors, and each channel inserts one DIMM (abbreviated as 4P1DPC), or, two processors, each channel inserts one or two DIMMs (abbreviated as 2P2DPC or 2P1DPC ); the basic board 100 of C2 form supports four processors, and each channel inserts one or two DIMMs (abbreviated as 4P2DPC or 4P1DPC), or two processors, and each channel inserts one or two DIMMs (abbreviated as 2P2DPC or 2P1DPC). With the development of technology, the package size of the CPU, the number of memory channels and the number of DIMMs may change, but the standard size and mounting holes of the motherboard will remain unchanged, so as to ensure that the basic board 100 can be compatible and evolved across generations and series when it is updated. For example: the basic board 100 of B2 form supports 2P2DPC (2P32DIMM) when each CPU currently has 8 channels of DDR. After the number of CPU memory channels is increased to 12, 2P2DPC (2P48DIMM) will not be realized. Then, the B2 form can support 2P1DPC (2P24DIMM), and 2P2DPC (2P48DIMM) can be realized with other forms such as C1, because the position of the mounting hole and the size of the base plate 100 are standard, and it can be replaced and installed directly.

The expansion board 200 includes a motherboard management controller (Baseboard Management Controller, BMC) chip 2011 (abbreviated as BMC2011), a management system (not shown in FIG. PCH) 2012), is the management extension of the basic board 100, and as the management center of the entire system, it provides management functions such as equipment, security, energy efficiency, and reliability. Wherein, the BMC2011 may also be called a baseboard management controller, and is used to provide management functions and power supply for the base board 100 and various expansion components.

In this architecture, the base board 100 communicates with components through a high-speed bus such as PCIe, Compute Express Link (CXL), or unified bus (UB or Ubus), and connects with the expansion board 200 through a management interface. In a specific implementation, the specific connection methods of the base board 100 and the components, and the base board 100 and the expansion board 200 include: a soft connection method using cables to realize the above connection, or a hard connection method using connectors to realize the above connection.

Components are a general term for a class of electronic devices or electronic devices. According to their functions, components can be divided into computing components 4011, storage components (STorage Unit, STU) 4012, IO components (Input Output Unit, IOU) 4013, acceleration components (ACceleration Unit, ACU) 4014, memory expansion unit (Memory Expansion Unit, MEU) 4015, and cooling unit 4016. Wherein, the computing component 4011, such as CPU1011 and memory (such as DDR1012), etc. can be located in the base board 100, optionally, the computing component 4011 can also be used as an expansion component, connected with the base board 100; BMC2011, etc. can be located in the expansion board 200. Each component is introduced as follows:

Among them, the storage component 4012 includes a hard disk backplane, an expansion board (Expander), a PCIe switch (switch), etc., which are system storage expansion and support a mechanical hard disk (hard disk drive, HDD)/solid-state drive (solid-state drive, SSD)/ Non-volatile high-speed transmission bus (Non-Volatile Memory express, NVMe) / storage class memory (Storage Class Memory, SCM) and other media and forms.

The IO component 4013 includes components such as a Riser to implement system IO expansion, and supports PCIe standard cards and Open Compute Project (Open Compute Project, OCP) cards.

The acceleration component 4014 includes a carrier board, an accelerator card interconnection switch (switch), etc., and provides system acceleration component expansion and interconnection functions.

The memory expansion component 4015 includes a carrier board, a memory expansion chip, a dual in-line memory module (DIMM), an SCM medium, etc., and provides the system with the function of expanding memory bandwidth and memory capacity.

The heat dissipation component 4016 is used to dissipate heat from the computing device or the hardware in the computing device, including a combination of several heat dissipation methods such as air cooling, liquid cooling, or a combination of the two. It should be understood that the structure, type and quantity of the heat dissipation components do not constitute a limitation on the technical solution to be protected in this application.

It should be noted that (1) the components listed above are only examples of some components. For example, the components may also include power supply components. Some components may be located on the base board, and certain components may be located on the expansion board, and components that do not belong to the base board nor to the expansion board are called expansion components in this embodiment. In a word, any electronic device or electronic equipment that can be connected to the base board or the expansion board falls within the scope of components protected by the present application. (2) The position of each component shown in FIG. 1 is only an example, and the deployment form and connection method in the actual product of this application are not limited. (3) The architecture of the computing device 10 shown in FIG. 1 is only an example. In practical applications, the computing device 10 may include more or fewer components than in FIG. Peripherals (mouse, keyboard), etc. For another example, the computing device 10 may not include the storage component 4012 and the like. This application does not specifically limit it.

On the other hand, in the traditional server architecture, due to evolution reasons such as power supply, number of memory channels, number of IOs, speed, etc., the socket (Socket) of the processor (for example, central processing unit (CPU)) generally only It can be compatible with each generation (Tick/Tock two small upgrades), but it is difficult to be compatible across generations. The main board provided by this application can set external interfaces in a standardized way, and perform various external expansions with soft connections such as cables, which can shield processor-related power supply, differences between different processors and components, and the interconnection between components. . The changes of memory and other components are only included in the motherboard, and the function of cross-generation compatibility of the motherboard is realized. In this way, for each manufacturer, when the processor is updated, the supporting complete machine and components do not need to be replaced, so the supporting components have a longer life cycle. For customers, the latest components can be replaced at any time without changing the chassis or increasing the workload of hardware development, and the fastest use of the latest computing power in the industry. For complete machine manufacturers, after the realization of cross-generational upgrade and cross-series evolution of the new server architecture, the upgrade of the processor or the replacement of different processor manufacturers only needs to simply replace the basic board, which subverts the original development model and derives a new industrial model.

The above design splits the traditional motherboard into basic boards, expansion boards and expansion components. The functions on the traditional motherboard are discrete into independent components. In this way, the components can be independently produced, sold and installed, etc., providing computing equipment expansion , component maintenance and other flexibility and convenience. However, it is precisely because of this that these components are more likely to be counterfeited and tampered with. Further, when the basic board and the components are connected through a high-speed interconnection bus such as CXL, the basic board and the components, and between the components can directly access each other or each other. memory data. Cross-component memory access brings security challenges to both computing components and memory expansion components. Once a counterfeit and tampered component is connected to a computing device, it may lead to component capability hijacking, abuse, and memory data leakage. There are many security risks. .

To this end, the embodiment of the present application provides a communication method. In this method, for the access between components, the management module verifies the access rights of the components, and the access is allowed only after the verification is passed. This method can effectively reduce many The risk of component counterfeiting, data tampering, information leakage and illegal access between components in the vendor component mode ensures the security of bus communication between components.

Next, with reference to FIG. 2 , taking the architecture of the embodiment of the present application applied to the computing device 10 shown in FIG. 1 as an example, the communication method provided by the embodiment of the present application will be described in detail. The method may be performed by computing device 10 in FIG. 1 . For ease of description, the method is executed by two components (respectively denoted as the first component and the second component) and the management module in the computing device 10 as an example to illustrate, wherein the management module can be a software module or a hardware module , or a combination of software modules and hardware modules. Exemplarily, the management module may be an independent component in the computing device 10, or an existing component, such as BMC, or other components, which are not specifically limited. The following uses the BMC having the function of the management module as an example for introduction. It should be understood that the BMC in the following can be replaced by the management module.

Fig. 2 is a schematic flow chart corresponding to the communication method provided by the embodiment of the present application. As shown in Fig. 2, the method includes the following steps:

In step 200, the BMC sends a data key (denoted as Tkey) to the first component and the second component respectively. Correspondingly, the first component and the second component receive and save the data key.

In this application, the BMC is used to generate data keys and distribute the data keys to various components. It should be understood that FIG. 2 takes the first component and the second component as examples, and only shows the process of the BMC distributing data keys to the first component and the second component, and other components are not shown.

Exemplarily, the first component may be the base board 100, and the second component may be any component in the computing device 10 other than the base board 100, such as an IO component, or a memory expansion component, or an acceleration component, or a storage component wait.

In another example, the first component may also be one of the IO components in the computing device 10, and the second component may be another IO component of the computing device 10, or the first component may be an IO component, and the second component may be a memory expansion Components, etc., are not specifically limited.

As another example, the communication method provided by the embodiment of the present application may also be applied to communication between components, for example, the first component is the CPU 1011 of the base board 100 , the second component is the DDR 1012 of the base board 100 , and so on.

It should be noted that the BMC may also have other functions, which are not specifically limited. For example, BMC is also used to generate and manage component access credentials, which will be introduced below.

In step 201, the second component sends a registration request to the BMC, where the registration request is used for requesting to register a resource of the second component that can be accessed remotely.

The registration request carries the identity information of the second component, and the identity information of the second component includes but is not limited to one or more of the following: the component identification (unique device secret, UDS) of the second component, the memory of the second component metric. Among them, the component identifier is used to uniquely identify a component.

The memory measurement value may be generated based on the code segment of the second component, specifically, it may be generated based on one or more dynamic code segments of the second component, or may be generated based on one or more static code segments of the second component, It may also be generated based on at least one dynamic code segment and at least one static code segment of the second component. The memory metric value may be the code segment used to generate the memory metric value itself, or may be a hash value obtained from the code segment used to generate the memory metric value, and is not specifically limited.

Step 202, based on the identity information of the second component, the BMC generates and saves the access credential of the second component (denoted as Ukey_2).

Based on this design, the BMC uses the memory value measurement of the second component to participate in the generation of the access credentials of the second component, which can effectively reduce the risk of counterfeiting that the second component may face.

In step 203, the BMC sends the access credential of the second component to the second component. Correspondingly, the second component receives and saves the access credential.

Step 204, before accessing the second component, the first component sends a request (denoted as the first request) to the BMC, where the first request is used to request to acquire the access credential of the second component. Correspondingly, the BMC receives the first request sent by the first component.

The first request includes, but is not limited to: the component identifier of the first component, and the component identifier of the second component. The component identifier of the second component may be preset in the first component, broadcast by the second component, or obtained in other ways, which is not specifically limited.

In step 205, the BMC verifies the access authority of the first component, and if the verification fails, then executes step 206; if the authentication passes, executes step 207.

The BMC judges whether the first component has access rights to the second component based on the mutual access policy.

Specifically, the BMC stores mutual access policies between components in the computing device 10 . Wherein, the mutual access policy includes, but is not limited to: a component identifier of a component, and an access list of the component. One or more components that can access the component are recorded in the access list, in other words, the components recorded in the access list have access rights. It should be noted that the mutual access policy may also include other information, such as the access credentials of the component, which is not limited in this embodiment of the present application. For example, the mutual access policy stored in the BMC is shown in Table 1 below. It should be understood that Table 1 only shows some components in the mutual access policy.

Table 1

Component ID access credentials visit list UDS_2 Ukey_2 UDS_1, UDS_3 … … …

Wherein, UDS_1 represents the component identifier of the first component; UDS_2 represents the component identifier of the second component; UDS_3 represents the component identifier of the third component; Ukey_2 represents the access credential of the second component.

According to the records in Table 1, it can be seen that the access list of the second component includes the first component and the third component, that is to say, both the first component and the third component can access the second component, that is, they have access to the second component Access rights, in other words, components of computing device 10 other than the first component and the third component cannot access the second component.

The mutual access policy in the BMC can be preset in the BMC or generated by the BMC. For example, the registration request sent by the second component can also carry the access list of the second component. access policy, or can be configured by the user. If it is a user device, the computing device 10 may provide a corresponding configuration interface for the user to configure the mutual access policy.

Based on this, in step 205, if the access list of the second component includes the component identifier of the first component, the BMC determines that the first component has access rights to the second component. Alternatively, if the BMC cannot identify the component identifier of the first component, or the access list of the second component does not include the component identifier of the first component, then it is determined that the first component does not have access authority to the second component. Optionally, if the BMC cannot recognize the component identification of the first component, the first component may be a component that has been counterfeited or tampered with or is incompatible with the BMC, and the BMC may perform further processing, such as sending an alarm to the first component, and will Power off the first component, etc.

Step 206, the BMC rejects the first request of the first component.

For example, the BMC does not respond to the first request of the first component, or the BMC sends indication information to the first component, where the indication information is used to indicate that the first request of the first component is rejected, etc., which are not specifically limited.

In step 207, the BMC sends the access credential of the second component to the first component. Correspondingly, the first component receives the access credential of the second component sent by the BMC.

In an implementation manner, the BMC may directly send the access credential to the first component. In another implementation manner, the BMC may also use a data key (Tkey) to encrypt the access credential, and send the encrypted access credential to the first component. Correspondingly, after the first component receives the encrypted access credential sent by the BMC, it can use the Tkey distributed by the BMC to decrypt the received data to obtain the access credential of the second component. Through this design, the security of data communication can be enhanced, and the risk of the access credential of the second component being leaked can be reduced.

Step 208, the first component sends a request (denoted as a second request) to the second component based on the access credential of the second component. The second request is used to request access to the second component. Correspondingly, the second component receives the second request sent by the first component.

The second request may be a read data request for requesting to obtain data of the second component, or may also be a write data request for requesting to write data to be written into the second component. Specifically, the second request includes the access credential of the second component or the access credential encrypted using Tkey, and may also include other information, such as the component identifier of the first component, and if the second request is a write data request, the second The second request may also include the data to be written or the data to be written encrypted with the Tkey.

In step 209, the second component verifies the access authority of the first component, and if the verification is passed, execute step 210; otherwise, execute step 211.

In one embodiment, the second component verifies the access credential carried in the second request. It should be understood that, if the encrypted access credential is carried in the second request, the second component first uses Tkey to decrypt, To obtain the decrypted access credentials, after that, the second component compares the access credentials carried in the second request with the access credentials of the second component itself saved by the second component, and if they are consistent, then the verification is passed; if not, then Authentication failed.

Step 210, the second component responds to the second request.

Specifically, if the second request is a write data request, the second component writes the data to be written carried in the second request into the second component. It should be understood that if the encrypted data carried in the second request is the data to be written, the second component first uses the Tkey to decrypt to obtain the decrypted data to be written. As another example, if the second request is a read data request, the second component obtains the data requested by the second request, and sends the obtained data, or encrypts the obtained data using Tkey, to the first a component.

It should be noted that the way the second component responds to the first component can be the same as the way the first component accesses the second component, that is, the second component first obtains the access credentials of the first component from the BMC, and then based on the access credentials of the first component Send data to the first component, if the second request is a read data request, the second component will use the access credentials of the first component (or access credentials encrypted with Tkey) and the data requested by the second request (or use Tkey encrypted data) is sent to the first component. Or, since the second component is the party requested to interact, the second component can also directly respond to the first component. For example, if the second request is a read data request, the second component directly sends the data requested by the second request. to the first component. It is worth noting that if the second component actively initiates access to the first component, the way the second component accesses the first component is the same as the way the first component accesses the second component, that is, access based on the accessed component is required Credentials for communication.

In the above design, the first component can use the data key to encrypt data, and communicate with the second component based on the access credentials of the second component, so as to realize double-layer security protection. The second component responds to the request of the first component after the access right verification of the first component is passed. Effectively reduce the risk of component counterfeiting, data tampering, information leakage, and illegal access between components in the multi-vendor component mode, ensuring the security and reliability of communication between components on the bus.

Step 211, the second component does not respond to the second request.

The second component does not respond to the second request of the first component, for example, the second request may be discarded.

In an optional implementation manner, the BMC may periodically update the data key (Tkey), and synchronize the updated data key to each component. In another optional implementation, the application can also periodically update the access credentials of the components. This process can be actively initiated by the components. For example, the second component sends an update request (or called a new registration request) to the BMC. The update request carries the information used to generate the access credential of the second component (such as the identity information of the second component), and the BMC generates a new access credential (denoted as Ukey_2') of the second component based on the information carried in the update request, and generates For the method of accessing credentials, refer to the above-mentioned related instructions, and will not repeat them here. Afterwards, the BMC sends the new access credential to the second component, and the second component receives and saves the new access credential, that is, replaces the original access credential (Ukey_2) with the new access credential (such as Ukey_2'). It should be noted that the information used to generate access credentials carried by the second component in two adjacent update requests is different, so that Ukey_2' is different from Ukey_2.

In the above design, BMC realizes the dynamic management of data keys and component access credentials by dynamically updating data keys and component access credentials, enhances the reliability of data keys and component access credentials, and reduces the risk of both being leaked. risk.

The above describes a complete method flow for the first component to access the second component. If after that, the first component accesses the second component again, in one implementation, the first component may not obtain the second component repeatedly Instead, directly use the access credentials of the second component obtained last time, and communicate with the second component based on the access credentials. If after the communication fails, if the second component fails to respond to or rejects the access request of the first component one or more times, the first component will reacquire the new access credential of the second component, and then, based on the new access credential Communicate with the second component. In another embodiment, the first component reacquires the access credentials of the second component before each access to the second component, and communicates with the second component based on the reacquired access credentials, which can ensure that the first component uses is the latest access credential for the second component. In the third embodiment, the first component periodically obtains the access credentials of the second component. Optionally, if the first component has no access requirements for the second component within a cycle, the second component may not be obtained access credentials.

The embodiment of the present application also provides a computer storage medium, the computer storage medium stores computer instructions, and when the computer instructions are run on the computer, the computer executes the steps of the above-mentioned related methods to realize the computing device 10 in the above-mentioned embodiments. For the execution method, refer to the description of each step in FIG. 2 , which will not be repeated here.

The embodiment of the present application also provides a computer program product. When the computer program product is run on a computer, it causes the computer to execute the above-mentioned related steps, so as to realize the method performed by the computing device 10 in the above-mentioned embodiment. See the steps in FIG. 2 description, which will not be repeated here.

In addition, the embodiment of the present application also provides a device, which may specifically be a chip, a component or a module, and the device may include a connected processor and a power supply circuit; wherein the power supply circuit is used to provide power for the operation of the processor, when When the device is running, the processor can execute computer-executed instructions, so that the chip executes the methods executed by the computing device 10 in the above-mentioned method embodiments. See the description of each step in FIG. 2 , and details will not be repeated here.

Wherein, the computer storage media, computer program products or chips provided in the embodiments of the present application are all used to implement the method performed by the computing device 10 provided above, and the beneficial effects that can be achieved can refer to the corresponding The beneficial effects in the method will not be repeated here.

Optionally, the computer-executed instructions in the embodiments of the present application may also be referred to as application program codes, which is not specifically limited in the embodiments of the present application.

In the above embodiments, all or part of them may be implemented by software, hardware, firmware or any combination thereof. When implemented using software, it may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, the processes or functions according to the embodiments of the present application will be generated in whole or in part. The computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website, computer, server or data center Transmission to another website site, computer, server, or data center by wired (eg, coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (eg, infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be accessed by a computer, or a data storage device including a server, a data center, and the like integrated with one or more available media. The available medium may be a magnetic medium (for example, a floppy disk, a hard disk, or a magnetic tape), an optical medium (for example, DVD), or a semiconductor medium (for example, a solid state disk (Solid State Disk, SSD)) and the like.

The various illustrative logic units and circuits described in the embodiments of the present application can be implemented by a general-purpose processor, a digital signal processor, an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, Discrete gate or transistor logic, discrete hardware components, or any combination of the above designed to implement or operate the described functions. The general-purpose processor may be a microprocessor, and optionally, the general-purpose processor may also be any conventional processor, controller, microcontroller or state machine. A processor may also be implemented by a combination of computing devices, such as a digital signal processor and a microprocessor, multiple microprocessors, one or more microprocessors combined with a digital signal processor core, or any other similar configuration to accomplish.

The steps of the method or algorithm described in the embodiments of the present application may be directly embedded in hardware, a software unit executed by a processor, or a combination of both. The software unit may be stored in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, removable disk, CD-ROM or any other storage medium in the art. Exemplarily, the storage medium can be connected to the processor, so that the processor can read information from the storage medium, and can write information to the storage medium. Optionally, the storage medium can also be integrated into the processor. The processor and storage medium can be provided in an ASIC.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

Although the application has been described in conjunction with specific features and embodiments thereof, it will be apparent that various modifications and combinations can be made thereto without departing from the spirit and scope of the application. Accordingly, the specification and drawings are merely illustrative of the application as defined by the appended claims and are deemed to cover any and all modifications, variations, combinations or equivalents within the scope of this application. Apparently, those skilled in the art can make various changes and modifications to the present application without departing from the scope of the present application. In this way, if these modifications and variations of the application fall within the scope of the claims of the application and their equivalent technologies, the application also intends to include these modifications and variations.

Claims (13)

1. A computing device, wherein the computing device comprises at least a first component, a second component, and a management module;

the first component is configured to send a first request to the management module before accessing the second component;

the management module is used for sending the access certificate of the second component to the first component after the access right of the first component is verified;

the first component is further configured to send a second request to the second component based on the access credential, the second request being for requesting access to the second component.

2. The device of claim 1, wherein the second component is to send a registration request to the management module, the registration request to request registration of an accessible resource of the second component;

the management module is used for generating and storing access credentials of the accessible resources of the second component.

3. The device of claim 2, wherein the access credential is generated by the management module based on a memory metric of the second component.

4. A device according to any of claims 1-3, wherein the first component is configured to, when sending a second request to the second component based on the access credentials, in particular to: encrypting the access credential by using a data key to obtain an encrypted access credential; wherein the data key is received by the first component from the management module, and the second request includes the encrypted access credential.

5. The apparatus of claim 4, wherein the second component is further to: receiving and storing the access credentials sent by the management module;

the second component, after receiving the second request sent by the first component, is further configured to: decrypting the encrypted access credential by using a data key to obtain a decrypted access credential; the data key is received by the second component from the management module;

if the decrypted access credential is the same as the access credential stored by the second component, the second component is further configured to respond to the second request; or if different, the second component is further configured to discard the second request.

6. The apparatus of any of claims 1-5, wherein the management module is a baseboard management controller, BMC.

7. A component communication method, wherein a computing device comprises at least a first component, a second component, and a management module: the method comprises the following steps:

the first component sending a first request to the management module before accessing the second component;

after the access right of the first component passes the verification, the management module sends an access certificate of the second component to the first component;

the first component sends a second request to the second component based on the access credential, the second request requesting access to the second component.

8. The method of claim 7, wherein the method further comprises:

the second component sends a registration request to the management module, wherein the registration request is used for requesting to register accessible resources of the second component;

the management module generates and stores access credentials for the accessible resources of the second component.

9. The method of claim 8, wherein the access credential is generated by the management module based on a memory metric of the second component.

10. The method of any of claims 7-9, wherein the first component sending a second request to the second component based on the access credential comprises:

the first component encrypts the access credential by using a data key to obtain an encrypted access credential; wherein the data key is obtained by the first component from the management module, and the second request includes the encrypted access credential.

11. The method of claim 10, wherein the method further comprises:

the second component receives and stores the access credentials sent by the management module;

after the first component sends a second request to the second component based on the access credential, the method further includes:

the second component decrypts the encrypted access credential by using a data key to obtain a decrypted access credential; the data key is acquired by the second component from the management module;

if the decrypted access credential is the same as the access credential stored by the second component, the second component responds to the second request; or alternatively; if not, the second component discards the second request.

12. The method according to any of the claims 7-11, wherein the management module is a baseboard management controller, BMC.

13. A computer readable storage medium, characterized in that the computer readable storage medium, when executed by a storage device, performs the method of any of the preceding claims 7 to 12.