CN100399268C

Movatterモバイル変換

Info

Publication number: CN100399268C
Application number: CNB200510105390XA
Authority: CN
Inventors: 张怡; 席振新; 周建; 田宏萍
Original assignee: Lenovo Beijing Ltd
Current assignee: Lenovo Beijing Ltd
Priority date: 2005-09-23
Filing date: 2005-09-23
Publication date: 2008-07-02
Anticipated expiration: 2025-09-23
Also published as: CN1936840A

Abstract

一种不依赖操作系统更新软件数据的计算机系统及方法，包括硬件和软件，所述软件包括触发管理所述软件事件的EFI软件管理器触发模块(22)，更新所述软件的EFI软件管理器模块(21)以及将计算机系统连接到远程服务器的网络连接功能模块(11)。用户开机并在EFI BIOS自检完成后，读写并运行EFI软件管理器触发模块(22)，当用户按下功能键时，启动EFI软件管理器(21)；EFI软件管理器(21)显示操作界面，通过网络连接功能模块(11)建立网络连接；启动软件更新模块判断本地软件是否更新，下载更新软件；关闭网络连接，返回软件管理器(21)。本发明能够适用于各种复杂的需求情况，只需利用计算机自身资源即可完成软件数据更新。

A computer system and method for updating software data independent of an operating system, including hardware and software, the software including an EFI software manager trigger module (22) that triggers and manages the software events, and an EFI software manager that updates the software module (21) and a network connection function module (11) for connecting the computer system to a remote server. The user starts the machine and after the EFI BIOS self-check is completed, reads and writes and runs the EFI software manager trigger module (22), when the user presses the function key, starts the EFI software manager (21); the EFI software manager (21) displays The operation interface establishes a network connection through the network connection function module (11); starts the software update module to judge whether the local software is updated, and downloads the update software; closes the network connection and returns to the software manager (21). The present invention is applicable to various complicated demand situations, and software data update can be completed only by utilizing the resources of the computer itself.

Description

Translated fromChinese

一种不依赖操作系统更新软件数据的计算机系统及方法A computer system and method for updating software data independent of operating system

技术领域technical field

本发明涉及计算机应用领域，特别是涉及一种不依赖于操作系统的更新软件数据的计算机系统及在该计算机系统上更新软件数据的方法。The invention relates to the field of computer applications, in particular to a computer system for updating software data independent of an operating system and a method for updating software data on the computer system.

背景技术Background technique

目前，计算机技术已经广泛的应用于人们社会生活的各个领域，已经成为人们社会生活不可或缺的一部分，人们对计算机的依赖越来越大，同时对计算机的管理、维护、自更新的需求也越来越高。不仅限于企业用户，个人计算机用户也希望能够简单方便的管理维护计算机，具备较高计算机管理能力。在众多的计算机管理问题中，人们最常遇到的技术问题是针对计算机的软件的管理和维护问题，而对于目前的主流操作系统(OS：operation system)-Windows系列操作系统和Unix/Linux操作系统来说，软件可以包括：随机驱动程序、升级软件、BIOS image，随机手册，维护软件等等。而软件的维护和管理则是令人们比较头痛的一个问题。根据系统硬件的不同，操作系统还可能需要即时更新这些不同的软件，以保证这些软件保持最新和最有效的版本，而由于某些用户误操作或硬件异常情况，也可能导致现有软件被破坏，特别是在操作系统本身被破坏或需要升级安装时，可能需要原有软件的支持。At present, computer technology has been widely used in various fields of people's social life, and has become an indispensable part of people's social life. Higher and higher. Not limited to enterprise users, personal computer users also hope to be able to manage and maintain computers simply and conveniently, and have high computer management capabilities. Among the many computer management problems, the most common technical problems people encounter are the management and maintenance of computer software. For the current mainstream operating system (OS: operation system)-Windows series operating system and Unix/Linux operation For the system, the software can include: random driver, upgrade software, BIOS image, random manual, maintenance software, etc. The maintenance and management of software is a headache for people. Depending on the system hardware, the operating system may also need to update these different software in real time to ensure that these software maintain the latest and most effective version, and due to some user misuse or hardware abnormalities, existing software may also be damaged , especially when the operating system itself is damaged or needs to be upgraded and installed, the support of the original software may be required.

目前，提供系统常用的软件存储更新的方法主要有两种：Currently, there are two main methods for providing software storage updates commonly used by the system:

(1)出厂时提供随机软件的安装软盘或光盘，这样在需要使用软件时，用户可以插入光盘或软盘执行操作。(1) The installation floppy disk or CD of the accompanying software is provided when leaving the factory, so that when the software needs to be used, the user can insert the CD or floppy disk to perform operations.

该方法的缺陷是：存储载体易遗失。在需要随机光盘或软盘时，这些光盘或软盘往往已经难于找到。同时，其也不能应对软件的更新需求。在操作系统升级、硬件升级、或硬件驱动升级等系统状态变化的情况下，旧的软件可能将失去实际意义，用户可能需要新的高效率软件支持。但是该方法不支持软件的存储更新需求。The defect of this method is: the storage carrier is easy to lose. By the time you need the CD-ROM or floppy disk, these are often hard to find. At the same time, it cannot cope with the update requirements of the software. In the case of system status changes such as operating system upgrades, hardware upgrades, or hardware driver upgrades, the old software may lose its practical significance, and users may need new high-efficiency software support. However, this method does not support the storage update requirement of the software.

(2)另外一种方法是从网络下载软件更新程序。用户在需要安装或更新软件时，从供应商指定的网址下载所需的最新软件。该方法是目前常用的一种更新软件获取方法，但是该方法一般是在操作系统之上完成，其主要原因源于远程网络下载需要的网络支持功能，一般在操作系统之上才能够提供，而传统通用输入输出系统的基本功能不支持网络。(2) Another method is to download the software update program from the Internet. When users need to install or update software, they download the latest software they need from the website specified by the supplier. This method is a commonly used method for obtaining update software at present, but this method is generally completed on the operating system. The basic functionality of traditional GPIOs does not support networking.

该方法的缺陷是：需要具备网络功能的操作系统支持才能完成功能，在本机操作系统网络功能故障或应对操作系统重装的应用场景时，该方法不能适用。由此可见，该方法对运行环境要求较高，不能应对较为恶劣情况下的软件安装及使用要求。The disadvantage of this method is that the function needs to be supported by an operating system with a network function, and this method cannot be applied when the network function of the local operating system fails or the application scenario of reinstalling the operating system is dealt with. It can be seen that this method has high requirements on the operating environment, and cannot meet the requirements for software installation and use in relatively harsh situations.

发明内容Contents of the invention

本发明的目的在于提供一种在EFI BIOS上实现不依赖操作系统更新软件数据的计算机系统及方法。其能够适用于各种复杂的需求情况，包括在操作系统尚未安装或者崩溃的时候也可以适用，只需利用计算机自身资源即可完成软件数据更新。The object of the present invention is to provide a kind of computer system and method that realize not relying on operating system to update software data on EFI BIOS. It can be applied to various complex requirements, including when the operating system has not been installed or crashed, and the software data update can be completed only by using the computer's own resources.

为达到上述目的，本发明提供了一种不依赖操作系统更新软件数据的计算机系统，包括硬件和软件，硬件中包括主板，中央处理器，内存，硬盘及外设，主板和中央处理器分别为支持EFI规范的主板和中央处理器，所述软件包括随机携带的软件，触发管理所述软件事件的EFI软件管理器触发模块，更新所述软件的EFI软件管理器模块以及将计算机系统连接到远程服务器的网络连接功能模块。In order to achieve the above object, the present invention provides a computer system that does not rely on the operating system to update software data, including hardware and software, including a mainboard, central processing unit, memory, hard disk and peripherals in the hardware, and the mainboard and central processing unit are respectively A mainboard and a central processing unit supporting the EFI specification, the software includes random-carried software, an EFI software manager trigger module that triggers and manages the software events, an EFI software manager module that updates the software and connects the computer system to a remote The network connection function module of the server.

所述软件可以为计算机随机携带的公用软件，如驱动程序文件，联机手册文件，BIOS镜像文件，在线服务文件中的一个或者多个支持安全加密检验的EFI FV压缩文件。Described software can be the public software that computer is carried at random, as driver program file, online manual file, BIOS image file, one or more EFI FV compressed files that support safe encryption check in the online service file.

所述的软件存储于BIOS ROM的剩余空间，或者主机板上的扩展BIOS，或者具有主保护区域硬盘，或者通过USB接口连接的具有访问控制功能的USB盘中的一种或者多种存贮器中。The software is stored in the remaining space of the BIOS ROM, or the extended BIOS on the motherboard, or the hard disk with the main protection area, or one or more types of memory in the USB disk with access control function connected through the USB interface middle.

所述的EFI软件管理器模块包括更新所述软件的软件更新模块和将软件拷贝到另外位置的软件文件拷贝模块。The EFI software manager module includes a software update module for updating the software and a software file copy module for copying the software to another location.

同时，本发明还提供了一种不依赖操作系统更新软件数据的方法，包括下列步骤：Simultaneously, the present invention also provides a method for updating software data independent of the operating system, comprising the following steps:

步骤一：计算机上电，在EFI BIOS自检完成后，运行EFI软件管理器触发模块(22)，用户选择直接进入启动操作系统阶段；或者，启动进入EFI软件管理器(21)；步骤二：EFI软件管理器显示操作界面，启动网络连接功能模块，建立网络连接；Step 1: power on the computer, after the EFI BIOS self-check is completed, run the EFI software manager trigger module (22), the user chooses to directly enter the stage of starting the operating system; or, start and enter the EFI software manager (21); Step 2: The EFI software manager displays the operation interface, starts the network connection function module, and establishes a network connection;

步骤三：启动软件更新模块，判断本地软件是否有可更新的版本，显示可更新文件列表，用户更新选择需要更新的文件，下载更新软件；Step 3: Start the software update module, judge whether there is an updateable version of the local software, display the list of updateable files, update and select the file to be updated by the user, and download the update software;

步骤四：关闭网络连接，结束本次更新，返回软件管理器。Step 4: Close the network connection, end this update, and return to the software manager.

上述方法中还可以包括下列步骤：The above method may also include the following steps:

步骤a)：预先设置整理需要随机存储的软件；Step a): pre-setting and organizing the software that requires random storage;

步骤b)：利用EFI的压缩功能，将需要存储于BIOS ROM的剩余空间，或者主机板上的扩展option ROM中的软件压缩形成独立的压缩文件；Step b): Use the compression function of EFI to compress the software that needs to be stored in the remaining space of the BIOS ROM or the extended option ROM on the motherboard to form an independent compressed file;

步骤c)：将所述压缩文件打包形成独立的EFI FV文件，存储于BIOSROM的剩余空间，或者主机板上的扩展option ROM；Step c): the compressed file is packaged to form an independent EFI FV file, which is stored in the remaining space of the BIOSROM, or the extended option ROM on the motherboard;

步骤d)：将其它的软件直接加密存储在具有保护区域硬盘，或者通过USB接口连接的具有访问控制功能的USB盘中的一种或者多种存贮器中。Step d): directly encrypt and store other software in one or more types of storage in a hard disk with a protected area, or a USB disk connected through a USB interface with an access control function.

所述更新软件可以是为自动更新进入该管理软件后，即主动判断指定的网络位置的软件有否更新，发现软件具备更新状况自动进行软件升级；The update software can be automatically updated after entering the management software, which actively judges whether the software at the designated network location has been updated, and automatically upgrades the software when it is found that the software has an update status;

所述更新软件为手动更新将显示当前具有升级版本的软件列表，用户手工选择需要更新的软件。The update software is a manual update, which will display a list of software that currently has an upgraded version, and the user manually selects the software that needs to be updated.

所述步骤二包括通过软件文件拷贝模块将存储在存储器中的软件拷贝到用户指定的存储载体上。The second step includes copying the software stored in the memory to a user-specified storage carrier through the software file copy module.

本发明的有益效果是：本发明有效解决其它相关实现方法的弊端，实现计算机随机存储公用程序，而且存储位置安全可靠，并增加灵活的存储部署方式；其充分利用EFI扩展功能特性，提供EFI支持的软件动态更新功能，满足随机软件动态更新的高级应用需求；本发明的方法在EFI BIOS层面即可实现，特别适合于与操作系统独立的操作方法。本发明可以提供给系统非常好的可维护性能和易用性能，降低厂商维护成本，提供用户可用性，具有较高的实用价值。The beneficial effects of the present invention are: the present invention effectively solves the drawbacks of other related implementation methods, realizes random storage of common programs by computers, and the storage location is safe and reliable, and increases flexible storage deployment methods; it fully utilizes EFI extended function characteristics, and provides EFI support The software dynamic update function meets the advanced application requirements of random software dynamic update; the method of the present invention can be realized at the EFI BIOS level, and is particularly suitable for an operation method independent of the operating system. The invention can provide the system with very good maintainability and ease-of-use performance, reduce the maintenance cost of the manufacturer, provide user usability, and have high practical value.

附图说明Description of drawings

图1是本发明的计算机系统软件架构图；Fig. 1 is a computer system software architecture diagram of the present invention;

图2是本发明的软件存储示意图；Fig. 2 is a schematic diagram of software storage of the present invention;

图3是本发明的软件数据更新流程图；Fig. 3 is a software data update flowchart of the present invention;

图4是本发明的软件数据更新远程服务器工作流程图；Fig. 4 is the working flowchart of remote server of software data update of the present invention;

图5是本发明的EFI软件管理器软件更新界面示意图；Fig. 5 is a schematic diagram of the EFI software manager software update interface of the present invention;

图6是本发明的EFI软件管理器文件拷贝界面示意图；Fig. 6 is the EFI software manager file copy interface schematic diagram of the present invention;

图7是本发明支持的EFI BIOS存储布局图；Fig. 7 is the EFI BIOS storage layout diagram that the present invention supports;

图8是Fv_data的单独Firmware卷格式示意图；Figure 8 is a schematic diagram of the separate Firmware volume format of Fv_data;

图9是对Fv_data卷的读访问操作流程图。FIG. 9 is a flow chart of the read access operation to the Fv_data volume.

具体实施方式Detailed ways

下面结合附图进一步详细说明本发明。The present invention will be further described in detail below in conjunction with the accompanying drawings.

首先，为详细说明本发明，下面先说明EFI技术：At first, in order to describe the present invention in detail, first explain EFI technology below:

本发明将涉及可扩展固件接口(EFI)技术，可扩展固件接口(ExtensibleFirmware Interface，EFI)是1999年出现的用以取代沿用多年的基本输入输出系统(BIOS)的新一代接口程序，关于可扩展固件接口的介绍，详见UEFI论坛关于EFI技术的介绍http://www.UEFI.org。EFI介于硬件设备以及操作系统(比如Windows或者Linux)之间。与传统的BIOS不同，EFI使用全球最广泛的高级语言C语言进行编写，其提供了既具有传统BIOS的功能又有优于传统BIOS的扩展功能，在设计机制和架构上也有别于传统BIOS的实现，是下一代BIOS接口规范，这就意味着有更多的工程师可以参与EFI的开发工作，添加许多更有价值的功能。The present invention will relate to Extensible Firmware Interface (EFI) technology, Extensible Firmware Interface (ExtensibleFirmware Interface, EFI) is a new generation interface program that appeared in 1999 to replace the Basic Input Output System (BIOS) that has been used for many years. For the introduction of the firmware interface, see http://www.UEFI.org for the introduction of EFI technology in the UEFI Forum. EFI is between hardware devices and operating systems (such as Windows or Linux). Different from the traditional BIOS, EFI is written in C language, the most widely used high-level language in the world. It provides both the functions of the traditional BIOS and the extended functions superior to the traditional BIOS. It is also different from the traditional BIOS in terms of design mechanism and architecture. Implementation is the next-generation BIOS interface specification, which means that more engineers can participate in the development of EFI and add many more valuable functions.

EFI具备的基本功能为：The basic functions of EFI are:

硬件平台初始化；Hardware platform initialization;

支持启动操作系统；Support booting the operating system;

脱离操作系统的平台管理工具。Platform management tools that are independent of the operating system.

EFI的工作模式可以简单归纳为：启动系统，标准固件平台初始化，接着从加载EFI驱动程序库以及执行相关程序，在EFI系统启动菜单中选取所要进入的系统并向EFI提交启动引导代码，正常的话将进入系统，否则将中止启动服务并返回EFI系统启动菜单。工程师们可以按照不同的需要为EFI增加新的功能，诸如更加详细实用的诊断功能、自我配置程序、列出系统可能发生的故障等等。The working mode of EFI can be simply summarized as follows: start the system, initialize the standard firmware platform, then load the EFI driver library and execute related programs, select the system to enter in the EFI system boot menu and submit the boot code to EFI, if it is normal will enter the system, otherwise it will abort the boot service and return to the EFI system boot menu. Engineers can add new functions to EFI according to different needs, such as more detailed and practical diagnostic functions, self-configuration programs, listing possible faults of the system, and so on.

如图1-9所示，本发明的不依赖操作系统更新软件数据的计算机系统，是在EFI BIOS上实现的，其包括硬件和软件，硬件包括主板，中央处理器(CPU)，内存，硬盘及外设。As shown in Figure 1-9, the computer system that does not rely on operating system to update software data of the present invention is realized on EFI BIOS, and it comprises hardware and software, and hardware comprises main board, central processing unit (CPU), internal memory, hard disk and peripherals.

主板和CPU分别为支持EFI规范的主板和CPU。The motherboard and the CPU are respectively a motherboard and a CPU that support the EFI specification.

如图1所示，所述软件包括EFI FIRMWARE层1，EFI应用层2和操作系统层3。As shown in Figure 1, described software comprisesEFI FIRMWARE layer 1,EFI application layer 2 andoperating system layer 3.

所述的EFI FIRMWARE层包括网络连接功能模块11。Described EFI FIRMWARE layer comprises networkconnection function module 11.

所述的EFI应用层包括EFI软件管理器触发模块22，EFI软件管理器模块21。The EFI application layer includes an EFI softwaremanager trigger module 22 and an EFIsoftware manager module 21 .

EFI软件管理器触发模块22：在EFI BIOS自检完成后，在Firmware启动过程中，在调用操作系统的引导程序之前，运行EFI软件管理器触发模块22，该模块将在显示器上给用户提示按下特定功能键(如F9)可以启动EFI软件管理器模块21，如果用户在T等待时间内按下特定功能键，将启动软件管理器模块21，否则将直接进入操作系统启动。EFI software manager trigger module 22: after the EFI BIOS self-check is completed, in the Firmware startup process, before calling the boot program of the operating system, run the EFI softwaremanager trigger module 22, and this module will prompt the user to press the button on the display. The specific function key (as F9) can start the EFIsoftware manager module 21, if the user presses the specific function key within the T waiting time, thesoftware manager module 21 will be started, otherwise the operating system will be directly entered to start.

EFI软件管理器模块21：是一个运行在EFI上管理模块，包括以下功能模块：EFI software manager module 21: is a management module running on EFI, including the following functional modules:

1)软件更新模块。利用EFI的网络连接功能支持通过网络更新下载需要的软件的功能，满足软件更新用户需求。其包括自动更新和手动更新两种方式：1) Software update module. Use the network connection function of EFI to support the function of downloading the required software through the network update to meet the needs of software update users. It includes two ways of automatic update and manual update:

a)自动更新是指进入该管理软件后，主动判断指定的网络位置的软件有否可更新软件，发现软件具备更新状况自动进行软件升级；a) Automatic update means that after entering the management software, it actively judges whether the software at the specified network location can be updated, and automatically upgrades the software when it is found that the software has an update status;

b)手动更新将显示当前具有升级版本的软件列表，允许用户手工选择需要更新的软件。b) Manual update will display the current software list with upgraded versions, allowing users to manually select the software that needs to be updated.

2)软件文件拷贝模块。如图6所示，软件文件拷贝模块将存储在BIOSROM中或者其他存储位置的软件拷贝到用户指定的存储载体上，特别是在计算机重装操作系统时，可能需要将软件拷贝到软盘以备安装操作系统时使用，在计算机操作系统尚未安装无法进行文件拷贝的情况下，利用EFI BIOS运行环境可以为用户解决很大的困难。2) Software file copy module. As shown in Figure 6, the software file copy module copies the software stored in the BIOSROM or other storage locations to the storage carrier specified by the user, especially when the computer reinstalls the operating system, it may be necessary to copy the software to a floppy disk for installation When the operating system is used, when the computer operating system has not been installed and the file cannot be copied, using the EFI BIOS operating environment can solve great difficulties for the user.

该模块还支持除文件删除、修改以外的其他基本文件操作功能，如列表文件，修改文件属性，改名等。This module also supports other basic file operation functions other than file deletion and modification, such as list files, modify file attributes, rename, etc.

网络连接功能模块11：在EFI BIOS自检完成后，通过EFI FIRMWARE的网络协议EFI TCP/IP模块，连接到软件可以更新的远程服务器，对远程服务器进行访问和控制，通常是连接到国际互联网(Internet)，通过软件厂商的国际互联网网址下载更新软件。Network connection function module 11: After the EFI BIOS self-test is completed, connect to the remote server whose software can be updated through the network protocol EFI TCP/IP module of EFI FIRMWARE, and access and control the remote server, usually connected to the Internet ( Internet), download and update software through the Internet website of the software manufacturer.

在本实施例中，所述软件还包括有计算机随机携带的公用软件等软件4。In this embodiment, the software also includessoftware 4 such as public software carried by the computer.

如图2所示，在计算机出厂之前，或者在升级计算机的EFI BIOS7的过程中，可以把软件管理器模块21，软件管理器触发模块22与网络连接功能模块11与EFI BIOS的原有功能模块集成在一起，同时将计算机随机携带的公用软件4封装，并使用BIOS ROM7的烧写工具把它们写入到BIOS ROM7中，或者主机板上的扩展OPTION ROM5中，或者直接采用文件拷贝的方法存储到本地安全存储部件，如具有保护区域(Host protected Area，HPA)的硬盘6、外置安全存储部件，如通过USB接口连接的具有访问控制功能的USB盘上。As shown in Figure 2, before the computer leaves the factory, or in the process of upgrading the EFI BIOS7 of the computer, thesoftware manager module 21, the softwaremanager trigger module 22 and the original function module of the networkconnection function module 11 and EFI BIOS can be connected Integrated together, at the same time package thecommon software 4 carried by the computer, and use the programming tool of BIOS ROM7 to write them into BIOS ROM7, or the extended OPTION ROM5 on the motherboard, or directly store them by copying files To the local safe storage unit, such as the hard disk with a protected area (Host protected Area, HPA).

下面结合的可随时更新软件数据的计算机系统进一步说明其底层身份认证方法：The computer system combined with software data that can be updated at any time further illustrates its underlying identity authentication method:

1)存储计算机随机携带的公用软件等软件，包括随机驱动程序文件，联机手册文件，BIOS镜像文件(BIOS image)，在线服务文件等各种软件，其包括以下步骤：1) storing software such as public software carried by the computer, including random driver files, online manual files, BIOS image files (BIOS image), online service files and other software, which includes the following steps:

11)预先设置整理需要随机存储的随机公用软件；11) Random public software that requires random storage is pre-set and sorted;

12)利用EFI的压缩功能，将需要存储于BIOS ROM的剩余空间，或者主机板上的扩展option ROM中的软件压缩形成独立的压缩文件；12) Use the compression function of EFI to compress the software that needs to be stored in the remaining space of the BIOS ROM, or in the extended option ROM on the motherboard to form an independent compressed file;

EFI shell中就带有压缩及解压缩命令，用户可以直接调用使用，生成压缩文件的后缀名不作限定，命令如下：There are compression and decompression commands in the EFI shell, users can call and use them directly, and the suffix name of the generated compressed file is not limited. The commands are as follows:

EfiCompress Infile OutfileEfiCompress Infile Outfile

EfiDecompress Infile OutfileEfiDecompress Infile Outfile

其核心是用一个固定的压缩及解压缩算法，将指定输入文件进行压缩，并输出到新的文件名中，其直接利用EFI压缩功能，不用再另行编写代码，增加附加存储空间。Its core is to use a fixed compression and decompression algorithm to compress the specified input file and output it to a new file name. It directly uses the EFI compression function, and does not need to write additional codes to increase additional storage space.

13)将所述压缩文件打包形成独立的EFI FV文件，存储于BIOS ROM7的剩余空间，或者主机板上的扩展option ROM5；13) The compressed file is packaged to form an independent EFI FV file, which is stored in the remaining space of the BIOS ROM7, or the expansion option ROM5 on the motherboard;

14)将其它的软件直接加密存储在具有保护区域硬盘6，或者通过USB接口连接的具有访问控制功能的USB盘中的一种或者多种存贮器中。14) Other software is directly encrypted and stored in one or more types of storage in the hard disk 6 with the protected area, or in the USB disk with access control function connected through the USB interface.

2)如图3所示，用户按下计算机的POWER ON按钮后，在EFI BIOS自检完成后，读写并运行EFI软件管理器触发模块22，在显示器上给用户提示按下特定功能键可以进入更新软件的信息，如果用户在T时间内不按下特定功能键，则直接进入启动操作系统阶段；否则，当用户按下特定功能键时，启动进入EFI软件管理器模块21；2) As shown in Figure 3, after the user presses the POWER ON button of the computer, after the EFI BIOS self-test is completed, read and write and run the EFI softwaremanager trigger module 22, and prompt the user on the display to press a specific function key. Enter the update software information, if the user does not press the specific function key within T time, then directly enter the stage of starting the operating system; otherwise, when the user presses the specific function key, start and enter the EFIsoftware manager module 21;

21)其中，对存储有EFI镜像文件和随机公用软件的读写包括如下过程：21) Wherein, the reading and writing of storing EFI image file and random public software includes the following process:

211)将随机公用软件独立封装成标准格式的单独FV(FV：FirmwareVolumn，相当于文件系统)文件，通过EFI提供的FV文件访问接口进行访问。211) Independently package the random public software into an individual FV (FV: FirmwareVolumn, equivalent to a file system) file in a standard format, and access it through the FV file access interface provided by EFI.

一个本发明支持的EFI BIOS的存储布局如图7所示，将公用软件独立封装成标准格式的单独FV文件：Fv_data卷文件，增加的Fv_data卷文件存放在BIOS ROM的剩余空间内，其中的多个FV File子模块即为不同的公用软件数据文件。然后通过EFI提供的FV文件访问接口进行访问。The storage layout of an EFI BIOS supported by the present invention is as shown in Figure 7, the independent FV file that public software is packaged into standard format: Fv_data volume file, the Fv_data volume file that increases is stored in the remaining space of BIOS ROM, wherein many Each FV File submodule is a different public software data file. Then access it through the FV file access interface provided by EFI.

EFI提供的FV文件访问接口可以参照EFI Framework规范：《IntelPlatform Innovation Framework for EFI Firmware Volume Specification》Version0.9 September 16，2003。The FV file access interface provided by EFI can refer to the EFI Framework specification: "IntelPlatform Innovation Framework for EFI Firmware Volume Specification" Version0.9 September 16, 2003.

212)将公用软件独立封装成单独FV文件，然后通过EFI软件管理器21支持的接口进行访问。212) Independently package the public software into a separate FV file, and then access it through the interface supported by theEFI software manager 21.

图8是Fv_dara的单独Firmware卷格式示意图。按照EFI规范定义，FV卷应该由多个文件Section组成，如图8，Fv_data卷由多个叶节点类型的Section(leaf Section)组成，每个Section有自己标准定义的Section Header，接下来的部分应该是Section data(例如可以是压缩的文件数据)，本发明的格式将Section data通过“预定义的加密算法”进行了加密，并封装了文件头(例如但不局限于：附加支持安全加密CRC校验文件头)。通过EFI标准FV写指令接口实现将预先合成的上述格式的FV_data文件写入BIOS ROM存储空间内。Figure 8 is a schematic diagram of the separate Firmware volume format of Fv_dara. According to the definition of the EFI specification, the FV volume should be composed of multiple file sections, as shown in Figure 8, the Fv_data volume is composed of multiple leaf node type Sections (leaf Section), each Section has its own standard defined Section Header, and the next part It should be Section data (for example, it can be compressed file data), the format of the present invention encrypts Section data through "pre-defined encryption algorithm", and encapsulates the file header (such as but not limited to: additional support for secure encryption CRC Verify file header). Write the pre-synthesized FV_data file in the above format into the BIOS ROM storage space through the EFI standard FV write command interface.

本发明所提供的读写访问接口是在EFI BIOS的FV：Firmware Volume标准访问接口上的扩充，其扩充接口为这些软件数据的访问提供了更优及更安全的访问。图8中“自定义Header”在标准FV文件定义中是不存在的，可以是通过加密算法计算的文件头数据.这样，只有本发明的方法提供的公用软件管理器才能识别该公用软件FV格式，其它的通用访问形式由于不识别其特殊文件头设计，不能有效访问，从而达到对特有部分的安全保护设计。The read-write access interface provided by the present invention is an expansion on the FV: Firmware Volume standard access interface of EFI BIOS, and its expansion interface provides better and safer access for the access of these software data. "Custom Header" in Fig. 8 does not exist in standard FV file definition, can be the file header data calculated by encryption algorithm. Like this, only the public software manager that the method of the present invention provides can recognize this public software FV format , other common access forms cannot effectively access because they do not recognize the special file header design, so as to achieve the security protection design for the unique part.

本发明所提供的对FV_data卷的读访问操作流程图9所示：The read access operation flow chart 9 of the FV_data volume provided by the present invention is as follows:

a)系统首先定位FV_data卷，即FV_data文件系统；a) The system first locates the FV_data volume, that is, the FV_data file system;

b)获得FV_data卷的下一个文件；b) Obtain the next file of the FV_data volume;

c)获取FVFile Section，得到File Section Data部分的数据；c) Obtain FVFile Section and get the data of File Section Data;

d)分析c)得到的File Section Data部分的数据，获得自定义文件表头；d) Analyze the data in the File Section Data part obtained in c) to obtain the custom file header;

e)比较表头中存储的文件名，是否为要读取的文件：如果不是，则返回步骤b)；e) compare the file name stored in the header, whether it is the file to be read: if not, then return to step b);

f)如果是，则读取该文件的加密文件数据部分；f) if yes, then read the encrypted file data part of the file;

g)根据预定义的加解密算法解密文件数据，得到解密的文件数据。g) Decrypt the file data according to a predefined encryption and decryption algorithm to obtain the decrypted file data.

由此可见，只有实现该接口的本专利EFI软件管理器21才知道其设计格式，可以有效访问到存储在EFI BIOS软件数据。其它通用接口无法访问。This shows that only this patentEFI software manager 21 that realizes this interface just knows its design format, can effectively visit and be stored in EFI BIOS software data. Other common interfaces cannot be accessed.

3)EFI软件管理器显示软件更新操作界面，如图5所示，所述的文件包括驱动程序，联机手册文件，BIOS镜像文件(BIOS image)，在线服务文件等各种软件。3) EFI software manager displays software update operation interface, as shown in Figure 5, described file comprises various softwares such as driver program, online manual file, BIOS image file (BIOS image), online service file.

31)用户选择远程更新文件功能时，启动网络连接功能模块11，网络连接功能模块11首先判断EFI是否已经加载网络协议，如果没有加载，就加载所需的网络协议，如果发现EFI已经加载网络协议，则不需要加载网络协议，建立网络连接。31) When the user selects the remote update file function, start the networkconnection function module 11, the networkconnection function module 11 first judges whether the EFI has loaded the network protocol, if not loaded, just load the required network protocol, if it is found that the EFI has loaded the network protocol , there is no need to load the network protocol and establish a network connection.

较佳地，本实施例采用基于安全保障的网络功能优化定制处理：EFI的网络功能只是支持了网络协议的基本功能，限定用户访问网址为所述软件下载网址位置，禁止访其它网址位置，保证不受其它网址的安全威胁，同时不支持不必要的网络端口访问功能，关闭其它不必要的网络连接途径。该方法既可以很好的满足应用需求，又可以有效杜绝其它网络安全漏洞，直接针对计算机供货商的售后服务策略，有效提升了产品品质；Preferably, the present embodiment adopts the network function optimization and customization process based on security: the network function of EFI has only supported the basic functions of the network protocol, and the user's access website is limited to the location of the software download website, and other website locations are prohibited from visiting, ensuring It is not subject to security threats from other websites, and does not support unnecessary network port access functions, and closes other unnecessary network connection methods. This method can not only meet the application requirements well, but also effectively eliminate other network security loopholes, directly targeting the after-sales service strategy of computer suppliers, and effectively improving product quality;

32)启动软件更新模块，判断本地软件是否有可更新的版本，显示可更新文件列表，用户更新时，选择需要更新的文件，下载更新软件；32) Start the software update module, judge whether the local software has an updatable version, display the updatable file list, when the user updates, select the file that needs to be updated, and download the update software;

可更新文件列表如表1所示：The updateable file list is shown in Table 1:

表1Table 1

文件名称 file name 本地版本号local version number 服务器端版本号The server version number 更新标志update flag 联机手册文件The onlinemanual file 1000000010000000 1000000110000001 VVBIOS镜像文件BIOS image file10000000100000001000000010000000无none WinXP网卡驱动WinXPnetwork card driver 1000000010000000 1000000310000003 VV

33)关闭网络连接，结束本次更新，返回EFI软件管理器21；33) close the network connection, end this update, and return to theEFI software manager 21;

4)如图6所示，用户选择文件拷贝时，启动软件文件拷贝模块，弹出窗口可以选择拷贝的位置，例如：软驱或者移动U盘，用户选择后进行拷贝操作。4) As shown in Figure 6, when the user selects the file copy, start the software file copy module, a pop-up window can select the location of the copy, for example: a floppy drive or a mobile U disk, and the user selects and performs the copy operation.

5)结束运行EFI软件管理器，返回后重新启动计算机。5) Finish running the EFI software manager, restart the computer after returning.

如图4所示，远程服务器可以按以下步骤工作：As shown in Figure 4, the remote server can work as follows:

1)远程服务器启动；1) The remote server starts;

2)等待客户端建立网络连接；2) Waiting for the client to establish a network connection;

3)如果有客户端连接请求，则和客户端建立网络连接；3) If there is a client connection request, establish a network connection with the client;

4)和客户端比较软件的版本是否一致；4) Whether the version of the comparison software is consistent with that of the client;

5)将比较结果传送给客户端；5) Send the comparison result to the client;

6)是否得到客户端更新请求；6) whether to get the client update request;

7)如果是，则进行远程更新，；否则，直接关闭本次网络连接，返回步骤2)等待下一次客户端建立网络连接请求。7) If yes, perform remote update; otherwise, directly close the current network connection, return to step 2) and wait for the next request from the client to establish a network connection.

本发明是一种实用性和适用性较强的软件动态存储更新及下载方法，是在EFI BIOS层面上扩展实现的方法，它无需任何硬件支持，和计算机绑定集成，适合于操作系统尚未安装或崩溃的应用环境，是一种实用性较好的发明方法。其提供稳定可靠的随机存储效果，无需任何光盘、软盘等外部存储载体，有效的保证了公用软件存储载体不易遗失的特点。采用与主机硬件绑定的部署方法，大大提升了主机整体品牌形象。无需操作系统支持的安全远程网络软件更新功能，充分利用EFI的网络功能，并对该网络功能进行优化定制处理，限制访问固定网络位置，并且不支持不必要的网络端口访问，使得该网络功能具备高于操作系统之上实现的安全性。对系统厂商而言，该发明可以有效提高系统的自维护性，增强系统的强壮性，作为一种系统维护有效手段，可以有效的减少上门维修的次数，降低售后服务成本。并可以直接针对计算机供货商的售后服务策略，有效提升了产品品质。The present invention is a method for dynamic storage, updating and downloading of software with strong practicability and applicability. It is a method extended and implemented on the EFI BIOS level. It does not need any hardware support and is bound and integrated with a computer. It is suitable for operating systems that have not yet been installed. Or collapsed application environment, is a more practical invention method. It provides a stable and reliable random storage effect, without any external storage media such as optical discs and floppy disks, effectively ensuring that the public software storage media is not easy to lose. The deployment method bound to the host hardware greatly improves the overall brand image of the host. The secure remote network software update function without the support of the operating system makes full use of the network function of EFI, and optimizes and customizes the network function, restricts access to fixed network locations, and does not support unnecessary network port access, making the network function available Higher than the security implemented on top of the operating system. For system manufacturers, the invention can effectively improve the self-maintenance of the system and enhance the robustness of the system. As an effective means of system maintenance, it can effectively reduce the number of door-to-door maintenance and reduce the cost of after-sales service. And it can directly target the computer supplier's after-sales service strategy, effectively improving product quality.