Summary of the invention
The object of the embodiment of the present invention is to provide a kind of BIOS/UEFI and monitor of virtual machine exchange method, be intended to solve when existing hard disk multi-user creates and need to restart computing machine, inconvenient operation, and have that expensive cost, the data poke safety coefficient of hard disk hardware encryption scheme is low and terminal authentication rank is low and the problem of the audit of having no way of.
The embodiment of the present invention is achieved in that a kind of BIOS/UEFI and monitor of virtual machine exchange method, and described method comprises the steps:
When system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory);
The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call;
Control BIOS/UEFI disk state is detected, and according to testing result, call monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment;
Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
Another object of the embodiment of the present invention is to provide a kind of BIOS/UEFI and monitor of virtual machine interactive system, and described system is placed in computing machine, and described system comprises:
Initial code calling module, while powering on for system, controls the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory);
Initial code decompression module, for the corresponding initial code decompress(ion) of described monitor of virtual machine being loaded into the fixing default address of internal memory, takes over computer control by monitor of virtual machine and weighs, and carry out far call;
Hard disk management is disposed control module, for controlling BIOS/UEFI, disk state is detected, and according to testing result, calls monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment; And
Control is delivered processing module, for controlling, computer control power is handed to described BIOS/UEFI by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
In embodiments of the present invention, when system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory); The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call; Control monitor of virtual machine disk state is detected, and according to testing result, call monitor of virtual machine hard disk is managed; Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, the normal initialization of computer system operates and loads an operating system of user, realize the operation of BIOS/UEFI in monitor of virtual machine, and to the monitoring of any access of hard disk and encryption, solved the expensive defect of hard disk hardware encryption, data poke safety coefficient is high, facilitates user to audit, and guarantees computer security operation.
Embodiment
In order to make object of the present invention, technical scheme and advantage clearer, below in conjunction with drawings and Examples, the present invention is further elaborated.Should be appreciated that specific embodiment described herein, only in order to explain the present invention, is not intended to limit the present invention.
In embodiments of the present invention, when system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory); The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call; Control monitor of virtual machine disk state is detected, and according to testing result, call monitor of virtual machine hard disk is managed; Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
In embodiments of the present invention, the execution of following embodiment is all that the management that realizes the storage medium multi-users such as the data encryption of the storage mediums such as hard disk and hard disk based on the auxiliary Intel Virtualization Technology of hardware (comprises user's establishment, deletion, encryption, the biological identity login authentication of BIOS level, user login and network log behavior auditing) basis on restriction is described, in this as enforcement of the present invention basis, repeat no more, but not in order to limit the present invention.
Fig. 1 shows BIOS/UEFI that the embodiment of the present invention provides and the realization flow of monitor of virtual machine exchange method, and its concrete step is as described below:
In step S101, when system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory).
In embodiments of the present invention, before carrying out this step, also need to carry out the initial code of monitor of virtual machine is integrated in to the step in the ROM (read-only memory) of BIOS, wherein, the integration mode of the initial code of monitor of virtual machine includes but not limited to OptionROM form.
In step S102, the corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, take over computer control and weigh, and carry out far call.
In embodiments of the present invention, described fixing default address can be the assigned address of internal memory, at this not in order to limit the present invention.
After the corresponding initial code decompress(ion) of monitor of virtual machine being loaded into the fixing default address of internal memory, carry out far call, for example load a virtual machine, at this, be only one embodiment of the present of invention, not in order to limit the present invention.
In step S103, control monitor of virtual machine disk state is detected, and according to testing result, call monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment.
In embodiments of the present invention, when virtual watch-dog unziped to interior in after, be equivalent to BIOS/UEFI moves in monitor of virtual machine, wherein, BIOS/UEFI controls monitor of virtual machine disk state is detected, confirm whether hard disk carried out deployment, if call monitor of virtual machine, create or delete hard disk user, controlled the management of hard disk user partition; Otherwise control monitor of virtual machine and complete hard disk deployment, following have specific embodiment to describe, and do not repeat them here, but not in order to limit the present invention.
In step S104, to control computer control power is handed to described BIOS/UEFI by monitor of virtual machine, the normal initialization of computer system operates and loads an operating system of user.
In embodiments of the present invention, when computer control power is handed to after BIOS/UEFI, BIOS/UEFI has controlled normal system initialization and operating system loader flow process.
The control BIOS/UEFI that Fig. 2 shows the embodiment of the present invention to be provided detects disk state, and according to testing result, calls monitor of virtual machine and hard disk is carried out to the realization flow of user partition management or hard disk deployment, and its concrete step is as described below:
In step S201, control monitor of virtual machine detection hard disk and whether dispose, be to perform step S202; Otherwise execution step S206.
In embodiments of the present invention; when BIOS/UEFI carries out the initial work of hard disk; monitor of virtual machine intercepting initialization directive; disk state is confirmed to detect; confirming whether current hard disk completes maps out the work, and wherein, detects and confirms that the mode of disk state can be monitor of virtual machine access hard disk; check whether hard disk exists two subregions of hard disk, i.e. BIOS/UEFI private partition and hiding protection subregion.
In step S202, control BIOS/UEFI and hard disk and carry out safety certification.
In embodiments of the present invention, prior art discloses the authentication of BIOS/UEFI and hard disk, do not repeat them here, but not in order to limit the present invention.
When hard disk deployment has completed, need computing machine to restart, carry out the safety certification of BIOS/UEFI and hard disk, only with completing this safety certification, the BIOS/UEFI private partition that monitor of virtual machine could be opened hard disk is used to BIOS/UEFI, now, BIOS/UEFI user just can be entered and in the hard disk management instrument of monitor of virtual machine, be created or delete user partition by security official role.
In step S203, judge whether described safety certification is passed through, be to perform step S204, otherwise execution step S205.
In step S204, according to user's BIOS/UEFI instruction, call monitor of virtual machine hard disk management instrument, create or delete hard disk user, controlled the management of hard disk user partition.
In embodiments of the present invention, when detecting hard disk, dispose, according to user's BIOS/UEFI instruction, calling monitor of virtual machine operates accordingly to hard disk, such as comprising the management that creates or delete the user partitions such as hard disk user, or, the operating system of user that user selects or installs started, do not repeat them here, but not in order to limit the present invention.
In embodiments of the present invention, above-mentioned steps S202 to S204 carries out the concrete steps of user partition management to hard disk.
In step S205, prompting platform is match information not.
In step S206, control monitor of virtual machine and in hard disk, divide hard disk hiding protection subregion and BIOS/UEFI private partition.
In embodiments of the present invention, the BIOS/UEFI private partition that monitor of virtual machine creates is in order to deposit the dress management tool of monitor of virtual machine and the picture library of BIOS/UEFI, and this private partition also comprises a special field, for storing BIOS/UEFI eigenwert.
In step S207, control BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI private partition.
In step S208, control BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI storage space.
In embodiments of the present invention, above-mentioned steps S206 to S208 carries out the specific implementation that hard disk is disposed.
In embodiments of the present invention, based on the auxiliary Intel Virtualization Technology of hardware, the realization of employing technique scheme is mutual to the management control of hard disk multi-user partition and monitor of virtual machine and BIOS/UEFI loading flow process, has solved the restriction of hard-disk capacity and the problem of cost.
Fig. 3 shows BIOS/UEFI that the embodiment of the present invention provides and the structured flowchart of monitor of virtual machine interactive system, for convenience of explanation, in figure, only provided the part relevant to the embodiment of the present invention, wherein, BIOS/UEFI and monitor of virtual machine interactive system can be built in software unit, hardware cell or the software and hardware combining unit of computing machine.
When system powers on, initial code calling module 11 is controlled the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory); Initialcode decompression module 12 is loaded into the corresponding initial code decompress(ion) of described monitor of virtual machine the fixing default address of internal memory, takes over computer control and weighs, and carry out far call by monitor of virtual machine; Hard disk management is disposedcontrol module 13 control BIOS/UEFI disk state is detected, and according to testing result, calls monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment; Control is deliveredprocessing module 14 controls computer control power is handed to described BIOS/UEFI by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
In embodiments of the present invention,integrated control module 15 is integrated in the initial code of monitor of virtual machine in the ROM (read-only memory) of BIOS, and described integration mode comprises OptionROM form.
As an alternative embodiment of the invention, as shown in Figure 4, whetherdetection module 131 is controlled monitor of virtual machine detection hard disk and is disposed; Whendetection module 131 detects hard disk, dispose, and after BIOS/UEFI and hard disk authenticate and pass through, userpartition administration module 132 has been controlled the user partition management of hard disk; Whendetection module 131 detects hard disk and do not dispose, harddisk deployment module 133 is controlled monitor of virtual machine hard disk is disposed.
In embodiments of the present invention, safetycertification control module 1321 control BIOS/UEFI and hard disk carry out safety certification;Judge module 1322 judges whether the safety certification of described safetycertification control module 1321 is passed through; When describedjudge module 1322 judgement safety certifications are passed through, hard disk user partitionmanagement control module 1323 is according to user's BIOS/UEFI instruction, call monitor of virtual machine hard disk management instrument, create or delete hard disk user, controlled the management of hard disk user partition; When describedjudge module 1322 judgement safety certifications are not passed through,reminding module 1324 prompting platforms are match information not.
As an alternative embodiment of the invention,minute Division module 1331 is controlled monitor of virtual machine and in hard disk, is divided hard disk protection subregion and BIOS/UEFI private partition; Thefirst writing module 1332 is controlled BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI private partition; Thesecond writing module 1333 is controlled BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI storage space.
Above are only the system and device structured flowchart that the embodiment of the present invention provides, for convenience of explanation, above-described embodiment has only been described relevant operation, and its concrete realization can be with reference to the described content of mode embodiment, do not repeat them here, but not in order to limit the present invention.
In embodiments of the present invention, when system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory); The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call; Control monitor of virtual machine disk state is detected, and according to testing result, call monitor of virtual machine hard disk is managed; Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, the normal initialization of computer system operates and loads an operating system of user, realize the operation of BIOS/UEFI in monitor of virtual machine, and the monitoring to any access of hard disk, solved the expensive defect of hard disk hardware encryption, data poke safety coefficient is high, guarantees computer security operation, facilitates user to audit.
The foregoing is only preferred embodiment of the present invention, not in order to limit the present invention, all any modifications of doing within the spirit and principles in the present invention, be equal to and replace and improvement etc., within all should being included in protection scope of the present invention.