Movatterモバイル変換


[0]ホーム

URL:


CN102110007B - A BIOS/UEFI and virtual machine monitor interaction method and system - Google Patents

A BIOS/UEFI and virtual machine monitor interaction method and system
Download PDF

Info

Publication number
CN102110007B
CN102110007BCN200910239094.7ACN200910239094ACN102110007BCN 102110007 BCN102110007 BCN 102110007BCN 200910239094 ACN200910239094 ACN 200910239094ACN 102110007 BCN102110007 BCN 102110007B
Authority
CN
China
Prior art keywords
uefi
hard disk
bios
virtual machine
monitor
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN200910239094.7A
Other languages
Chinese (zh)
Other versions
CN102110007A (en
Inventor
宋靖
贾兵
林诗达
王淼
刘欣房
顾文锦
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Great Wall Technology Group Co ltd
Original Assignee
China Great Wall Computer Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Great Wall Computer Shenzhen Co LtdfiledCriticalChina Great Wall Computer Shenzhen Co Ltd
Priority to CN200910239094.7ApriorityCriticalpatent/CN102110007B/en
Publication of CN102110007ApublicationCriticalpatent/CN102110007A/en
Application grantedgrantedCritical
Publication of CN102110007BpublicationCriticalpatent/CN102110007B/en
Expired - Fee Relatedlegal-statusCriticalCurrent
Anticipated expirationlegal-statusCritical

Links

Images

Landscapes

Abstract

The invention is suitable for the technical field of computers, and provides an interaction method and system for BIOS/UEFI and a virtual machine monitor. The method comprises the steps: controlling BIOS/UEFI to call the corresponding initial code of the virtual machine monitor in a read-only memory when the system is powered on; decompressing and loading the corresponding initial code of the virtual machine monitor to a fixed preset address of a memory to make the virtual machine monitor take over the computer control right, and executing remote call; controlling BIOS/UEFI to detect the state of a hard disc, and calling the virtual machine monitor to carry out user partition management on the hard disc or deploy the hard disc based on the detection result; and controlling to reassign the computer control right from the virtual machine monitor to the BIOS/UEFI, and executing the normal initialization operation of the computer system and loading a user operation system to achieve the operation of the BIOS/UEFI in the virtual machine monitor. Therefore, the method overcomes the disadvantage of expensive hard-encryption of the hard disc, and can monitor any access to the hard disc.

Description

A kind of BIOS/UEFI and monitor of virtual machine exchange method and system
Technical field
The invention belongs to field of computer technology, relate in particular to a kind of BIOS/UEFI and monitor of virtual machine exchange method and system.
Background technology
Along with the raising of the penetration of computer use, information security is extremely important, especially when a plurality of users use a computing machine, and each user's of safeguard protection that need to classify information data.Hard disk multi-user refers in the different ,Ge user partition, user partition of a hard disk partition of same computer and can independent timesharing use, and the data in each user partition isolate mutually, mutually can not be accessed.
Existing hard disk multi-user need to restart computing machine while creating, inconvenient operation, and there is the problem of the restriction of safe hard-disk capacity and the expensive cost of hard disk hardware encryption scheme.
Summary of the invention
The object of the embodiment of the present invention is to provide a kind of BIOS/UEFI and monitor of virtual machine exchange method, be intended to solve when existing hard disk multi-user creates and need to restart computing machine, inconvenient operation, and have that expensive cost, the data poke safety coefficient of hard disk hardware encryption scheme is low and terminal authentication rank is low and the problem of the audit of having no way of.
The embodiment of the present invention is achieved in that a kind of BIOS/UEFI and monitor of virtual machine exchange method, and described method comprises the steps:
When system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory);
The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call;
Control BIOS/UEFI disk state is detected, and according to testing result, call monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment;
Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
Another object of the embodiment of the present invention is to provide a kind of BIOS/UEFI and monitor of virtual machine interactive system, and described system is placed in computing machine, and described system comprises:
Initial code calling module, while powering on for system, controls the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory);
Initial code decompression module, for the corresponding initial code decompress(ion) of described monitor of virtual machine being loaded into the fixing default address of internal memory, takes over computer control by monitor of virtual machine and weighs, and carry out far call;
Hard disk management is disposed control module, for controlling BIOS/UEFI, disk state is detected, and according to testing result, calls monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment; And
Control is delivered processing module, for controlling, computer control power is handed to described BIOS/UEFI by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
In embodiments of the present invention, when system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory); The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call; Control monitor of virtual machine disk state is detected, and according to testing result, call monitor of virtual machine hard disk is managed; Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, the normal initialization of computer system operates and loads an operating system of user, realize the operation of BIOS/UEFI in monitor of virtual machine, and to the monitoring of any access of hard disk and encryption, solved the expensive defect of hard disk hardware encryption, data poke safety coefficient is high, facilitates user to audit, and guarantees computer security operation.
Accompanying drawing explanation
Fig. 1 is the BIOS/UEFI that provides of the embodiment of the present invention and the realization flow figure of monitor of virtual machine exchange method;
Fig. 2 is that the control BIOS/UEFI that the embodiment of the present invention provides detects disk state, and according to testing result, calls monitor of virtual machine and hard disk is carried out to the realization flow figure of user partition management or hard disk deployment;
Fig. 3 is the BIOS/UEFI that provides of the embodiment of the present invention and the structured flowchart of monitor of virtual machine interactive system;
Fig. 4 is that the hard disk management that the embodiment of the present invention provides is disposed the structured flowchart of control module.
Embodiment
In order to make object of the present invention, technical scheme and advantage clearer, below in conjunction with drawings and Examples, the present invention is further elaborated.Should be appreciated that specific embodiment described herein, only in order to explain the present invention, is not intended to limit the present invention.
In embodiments of the present invention, when system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory); The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call; Control monitor of virtual machine disk state is detected, and according to testing result, call monitor of virtual machine hard disk is managed; Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
In embodiments of the present invention, the execution of following embodiment is all that the management that realizes the storage medium multi-users such as the data encryption of the storage mediums such as hard disk and hard disk based on the auxiliary Intel Virtualization Technology of hardware (comprises user's establishment, deletion, encryption, the biological identity login authentication of BIOS level, user login and network log behavior auditing) basis on restriction is described, in this as enforcement of the present invention basis, repeat no more, but not in order to limit the present invention.
Fig. 1 shows BIOS/UEFI that the embodiment of the present invention provides and the realization flow of monitor of virtual machine exchange method, and its concrete step is as described below:
In step S101, when system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory).
In embodiments of the present invention, before carrying out this step, also need to carry out the initial code of monitor of virtual machine is integrated in to the step in the ROM (read-only memory) of BIOS, wherein, the integration mode of the initial code of monitor of virtual machine includes but not limited to OptionROM form.
In step S102, the corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, take over computer control and weigh, and carry out far call.
In embodiments of the present invention, described fixing default address can be the assigned address of internal memory, at this not in order to limit the present invention.
After the corresponding initial code decompress(ion) of monitor of virtual machine being loaded into the fixing default address of internal memory, carry out far call, for example load a virtual machine, at this, be only one embodiment of the present of invention, not in order to limit the present invention.
In step S103, control monitor of virtual machine disk state is detected, and according to testing result, call monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment.
In embodiments of the present invention, when virtual watch-dog unziped to interior in after, be equivalent to BIOS/UEFI moves in monitor of virtual machine, wherein, BIOS/UEFI controls monitor of virtual machine disk state is detected, confirm whether hard disk carried out deployment, if call monitor of virtual machine, create or delete hard disk user, controlled the management of hard disk user partition; Otherwise control monitor of virtual machine and complete hard disk deployment, following have specific embodiment to describe, and do not repeat them here, but not in order to limit the present invention.
In step S104, to control computer control power is handed to described BIOS/UEFI by monitor of virtual machine, the normal initialization of computer system operates and loads an operating system of user.
In embodiments of the present invention, when computer control power is handed to after BIOS/UEFI, BIOS/UEFI has controlled normal system initialization and operating system loader flow process.
The control BIOS/UEFI that Fig. 2 shows the embodiment of the present invention to be provided detects disk state, and according to testing result, calls monitor of virtual machine and hard disk is carried out to the realization flow of user partition management or hard disk deployment, and its concrete step is as described below:
In step S201, control monitor of virtual machine detection hard disk and whether dispose, be to perform step S202; Otherwise execution step S206.
In embodiments of the present invention; when BIOS/UEFI carries out the initial work of hard disk; monitor of virtual machine intercepting initialization directive; disk state is confirmed to detect; confirming whether current hard disk completes maps out the work, and wherein, detects and confirms that the mode of disk state can be monitor of virtual machine access hard disk; check whether hard disk exists two subregions of hard disk, i.e. BIOS/UEFI private partition and hiding protection subregion.
In step S202, control BIOS/UEFI and hard disk and carry out safety certification.
In embodiments of the present invention, prior art discloses the authentication of BIOS/UEFI and hard disk, do not repeat them here, but not in order to limit the present invention.
When hard disk deployment has completed, need computing machine to restart, carry out the safety certification of BIOS/UEFI and hard disk, only with completing this safety certification, the BIOS/UEFI private partition that monitor of virtual machine could be opened hard disk is used to BIOS/UEFI, now, BIOS/UEFI user just can be entered and in the hard disk management instrument of monitor of virtual machine, be created or delete user partition by security official role.
In step S203, judge whether described safety certification is passed through, be to perform step S204, otherwise execution step S205.
In step S204, according to user's BIOS/UEFI instruction, call monitor of virtual machine hard disk management instrument, create or delete hard disk user, controlled the management of hard disk user partition.
In embodiments of the present invention, when detecting hard disk, dispose, according to user's BIOS/UEFI instruction, calling monitor of virtual machine operates accordingly to hard disk, such as comprising the management that creates or delete the user partitions such as hard disk user, or, the operating system of user that user selects or installs started, do not repeat them here, but not in order to limit the present invention.
In embodiments of the present invention, above-mentioned steps S202 to S204 carries out the concrete steps of user partition management to hard disk.
In step S205, prompting platform is match information not.
In step S206, control monitor of virtual machine and in hard disk, divide hard disk hiding protection subregion and BIOS/UEFI private partition.
In embodiments of the present invention, the BIOS/UEFI private partition that monitor of virtual machine creates is in order to deposit the dress management tool of monitor of virtual machine and the picture library of BIOS/UEFI, and this private partition also comprises a special field, for storing BIOS/UEFI eigenwert.
In step S207, control BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI private partition.
In step S208, control BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI storage space.
In embodiments of the present invention, above-mentioned steps S206 to S208 carries out the specific implementation that hard disk is disposed.
In embodiments of the present invention, based on the auxiliary Intel Virtualization Technology of hardware, the realization of employing technique scheme is mutual to the management control of hard disk multi-user partition and monitor of virtual machine and BIOS/UEFI loading flow process, has solved the restriction of hard-disk capacity and the problem of cost.
Fig. 3 shows BIOS/UEFI that the embodiment of the present invention provides and the structured flowchart of monitor of virtual machine interactive system, for convenience of explanation, in figure, only provided the part relevant to the embodiment of the present invention, wherein, BIOS/UEFI and monitor of virtual machine interactive system can be built in software unit, hardware cell or the software and hardware combining unit of computing machine.
When system powers on, initial code calling module 11 is controlled the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory); Initialcode decompression module 12 is loaded into the corresponding initial code decompress(ion) of described monitor of virtual machine the fixing default address of internal memory, takes over computer control and weighs, and carry out far call by monitor of virtual machine; Hard disk management is disposedcontrol module 13 control BIOS/UEFI disk state is detected, and according to testing result, calls monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment; Control is deliveredprocessing module 14 controls computer control power is handed to described BIOS/UEFI by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
In embodiments of the present invention,integrated control module 15 is integrated in the initial code of monitor of virtual machine in the ROM (read-only memory) of BIOS, and described integration mode comprises OptionROM form.
As an alternative embodiment of the invention, as shown in Figure 4, whetherdetection module 131 is controlled monitor of virtual machine detection hard disk and is disposed; Whendetection module 131 detects hard disk, dispose, and after BIOS/UEFI and hard disk authenticate and pass through, userpartition administration module 132 has been controlled the user partition management of hard disk; Whendetection module 131 detects hard disk and do not dispose, harddisk deployment module 133 is controlled monitor of virtual machine hard disk is disposed.
In embodiments of the present invention, safetycertification control module 1321 control BIOS/UEFI and hard disk carry out safety certification;Judge module 1322 judges whether the safety certification of described safetycertification control module 1321 is passed through; When describedjudge module 1322 judgement safety certifications are passed through, hard disk user partitionmanagement control module 1323 is according to user's BIOS/UEFI instruction, call monitor of virtual machine hard disk management instrument, create or delete hard disk user, controlled the management of hard disk user partition; When describedjudge module 1322 judgement safety certifications are not passed through,reminding module 1324 prompting platforms are match information not.
As an alternative embodiment of the invention,minute Division module 1331 is controlled monitor of virtual machine and in hard disk, is divided hard disk protection subregion and BIOS/UEFI private partition; Thefirst writing module 1332 is controlled BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI private partition; Thesecond writing module 1333 is controlled BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI storage space.
Above are only the system and device structured flowchart that the embodiment of the present invention provides, for convenience of explanation, above-described embodiment has only been described relevant operation, and its concrete realization can be with reference to the described content of mode embodiment, do not repeat them here, but not in order to limit the present invention.
In embodiments of the present invention, when system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory); The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call; Control monitor of virtual machine disk state is detected, and according to testing result, call monitor of virtual machine hard disk is managed; Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, the normal initialization of computer system operates and loads an operating system of user, realize the operation of BIOS/UEFI in monitor of virtual machine, and the monitoring to any access of hard disk, solved the expensive defect of hard disk hardware encryption, data poke safety coefficient is high, guarantees computer security operation, facilitates user to audit.
The foregoing is only preferred embodiment of the present invention, not in order to limit the present invention, all any modifications of doing within the spirit and principles in the present invention, be equal to and replace and improvement etc., within all should being included in protection scope of the present invention.

Claims (10)

CN200910239094.7A2009-12-292009-12-29 A BIOS/UEFI and virtual machine monitor interaction method and systemExpired - Fee RelatedCN102110007B (en)

Priority Applications (1)

Application NumberPriority DateFiling DateTitle
CN200910239094.7ACN102110007B (en)2009-12-292009-12-29 A BIOS/UEFI and virtual machine monitor interaction method and system

Applications Claiming Priority (1)

Application NumberPriority DateFiling DateTitle
CN200910239094.7ACN102110007B (en)2009-12-292009-12-29 A BIOS/UEFI and virtual machine monitor interaction method and system

Publications (2)

Publication NumberPublication Date
CN102110007A CN102110007A (en)2011-06-29
CN102110007Btrue CN102110007B (en)2014-01-29

Family

ID=44174181

Family Applications (1)

Application NumberTitlePriority DateFiling Date
CN200910239094.7AExpired - Fee RelatedCN102110007B (en)2009-12-292009-12-29 A BIOS/UEFI and virtual machine monitor interaction method and system

Country Status (1)

CountryLink
CN (1)CN102110007B (en)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
US9311126B2 (en)*2011-07-272016-04-12Mcafee, Inc.System and method for virtual partition monitoring
CN104182691B (en)*2014-08-222017-07-21国家电网公司data encryption method and device
CN107291526A (en)*2016-03-312017-10-24天津青创科技有限公司A kind of BIOS and monitor of virtual machine interactive system
EP3458955B1 (en)*2016-10-182022-06-15Hewlett-Packard Development Company, L.P.Operating system installations via radio frequency identification chips
US20180300259A1 (en)*2017-04-122018-10-18Quanta Computer Inc.Local disks erasing mechanism for pooled physical resources
CN109002346B (en)*2018-07-102022-04-15广东微云科技股份有限公司 A kind of conversion method of Windows virtual machine boot program
CN109710319B (en)*2018-12-062022-07-19郑州云海信息技术有限公司 A method and system for identifying a computer in-place hard disk
CN113900722A (en)*2021-10-212022-01-07深圳忆联信息系统有限公司 Automatic deployment method, device, computer equipment and storage medium of Xinchuang platform

Citations (4)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN1916854A (en)*2005-08-192007-02-21联想(北京)有限公司System the method for managing and configuring virtual machine
CN101000566A (en)*2006-01-122007-07-18三星电子株式会社Operating system switching device and operating system switching method
CN101373441A (en)*2008-09-192009-02-25苏州壹世通科技有限公司 A Firmware-Based Virtualization Platform System
CN101493781A (en)*2008-01-242009-07-29中国长城计算机深圳股份有限公司Virtual machine system and start-up method thereof

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN1916854A (en)*2005-08-192007-02-21联想(北京)有限公司System the method for managing and configuring virtual machine
CN101000566A (en)*2006-01-122007-07-18三星电子株式会社Operating system switching device and operating system switching method
CN101493781A (en)*2008-01-242009-07-29中国长城计算机深圳股份有限公司Virtual machine system and start-up method thereof
CN101373441A (en)*2008-09-192009-02-25苏州壹世通科技有限公司 A Firmware-Based Virtualization Platform System

Also Published As

Publication numberPublication date
CN102110007A (en)2011-06-29

Similar Documents

PublicationPublication DateTitle
CN102110007B (en) A BIOS/UEFI and virtual machine monitor interaction method and system
US10754957B2 (en)Non-transitory computer readable medium for creating a virtual machine manager
US9450966B2 (en)Method and apparatus for lifecycle integrity verification of virtual machines
US7555568B2 (en)Method and apparatus for operating a host computer from a portable apparatus
CN105308612B (en)The dynamic load measuring environment started for security code
US9183606B1 (en)Trusted processing location within a graphics processing unit
US8909940B2 (en)Extensible pre-boot authentication
US8667607B2 (en)Trusted security zone access to peripheral devices
CN101529376B (en)Platform authentication via transparent helper factors
CN110457894B (en)root authority distribution method and device, storage medium and terminal equipment
US12099610B2 (en)Dynamic application deployment in trusted code environments
US20180365412A1 (en)Time limited application enablement
CN102314373A (en)Method for realizing safe working environment based on virtualization technology
CN106406944A (en)Control method and system for forbidding self-starting of application
CN101025770A (en)Method for starting protected partition
CN102110059A (en)Access method and system for multi-user hard disk data
WO2009018366A1 (en)Method and apparatus for lifecycle integrity verification of virtual machines
US20220147634A1 (en)Client authentication and data management system
CN104182349A (en)Information processing method and electronic device
CN111988383B (en) A method and device for verifying application startup microservice governance conditions
TWI716320B (en) Security task processing method, device, electronic equipment and storage medium
Xue et al.Isolating host environment by booting android from OTG devices
EP3281142B1 (en)Apparatus with test execution environment
CN102857335B (en)The filter method of electric power safety cloud terminal communication based on hashing algorithm and system
CN118211225A (en)Security architecture system, method for realizing secure and trusted starting and computing device

Legal Events

DateCodeTitleDescription
C06Publication
PB01Publication
C10Entry into substantive examination
SE01Entry into force of request for substantive examination
C14Grant of patent or utility model
GR01Patent grant
CP01Change in the name or title of a patent holder
CP01Change in the name or title of a patent holder

Address after:518057 computer building of the Great Wall, Nanshan District science and Technology Park, Shenzhen, Guangdong

Patentee after:CHINA GREAT WALL TECHNOLOGY GROUP Co.,Ltd.

Address before:518057 computer building of the Great Wall, Nanshan District science and Technology Park, Shenzhen, Guangdong

Patentee before:CHINA GREATWALL COMPUTER SHENZHEN Co.,Ltd.

CF01Termination of patent right due to non-payment of annual fee
CF01Termination of patent right due to non-payment of annual fee

Granted publication date:20140129


[8]ページ先頭

©2009-2025 Movatter.jp