CN102110007B - Interaction method and system for BIOS/UEFI and virtual machine monitor - Google Patents

Interaction method and system for BIOS/UEFI and virtual machine monitor Download PDF

Info

Publication number
CN102110007B
CN102110007B CN200910239094.7A CN200910239094A CN102110007B CN 102110007 B CN102110007 B CN 102110007B CN 200910239094 A CN200910239094 A CN 200910239094A CN 102110007 B CN102110007 B CN 102110007B
Authority
CN
China
Prior art keywords
uefi
hard disk
bios
virtual machine
monitor
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN200910239094.7A
Other languages
Chinese (zh)
Other versions
CN102110007A (en
Inventor
宋靖
贾兵
林诗达
王淼
刘欣房
顾文锦
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China the Great Wall science and technology group Limited by Share Ltd
Original Assignee
China Great Wall Computer Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Great Wall Computer Shenzhen Co Ltd filed Critical China Great Wall Computer Shenzhen Co Ltd
Priority to CN200910239094.7A priority Critical patent/CN102110007B/en
Publication of CN102110007A publication Critical patent/CN102110007A/en
Application granted granted Critical
Publication of CN102110007B publication Critical patent/CN102110007B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

The invention is suitable for the technical field of computers, and provides an interaction method and system for BIOS/UEFI and a virtual machine monitor. The method comprises the steps: controlling BIOS/UEFI to call the corresponding initial code of the virtual machine monitor in a read-only memory when the system is powered on; decompressing and loading the corresponding initial code of the virtual machine monitor to a fixed preset address of a memory to make the virtual machine monitor take over the computer control right, and executing remote call; controlling BIOS/UEFI to detect the state of a hard disc, and calling the virtual machine monitor to carry out user partition management on the hard disc or deploy the hard disc based on the detection result; and controlling to reassign the computer control right from the virtual machine monitor to the BIOS/UEFI, and executing the normal initialization operation of the computer system and loading a user operation system to achieve the operation of the BIOS/UEFI in the virtual machine monitor. Therefore, the method overcomes the disadvantage of expensive hard-encryption of the hard disc, and can monitor any access to the hard disc.

Description

A kind of BIOS/UEFI and monitor of virtual machine exchange method and system
Technical field
The invention belongs to field of computer technology, relate in particular to a kind of BIOS/UEFI and monitor of virtual machine exchange method and system.
Background technology
Along with the raising of the penetration of computer use, information security is extremely important, especially when a plurality of users use a computing machine, and each user's of safeguard protection that need to classify information data.Hard disk multi-user refers in the different ,Ge user partition, user partition of a hard disk partition of same computer and can independent timesharing use, and the data in each user partition isolate mutually, mutually can not be accessed.
Existing hard disk multi-user need to restart computing machine while creating, inconvenient operation, and there is the problem of the restriction of safe hard-disk capacity and the expensive cost of hard disk hardware encryption scheme.
Summary of the invention
The object of the embodiment of the present invention is to provide a kind of BIOS/UEFI and monitor of virtual machine exchange method, be intended to solve when existing hard disk multi-user creates and need to restart computing machine, inconvenient operation, and have that expensive cost, the data poke safety coefficient of hard disk hardware encryption scheme is low and terminal authentication rank is low and the problem of the audit of having no way of.
The embodiment of the present invention is achieved in that a kind of BIOS/UEFI and monitor of virtual machine exchange method, and described method comprises the steps:
When system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory);
The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call;
Control BIOS/UEFI disk state is detected, and according to testing result, call monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment;
Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
Another object of the embodiment of the present invention is to provide a kind of BIOS/UEFI and monitor of virtual machine interactive system, and described system is placed in computing machine, and described system comprises:
Initial code calling module, while powering on for system, controls the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory);
Initial code decompression module, for the corresponding initial code decompress(ion) of described monitor of virtual machine being loaded into the fixing default address of internal memory, takes over computer control by monitor of virtual machine and weighs, and carry out far call;
Hard disk management is disposed control module, for controlling BIOS/UEFI, disk state is detected, and according to testing result, calls monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment; And
Control is delivered processing module, for controlling, computer control power is handed to described BIOS/UEFI by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
In embodiments of the present invention, when system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory); The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call; Control monitor of virtual machine disk state is detected, and according to testing result, call monitor of virtual machine hard disk is managed; Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, the normal initialization of computer system operates and loads an operating system of user, realize the operation of BIOS/UEFI in monitor of virtual machine, and to the monitoring of any access of hard disk and encryption, solved the expensive defect of hard disk hardware encryption, data poke safety coefficient is high, facilitates user to audit, and guarantees computer security operation.
Accompanying drawing explanation
Fig. 1 is the BIOS/UEFI that provides of the embodiment of the present invention and the realization flow figure of monitor of virtual machine exchange method;
Fig. 2 is that the control BIOS/UEFI that the embodiment of the present invention provides detects disk state, and according to testing result, calls monitor of virtual machine and hard disk is carried out to the realization flow figure of user partition management or hard disk deployment;
Fig. 3 is the BIOS/UEFI that provides of the embodiment of the present invention and the structured flowchart of monitor of virtual machine interactive system;
Fig. 4 is that the hard disk management that the embodiment of the present invention provides is disposed the structured flowchart of control module.
Embodiment
In order to make object of the present invention, technical scheme and advantage clearer, below in conjunction with drawings and Examples, the present invention is further elaborated.Should be appreciated that specific embodiment described herein, only in order to explain the present invention, is not intended to limit the present invention.
In embodiments of the present invention, when system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory); The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call; Control monitor of virtual machine disk state is detected, and according to testing result, call monitor of virtual machine hard disk is managed; Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
In embodiments of the present invention, the execution of following embodiment is all that the management that realizes the storage medium multi-users such as the data encryption of the storage mediums such as hard disk and hard disk based on the auxiliary Intel Virtualization Technology of hardware (comprises user's establishment, deletion, encryption, the biological identity login authentication of BIOS level, user login and network log behavior auditing) basis on restriction is described, in this as enforcement of the present invention basis, repeat no more, but not in order to limit the present invention.
Fig. 1 shows BIOS/UEFI that the embodiment of the present invention provides and the realization flow of monitor of virtual machine exchange method, and its concrete step is as described below:
In step S101, when system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory).
In embodiments of the present invention, before carrying out this step, also need to carry out the initial code of monitor of virtual machine is integrated in to the step in the ROM (read-only memory) of BIOS, wherein, the integration mode of the initial code of monitor of virtual machine includes but not limited to OptionROM form.
In step S102, the corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, take over computer control and weigh, and carry out far call.
In embodiments of the present invention, described fixing default address can be the assigned address of internal memory, at this not in order to limit the present invention.
After the corresponding initial code decompress(ion) of monitor of virtual machine being loaded into the fixing default address of internal memory, carry out far call, for example load a virtual machine, at this, be only one embodiment of the present of invention, not in order to limit the present invention.
In step S103, control monitor of virtual machine disk state is detected, and according to testing result, call monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment.
In embodiments of the present invention, when virtual watch-dog unziped to interior in after, be equivalent to BIOS/UEFI moves in monitor of virtual machine, wherein, BIOS/UEFI controls monitor of virtual machine disk state is detected, confirm whether hard disk carried out deployment, if call monitor of virtual machine, create or delete hard disk user, controlled the management of hard disk user partition; Otherwise control monitor of virtual machine and complete hard disk deployment, following have specific embodiment to describe, and do not repeat them here, but not in order to limit the present invention.
In step S104, to control computer control power is handed to described BIOS/UEFI by monitor of virtual machine, the normal initialization of computer system operates and loads an operating system of user.
In embodiments of the present invention, when computer control power is handed to after BIOS/UEFI, BIOS/UEFI has controlled normal system initialization and operating system loader flow process.
The control BIOS/UEFI that Fig. 2 shows the embodiment of the present invention to be provided detects disk state, and according to testing result, calls monitor of virtual machine and hard disk is carried out to the realization flow of user partition management or hard disk deployment, and its concrete step is as described below:
In step S201, control monitor of virtual machine detection hard disk and whether dispose, be to perform step S202; Otherwise execution step S206.
In embodiments of the present invention; when BIOS/UEFI carries out the initial work of hard disk; monitor of virtual machine intercepting initialization directive; disk state is confirmed to detect; confirming whether current hard disk completes maps out the work, and wherein, detects and confirms that the mode of disk state can be monitor of virtual machine access hard disk; check whether hard disk exists two subregions of hard disk, i.e. BIOS/UEFI private partition and hiding protection subregion.
In step S202, control BIOS/UEFI and hard disk and carry out safety certification.
In embodiments of the present invention, prior art discloses the authentication of BIOS/UEFI and hard disk, do not repeat them here, but not in order to limit the present invention.
When hard disk deployment has completed, need computing machine to restart, carry out the safety certification of BIOS/UEFI and hard disk, only with completing this safety certification, the BIOS/UEFI private partition that monitor of virtual machine could be opened hard disk is used to BIOS/UEFI, now, BIOS/UEFI user just can be entered and in the hard disk management instrument of monitor of virtual machine, be created or delete user partition by security official role.
In step S203, judge whether described safety certification is passed through, be to perform step S204, otherwise execution step S205.
In step S204, according to user's BIOS/UEFI instruction, call monitor of virtual machine hard disk management instrument, create or delete hard disk user, controlled the management of hard disk user partition.
In embodiments of the present invention, when detecting hard disk, dispose, according to user's BIOS/UEFI instruction, calling monitor of virtual machine operates accordingly to hard disk, such as comprising the management that creates or delete the user partitions such as hard disk user, or, the operating system of user that user selects or installs started, do not repeat them here, but not in order to limit the present invention.
In embodiments of the present invention, above-mentioned steps S202 to S204 carries out the concrete steps of user partition management to hard disk.
In step S205, prompting platform is match information not.
In step S206, control monitor of virtual machine and in hard disk, divide hard disk hiding protection subregion and BIOS/UEFI private partition.
In embodiments of the present invention, the BIOS/UEFI private partition that monitor of virtual machine creates is in order to deposit the dress management tool of monitor of virtual machine and the picture library of BIOS/UEFI, and this private partition also comprises a special field, for storing BIOS/UEFI eigenwert.
In step S207, control BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI private partition.
In step S208, control BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI storage space.
In embodiments of the present invention, above-mentioned steps S206 to S208 carries out the specific implementation that hard disk is disposed.
In embodiments of the present invention, based on the auxiliary Intel Virtualization Technology of hardware, the realization of employing technique scheme is mutual to the management control of hard disk multi-user partition and monitor of virtual machine and BIOS/UEFI loading flow process, has solved the restriction of hard-disk capacity and the problem of cost.
Fig. 3 shows BIOS/UEFI that the embodiment of the present invention provides and the structured flowchart of monitor of virtual machine interactive system, for convenience of explanation, in figure, only provided the part relevant to the embodiment of the present invention, wherein, BIOS/UEFI and monitor of virtual machine interactive system can be built in software unit, hardware cell or the software and hardware combining unit of computing machine.
When system powers on, initial code calling module 11 is controlled the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory); Initial code decompression module 12 is loaded into the corresponding initial code decompress(ion) of described monitor of virtual machine the fixing default address of internal memory, takes over computer control and weighs, and carry out far call by monitor of virtual machine; Hard disk management is disposed control module 13 control BIOS/UEFI disk state is detected, and according to testing result, calls monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment; Control is delivered processing module 14 controls computer control power is handed to described BIOS/UEFI by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
In embodiments of the present invention, integrated control module 15 is integrated in the initial code of monitor of virtual machine in the ROM (read-only memory) of BIOS, and described integration mode comprises OptionROM form.
As an alternative embodiment of the invention, as shown in Figure 4, whether detection module 131 is controlled monitor of virtual machine detection hard disk and is disposed; When detection module 131 detects hard disk, dispose, and after BIOS/UEFI and hard disk authenticate and pass through, user partition administration module 132 has been controlled the user partition management of hard disk; When detection module 131 detects hard disk and do not dispose, hard disk deployment module 133 is controlled monitor of virtual machine hard disk is disposed.
In embodiments of the present invention, safety certification control module 1321 control BIOS/UEFI and hard disk carry out safety certification; Judge module 1322 judges whether the safety certification of described safety certification control module 1321 is passed through; When described judge module 1322 judgement safety certifications are passed through, hard disk user partition management control module 1323 is according to user's BIOS/UEFI instruction, call monitor of virtual machine hard disk management instrument, create or delete hard disk user, controlled the management of hard disk user partition; When described judge module 1322 judgement safety certifications are not passed through, reminding module 1324 prompting platforms are match information not.
As an alternative embodiment of the invention, minute Division module 1331 is controlled monitor of virtual machine and in hard disk, is divided hard disk protection subregion and BIOS/UEFI private partition; The first writing module 1332 is controlled BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI private partition; The second writing module 1333 is controlled BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI storage space.
Above are only the system and device structured flowchart that the embodiment of the present invention provides, for convenience of explanation, above-described embodiment has only been described relevant operation, and its concrete realization can be with reference to the described content of mode embodiment, do not repeat them here, but not in order to limit the present invention.
In embodiments of the present invention, when system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory); The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call; Control monitor of virtual machine disk state is detected, and according to testing result, call monitor of virtual machine hard disk is managed; Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, the normal initialization of computer system operates and loads an operating system of user, realize the operation of BIOS/UEFI in monitor of virtual machine, and the monitoring to any access of hard disk, solved the expensive defect of hard disk hardware encryption, data poke safety coefficient is high, guarantees computer security operation, facilitates user to audit.
The foregoing is only preferred embodiment of the present invention, not in order to limit the present invention, all any modifications of doing within the spirit and principles in the present invention, be equal to and replace and improvement etc., within all should being included in protection scope of the present invention.

Claims (10)

1. BIOS/UEFI and a monitor of virtual machine exchange method, is characterized in that, described method comprises the steps:
When system powers on, control the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory);
The corresponding initial code decompress(ion) of described monitor of virtual machine is loaded into the fixing default address of internal memory, by monitor of virtual machine, takes over computer control and weigh, and carry out far call;
Control BIOS/UEFI disk state is detected, and according to testing result, call monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment;
Control is handed to described BIOS/UEFI by computer control power by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
2. the method for claim 1, is characterized in that, when described system powers on, the step that BIOS/UEFI calls the corresponding initial code of the pre-stored monitor of virtual machine in ROM (read-only memory) also comprises the steps: before
The initial code of monitor of virtual machine is integrated in the ROM (read-only memory) of BIOS, described integration mode comprises OptionROM form.
3. the method for claim 1, is characterized in that, described control BIOS/UEFI detects disk state, and according to testing result, calls monitor of virtual machine and hard disk is carried out to the step that user partition management or hard disk dispose specifically comprises the steps:
Whether control monitor of virtual machine disposes hard disk;
If so, after BIOS/UEFI and hard disk authenticate and pass through, controlled the user partition management of hard disk;
If not, controlling monitor of virtual machine disposes hard disk.
4. method as claimed in claim 3, is characterized in that, described after BIOS/UEFI and hard disk authenticate and pass through, the step of having controlled the user partition management of hard disk specifically comprises:
Control BIOS/UEFI and hard disk and carry out safety certification;
Judge whether described safety certification is passed through, if so,, according to user's BIOS/UEFI instruction, call monitor of virtual machine hard disk management instrument, create or delete hard disk user, controlled the management of hard disk user partition; Point out if not match information of platform.
5. method as claimed in claim 3, is characterized in that, the step that described control monitor of virtual machine is disposed hard disk specifically comprises the steps:
Control monitor of virtual machine and in hard disk, divide hard disk protection subregion and BIOS/UEFI private partition;
Control BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI private partition;
Control BIOS/UEFI and UEFI eigenwert is written to the ID address field of described BIOS/UEFI storage space.
6. BIOS/UEFI and a monitor of virtual machine interactive system, is characterized in that, described system is placed in computing machine, and described system comprises:
Initial code calling module, while powering on for system, controls the corresponding initial code that BIOS/UEFI calls the pre-stored monitor of virtual machine in ROM (read-only memory);
Initial code decompression module, for the corresponding initial code decompress(ion) of described monitor of virtual machine being loaded into the fixing default address of internal memory, takes over computer control by monitor of virtual machine and weighs, and carry out far call;
Hard disk management is disposed control module, for controlling BIOS/UEFI, disk state is detected, and according to testing result, calls monitor of virtual machine hard disk is carried out to user partition management or hard disk deployment; And
Control is delivered processing module, for controlling, computer control power is handed to described BIOS/UEFI by monitor of virtual machine, and the normal initialization of computer system operates and load an operating system of user.
7. system as claimed in claim 6, is characterized in that, described system also comprises:
Integrated control module, for the initial code of monitor of virtual machine being integrated in to the ROM (read-only memory) of BIOS, described integration mode comprises OptionROM form.
8. system as claimed in claim 6, is characterized in that, described hard disk management is disposed control module and specifically comprised:
Whether detection module, dispose for controlling monitor of virtual machine hard disk;
User partition administration module, for hard disk being detected and dispose when detection module, and after BIOS/UEFI and hard disk authenticates and pass through, has controlled the user partition of hard disk and has managed; And
Hard disk deployment module, while not disposing for hard disk detected when detection module, controls monitor of virtual machine hard disk is disposed.
9. system as claimed in claim 8, is characterized in that, described user partition administration module specifically comprises:
Safety certification control module, carries out safety certification for controlling BIOS/UEFI and hard disk;
Judge module, for judging whether the safety certification of described safety certification control module is passed through;
Hard disk user partition management control module, for when described judge module judgement safety certification is passed through, according to user's BIOS/UEFI instruction, call monitor of virtual machine hard disk management instrument, create or delete hard disk user, having controlled the management of hard disk user partition; And
Reminding module, for when described judge module judgement safety certification is not passed through, prompting platform is match information not.
10. system as claimed in claim 8, is characterized in that, described hard disk deployment module specifically comprises:
Divide Division module, for controlling monitor of virtual machine, at hard disk, divide hard disk protection subregion and BIOS/UEFI private partition;
The first writing module, is written to UEFI eigenwert the ID address field of described BIOS/UEFI private partition for controlling BIOS/UEFI; And
The second writing module, is written to UEFI eigenwert the ID address field of described BIOS/UEFI storage space for controlling BIOS/UEFI.
CN200910239094.7A 2009-12-29 2009-12-29 Interaction method and system for BIOS/UEFI and virtual machine monitor Active CN102110007B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN200910239094.7A CN102110007B (en) 2009-12-29 2009-12-29 Interaction method and system for BIOS/UEFI and virtual machine monitor

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN200910239094.7A CN102110007B (en) 2009-12-29 2009-12-29 Interaction method and system for BIOS/UEFI and virtual machine monitor

Publications (2)

Publication Number Publication Date
CN102110007A CN102110007A (en) 2011-06-29
CN102110007B true CN102110007B (en) 2014-01-29

Family

ID=44174181

Family Applications (1)

Application Number Title Priority Date Filing Date
CN200910239094.7A Active CN102110007B (en) 2009-12-29 2009-12-29 Interaction method and system for BIOS/UEFI and virtual machine monitor

Country Status (1)

Country Link
CN (1) CN102110007B (en)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9311126B2 (en) * 2011-07-27 2016-04-12 Mcafee, Inc. System and method for virtual partition monitoring
CN104182691B (en) * 2014-08-22 2017-07-21 国家电网公司 data encryption method and device
CN107291526A (en) * 2016-03-31 2017-10-24 天津青创科技有限公司 A kind of BIOS and monitor of virtual machine interactive system
US10949538B2 (en) * 2016-10-18 2021-03-16 Hewlett-Packard Development Company, L.P. Operating system installations using uniform resource locators from radio frequency identification chips
US20180300259A1 (en) * 2017-04-12 2018-10-18 Quanta Computer Inc. Local disks erasing mechanism for pooled physical resources
CN109002346B (en) * 2018-07-10 2022-04-15 广东微云科技股份有限公司 Conversion method of Windows virtual machine bootstrap program
CN109710319B (en) * 2018-12-06 2022-07-19 郑州云海信息技术有限公司 Method and system for identifying in-place hard disk of computer
CN113900722A (en) * 2021-10-21 2022-01-07 深圳忆联信息系统有限公司 Automatic deployment method and device of trust and creation platform, computer equipment and storage medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1916854A (en) * 2005-08-19 2007-02-21 联想(北京)有限公司 System the method for managing and configuring virtual machine
CN101000566A (en) * 2006-01-12 2007-07-18 三星电子株式会社 Operating system switching device and operating system switching method
CN101373441A (en) * 2008-09-19 2009-02-25 苏州壹世通科技有限公司 Virtual platform system based on firmware
CN101493781A (en) * 2008-01-24 2009-07-29 中国长城计算机深圳股份有限公司 Virtual machine system and start-up method thereof

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1916854A (en) * 2005-08-19 2007-02-21 联想(北京)有限公司 System the method for managing and configuring virtual machine
CN101000566A (en) * 2006-01-12 2007-07-18 三星电子株式会社 Operating system switching device and operating system switching method
CN101493781A (en) * 2008-01-24 2009-07-29 中国长城计算机深圳股份有限公司 Virtual machine system and start-up method thereof
CN101373441A (en) * 2008-09-19 2009-02-25 苏州壹世通科技有限公司 Virtual platform system based on firmware

Also Published As

Publication number Publication date
CN102110007A (en) 2011-06-29

Similar Documents

Publication Publication Date Title
CN102110007B (en) Interaction method and system for BIOS/UEFI and virtual machine monitor
US10140452B2 (en) Protecting computing devices from unauthorized access
US7555568B2 (en) Method and apparatus for operating a host computer from a portable apparatus
US8909940B2 (en) Extensible pre-boot authentication
US8667607B2 (en) Trusted security zone access to peripheral devices
CN101529376B (en) Platform authentication via a transparent second factor
US9613208B1 (en) Trusted security zone enhanced with trusted hardware drivers
US20120291094A9 (en) Method and apparatus for lifecycle integrity verification of virtual machines
US8417969B2 (en) Storage volume protection supporting legacy systems
US20090319806A1 (en) Extensible pre-boot authentication
CN102656561A (en) Information processing device, virtual machine generation method, and application distribution system
CN101165696A (en) Safety identification method based on safe computer
CN110457894B (en) root authority distribution method and device, storage medium and terminal equipment
CN112269547B (en) Active and controllable hard disk data deleting method and device without operating system
CN108021823A (en) Method, device and terminal for seamlessly running application program based on trusted execution environment
CN106406944A (en) Control method and system for forbidding self-starting of application
CN100504897C (en) Method for starting protected partition
CN103020501A (en) Access control method and access control device of user data
CN109815700A (en) Processing method and processing device, storage medium, the computer equipment of application program
US20220147634A1 (en) Client authentication and data management system
WO2009018366A1 (en) Method and apparatus for lifecycle integrity verification of virtual machines
CN102110059A (en) Access method and system for multi-user hard disk data
CN103413093B (en) A kind of XEN cloud platform virtual machine partition method based on internal memory isolation
Xue et al. Isolating host environment by booting android from OTG devices
CN103052060A (en) Method for improving information security of mobile terminal and mobile terminal

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CP01 Change in the name or title of a patent holder
CP01 Change in the name or title of a patent holder

Address after: 518057 computer building of the Great Wall, Nanshan District science and Technology Park, Shenzhen, Guangdong

Patentee after: China the Great Wall science and technology group Limited by Share Ltd

Address before: 518057 computer building of the Great Wall, Nanshan District science and Technology Park, Shenzhen, Guangdong

Patentee before: China Changcheng Computer Shenzhen Co., Ltd.