DE102013103234B4 - Method for a computer system, firmware for a computer system and computer system - Google Patents

Abstract

Method for a computer system (CS) with a storage drive (HD) and a non-volatile memory module (BST) for restoring data, comprising the steps of: backing up all data that at least one user of the computer system (CS) wishes to back up from the storage drive (HD) from the computer system (CS) to a connected storage service (CL); - Storing an identifier of the connected storage service (CL) and an identifier of the saved data in the non-volatile memory module (BST) of the computer system (CS); - Acquiring a recovery request by firmware (FW); and restoring the saved data from the storage service (CL) by the firmware (FW) on the basis of the identifier of the storage service (CL) and the identifier of the saved data after the recovery request has been detected.

Description

The invention relates to a method for a computer system for restoring data, a firmware for a computer system and a computer system.

Many computer systems, whether used for business or pleasure, store data that is considered important by one or more users. There is therefore a need to protect this data against accidents or failures. A common method for this is to carry out a so-called "backup". Here, data is copied from the computer systems to protect against data loss and, for example, saved on a data carrier, stored in a safe place and, in the event of a recovery, a so-called "restore", the data is written back from the data carrier to the computer system. This is supported by various software products.

The user manual from Fujitsu Technologies Solutions GmbH for the baseboard management controllers iRMC S2 and iRMC S3 describes an integrated LAN connection and an extended functionality of the controller. In this way, they offer comprehensive control of primary servers, regardless of the system status.

An English Wikipedia article on the subject of "Remote Backup Service" defines a "Remote, Online, Management Backup Service" as a service that provides a user with a system for backing up, storing and restoring computer data. These can be cloud services.

The object of the invention is to describe an improved method for restoring data for a computer system and devices suitable therefor.

• - Sichern von allen Daten, die wenigstens ein Benutzer des Computersystems zu sichern wünscht, von dem Speicherlaufwerk von dem Computersystem auf einen verbundenen Speicherdienst;
• - Speichern einer Kennung des verbundenen Speicherdienstes und einer Kennung der gesicherten Daten in dem nichtflüchtigen Speicherbaustein des Computersystems;
• - Erfassen einer Wiederherstellungsanforderung durch eine Firmware; und
• - Wiederherstellen der gesicherten Daten von dem Speicherdienst durch die Firmware anhand der Kennung des verbundenen Speicherdienstes und der Kennung der gesicherten Daten, nachdem die Wiederherstellungsanforderung erfasst wurde.

According to a first aspect of the invention, a method for a computer system with a storage drive and a non-volatile memory module for restoring data is described. The procedure consists of the following steps:

• Backup of all data that at least one user of the computer system wishes to backup from the storage drive of the computer system to an associated storage service;
• - Storing an identifier of the connected storage service and an identifier of the saved data in the non-volatile memory module of the computer system;
• - Detection of a recovery request by firmware; and
• - Restoring the backed up data from the storage service by the firmware using the identifier of the connected storage service and the identifier of the backed up data after the restore request has been detected.

In order to achieve security against data loss in computer systems, data can be saved on a storage service (a so-called "backup" or a backup copy or a "software image"). This storage service is connected to the computer system via a network, for example.

In order to access data that is saved on a connected storage service and to save it back again (performing a so-called "restore"), this storage service must be able to be addressed. An ID of the storage service is required for this. The identifier can be, for example, a network address or a device name. In order to find saved data on this storage service, an identifier of the saved data, for example the name of a data record, is necessary. This information is stored in a non-volatile memory module of firmware (for example a BIOS according to the EFI or UEFI standard) of a computer system. This makes it possible to restore the data directly from the firmware of the computer system without using additional media or starting additional software.

One advantage here is that even in the event of a malfunction when booting the computer system, the data can be restored directly by the firmware without the need for special data backup software or the operating system to be functional. This is important if, for technical reasons, there is a defect in a boot medium in the computer system.

In an advantageous embodiment, the storage service is connected to the computer system via a data network connection. Because the storage service is connected to the computer system via a data network connection, the storage service can be at any location.

In a further advantageous embodiment, the storage service is connected locally to the computer system. In this refinement, the identifier of the connected storage service comprises a device identifier, in particular a device name. One advantage of the configuration with a storage service that is locally connected to the computer system is that a user of the computer system can use, for example, an external USB hard drive or another portable storage device and manage it personally.

In advantageous refinements, the step of capturing includes, for example, capturing a keyboard input by a user and / or multiple failure of booting the computer system. It is beneficial if a user can manually initiate data recovery. The user can do this, for example, by pressing a key on a keyboard while the firmware of the computer system is loading. In the event that the computer system repeatedly fails to boot the computer system, provision can be made for the method to be carried out automatically. This further facilitates the use of the computer system.

In a further advantageous embodiment, in the restoring step, the saved data are restored as a first part of data. An additional step is then carried out in which a second part of the data is restored from a local memory of the computer system. One advantage of this embodiment is that, for example, only the most important data have to be saved on the storage service. The fact that additional data is also stored on local data carriers has the advantage that a connection to the storage service does not have to be permanent or that data can be restored from a local source with a higher data transmission bandwidth.

In an alternative embodiment, the data backed up on the storage service is sufficient on its own to restore a predetermined memory status of the computer system. If a user backs up data on his computer system at a certain point in time, he wants to ensure that he can restore exactly this memory status later. In the alternative embodiment, it is possible for this storage status and thus all of the stored data to be made available via the storage service. Thus, by carrying out the method, all data that were previously backed up and are to be restored can be restored from the storage service. For this it is not necessary to use additional data memories with saved data. However, it is possible to use additional data memories and, for example, offers the advantage of further increased data security.

In a further advantageous embodiment of the method, the secured data are stored in at least one encrypted file. The fact that the data is stored in an encrypted file makes it difficult for unauthorized third parties to access the data.

In a further advantageous refinement, the restoring step includes the establishment of a data network connection between the computer system and the storage service by the firmware. Because the firmware independently establishes a data network connection to the storage service, it is not necessary to additionally execute program code or software in order to establish a data network connection.

According to a second aspect of the invention, firmware for a computer system is described. The firmware has a module with executable program code for executing at least the step of restoring a method according to the first aspect.

According to a third aspect of the invention, a computer system with a data network connection, a storage drive for storing software and a non-volatile memory module comprising firmware is described, the computer system being set up to carry out one of the methods described above.

In an advantageous embodiment, software stored on the storage drive is set up to save data from the computer system to a storage service via a data network connection.

The advantages of the described aspects two and three correspond to the advantages of the corresponding methods. By having software for backing up data stored on the computer system, a user can easily perform a backup.

• 1 ein Computersystem gemäß einem Ausführungsbeispiel und
• 2 ein Ablaufdiagramm eines Verfahrens gemäß einem Ausführungsbeispiel.

The invention is described in more detail below on the basis of exemplary embodiments and figures. Show it:

• 1 a computer system according to an embodiment and
• 2 a flowchart of a method according to an embodiment.

1 shows an arrangement with a computer system CS and a storage service CL . The computer system CS has a storage drive HD on. In addition, the computer system CS a non-volatile memory chip BST on which a firmware FW is stored. The computer system CS is in the embodiment via a Data network connection with the storage service CL connected.

The computer system CS is set up to receive data from the storage drive HD via the data network connection by means of the storage service CL to secure. At least one identifier of the storage service CL and an identifier on the storage service CL backed up data in the non-volatile memory module BST saved.

The firmware FW comprises a firmware module for restoring the data from the storage service CL . For this purpose, the firmware module can build on a data network connection established by the same or a different firmware module.

In an embodiment not shown, the computer system is additionally or only via a local data line, for example a USB connection with the storage service CL connected. The storage service CL is a USB hard drive in this embodiment. The storage service can also CL but also any other medium that can be used to store data, for example another computer system with built-in memory, a USB stick, or similar devices. This is the identifier of the associated storage service CL for example a device name or similar information that is used to address the corresponding device.

In all embodiments, the identifier of the associated storage service CL and the identifier of the saved data are stored separately and / or together, or as a single identifier. An example of this is a drive letter followed by a storage path, the file name and a format transmission.

The procedure for performing the steps required to back up and restore is described below using the 2 explained.

2 shows a flow chart of a method according to an embodiment of the invention. In a first step SAV data is backed up. This data can for example be on the storage drive HD of the computer system CS be saved. A method known per se is used to back up the data, which is implemented by software that is on the storage drive HD in the computer system CS is saved. Here all data that at least one user of the computer system CS wishes to back up on the storage service CL outsourced and secured. The data is backed up during normal operation of the computer system CS . For example, the software for data backup can run as a normal application under an operating system. In the exemplary embodiment, this is the computer system CS connected to a data network via a data network connection established, for example, by the operating system. The data network connection can be established either wirelessly, for example via a wireless LAN, or via a cable connection. With the network is the storage service CL connected. Task of the storage service CL is to back up data sent by users of the network. Thus it is a user of the computer system CS possible, using software that is on the storage drive HD of the computer system CS is installed and through the computer system CS is running, data over the network to the storage service CL to send and secure. The storage service CL can either be an external hard drive within a local (home) network or a server within a local company network, but also cloud storage from a cloud storage provider that connects to the computer system via the Internet CS connected to be. Any further known designs of a storage service are likewise possible CL possible.

In a second step INF the procedure will be information about the storage service CL in the non-volatile memory chip BST saved. If the user wants to restore the data after backing up the data, it is necessary to know where the data is stored. The network address of the storage service is used for this in the exemplary embodiment CL as the identifier of the connected storage service CL , as well as an identifier of the saved data. This identifier can be, for example, a file name or a file name together with a file extension or some other type of identification code for the secured files. These information data are stored in the non-volatile memory module BST the firmware FW or another non-volatile memory module of the computer system CS secured. Because the network address and the identifier of the saved data are in a non-volatile memory module BST are secured, the computer system is not necessary to access and obtain this data CS or that on the storage drive HD to boot the saved operating system and to the storage drive HD to access. Thus, the data can also be obtained when the computer system CS is not bootable and / or the storage drive HD has been destroyed or damaged.

In a next step ERF becomes a restore request by the firmware FW detected. By having the firmware FW can recognize itself that a restoration of the data is to be initiated or initialized, it is not necessary to set up an operating system of the Computer system CS to boot. The recovery process can thus be carried out directly via the firmware FW started and accessing the storage drive HD is not necessary. For example, it is conceivable that a restore will not be on the storage drive HD of the computer system CS but to another storage drive HD any computer system CS is performed. This is useful if, for example, the previous storage drive HD of the computer system CS through another storage drive HD has been replaced or the user transfers his data to another computer system CS wants to move.

A variety of processes can trigger the collection of a recovery request. For example, a user can trigger the recovery request by actuating a predetermined key or a predetermined key combination during an initialization phase directly after switching on the computer system. It is also conceivable that the user first opens a firmware dialog window, or a firmware dialog window is automatically opened for the user, from which he then triggers the recovery request.

An alternative or additional embodiment for the detection of the recovery request by the firmware FW is it that recovery is automatic through the firmware FW is requested. The firmware FW notes that the computer system CS failed to boot multiple times in a row. This can be the case, for example, when program code that is used to boot an operating system of the computer system CS necessary has been damaged or the storage drive HD has a defect. If such a case occurs, the firmware FW for example in a POST phase it is found that the computer system does not boot CS can come. The backed up data is then automatically restored, for example. Alternatively, information is first displayed to a user, which is shown, for example, via a display element so that the user can decide whether a restoration should be carried out.

There was a restore request in step ERF are then recorded in one step W. the backed up data is restored. The firmware builds for this FW using the ID of the connected storage service CL , which in the non-volatile memory chip BST is secured, in the exemplary embodiment a network address, for example a data network connection to a storage service CL on or the firmware FW uses an existing data network connection. Firmware is preferred FW modular structure and uses a standard firmware module for network communication, for example a network boot module, a UDP firmware module or a TCP / IP firmware module. Subsequently, the firmware FW restoring the data from the storage service CL to the computer system CS initiated. Alternatively, the data can be taken from the storage service CL to storage other than the storage drive HD of the computer system CS not only in the original computer system CS but also in another computer system CS can be located. The information regarding the storage service CL can therefore be entered manually in addition or as an alternative to automatic acquisition.

In a preferred embodiment, all of the data that a user has backed up is on the storage service CL secured. In this exemplary embodiment, the entire backed up data of the user stored on the storage service CL are backed up to the storage drive HD of the computer system CS backed up. Thus, the entire data is restored from the storage service CL to the storage drive HD through the firmware FW executed.

In an alternative embodiment, not all of the data that is sufficient to back up the storage state desired by the user is on the storage service CL saved. A part of the data is in this case on a further storage service, which is either in a local network, in a wide area network or on a storage drive or another storage medium inside or outside the computer system CS secured. The data can be used by a user, for example to further increase the reliability of several storage services CL distributed and / or divided. The information about the further storage service or the storage services can be recorded manually or automatically (for example by reading out the information while the data is being written). Will now restore the data through the firmware FW initiated, the data is from the storage service CL copied to the computer system. The relevant information is called up or entered manually by a user. Manual input of the information data is possible in every exemplary embodiment, especially in the event that the stored information data are incorrect, insufficient or non-existent. In addition, data from the further storage service is also used CL restored. This is advantageous if, for example, increased data recovery speed is desired. By distributing the data to different storage services CL Furthermore, increased security with regard to data loss can be obtained.

In the exemplary embodiment, the data are on the storage service CL are saved in a file that is stored in encrypted form. While the data is being backed up, the user has to define a password or, in general, an authentication, which is requested during restoration. This query can either be through the firmware FW be initialized or run independently of the program code to restore. This would be the storage service CL Require authentication of the user as soon as the saved, protected file is accessed. In the event that authentication is via the firmware FW takes place, security data can be stored in addition to the information in the non-volatile memory module BST saved by the firmware FW can be compared with entered authentication data. In the case of authentication by the storage service CL can after detection of access to the stored data by the storage service CL an input mask for entering a password is displayed or, in general, an authentication is required.

To increase security, it is possible to dispense with storing the password or other authentication data. In this case, a user must authenticate each time a restore is performed. The manual entry allows, among other things, a simple transfer of a memory status to another computer system, for example to clone a standard configuration.

By having the firmware FW itself a data network connection to the storage service CL can build, it is not necessary to go to higher levels of the computer system structure. This means that data can also be restored if large parts of the computer system have been destroyed or damaged.

List of reference symbols

SAV, INF, ERF, W

Procedural steps

CS

Computer system

CL

Storage service

HD

Storage drive

BST

non-volatile memory module

FW

Firmware

Claims (12)

Method for a computer system (CS) with a storage drive (HD) and a non-volatile memory module (BST) for restoring data, comprising the steps: - Saving of all data which at least one user of the computer system (CS) wishes to save from the storage drive (HD) of the computer system (CS) to a connected storage service (CL); - Storing an identifier of the connected storage service (CL) and an identifier of the saved data in the non-volatile memory module (BST) of the computer system (CS); - Detection of a recovery request by a firmware (FW); and - Restoring the saved data from the storage service (CL) by the firmware (FW) on the basis of the identifier of the storage service (CL) and the identifier of the saved data, after the recovery request has been recorded. Procedure according to Claim 1 , characterized in that the storage service (CL) is connected to the computer system (CS) via a data network connection and that the identifier of the connected storage service (CL) comprises a network address. Procedure according to Claim 1 or 2 , characterized in that the storage service (CL) is locally connected to the computer system (CS) and the identifier of the connected storage service (CL) comprises a device identifier, in particular a device name. Method according to one of the Claims 1 to 3 , characterized in that the step of capturing comprises capturing a keyboard input from a user. Method according to one of the Claims 1 to 4th , characterized in that the step of detecting comprises multiple failures of booting the computer system (CS). Method according to one of the Claims 1 to 5 , characterized in that in the restoring step, the backed up data is restored as a first part of data and an additional step is then carried out in which a second part of data is restored from a local memory of the computer system (CS). Method according to one of the Claims 1 to 5 , characterized in that the data saved on the storage service (CL) are used solely for Restoring a predetermined memory level of the computer system (CS) are sufficient. Method according to one of the Claims 1 to 7th , characterized in that the secured data is stored in at least one encrypted file. Method according to one of the Claims 2 to 8th , characterized in that the step of restoring comprises the establishment of a data network connection between the computer system (CS) and the storage service (CL) by the firmware (FW). Firmware (FW) for a computer system (CS) having a module with executable program code for executing at least the step of restoring according to one of the methods of FIG Claims 1 to 9 . Computer system (CS) with a data network connection, a non-volatile storage drive (HD) for storing software and a non-volatile memory module (BST) comprising firmware (FW) Claim 10 , wherein the computer system (CS) is set up to implement a method according to one of the Claims 1 to 9 execute. Computer system (CS) according to Claim 11 , characterized in that software stored on the storage drive (HD) is set up to save data from the computer system (CS) to a storage service (CL).

Images