JP2010122717A - Server management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a server management system that has a virtual media function configured to automatically encrypt files when downloading data from a server to a remote terminal. <P>SOLUTION: The server management system in which the remote terminal 107 is connected to a server module 101a via a network includes a BMC module 105a having a virtual media function of virtually connecting a USB memory 300 connected to the remote terminal to the server via the network to emulate a medium connected to the server. When a plaintext file 302 on an HDD 104a of the server is downloaded to the USB memory, the file is encrypted with an encryption key 211a that is a key based on information specific to the BMC module. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a file transfer method and apparatus in remote management of a computer.

  One of the methods for remote management of the server is to use the remote KVM function. The remote KVM function uses the K (keyboard), V (video), and M (mouse) signals as IP signals. This is a function that enables a server with a function to be operated from a remote terminal via a network. In addition, the remote KVM function has a virtual media function for virtually connecting media connected to a remote terminal to a server via a network and emulating the media as being connected to the server.

  For example, by connecting a CD drive of a remote terminal to a server as a virtual medium, it is possible to install an OS or a patch on a remote server. Also, by connecting the USB memory of the remote terminal as a virtual medium, it is possible to download a remote server setting file, log file, etc. to the local USB memory connected to the remote terminal. About the above, it is indicated by nonpatent literature 1, for example.

Hidekazu Takahashi, Nikkei Communication 2007.7.7, "How to choose the latest KVM switch", Nikkei BP, 2007, p.60.

  When a plain text file on the server is downloaded to the USB memory of the remote terminal using the conventional virtual media function, the file is saved in the USB memory as plain text. For this reason, if the USB memory is lost, the file stored in the USB memory is not encrypted and remains plain and can be easily read, which may lead to information leakage.

  As a conventional measure, there is a method of downloading an encrypted file to a USB memory after encrypting the file in advance on the OS of the server. However, this method requires a user to perform an encryption operation in advance, and the download procedure is complicated. Further, even if an operation rule for performing encryption before downloading is provided, the user can also download without performing encryption. Furthermore, password management becomes complicated in an environment with a plurality of servers and an environment with a plurality of users. In addition, when performing backup and restoration of server setting data, there is a possibility that the user mistakenly executes a restore operation for a server different from the intended purpose.

  A first object of the present invention is to provide a virtual media function capable of automatically and reliably performing encryption at the time of uploading and downloading.

  A second object of the present invention is to provide a virtual media function that facilitates management of passwords necessary for file encryption and decryption.

  A third object of the present invention is to provide a virtual media function that prevents copying of data to a server different from the purpose when used for backup and restoration of settings.

  In order to solve the above problems, a server management system according to the present invention and a file transfer method in the system include a server management system in which a remote terminal and at least one server are connected via a network. The server includes a first storage unit (HDD), a calculation unit (CPU), and a server management processor (BMC) that transfers files between the media and the server connected to the remote terminal, When the server management processor encrypts and transfers the file stored in the first storage unit of the server to the medium connected to the remote terminal, the server management processor reads the file from the first storage unit, Encrypting with a key based on information unique to the server management processor and transferring the encrypted file to the media It is characterized by that.

  In particular, when a file stored in the first storage unit of the server is transferred to a medium connected to the remote terminal, that is, when downloading, a server management processor (BMC) is stored in the first storage unit. Dividing the file into fragment files, reading the fragment file, encrypting the fragment file with a key based on information unique to the server management processor, and transferring the encrypted file to the media preferable.

  In addition, when the encrypted file stored in the medium connected to the remote terminal is transferred to the first storage unit of the server, that is, when uploading, the server management processor (BMC) performs the encryption from the medium. The encrypted file is read out, it is determined whether the encryption method of the encrypted file corresponds to the encryption method used in the server, and if it corresponds to the encryption method used in the server, the key If the encryption is applicable using the key, the encrypted file is decrypted with the key, and the decrypted file is stored in the first storage. If the encryption does not correspond to the encryption using the key, the encrypted file is not transferred to the first storage unit.

  In particular, when uploading, the server management processor divides the encrypted file stored in the medium into an encrypted fragment file, reads the encrypted fragment file, and reads the encrypted fragment Determine whether the file encryption method corresponds to the encryption method used in the server, and if it corresponds to the encryption method used in the server, determine whether it corresponds to the encryption using the key. When the encryption using the key is applicable, the encrypted fragment file is decrypted with the key, the decrypted fragment file is transferred to the first storage unit, and the key is used. When encryption does not apply, it is preferable not to transfer the encrypted fragment file to the first storage unit.

  The key based on information unique to the server management processor uses, for example, a UUID, a MAC address, or a value obtained by multiplying the UUID and the MAC address. In particular, the key based on information unique to the server management processor is a value calculated by hash calculation based on the time at which the key was written to the value obtained by multiplying the UUID and the MAC address from the security aspect, or a device. It is desirable that the random number is unique and cannot be referred to by the user.

  According to the present invention, since the server management processor, that is, the BMC module has the file encryption and decryption functions, the file can be reliably encrypted. In addition, the server management processor can reduce the complexity of password management by using its own non-volatile information as a key for encryption and decryption.

  Furthermore, by using a key specific to the server management processor for encryption, a backup file dedicated to the server where the data has been downloaded can be created.

  The best mode for carrying out the present invention will be described below with reference to the drawings.

<Example 1>
For example, in a server management system in which a remote terminal and a server are connected via a network, the system to which the present invention is applied is connected to a medium (eg, FD, CD, DVD, USB) connected to the remote terminal via the network. A server management system having a server management processor having a virtual media function for virtually connecting to the server and emulating the media as if it were connected to the server.

  First, the configuration of the system according to the present invention will be described with reference to FIGS. The server system 100 includes one or more server modules 101a and a network switch 106 for connecting each server module in the chassis to the management LAN 112 via the internal LAN 111a. The server modules 101b and 101c have the same component configuration as the server module 101a, but the values of the BMC nonvolatile information tables 207a, 207b, and 207c in the BMC module are different for each server module.

  A remote terminal 107 is connected to the management LAN 112.

  The remote terminal 107 incorporates client software 108. The client software 108 controls input / output signals of KVM data and virtual media transmitted / received to / from the server module 101a via the network. The screen of the server module 101a is displayed on the screen of the client software 108, and keyboard and mouse operations for the client software 108 are input to the server module 101a. Further, the media connected to the remote terminal 107 is virtually connected to the server module 101a via the network. As a result, the server module 101a is in the same state as when the media is directly connected to the server module itself.

  The server module 101a has a BMC (Baseboard Management Controller) module 105a. The BMC module 105a is a module having a server module state management function, a remote KVM function, and a server management processor function that provides a virtual media function to the server module 101a. The BMC module 105a includes a BMC chip 200a, a volatile work area RAM 205a, and a ROM 206a containing nonvolatile BMC information.

  The BMC chip 200a transmits / receives these input / output signals via a LAN to / from the control microcomputer 201a, the VGA controller 203a that controls screen data, the USB controller 202a that controls input / output signals of the keyboard, mouse, and virtual media. Built-in LAN controller 204a. The USB controller 202a and the VGA controller 203a of the BMC chip 200a are connected to the chip set 113a of the server module 101a. The chip set 113a is a controller having a USB interface for connecting the CPU 114a and a USB device and a PCI Express interface for connecting a VGA controller.

  In this embodiment, it is assumed that the capacity of the RAM 205a is 32 MB, and 20 MB is free as a work area usable for the present invention.

  The ROM 206a stores a nonvolatile table 207a as nonvolatile BMC information. The nonvolatile table 207a includes, for example, a MAC address (Media Access Control address) 208a, a UUID (Universally Unique Identifier) 209a, a BMC unique key 210a, and an encryption / decryption key 211a.

  The UUID 209a and the MAC address 208a are written as unique values when the apparatus is manufactured, and are values that cannot be changed by a normal user operation. The UUID and MAC address are values that can be viewed by the user.

  The encryption / decryption key 211a is a key used in the encryption and decryption function in this embodiment, and assigns arbitrary values set by the user, for example, UUID 209a, MAC address 208a, BMC unique key 210a, etc. Things are possible.

  Here, the BMC unique key 210a is a value that is written as a unique value when the server module 101a is manufactured and cannot be changed by a normal user operation. From the viewpoint of security, it is desirable that the BMC unique key 210a has a value that cannot be viewed by the user.

  As the BMC unique key 210a, information that is unique to the apparatus and that cannot be referred to by the user is used. For example, the BMC unique key may be generated by a method of inputting a random number at the time of production when it is written in the ROM 206a included in the BMC module 105a at the manufacturing stage. Further, the BMC unique key may be generated by a method using hash calculation based on the UUID 209a, the MAC address 208a, and the writing time. Further, the BMC unique key may be generated from a random number that is unique to the apparatus and cannot be referred to by the user.

  As the writing of the BMC unique key 210a, there is a method in which the BMC unique key 210a is calculated in advance by a factory computer at the time of manufacture and written into the ROM 206a. Alternatively, a method may be used in which the BMC module 105a performs calculation based on the UUID 209a, the MAC address 208a, and the writing time and writes the ROM 206a.

  Note that UUID 209a and MAC address 208a are unique values for the device, but UUID 209a and MAC address 208a are values that can be seen by the user, so it is not desirable to use them as encryption / decryption keys as they are. However, when the UUID 209a is used as the BMC unique key 210a, it is useful to prevent inadvertent application of data to the wrong server.

  Therefore, in practice, when using a UUID or MAC address, it is desirable that it is unique to the device and processed to a value that cannot be referenced by the user. One example is a method using hash calculation based on the UUID 209a, the MAC address 208a, and the time of writing.

  In the first embodiment, regarding the encryption at the time of file download, an encryption / decryption key 211a, which is a common key for encryption and decryption, is used. Also, the BMC unique key 210a is used as the encryption / decryption key 211a.

  Next, when encrypting and downloading a file from the local media of the server to the virtual media in a state where the USB memory of the remote terminal is virtually connected to the managed server as virtual media using FIG. 3 and FIG. Processing will be described.

  First, in the state where the USB memory 300 of the console terminal 107 is virtually connected to the server module by the virtual media function, the user copies the plain text file 302 stored in the HDD 104a of the server module 101a to the USB memory 300. An operation is instructed (step 401).

  In response to the operation of (Step 401), the BMC module 105a reads the encryption key 211a from the ROM 206a into the RAM 205a (Step 402). At this time, as the encryption key 211a, the BMC unique key 210a assigned to each BMC module and not changeable by the user is used. This makes it possible to perform encryption that can be decrypted only by the BMC module 105a.

  Next, the BMC module 105a reads 8 MB of data for the entire plaintext file 302 into the RAM 205a as a plaintext fragment file 303 (step 403).

  Then, the hash value of the plaintext fragment file 303 is obtained and added to the end of the plaintext fragment file 303 (step 404). In general, the size of a file that can be handled by the BMC module is smaller than the size that can be handled by the file system of the server. Therefore, in the present invention, the plain text file 302 on the server file system is handled as a plain text fragment file 303 divided every 8 MB that can be handled by the BMC module 105a. Of course, when the file size that can be handled by the BMC module 105a is sufficiently large, there is no need to divide.

  Next, the BMC module 105a encrypts the file using the encryption key 211a and creates an encrypted fragment file 304 (step 405). At this time, if the execution of step 405 is the first time, the BMC module 105a adds a header indicating that encryption according to the present invention has been performed to the head of the fragment file 304. If step 405 is executed for the second time or later, whether or not the file is an encrypted file is determined on a file-by-file basis, so no header is added.

  When the encryption of the fragment file is completed, the BMC module 105a transmits the encrypted fragment file 304 to the client software 108 of the console terminal 107 via the LAN (step 406).

  The client software 108 writes the received encrypted fragment encrypted file 304 as the encrypted file 305 in the USB memory 300 (step 407). If the encrypted fragment file 304 is received for the second time or later, the received encrypted fragment file 304 is appended to the end of the encrypted file 305, and the added encrypted file is used as a new encrypted file 305. .

  Next, in step 403, when the plaintext fragment file 303 stored in the RAM 205a by the BMC module 105a is data corresponding to the end of the plaintext file 302, it is determined that the file transfer is completed. On the other hand, if the plaintext fragment file 303 stored in the RAM 205a by the BMC module 105a is not data corresponding to the end of the plaintext file 302, it is determined that the transfer of the plaintext file 302 has not been completed (step 408).

  If it is determined in step 408 that the transfer of the plaintext file 302 has not been completed, the BMC module 105a repeatedly executes the processing from step 403 to step 408 until the transfer of the plain file 302 is completed.

  If it is determined in step 408 that the plaintext file 302 has not been transferred, the processing is terminated. (Step 409).

  As described above, since the BMC module 105a automatically encrypts data and transmits the data on the LAN when downloading a file as described in the first embodiment, the data can be reliably encrypted. In addition, by using the BMC unique key 210a for file encryption, it is not necessary for the user to execute the download after encrypting the file in advance on the server OS, or to input the encryption key at the time of download. . Therefore, operation is easy and password management is unnecessary.

  In particular, the BMC unique key 210a is assigned to each BMC module, written as a unique value when the BMC module is manufactured, and generated by hash calculation based on the UUID and MAC address that cannot be changed by the user operation and the time of writing. Since the value is used, it becomes a value that the user cannot easily know, and the security effect is enhanced as an encryption key. In addition, since the BMC unique key in the present invention is set on the server management system side based on the information unique to the BMC module, it is not necessary for the user to set the encryption key, and the download operation security on the user side is enhanced. Complexity can be reduced.

<Example 2>
Next, with reference to FIG. 5 and FIG. 6, a description will be given of processing when a file is uploaded from the virtual media to the local media of the server while the USB memory of the remote terminal is virtually connected to the server as the virtual media . The encrypted file 502 used in the second embodiment is a file encrypted by the method of the first embodiment.

  First, the user instructs an operation to copy the encrypted file 502 stored in the USB memory 300 of the remote terminal 107 virtually connected to the server module 101a by the virtual media function to the HDD 104a of the server module. (Step 601).

  In response to the operation of (Step 601), the client software 108 transmits 8 MB of data out of the entire encrypted file 502 as an encrypted fragment file 503 to the BMC module 105a via the LAN (Step 602). .

  Next, the BMC module 105a stores the received fragment file 503 in the RAM 503 (step 603).

  Next, when reading of the fragment file 503 is completed, the BMC module 105a reads the header portion of the encrypted fragment file 503, and the encryption method is the same as or different from the encryption method applied at the time of upload. Determine whether. Here, it is determined whether or not the fragment file has been subjected to the encryption method according to the method of the first embodiment (step 604). Examples of files that do not correspond to files encrypted by the method of this embodiment include files encrypted by other methods and plaintext files that are not encrypted.

  If it is determined in step 604 that the encrypted fragment file 503 is a file that has been encrypted by the method of this embodiment, the BMC module reads the decryption key 211a from the ROM 206a into the RAM 205a (step 605). ).

  Next, the BMC module 105a decrypts the encrypted fragment file 503 using the decryption key 211a read into the RAM 205a (step 606).

  After execution of step 606, the hash value of the data portion of the plaintext fragment file 504 is obtained and compared with the hash value added at the end of the file to determine whether the decryption has been performed normally (step 607). ).

  In step 607, if the decryption is abnormal, the process ends in error, and the file is not uploaded. As a cause of the abnormal decryption, for example, an incorrect decryption key 211b may be used (step 613). Specifically, the file upload is not started as in the state described in the server module 101b of FIG.

  In step 607, if the decryption has been performed normally, the BMC module 105a deletes the hash portion from the file 504 and transmits it to the USB controller 202a (step 608). Specifically, uploading of the file 504 is started as in the state described in the server module 101a of FIG.

  The server module 101a writes the data written in its own USB controller as a file 505 in the HDD 104a (step 609).

  Finally, it is determined whether the data written in step 609 is the end of the encrypted file 502 or not (step 610).

If it is determined in step 610 that the last written data is not the end of the encrypted file 502, the BMC module 105a performs the same processing as step 602, step 611,
Steps 612 and 606, which are the same processing as step 603, are executed.

  If it is determined in step 610 that the last written data is at the end of the encrypted file 502, the upload process is terminated (step 614).

  If it is determined in step 604 that the encrypted fragment file 503 is not a file that has been encrypted by the method of this embodiment, that is, if the fragment file is a plain text file, However, the BMC module 105a transmits the received data to the USB controller 202a as it is (step 615).

The server module 101a writes the data written in its own USB controller as a plain text file 505) in the HDD 104a. When the plaintext fragment file 504 is received for the second time or later, the fragment file 504 is added to the end of the plaintext file 505, and the plaintext file after the addition is set as a new plaintext file 505. (Step 616)
Finally, it is determined whether or not the plaintext fragment file 504 written in step 616 is the end of the encrypted file 502 (step 617).

  If it is determined in step 617 that the last written plaintext fragment file 504 is not the end of the encrypted file 502, the BMC module performs the same processing as step 602, step 618, step 615, step 616 and step 617. The above process is repeated.

  If it is determined in step 617 that the last written plaintext fragment file 504 is the end of the encrypted file 502, the upload process is terminated (step 619).

  As described above, in the second embodiment, encryption is performed using the BMC unique key 210a of the server module 101a as the encryption / decryption key 211a, so that decryption is possible only in the server module. For example, when decryption is attempted in the server module 101a having a different BMC unique key as the encryption / decryption key 211b, the decryption fails. Therefore, if the present invention is used, it is possible to prevent the data of another server from being erroneously restored when performing backup and restore operations.

It is explanatory drawing which showed the whole system. It is explanatory drawing which showed the hardware constitutions of BMC module. It is explanatory drawing which showed the outline | summary of the download of the file using this invention. FIG. 4 is a flowchart showing the processing of FIG. It is explanatory drawing which showed the outline | summary of the upload of the file using this invention. 6 is a flowchart showing the processing of FIG.

Explanation of symbols

  101a server module, 104a server module 101a HDD, 105a BMC module, 107 remote terminal, 211a encryption key, 300 USB memory, 302 plain text file, 305 encrypted file

Claims (16)

In a server management system in which a remote terminal and at least one server are connected via a network,
The server includes a first storage unit, a calculation unit, and a server management processor that transfers files between the server and the media connected to the remote terminal,
The server management processor encrypts and transfers a file stored in the first storage unit of the server to a medium connected to the remote terminal,
Read the file from the first storage unit,
Encrypting the file with a key based on information unique to the server management processor;
A server management system for transferring the encrypted file to the medium. The server management processor, when transferring a file stored in the first storage unit of the server to a medium connected to the remote terminal,
The file stored in the first storage unit is divided into fragment files,
Read the fragment file,
Encrypting the fragment file with a key based on information unique to the server management processor;
The server management system according to claim 1, wherein the encrypted file is transferred to the medium. The server management processor, when transferring the encrypted file stored in the medium connected to the remote terminal to the first storage unit of the server,
Read the encrypted file from the media,
Determining whether the encryption method of the encrypted file corresponds to the encryption method used in the server;
If it corresponds to the encryption method used in the server, determine whether it corresponds to the encryption using the key,
When the encryption using the key is applicable, the encrypted file is decrypted with the key, and the decrypted file is transferred to the first storage unit,
2. The server management system according to claim 1, wherein when the encryption using the key is not applicable, the encrypted file is not transferred to the first storage unit. The server management processor, when transferring the encrypted file stored in the medium connected to the remote terminal to the first storage unit of the server,
Dividing the encrypted file stored in the media into an encrypted fragment file,
Read the encrypted fragment file,
Determining whether the encryption method of the encrypted fragment file corresponds to the encryption method used in the server;
If it corresponds to the encryption method used in the server, determine whether it corresponds to the encryption using the key,
In the case of encryption using the key, the encrypted fragment file is decrypted with the key, and the decrypted fragment file is transferred to the first storage unit,
2. The server management system according to claim 1, wherein the encrypted fragment file is not transferred to the first storage unit when the encryption using the key is not applicable. Determining whether the encryption method of the encrypted file corresponds to the encryption method used in the server;
2. The server management system according to claim 1, wherein if the encryption method used by the server is not applicable, the encrypted file is transferred to the first storage unit as a plain text file.   The server management system according to claim 1, wherein the server management processor includes a second storage unit that stores the key.   The server management system according to claim 1, wherein the key based on information unique to the server management processor is a UUID, a MAC address, and a value obtained by multiplying the UUID and the MAC address.   The key based on the information unique to the server management processor is a value calculated by hash calculation based on a value obtained by multiplying the UUID and the MAC address by the time at the time of writing the key, or is unique to the device and is referred to by the user. 2. The server management system according to claim 1, wherein the server management system is one of random numbers that cannot be used.   The server management processor includes a nonvolatile second storage unit (ROM) for storing the key, and a volatile third storage unit (RAM) for temporarily storing a file read from outside the server management processor. The server management system according to claim 1, further comprising: a USB controller that controls input / output signals; and a controller that transmits and receives the input / output signals. When the step of encrypting the fragment file with a key based on information unique to the server management processor is the first time,
The server management system according to claim 2, wherein the server management processor adds a header including information indicating that the encryption corresponds to encryption using the key to the head of the fragment file. A file transfer method in a server management system in which a remote terminal and at least one or more servers are connected via a network,
The server includes a first storage unit, a calculation unit, and a server management processor that transfers files between the server and the media connected to the remote terminal,
When encrypting and transferring a file stored in the first storage unit of the server to a medium connected to the remote terminal,
The server management processor;
Reading the file from the first storage unit;
Encrypting the file with a key based on information unique to the server management processor;
Transferring the encrypted file to the medium. A file transfer method in a server management system, comprising: The server management processor;
Dividing the file stored in the first storage unit into a fragment file;
Reading the fragment file;
Encrypting the fragment file with a key based on information unique to the server management processor;
12. The file transfer method in the server management system according to claim 11, wherein the step of transferring the encrypted file to the medium is executed. When transferring the encrypted file stored in the medium connected to the remote terminal to the first storage unit of the server,
The server management processor;
Reading the encrypted file from the media;
Determining whether an encryption method of the encrypted file corresponds to an encryption method used in the server;
If it corresponds to the encryption method used in the server, determining whether it corresponds to the encryption using the key;
If the encryption using the key is applicable, the encrypted file is decrypted with the key, and the decrypted file is transferred to the first storage unit;
12. The file transfer method in the server management system according to claim 11, wherein when the encryption using the key does not correspond, the step of not transferring the encrypted file to the first storage unit is executed. . The server management processor;
Dividing the encrypted file stored in the media into an encrypted fragment file;
Reading the encrypted fragment file;
Determining whether the encryption method of the encrypted fragment file corresponds to the encryption method used in the server;
If it corresponds to the encryption method used in the server, determining whether it corresponds to the encryption using the key;
If it corresponds to encryption using the key, decrypting the encrypted fragment file with the key, and transferring the decrypted fragment file to the first storage unit;
14. The file transfer in the server management system according to claim 13, wherein if the encryption using the key does not correspond, the step of not transferring the encrypted fragment file to the first storage unit is executed. Method.   12. The file transfer method in the server management system according to claim 11, wherein the key based on information unique to the server management processor is a UUID, a MAC address, and a value obtained by multiplying the UUID and the MAC address.   The key based on the information unique to the server management processor is a value calculated by hash calculation based on a value obtained by multiplying the UUID and the MAC address by the time at the time of writing the key, or is unique to the device and is referred to by the user. 12. The file transfer method in the server management system according to claim 11, wherein the file transfer method is any random number that cannot be generated.

Images