JP6233095B2 - Server device, control method, power supply control system - Google Patents

Description

  The present invention relates to a server device, a control method, and a power supply control system.

  In a blade system consisting of multiple blade server devices and a management module that manages them, there is a technology that activates a blade server device that is allowed to be used by the user only when the management module authenticates the user and the authentication is successful. (See Patent Document 1). If this technology is used, only the authorized user can use the blade server device, and the risk of unauthorized access to data stored in the server by a third party can be reduced.

  Further, even if the portable terminal device is in another person's hand, Patent Document 2 describes that by deleting the data in the memory after a predetermined period of time has elapsed since a preset trigger event, There is a disclosure regarding a technique for preventing access to data stored in a mobile terminal device.

JP 2007-299427 A JP 2008-172701 A

By the way, for example, also in the above-described blade server device, the device itself is modularized and downsized, so that it is easy to remove and carry the blade server device from the blade server system. In addition, the current blade server device can be powered on independently.
In such a situation, the server device can be taken out and started by turning on the power individually. As a result, various information may be leaked from the HDD (Hard Disk Drive) or the memory.

  Accordingly, an object of the present invention is to provide a server device, a control method, and a power supply control system that solve the above-described problem.

  The present invention relates to an authentication determination storage unit that stores an authentication result of whether or not to start a server device performed by another device connected through a communication path, and an authentication result stored in the authentication determination storage unit is normal. In the case where the power supply to the server is detected, the server device includes a power supply control unit that performs a process of disabling a device included in the server.

  In addition, the present invention stores the result of authentication on whether or not to start the server device performed by another device connected through a communication path, and when the stored authentication result is not normal, A server device control method is characterized in that when a power-on is detected, a device invalidation process is performed.

  In addition, the present invention includes the above-described server device and a management server connected to the server device, wherein the management server receives information necessary for authentication from the server device, performs authentication processing, and the server device Is a power supply control system for a server device, wherein if the authentication result is normal, the own device is activated, and if the authentication result is abnormal, the activation of the own device is stopped.

  According to the present invention, it is possible to reduce the risk that the server device is activated by forced power-on and the data stored in the storage unit of the server device is accessed.

It is a block diagram which shows the minimum structure of the server apparatus by 1st embodiment of this invention. It is a figure which shows an example of a structure of the system containing the server apparatus by 1st embodiment of this invention. It is a 1st figure which shows the processing flow of the server apparatus by 1st embodiment of this invention. It is a figure which shows an example of a structure of the system containing the server apparatus by 2nd embodiment of this invention. It is a figure which shows an example of a structure of the system containing the server apparatus by 3rd embodiment of this invention.

<First embodiment>
Hereinafter, a server apparatus according to a first embodiment of the present invention will be described with reference to FIGS.
FIG. 1 is a diagram showing a minimum configuration of a server device according to the first embodiment.
In this figure, the code | symbol 2 represents the server apparatus. As illustrated in FIG. 1, the server device 2 includes at least a power control unit 22 and an authentication determination storage unit 24.
The authentication determination storage unit 24 is a volatile register. The authentication determination storage unit 24 stores the result of authentication performed by another device connected via a communication path.
The power control unit 22 controls the start / stop of the server device 2. When the power supply control unit 22 receives a server activation request from the user, the power supply control unit 22 refers to the authentication result stored in the authentication determination storage unit 24, performs the server activation process when the authentication result is normal, and the authentication result is abnormal. Stops starting the server. Further, when the power supply control unit 22 detects power-on by a method other than a normal server activation request by the user, the server apparatus 2 includes the authentication result stored in the authentication determination storage unit 24 except when the authentication result is normal. Invalidation processing of various devices such as HDDs and network cards is performed. In this case, the power control unit 22 instructs an HDD power supply unit 32 (to be described later) not to supply power to the HDD included in the server device 2. Similarly, the power supply control unit 22 instructs a memory power supply unit 33 (to be described later) not to supply power to the memory included in the server device 2.

FIG. 2 is a diagram showing an example of the configuration of a system including a server device according to the first embodiment of the present invention.
As shown in FIG. 2, the blade system 100 includes a management module 1 and a blade server device 2. Although only one blade server device 2 is illustrated in FIG. 2, a plurality of blade server devices 2 may be provided. Further, the management module 1 and the blade server device 2 are stored in an enclosure, and these are referred to as a blade system 100. The management module 1 is a device that manages these blade server devices 2 in an integrated manner, and monitors the operating status of each blade server device 2 and controls activation / deactivation. The blade server device 2 is connected to the management module 1 via a communication cable, and is a server device that operates under the management of the management module 1.

The management module 1 includes a server authentication information storage unit 12, a server authentication unit 13, and a remote control unit 14.
The server authentication information storage unit 12 stores information necessary for authentication of each blade server device 2. For example, a user account and a password are stored in association with the identifier information of each blade server device 2. Hereinafter, the information necessary for authentication may be referred to as server authentication information.
The server authentication unit 13 receives, for example, an identifier of the server device, a user account, and a password from each blade server device 2 and compares them with information necessary for authentication stored in the server authentication information storage unit 12. Authenticate.
The remote control unit 14 transmits a control signal to each blade server device 2 to control each server.

The blade server device 2 includes a server control unit 21, a power switch 25, an HDD controller 30, a network controller 31, an HDD power supply unit 32, a memory power supply unit 33, an HDD 42, and a memory 43. Have.
The server control unit 21 performs various controls of the blade server device 2. In particular, in the present embodiment, the server control unit 21 includes a power control unit 22, a server authentication information receiving unit 23, and an authentication determination storage unit 24. The server authentication information receiving unit 23 acquires information such as an account and a password from the user when the blade server device 2 is activated. The power control unit 22 and the authentication determination storage unit 24 are the same as those described with reference to FIG.

The power switch 25 is a server activation switch provided in the blade server.
The HDD controller 30 controls the operation of the HDD 42. The network controller 31 controls the operation of a network device (not shown).
The HDD power supply unit 32 supplies power to the HDD 42. However, when an instruction signal is input from the power control unit 22 so as not to supply power to the HDD 42, the HDD power supply unit 32 does not supply power to the HDD 42.
The memory power supply unit 33 supplies power to the memory 43. However, when an instruction signal is input from the power supply control unit 22 so as not to supply power to the memory 43, the memory power supply unit 33 does not supply power to the memory 43.

FIG. 3 is a first diagram showing a processing flow of the server device according to the first embodiment of the present invention.
Hereinafter, the power supply control process of the present embodiment will be described with reference to FIG.
First, when the user performs an operation of pressing the power switch 25, the power control unit 22 detects the activation request (step S101). Then, the power control unit 22 outputs an activation request signal to the server authentication information receiving unit 23. The server authentication information receiving unit 23 displays an input screen for requesting account information on a display device such as a monitor connected to the blade server device 2. The server authentication information receiving unit 23 receives an account and password input from the user, and transmits the account information and the identifier information of the blade server device 2 to the server authentication unit 13 of the management module 1 (step S102).

  When the server authentication unit 13 receives the server authentication information, the server authentication unit 13 compares the received information with the server authentication information stored in the server authentication information storage unit 12, and whether the received information is stored in the server authentication information storage unit 12. Judge whether. When the received information is stored, the server authentication unit 13 determines that the authentication result is “normal”, and when not stored, the server authentication unit 13 determines that the authentication result is “abnormal” (step S103). The server authentication unit 13 outputs the authentication result to the remote control unit 14.

  When the authentication result is “normal” (step S103 = Yes), the remote control unit 14 transmits the authentication determination result “normal” to the server control unit 21 of the blade server device 2 (step S104). When receiving the authentication determination result, the server control unit 21 stores the result “normal” in the authentication determination storage unit 24 (step S105). When the server control unit 21 stores the authentication determination, the power supply control unit 22 refers to the authentication determination storage unit 24 and detects that the authentication result is “normal”. Then, the power supply control unit 22 controls the blade server device 2 to start up normally (step S106). For example, the power control unit 22 supplies power to the HDD controller 30 and the network controller 31 and outputs an instruction signal to supply power to the HDD 42 to the HDD power supply unit 32. Further, the power control unit 22 outputs an instruction signal to supply power to the memory 43 to the memory power supply unit 33.

  When the authentication result is not normal (step S103 = No), the remote control unit 14 transmits the authentication determination result “abnormal” to the server control unit 21 of the blade server device 2 (step S107). Upon receiving the authentication determination result, the server control unit 21 stores the result “abnormal” in the authentication determination storage unit 24 (step S108). When receiving a signal indicating that the authentication determination result is stored from the server control unit 21, the power supply control unit 22 refers to the authentication determination storage unit 24 and detects that the authentication result is not “normal”. Then, the power supply control unit 22 controls to stop the activation of the own device (blade server device 2) (step S109). That is, in this case, no power is applied.

  Next, the power control unit 22 determines whether or not the blade server device 2 is powered on (step S110). When the power control unit 22 detects that the power of the blade server device 2 has been turned on despite the result stored in the authentication determination storage unit 24 being “abnormal” (step S110 = Yes), the power control unit 22 Performs invalidation processing of various devices and stops power supply to the storage unit storing important data such as an HDD and a memory (step S111). More specifically, the power supply control unit 22 performs invalidation processing of all devices such as an HDD controller and a network controller in POST (Power On Self Test). Device invalidation means, for example, a setting that does not recognize various devices in the BIOS setting. In addition, the power control unit 22 outputs an instruction signal to the HDD power supply unit 32 so as not to supply power to the HDD 42. In addition, the power control unit 22 outputs an instruction signal to the memory power supply unit 33 so as not to supply power to the memory 43. The HDD power supply unit 32 and the memory power supply unit 33 to which the instruction signal is input control so as not to supply power to the HDD or the memory by turning off a circuit switch, for example. As a result, even if the power is illegally turned on by a third party, it is possible to prevent the blade server device 2 from being activated and prevent information such as the HDD and the memory from leaking out.

When the user presses the power switch 25 and the result stored in the authentication determination storage unit 24 is “abnormal”, the power control unit 22 detects that the blade server device 2 is turned on. It will not be in a state to do. This is because when the user presses the power switch 25, an authentication process is performed. If the result of the authentication process is not "normal", the power control unit 22 does not apply power, Therefore, the power control unit 22 does not detect that the power is turned on. On the other hand, although the result stored in the authentication determination storage unit 24 is not “normal”, the state in which the power supply control unit 22 detects that the blade server device 2 is turned on is, for example, a power supply This indicates that the power is turned on forcibly or illegally using some means such as applying a power supply device to the circuit. The processes in steps S110 and S111 are intended to prevent unauthorized server activation in such a case and thereby prevent access to data.
Note that if the power supply control unit 22 does not detect power-on by any means (step S110 = No), the process flow ends.

  According to the present embodiment, even when the blade server device 2 is powered on by an unauthorized operation, the authentication determination storage unit 24 is referred to. If the authentication result is not “normal”, various devices are invalidated, Furthermore, power supply to the storage unit can be stopped. As a result, it is possible to prevent leakage of information stored in the blade server device 2 when the blade server is taken out and started up, or when it is started up without performing formal authentication processing.

  In FIG. 3, the processing when the blade server device 2 is forcibly started after the formal authentication processing has been described has been described. For example, the blade server device 2 is extracted from the enclosure and moved to another location. The effect of the present embodiment is effective even when it is taken out and activated without being connected to the management module 1. In such a case, when the blade server device 2 is taken out of the enclosure, it is assumed that the power is not turned on. Then, the information stored in the volatile authentication determination storage unit 24 is deleted at that time. Next, even if a third party forcibly turns on the blade server device 2 elsewhere, the result of authentication does not become “normal” because it is not connected to the management module 1. Accordingly, at that time, the authentication determination storage unit 24 does not store the “normal” authentication result. Therefore, even in such a case, the power supply control unit 22 executes invalidation processing of various devices and the like, similarly to steps S110 to S111 in FIG.

<Second Embodiment>
The server device according to the second embodiment of the present invention will be described below with reference to FIG.
FIG. 4 is a diagram illustrating an example of the configuration of a system including a server device according to the second embodiment.
As shown in FIG. 4, the blade server device 2 according to the present embodiment includes an HDD data invalidation unit 34 instead of the HDD power supply unit 32. Further, the blade server device 2 according to the present embodiment includes a memory data invalidation unit 35 instead of the memory power supply unit 33. Other configurations are the same as those of the first embodiment.

The HDD data invalidation unit 34 performs processing for invalidating data stored in the HDD 42 based on an instruction from the power supply control unit 22.
The memory data invalidation unit 35 performs a process of invalidating data stored in the memory 43 based on an instruction from the power supply control unit 22.
It is assumed that the HDD data invalidation unit 34 includes a circuit that can access the HDD and perform data deletion and rewriting even after invalidation processing of various devices. The same applies to the memory data invalidation unit 35.

  Next, the operation of the blade server device 2 in the second embodiment will be described. That is, in step S111 in FIG. 3, the power supply control unit 22 performs invalidation processing for all devices such as the HDD controller. In addition, the power control unit 22 instructs the HDD data invalidation unit 34 to invalidate the data stored in the HDD 42. Then, the HDD data invalidation unit 34 accesses the HDD 42 and deletes the data recorded in the HDD 42. The power supply control unit 22 instructs the memory data invalidation unit 35 to invalidate the data stored in the memory 43. Then, the memory data invalidation unit 35 accesses the memory 43 and deletes the data recorded in the memory 43. Other processes are the same as those of the first embodiment described with reference to FIG.

According to the present embodiment, the power control unit 22 deletes the data recorded in the storage unit such as the HDD or the memory when the forced power-on is detected, thereby achieving the effect of the first embodiment. In addition, information leakage can be prevented more powerfully.
Note that the HDD data invalidation unit 34 may perform a process of generating a random number instead of erasing the data in the HDD 42 and writing the random number into the HDD 42 to rewrite the data. The same applies to the memory data invalidation unit 35.

<Third embodiment>
FIG. 5 is a diagram showing an example of the configuration of a system including a server device according to the third embodiment of the present invention.
Hereinafter, the present embodiment will be described with reference to FIG.
The system including the server device according to the present embodiment is not a blade server system but a server system in which other rack mount servers and micro servers are connected to each other via a network. Note that the network of this embodiment includes wired and wireless. One of the servers is the management server device 1 that monitors the system, and includes a server authentication information storage unit 12, a server authentication unit 13, and a remote control unit 14. The other server device 2 has the same function unit as the blade server device 2 of the first embodiment. Normally, when the power is turned on, the server authentication information is transmitted to the management server device 1 and the server An authentication result by the authentication unit 13 is received. The subsequent steps are the same as those in the first embodiment and the second embodiment.

That is, even if it tries to start the server device 2 in a state where it is not connected to the management server device 1 or if it is connected to the management server device 1 and the authentication result becomes abnormal, it tries to start the server forcibly. In the same manner as in the first embodiment, the server device 2 performs control such that the power control unit 22 of the server device 2 performs device invalidation processing and the HDD power supply unit 32 stops power supply to the HDD. 2 is not activated, and a third party who has performed unauthorized activation cannot access the data. Since the memory power supply unit 33 performs the same processing for the memory, a third party cannot access the data stored in the memory.
Further, when the server device 2 has the same configuration as that of the second embodiment, in addition to the device invalidation by the power control unit 22, the HDD data invalidation unit 34 erases the HDD data. Process to prevent data leakage more powerfully. Furthermore, since the memory data invalidation unit 35 performs the same processing on the memory, it is possible to prevent leakage of data from the memory.

  According to this embodiment, even in a server system using a general PC server or the like instead of the blade server system, the risk of data leakage from the server device due to unauthorized power-on can be reduced.

<Other embodiments>
Further, the server authentication information storage unit 12 used by the management server device 1 for authentication processing is stored in a storage medium or a storage device that can be attached to and detached from the management server device 1 and connected to the management server device 1 during authentication. An embodiment in which the storage medium is removed during operation (after completion of server startup) is also conceivable. The removable storage medium is, for example, an SD card or USB. This makes it possible to ensure security even when a set of systems is stolen.

  In addition, as a storage unit that is a target for stopping power supply or invalidating data, as a device other than an HDD and a memory, a backup device such as an SSD (Solid State Drive) or LTO (Linear Tape-Open) Is applicable.

  The HDD power supply unit 32 and the memory power supply unit 33 are examples of the power supply unit. The HDD data invalidation unit 34 and the memory data invalidation unit 35 are examples of the data invalidation unit. The HDD and the memory are examples of a storage unit. Communication cables and networks are examples of communication paths.

  The above-described management server device 1 (management module 1) and server device 2 (blade server device 2) have a computer inside. Each process of the management server device 1 and the server device 2 described above is stored in a computer-readable recording medium in the form of a program. When the computer reads and executes this program, the above processing is performed. Done. Here, the computer-readable recording medium means a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like. Alternatively, the computer program may be distributed to the computer via a communication line, and the computer that has received the distribution may execute the program.

  The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, what is called a difference file (difference program) may be sufficient.

  A part or all of the above embodiment can be described as in the following supplementary notes, but is not limited thereto.

(Supplementary note 1) An authentication determination storage unit that stores the result of authentication performed on another device connected through a communication path to determine whether or not to start the server device, and the authentication result stored in the authentication determination storage unit is normal If not, a server apparatus comprising: a power control unit that performs a process of disabling a device included in the server when power-on to the server is detected.

(Additional remark 2) It further has a power supply part which controls supply of the power supply to the memory | storage part which stores data, and when the said power supply control part performs the said invalidation process, the said power supply part is a power supply to a memory | storage part The server apparatus according to supplementary note 1, wherein the server device is not supplied.

(Supplementary Note 3) The supplementary note 1 or supplementary note 2, further comprising a data invalidation unit that performs a process of invalidating data stored in the storage unit when the power supply control unit performs the invalidation process. Server device.

(Supplementary note 4) The server device according to any one of supplementary notes 1 to 3, wherein the authentication determination storage unit is a volatile register.

(Supplementary note 5) The server device according to supplementary note 3, wherein the process of invalidating the data is erasing data or rewriting data.

(Supplementary Note 6) Information necessary for authentication performed by the other device is stored in a detachably connected storage medium, and the storage medium is connected to the other device only at the time of authentication. The server apparatus according to any one of appendix 1 to appendix 5, wherein the server apparatus performs authentication by reading information necessary for authentication from the storage medium, and the authentication determination storage unit stores the authentication result. .

(Additional remark 7) The result of the authentication performed whether it starts with the other apparatus connected by the communication path whether the server apparatus is started is stored, and when the stored authentication result is not normal, the power to the server A method for controlling a server apparatus, comprising: when a loading is detected, a device invalidation process included in the server.

(Supplementary note 8) The server device according to any one of supplementary notes 1 to 6, and a management server device connected to the server device, wherein the management server device receives information necessary for authentication from the server device When the authentication result is normal, the server device starts up its own device, and when the authentication result is abnormal, the server device stops the start-up of its own device. A server apparatus power control system.

1 ... management server device 1
2 ... Server device 2
DESCRIPTION OF SYMBOLS 12 ... Server authentication information storage part 13 ... Server authentication part 14 ... Remote control part 21 ... Server control part 22 ... Power supply control part 23 ... Server authentication information reception part 24 ... Authentication determination storage unit 25 ... power switch 30 ... HDD controller 31 ... network controller 32 ... HDD power supply unit 33 ... memory power supply unit 34 ... HDD data invalidation unit 35: Memory data invalidation unit 42: HDD
43 ... Memory

Claims (8)

An authentication determination storage unit for storing a result of authentication as to whether or not to start the server device, which is performed by another device connected through a communication path;
When the authentication result stored in the authentication determination storage unit is not normal, when detecting power-on to the server, a power control unit that performs device invalidation processing included in the server;
A server device comprising: A power supply unit that controls supply of power to a storage unit that stores data;
The server device according to claim 1, wherein, when the power control unit performs the invalidation process, the power supply unit does not supply power to the storage unit. The server according to claim 1, further comprising: a data invalidation unit that performs a process of invalidating data stored in the storage unit when the power supply control unit performs the invalidation process. apparatus. The server device according to any one of claims 1 to 3, wherein the authentication determination storage unit is a volatile register. The server apparatus according to claim 3, wherein the process of invalidating the data is erasing data or rewriting data. Information necessary for authentication performed by the other device is stored in a detachably connected storage medium, and the storage medium is connected to the other device only at the time of authentication, and the other device is the storage medium. The server apparatus according to any one of claims 1 to 5, wherein information necessary for authentication is read from the server to perform authentication, and the authentication determination storage unit stores the authentication result. Stores the result of authentication on whether to start the server device, which was performed on another device connected via the communication path,
When the stored authentication result is not normal, if a power-on to the server is detected, device invalidation processing of the server is performed. The server device according to any one of claims 1 to 6,
A management server device connected to the server device;
With
The management server device receives information necessary for authentication from the server device, performs authentication processing,
If the result of the authentication is normal, the server device starts its own device, and if the result of the authentication is abnormal, the server device stops starting its own device. .

Images