1317094 九、發明說明： 【發明所屬之技術領域】 本發明是有關於一種系統管理基本輸入/輸出系、统t 維護方法，且特別是有關於一種系統管理基本輸入/輪出 系統的加密與授權方法。 【先前技術】 系統管理基本輸入/輸出系統（System Management Basic Input/Output System; SMBIOS)係存放於基本輸出入 系統（Basic Input/Output System ; BIOS)的 SMBIOS 區塊之 中，其紀錄有各種關於電腦系統硬體組態的資料，例如 BIOS的版本資訊、電腦系統的通用辨識編號（universal unique identifier ; UUID)、主機板的製造廠商名以及產品 序號、中央處理器的規格、主記憶體及快取記憶體的大小 以及資料傳輸介面插槽的使用狀況等等，以方便電腦系統 的管理。 為了確保電腦系統的穩定，系統管理者大多不希望使 用者任意更動SMBIOS區塊内的資料。然而，在習知的電 腦系統中，只要使用者能正確使用BIOS所提供的函數，更 新SMBIOS並不是一件困難的工作。 為了不讓使用者任意更動SMBIOS，目前的作法是完 全封鎖不讓使用者及系統管理者更改SMBIOS。依照這種 作法，即便是系統管理者也無從更新SMBIOS，此將造成 系統管理者管理上的困難。因此，目前並沒有一種方法是 可以根據使用者的身份來授與SMBIOS的更新權限。換言 5 1317094 之，目前沒有一種作法是僅允許系統管理者管理更新 SMBIOS ’並禁止一般使用者更新SMBI〇s。 因此，如何提供一種SMBIOS之維護方法，其可讓系 統管理者與一般使用者擁有不同的SMBIOS更新權限，是 電腦相關產業的廠商、販售者及使用者所殷殷企盼。 【發明内容】 因此本發明一方面:y尤是在提供一種SMBIOS之維護方 法，其可授予系統管理者與一般使用者不同SMBI〇s的更 新權限。 依照本發明一較佳實施例，一種SMBI〇s之維護方法 包含下列步驟：f先，接收一更新請纟，以通知電腦系統 準備更新儲存於SMBIOS區塊中之至少一特定欄位。接 著，自電腦系統之輸入裝置讀取使用者密碼，並比對使用 者密碼與預設密碼。最後，當使用者密碼與預設密碼相同 時’更新特定襴位。 本發明另一方面是在提供SMBI〇s之維護系統，應用 此系統對SMBIOS進行更新時，將先根據使用者所輸入的 密碼來判定使用者的身份，再據此決定SMBIOS的更新權 限。 依照本發明另一較佳實施例，一種SMBI〇s之維護系 統係由接Μ組、記錄媒體、比對模組及更新模組所組成。 其中，接收模組係用以接收更新請求，此更新請求係用以 通知電腦系統準備更新儲存於SMBIOS區塊中的至少一特 疋欄位。記錄媒體係用以記錄預設密碼。比對模組則在接 1317094 收模組完成作業之後，自電腦系統之輸入裝置讀取使用者 密碼，並比對使用者密碼與預設密碼是否相同。而更新模 組係在使用者密碼與預設密碼相同時，更新上述之特定欄 位。 综以上所述，本發明僅在使用者密碼與預設密碼相同 時，方允許使用者對SMBIOS區塊中的特定欄位進行更 新。是故，應用本發明可讓知悉預設密碼的系統管理者有 權限更新SMBIOS，並同時防止一般使用者任意更新 SMBIOS。 【實施方式】 為了能夠明確地說明本發明的實施方式，請首先參照 第1A圖，其繪示BIOS ROM的資料配置圖。在第1A圖中’ SMBIOS 資料 122 係儲存於 BIOS ROM 100 的 SMBIOS 區 塊120中。SMBIOS資料122内區分為複數個欄位，分別 記錄著各種關於電腦系統硬體組態的資料，例如：中央處 理器（Central Processing Unit ; CPU)的速度及動態隨機存 取記憶體（Dynamic Random Access Memory ; DRAM)的容 量。 參照第2A圖，其係繪示依照本發明一較佳實施例之 SMBIOS之維護方法的流程圖。此SMBIOS之維護方法包 含下列步驟：首先，接收一更新請求，以通知電腦系統準 備更新儲存於SMBIOS區塊（如第1A圖所繪示之SMBIOS 區塊120)中之至少一特定欄位（步驟210)。接著，自電腦系 統之輸入裝置讀取使用者密碼，並比對使用者密碼與預設 7 1317094 岔碼（步驟220)。最後’當使用者密碼與預設密碼相同時， 更新特定攔位（步驟230)。而當使用者密碼與預設密碼不符 吩，電腦系統係可顯示一拒絕訊息來提示使用者，他所輪 入的使用者密碼與預設密碼不符。如以上所述，本實施例 所提供的維護方法僅在使用者密碼與預設密碼相同時，方 允許使用者對SMBIOS區塊中的特定欄位進行更新。換言 之，本實施例之維護方法可授予知悉預設密碼的系統管理 者與一般使用者不同SMBIOS的更新權限。 瞻 參照第1B圖，其繪示依照本實施例之記錄媒體的資料 配置圖。在本實施例中，上述之預設密碼14〇係可預先儲 存於一記錄媒體105中，而此記錄媒體1〇5係可為電腦系 統之BIOS ROM或CMOS。此外，預設密碼14〇係可與進 入BIOS設定的密碼相同’以節省記錄媒體的空間。 參照第2B圖，其係繪示依照本發明另一較佳實施例之 系統管理基本輸入/輸出系統之維護方法的流程圖。在第 2B圖中，此維護方法在更新特定欄位（步驟23〇)前，將先 • 根據一管理員保護資料來判斷是否允許更新此特定欄位 (步驟250)。 參照第1A圖，此管理員保護資料13〇係可預先儲存於 BIOS ROM 100中。當然，此管理員保護資料亦可儲存於 SMBIOS區塊120之保留區域124中，使用者當視當時需 要彈性選擇其實施方式。 參照第1C圖’其中第1C圖係繪示依照第1A圖之管 理員保護資料130及SMBIOS資料122關係示意圖。在第 1C圖中，管理員保護資料i 3〇可分為複數個攔位丨33八， 8 1317094 其可以正面表列的方式列出SM則s f料122中允許使用 者更新的特定攔位125/126。當然，管理貝㈣資料亦可以 負=表列的方式列出SMBIOS資料中不允許使用者更新的 特疋攔位。此外，管理員保護f料亦可列出s]y[Bi〇s資料 中的所有攔位，並註記其是否允許更新。 在第2B圖中，當管理員保護資料允許使用者更新 ^MBIQS資料中之特定欄位時，使用者係可直接更新此特 ①攔位（步驟26G) ’而無須需比對使用者密碼與預設密碼。 • 但#管理貢保護資料*允許使用者更新SMBIQS資料中之 特定棚位時’則電腦系統將要求使用者輸入使用者密碼， 並$對使用者密碼與預設密碼使否相符（步驟22〇)。當使用 者密碼與預設密碼符合時，使用者方可更新上述之特定搁 位（步驟23G)。反之，當❹者密碼與預設密碼不符時，則 電腦系統將顯示拒絕訊息來提示使用者（步驟24〇)。換言 對於苔理員保§蒦資料允許使用者更新的欄位，即便是 =知道預設密碼的一般使用者亦可進行更新，但對於管理 • 貞保瘦貢料不允許使用者更新的攔位，則只有知悉預設密 碼的系統管理者方可進行更新。如此可讓知悉預設密碼的 系統皆理者與一般使用者擁有不同的SMBIOS更新權限， 而非化全不允許一般使用者進行更新。 / 、第2C圖，其係繪示依照本發明再一較佳實施例之 系統S理基本輸入/輸出系統之維護方法的流程圖。在本 實=例中，在接收更新請求後，將先要求使用者輸入使用 者密碼，並比對使用者密碼與預設密碼是否相符（步驟 20)。右使用者密碼與預設密碼相符，使用者係可直接更 1317094 。MBIOS資料中之特定欄位（步驟23⑴，而無須查詢管理 二保護資料。但當使用者密碼與預設密碼*相符時，則根 據管理員保護資料來決定是否允許使用者更新特定搁位 v驟250)。若f理員保護資料允許使用者更新特定搁位， 則使用者可對此特定攔位進行更新（步驟260)。反之，若管 ^員保護資料不允許使用者更新特錢位，則電腦系統將 j不拒絕訊息來提示使用者（步驟270)。換言之，知悉預設 费碼的系統管理者將擁有完整的SMBIOS更新權限，而不 知道預設密碼的-般使用者只能對管理員保護資料允許更 新的欄位進行更新。 參照第3A圖’其係繪示依照本發明—較佳實施例之 SMBIOS之維護系統的功能方塊圖。此smbi〇s之維護系 ，係由接收模組310、記錄媒體32〇、比對模址33〇及更新 核組350所組成。纟中，接收模組31()係用以接收更新請 求，此更新請求係用以通知電腦系统準備更新儲存於 SMBI0S區塊中的至少一特定攔位。記錄媒體32〇係用以 記錄預設密碼。比對模組33()則在接收模組3ig完成作業 之後，自電腦系統之輸入裝置34〇讀取使用者密碼，並比 對使用者密碼與預設密碼是否相同。而更新模組係在 使用者密碼與預設密碼相同時，更新上述之㈣搁位 參照第3B ®，其係繪示依照本發明另—較佳實施例之 SMBIOS之維護系統的功能方塊圖。在本實施例中，一管 理員保護資料係可儲存於BIOS R〇M 36〇中。而一判斷模 組370係可在接收更新請求後，根據管理μ護資料來= 斷疋否允终更新上述之特定欄位。更具體地說，當管理員 1317094 保護資料允許更新特定 碼是否相同，使用者均可藉:更密碼與預設密 定攔位。但當管理員伴/^新拉組350更新上述之特 用本口 一山 保護資料不允許更新特定攔位時，使 用：^猎由輸入使用者密碼，並經過比對模組BO比對 m更新此特定欄位。如此一來，知悉預設密碼的 官理者與一般使用者將擁有不同# S贿OS更新權 限’而非完全不允許-般使用者進行更新α 上述之管理員保護資料除了可預先儲存於BIOS R0M 360中’此管理員保護資料更可儲存於聰⑽區塊之保 留區域中。此外，管理員保護資料係可以正面表列的方式 =出SMBIOS貝料中允許使用者更新的特㈣位。當然， 官理員保護資料亦可以負面表列的方式列出細跳資料 中不允斗使用者更新的特定攔位。此外，管理員保護資料 亦可列出SMBIOS資料中的所有攔位，並註記其是否允許 更新再者，此管理員保護資料係可加密保護，以避免— 般使用者任意竄改。 同樣地，用以記錄預設密碼之記錄媒體32〇係可為電 腦系統之BIOS ROM或CMOS。此外，上述之預設密碼係 可與進入BIOS設定的密碼相同，以節省記錄媒體的空間。 由上述本發明較佳實施例可知，應用本發明具有下列 優點。 U)可讓知悉預設密碼的系統管理者與一般使用者擁有 不同SMBIOS的更新權限。 (2)可適度地開放一般使用者更新SMBIOS資料中的某 些欄位，並非全然不允許使用者進行更新。 11 1317094 雖然本發明已以一較佳實施例揭露如上，然其並非用 以限定本發明，任何所屬技術領域中具有通常知識者，在 不脫離本發明之精神和範圍内，當可作各種之更動與潤 飾，因此本發明之保護範圍當視後附之申請專利範圍所界 定者為準。 【圖式簡單說明】 為讓本發明之上述和其他目的、特徵、優點與實施例 能更明顯易懂，所附圖式之詳細說明如下：1317094 IX. Description of the Invention: [Technical Field] The present invention relates to a system management basic input/output system, a maintenance method, and in particular to a system management basic input/rounding system encryption and authorization method. [Prior Art] The System Management Basic Input/Output System (SMBIOS) is stored in the SMBIOS block of the Basic Input/Output System (BIOS). Computer system hardware configuration information, such as BIOS version information, computer system universal identification number (universal unique identifier; UUID), motherboard manufacturer name and product serial number, CPU specification, main memory and fast Take the size of the memory and the usage of the data transfer interface slot to facilitate the management of the computer system. In order to ensure the stability of the computer system, most system administrators do not want the user to arbitrarily change the data in the SMBIOS block. However, in the conventional computer system, updating the SMBIOS is not a difficult task as long as the user can correctly use the functions provided by the BIOS. In order not to let the user change the SMBIOS arbitrarily, the current practice is to completely block the user and the system administrator from changing the SMBIOS. According to this approach, even system administrators cannot update SMBIOS, which will cause difficulties for system administrators to manage. Therefore, there is currently no way to grant SMBIOS update rights based on the identity of the user. In other words, 5 1317094, there is currently no way to allow only system administrators to manage the update of SMBIOS and prohibit general users from updating SMBI〇s. Therefore, how to provide a maintenance method for SMBIOS, which allows system administrators to have different SMBIOS update rights from general users, is a high hope for manufacturers, vendors and users of computer-related industries. SUMMARY OF THE INVENTION Accordingly, an aspect of the present invention is to provide an SMBIOS maintenance method that grants system administrators different access rights to SMBIs than general users. According to a preferred embodiment of the present invention, a method for maintaining an SMBI〇s includes the steps of: f receiving an update request to notify the computer system to prepare to update at least one specific field stored in the SMBIOS block. Next, the user password is read from the input device of the computer system, and the user password and the preset password are compared. Finally, when the user password is the same as the preset password, the specific location is updated. Another aspect of the present invention is to provide a maintenance system for the SMBI〇s. When the system is used to update the SMBIOS, the user's identity is first determined based on the password entered by the user, and then the SMBIOS update authority is determined accordingly. According to another preferred embodiment of the present invention, a maintenance system of the SMBI〇s is composed of an interface group, a recording medium, a comparison module, and an update module. The receiving module is configured to receive an update request, and the update request is used to notify the computer system to prepare to update at least one special field stored in the SMBIOS block. The recording medium is used to record a preset password. The comparison module reads the user password from the input device of the computer system after the completion of the operation of the module 1317094, and compares the user password with the preset password. The update module updates the specific field described above when the user password is the same as the default password. In summary, the present invention allows the user to update a specific field in the SMBIOS block only when the user password is the same as the preset password. Therefore, the application of the present invention allows the system administrator who knows the default password to have the authority to update the SMBIOS while preventing the general user from arbitrarily updating the SMBIOS. [Embodiment] In order to clearly explain an embodiment of the present invention, first referring to FIG. 1A, a data configuration diagram of a BIOS ROM is shown. In Fig. 1A, the 'SMBIOS data 122' is stored in the SMBIOS block 120 of the BIOS ROM 100. The SMBIOS data 122 is divided into a plurality of fields, and records various data about the hardware configuration of the computer system, for example, the speed of the central processing unit (CPU) and the dynamic random access memory (Dynamic Random Access) Memory; DRAM) capacity. Referring to FIG. 2A, a flow chart of a method for maintaining a SMBIOS in accordance with a preferred embodiment of the present invention is shown. The maintenance method of the SMBIOS includes the following steps: First, receiving an update request to notify the computer system to prepare to update at least one specific field stored in the SMBIOS block (such as the SMBIOS block 120 shown in FIG. 1A) (steps) 210). Next, the user password is read from the input device of the computer system, and the user password is compared with the preset 7 1317094 weight (step 220). Finally, when the user password is the same as the preset password, the specific block is updated (step 230). When the user password does not match the preset password, the computer system can display a rejection message to prompt the user that the user password he entered does not match the preset password. As described above, the maintenance method provided in this embodiment allows the user to update a specific field in the SMBIOS block only when the user password is the same as the preset password. In other words, the maintenance method of this embodiment can grant the system administrator who knows the preset password different update authority from the general user. Referring to Fig. 1B, there is shown a data configuration diagram of a recording medium according to the present embodiment. In this embodiment, the preset password 14 can be pre-stored in a recording medium 105, and the recording medium 1〇5 can be a BIOS ROM or CMOS of a computer system. In addition, the default password 14 can be the same as the password entered into the BIOS to save space on the recording medium. Referring to Figure 2B, there is shown a flow chart of a method of maintaining a system management basic input/output system in accordance with another preferred embodiment of the present invention. In Figure 2B, this maintenance method will first determine whether to allow the update of this particular field based on an administrator protection profile (step 250) before updating the particular field (step 23〇). Referring to FIG. 1A, this administrator protection material 13 can be stored in the BIOS ROM 100 in advance. Of course, the administrator protection data can also be stored in the reserved area 124 of the SMBIOS block 120, and the user needs to flexibly select the implementation mode at that time. Referring to FIG. 1C', FIG. 1C is a schematic diagram showing the relationship between the administrator protection data 130 and the SMBIOS data 122 in accordance with FIG. In the 1C figure, the administrator protection data i 3 can be divided into a plurality of blocks 丨 33 eight, 8 1317094, which can list the specific blocks 125 in the sf material 122 that allow the user to update in the form of a front table. /126. Of course, the management of the (four) data can also be listed in the form of a negative = list of special features in the SMBIOS data that are not allowed to be updated by the user. In addition, the administrator can also list all the blocks in the s]y[Bi〇s data and note whether it is allowed to update. In FIG. 2B, when the administrator protection data allows the user to update a specific field in the ^MBIQS data, the user can directly update the special 1 block (step 26G)' without having to compare the user password with Default password. • However, when the user manages the specific information in the SMBIQS data, the computer system will ask the user to enter the user password, and the user password will match the default password (step 22〇 ). When the user password matches the preset password, the user can update the specific placement described above (step 23G). Conversely, when the password of the latter does not match the default password, the computer system will display a rejection message to prompt the user (step 24). In other words, the field that allows the user to update the information of the escrow staff, even if the general user who knows the default password can be updated, but for the management • 贞 瘦 贡 贡 不允许 不允许 不允许 不允许 不允许, only the system administrator who knows the default password can update. In this way, the system that knows the default password has different SMBIOS update rights from the general user, and the non-distribution does not allow the general user to update. / 2C, which is a flow chart showing a method of maintaining a basic input/output system of a system according to still another preferred embodiment of the present invention. In the actual example, after receiving the update request, the user is first required to input the user password and compare the user password with the preset password (step 20). The right user password matches the default password, and the user can directly access 1317094. The specific field in the MBIOS data (step 23 (1), without querying the management second protection data. However, when the user password matches the preset password*, it is determined according to the administrator protection data whether to allow the user to update the specific position. 250). If the F protection data allows the user to update a particular position, the user can update the particular position (step 260). On the other hand, if the administrator protection data does not allow the user to update the special money position, the computer system will not prompt the user to reject the message (step 270). In other words, the system administrator who knows the default code will have full SMBIOS update rights, and the general user who knows the default password can only update the field that the administrator protection data allows. Referring to Figure 3A, there is shown a functional block diagram of a SMBIOS maintenance system in accordance with the present invention. The maintenance system of the smbi〇s is composed of a receiving module 310, a recording medium 32〇, a comparison template address 33〇, and an update core group 350. In the middle, the receiving module 31() is configured to receive an update request, and the update request is used to notify the computer system to prepare to update at least one specific block stored in the SMBI0S block. The recording medium 32 is used to record a preset password. The comparison module 33() reads the user password from the input device 34 of the computer system after the receiving module 3ig completes the job, and compares whether the user password and the preset password are the same. The update module is updated when the user password is the same as the preset password, and the above-mentioned (4) shelf is referred to. Referring to FIG. 3B, which is a functional block diagram of the SMBIOS maintenance system according to another preferred embodiment of the present invention. In this embodiment, an administrator protection data system can be stored in the BIOS R〇M 36〇. And a judging module 370 can update the specific field mentioned above according to the management information after receiving the update request. More specifically, when the administrator 1317094 protects the data to allow the update of the specific code to be the same, the user can borrow: a password and a preset password. However, when the administrator companion / ^ Xinla group 350 updates the above-mentioned special use of this port, the mountain protection data does not allow updating of the specific block, use: ^ hunting by inputting the user password, and comparing the comparison module BO Update this specific field. In this way, the administrator and the general user who knows the default password will have different #S bribe OS update rights' instead of not allowing the general user to update. The above administrator protection data can be stored in the BIOS in advance. In R0M 360, 'this administrator protection data can be stored in the reserved area of the Cong (10) block. In addition, the administrator protection data can be listed in front of the table = the special (four) bits in the SMBIOS bezel that allow the user to update. Of course, the official protection information can also list the specific barriers in the fine-hop data that are not allowed to be updated by the user. In addition, the administrator protection data can also list all the blocks in the SMBIOS data, and note whether it is allowed to update. This administrator protection data can be encrypted and protected to avoid any user tampering. Similarly, the recording medium 32 for recording the preset password can be a BIOS ROM or CMOS of the computer system. In addition, the above-mentioned default password can be the same as the password entered into the BIOS to save space on the recording medium. It will be apparent from the above-described preferred embodiments of the present invention that the application of the present invention has the following advantages. U) allows the system administrator who knows the default password to have different SMBIOS update permissions than the general user. (2) It is possible to appropriately open the general user to update some fields in the SMBIOS data, and does not completely prohibit the user from updating. The present invention has been disclosed in a preferred embodiment as described above, and is not intended to limit the invention, and it is intended to be within the spirit and scope of the invention. The scope of protection of the present invention is defined by the scope of the appended claims. BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features, advantages and embodiments of the present invention will become more apparent and understood.
第1A圖係繪示依照本發明一較佳實施例之BIOS ROM 的資料配置圖。 第1B圖係繪示依照本發明一較佳實施例之記錄媒體 的資料配置圖。 第1C圖係繪示依照第1A圖之管理員保護資料130及 SMBIOS資料122關係示意圖。 第2A圖係繪示依照本發明一較佳實施例之SMBIOS 之維護方法的流程圖。 第2B圖係繪示依照本發明另一較佳實施例之SMBIOS 之維護方法的流程圖。 第2C圖係繪示依照本發明又一較佳實施例之SMBIOS 之維護方法的流程圖。 第3A圖係繪示依照本發明一較佳實施例之SMBIOS 之維護系統的功能方塊圖。FIG. 1A is a diagram showing a data configuration of a BIOS ROM according to a preferred embodiment of the present invention. Fig. 1B is a diagram showing the data arrangement of a recording medium in accordance with a preferred embodiment of the present invention. FIG. 1C is a schematic diagram showing the relationship between the administrator protection data 130 and the SMBIOS data 122 according to FIG. 1A. 2A is a flow chart showing a method of maintaining an SMBIOS in accordance with a preferred embodiment of the present invention. 2B is a flow chart showing a method of maintaining an SMBIOS in accordance with another preferred embodiment of the present invention. 2C is a flow chart showing a method of maintaining an SMBIOS in accordance with still another preferred embodiment of the present invention. 3A is a functional block diagram of a maintenance system of an SMBIOS in accordance with a preferred embodiment of the present invention.
第3B圖係繪示依照本發明另一較佳實施例之SMBIOS 12 1317094 之維護系統的功能方塊圖。FIG. 3B is a functional block diagram of a maintenance system of SMBIOS 12 1317094 in accordance with another preferred embodiment of the present invention.
【主要元件符號說明】 100 ： BIOS ROM 120 : SMBIOS 區塊 124 :保留區域 126 :特定攔位 133 :欄位 140 :預設密碼 310 :接收模組 330 :比對模組 350 :更新模組 370 :判斷模組 105 :記錄媒體 122 : SMBIOS 資料 125 :特定欄位 130 :管理員保護資料 134 :欄位 210〜270 :步驟 320 :記錄媒體 340 :輸入裝置 360 ： BIOS ROM[Main component symbol description] 100 : BIOS ROM 120 : SMBIOS block 124 : reserved area 126 : specific block 133 : field 140 : preset password 310 : receiving module 330 : comparison module 350 : update module 370 : Judgment module 105 : Recording medium 122 : SMBIOS data 125 : Specific field 130 : Administrator protection data 134 : Fields 210 to 270 : Step 320 : Recording medium 340 : Input device 360 : BIOS ROM
1313