BIOS Flash Injection Without Reboot in Information Handling Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for updating BIOS in Information Handling Systems (IHS) require rebooting, which is time-consuming and disrupts user productivity.
Innovation Solution
A rebootless injection method for BIOS code is implemented using a secure payload delivery system that utilizes a hardware-based interrupt and Application Programming Interface (API) to inject updates into a flash memory without restarting the IHS, enabling updates to networking and telemetry features.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional BIOS update methods are used, then BIOS code can be updated, but the system requires rebooting which causes downtime and disrupts user productivity
Solution Approach 1:
The system prepares the flash memory with placeholder data and injection instructions before the actual payload is received. When an update is needed, the processor halts execution at the placeholder location and injects the new payload without requiring a system reboot, thus performing the update action in advance without causing downtime
Solution Approach 2:
The patent introduces a special placeholder data structure in the flash memory that acts as an intermediary between the old BIOS code and the new payload. This placeholder includes injection instructions that enable the processor to swap code segments without rebooting, thereby eliminating system downtime while maintaining update reliability
2Loss of time
If BIOS code is injected without rebooting, then system downtime is reduced, but security risks increase due to lack of restart validation
Solution Approach 1:
The system implements a feedback mechanism where the processor validates the injected payload against expected characteristics and monitors system behavior after injection. The placeholder data structure includes validation instructions that check the integrity of the injected code before activation, providing security feedback without requiring a reboot
Solution Approach 2:
Security validation is performed as a preliminary action before the payload is fully activated. The processor executes validation routines at the placeholder location to verify the injected code's integrity and compatibility with the system state, ensuring security is maintained even during rebootless updates
3Speed
If payload injection is performed during execution, then update speed increases, but system stability may be compromised due to interrupting current operations
Solution Approach 1:
The flash memory is segmented into code segments with designated placeholder locations that are isolated from active execution paths. The processor segments the injection process into distinct phases: halting at the placeholder, validating the payload, injecting the new code, and resuming execution. This segmentation allows fast injection while maintaining system stability by preventing interruptions to active operations
Solution Approach 2:
The processor performs a preliminary halt and validation action at the placeholder location before injecting the payload. This preliminary action ensures that the system state is stable and ready for injection, preventing disruptions to ongoing operations while maintaining fast update speed through direct memory writing at the predetermined location
Data Source
AI summary
Systems and methods for rebootless injection of Basic/Input Output (BIOS) code in an Information Handling System (IHS). In an illustrative, non-limiting embodiment, an IHS may include: a processor; and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the processor to: receive, by a Basic Input/Output System (BIOS) via an Application Programming Interface (API), a payload from a host Operating System (OS); and inject the payload into a selected area of a flash memory where the BIOS resides without restarting, rebooting, or powering off the IHS.