BIOS Update Progress Visualization via Secure SPI Locks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing BIOS update process lacks sufficient progress visibility, leading to potential failures due to user-initiated reboots during updates, and security concerns arise from untrusted sources updating the BIOS.
Innovation Solution
A secure BIOS update method is implemented, using a shared SPI chip with locks and a random number shared secret key to ensure secure transfer and authentication of updated PEI program instructions, while displaying update progress on the screen, employing DXE's richer display capabilities and secure memory operations to prevent unauthorized changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If BIOS update progress is not displayed, then security is maintained by preventing unauthorized reboots, but user awareness of update status is lost
Solution Approach 1:
The patent introduces an intermediary progress display mechanism that communicates update status without compromising security. A progress bar or visual indicator is rendered on the display device, showing update progression while the actual BIOS update continues in the background with security protocols intact. This intermediary visual feedback layer allows users to monitor updates without providing attack vectors.
Solution Approach 2:
The patent creates a visual copy or representation of the update progress state without exposing the actual update process. Instead of displaying raw update data that could be exploited, the system generates a simplified visual copy (progress bar, percentage indicator) that conveys status information while maintaining security boundaries between the update process and user interface.
2Loss of information
If BIOS update process is made visible, then user awareness is improved, but risk of user-initiated reboots during update increases
Solution Approach 1:
The patent implements preliminary warnings and instructions displayed to users before and during the update process. The system preemptively communicates the risks of interruption and provides clear guidance about not powering off or rebooting the device. This preliminary action of informing users before the update fully begins helps prevent harmful user interventions.
Solution Approach 2:
The patent employs continuous feedback through progress indicators that show users how far along the update has progressed. This feedback loop keeps users informed without encouraging interruption, as they can see the update is actively progressing. The feedback mechanism is designed to reduce anxiety and misunderstanding about the update process, thereby reducing premature reboots.
3Ease of operation
If simple progress display is used, then ease of operation is improved, but insufficient information about update status is provided
Solution Approach 1:
The patent segments the progress display into multiple hierarchical levels. A primary simple progress bar provides immediate visual feedback for ease of understanding, while secondary detailed information is organized in segments such as phase indicators, step-by-step status messages, or expandable details. This segmentation allows users to consume information at their preferred depth without overwhelming the interface.
Solution Approach 2:
The patent adds another dimension to the progress display by incorporating temporal or spatial layers of information. For example, the display might show a main progress bar in one dimension and supplementary status details in another dimension (such as below or beside it). This dimensional approach maintains simplicity while providing comprehensive status information through layered presentation.
Data Source
AI summary
The update progress of a basic input/output system (BIOS) is displayed on a display screen. A first chipset lock is applied to a first region of a shared serial peripheral interface (SPI) chip of the BIOS of a computer system containing a first program of instructions. A system management memory mode lock is applied to a second and a third region of the shared SPI chip containing a second and third programs of instructions respectively. The second program of instructions is updated, and control of the BIOS is transferred to the updated second program of instructions. The updated second program of instructions updates the first program of instructions. The BIOS update progress visual is displayed on the display screen of the computer system while updating the first program of instructions.