Bootloader Firmware Update Recovery Mechanism

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Firmware installation interruptions due to power outages cause devices to become unusable, and existing technologies lack the ability to automatically identify and correct firmware update failures, often requiring user intervention.

Innovation Solution

A bootloader mechanism that exposes the target hardware ID and uses a monitor device to detect devices in bootloader mode, automatically flashing matching firmware to prevent incorrect updates and ensure device recovery from power outages.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If firmware update is performed without interruption protection, then firmware can be updated, but power outage during update causes device to become unusable

Engineering Contradiction:

Improvefirmware update reliabilityVSAvoidpower outage impact

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary actions by saving the current firmware image to a first storage location before erasing it, and by creating a bootable backup image in a second storage location. This preliminary backup ensures that if power outage occurs during the update process, the device can still boot from the backup image and remain functional.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system prepares compensatory measures in advance by maintaining multiple firmware images in different storage locations (first storage location for current firmware, second storage location for bootable backup). This cushioning mechanism protects against the harmful effect of power outage by ensuring a fallback option is always available before the update proceeds.

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

2Extent of automation

If automatic firmware recovery mechanism is implemented, then device can self-correct from power outage, but device complexity increases

Engineering Contradiction:

Improveautomatic firmware recoveryVSAvoidbootloader and storage management complexity

Core Design Contradiction:

Extent of automationVSDevice complexity

Solution Approach 1:

The system enables self-service by implementing an automatic recovery mechanism where the bootloader autonomously detects firmware update failures and restores functionality without user intervention. The bootloader monitors the firmware update process, detects power outages or failures, and automatically boots from the backup image or restores the firmware, allowing the device to self-correct.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The bootloader acts as an intermediary between the firmware update process and the storage system. It manages the complex interactions between different storage locations, monitors update integrity, and coordinates the recovery process by selecting appropriate boot images or triggering firmware restoration, thereby handling the complexity centrally rather than分散ly.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If firmware update process is made robust against power outage, then device remains usable, but update time and process complexity increase

Engineering Contradiction:

Improvefirmware update robustnessVSAvoidfirmware update time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The firmware update process is segmented into distinct phases: (1) saving current firmware to first storage location, (2) erasing and writing new firmware, (3) verifying update success, and (4) booting from appropriate image. This segmentation allows the system to checkpoint at each stage and recover from power outages without repeating the entire update process, thereby reducing overall update time while maintaining robustness.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system maintains continuity of useful action by ensuring the device can always boot and remain functional throughout the firmware update process. By maintaining a bootable backup image in the second storage location and implementing automatic recovery, the device continues to provide useful service even during firmware updates, eliminating downtime and maintaining operational continuity.

Inventive Principle:

Principle #20Continuity of useful action

Data Source

PatentEP3080693B1Devices, updaters, methods for controlling a device, and methods for controlling an updater

Publication Date: 2019.07.24 RAZER ASIA PACIFIC

Figure 1~2
Figure 3
Figure 4~5

AI summary

According to various embodiments, a device may be provided. The device may include a bootloader; a memory configured to store firmware data for controlling the device; a processor configured to operate in a device operation mode or in a bootloader mode: and an interface. The device operation mode may be a mode in which the processor controls the bootloader to load the firmware data stored, in the memory. The bootloader mode may be a mode in which the processor controls the bootloader to send an identifier of the device using the interface, to receive firmware data using the interface and to store the firmware data in the memory.