Embedded System Application Installation and Execution Method
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Embedded systems, particularly those used in IoT devices, face challenges in dynamically installing and updating applications due to resource constraints, such as limited memory, which hinders their ability to adapt to new usage models, communication protocols, and security threats.
Innovation Solution
An embedded system apparatus comprising a processor, storage, and application management and execution programs that verify and install application metadata and programs in separate phases, allowing for secure installation and execution without requiring software rebuilds, even with limited storage capacity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If applications are statically configured during manufacturing, then system security and reliability are improved, but adaptability and ease of updating are worsened
Solution Approach 1:
The patent segments the application installation process into distinct phases: metadata verification phase and application verification phase. The metadata (which includes security certificates and installation instructions) is verified and installed first, then the actual application binary is verified separately and installed. This segmentation allows the system to maintain security through verified metadata while enabling adaptability through dynamic application updates.
Solution Approach 2:
The patent performs preliminary verification of application metadata before installing the actual application. The metadata is verified against security certificates and installed in advance, creating a secure framework that enables subsequent dynamic application installations without requiring full software rebuilds. This preliminary action ensures security while facilitating adaptability.
2Adaptability or versatility
If dynamic application installation is implemented, then adaptability is improved, but resource consumption and system complexity are worsened
Solution Approach 1:
The patent divides the installation facility into specialized components: a metadata verification module, an application verification module, and installation management logic. This segmentation allows each component to perform its specific function efficiently without requiring the entire system to be overly complex, enabling dynamic installation on resource-constrained embedded systems.
3Reliability
If full application verification is performed during installation, then security is improved, but installation time and processing resources are worsened
Solution Approach 1:
The patent segments verification into two distinct phases: metadata verification (which includes security certificate validation) and application binary verification. By verifying metadata first and caching verification results, the system reduces the time required for subsequent application installations while maintaining security through the initial thorough verification process.
Solution Approach 2:
The patent performs preliminary verification of metadata and caches the verification results. This preliminary action ensures security is established upfront, allowing subsequent application installations to proceed more quickly without repeating the full verification process, thus reducing installation time while maintaining security.
Data Source
AI summary
Apparatuses, methods and storage medium associated with installing and executing an application program on an embedded system are described herein. In embodiments, an embedded system may include an application management program and an application execution program to install an application program onto the embedded system. The application management program is to verify metadata associated with the application program, in response to a first request to install the application program on the embedded system; and the application execution program is to verify the application program, in response to a second request, subsequent to the first request, to verify the application program. Other aspects and embodiments may be described and/or claimed.