Automated Firmware Recovery via Segmented Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information handling systems face challenges in efficiently restoring firmware data to a trusted state after corruption or malicious attacks, which can compromise platform and customer configuration settings.
Innovation Solution
A system and method are introduced that utilize an automated recovery mechanism. This mechanism involves detecting data corruption, extracting and validating recovery data from a storage device, decrypting and restoring BIOS and embedded controller firmware data into non-volatile random access memory, and ensuring the integrity and currency of the restored data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If firmware data is stored on the same storage device as the operating system, then storage efficiency is improved, but the risk of data corruption and malicious attacks increases
Solution Approach 1:
The patent divides the storage system into multiple independent components: a first storage device for operating system files and a second storage device specifically for firmware data. This segmentation isolates firmware data from potential corruption sources in the OS storage, reducing the harmful effects of data corruption while maintaining storage efficiency through dedicated allocation.
2Reliability
If firmware data is encrypted and stored separately, then data security is improved, but the complexity of data access and restoration increases
Solution Approach 1:
The patent implements preliminary encryption of firmware data before storage on the second storage device. By pre-encrypting the data and storing it in an encrypted state, the system ensures data security is maintained from the outset. The embedded controller automatically handles decryption during restoration operations, which manages the access complexity through automation rather than requiring complex manual procedures.
3Productivity
If automated recovery mechanism is implemented, then restoration speed is improved, but the device complexity increases
Solution Approach 1:
The patent implements an automated recovery mechanism where the embedded controller autonomously detects firmware corruption, extracts encrypted firmware data from the second storage device, decrypts it, and restores it to the target location without requiring external intervention. This self-service capability accelerates restoration speed while managing complexity through automation of the recovery process.
4Device complexity
If firmware data and operating system are stored together, then device simplicity is maintained, but the ability to recover from corruption without full system restore is reduced
Solution Approach 1:
The patent segments storage into distinct locations: operating system files on a first storage device and firmware data on a second storage device. This physical or logical separation enables independent recovery of firmware data without requiring restoration of the entire operating system, thereby improving recovery capability while maintaining relative system simplicity through modular storage architecture.
Data Source
AI summary
A basic input/output system (BIOS) determine whether an automated recovery mechanism is enabled in response to a detection of a data corruption. An embedded controller may extract recovery data from a storage device upon confirmation that the automated recovery mechanism is enabled. In response to verification that the recovery data is valid, the controller may decrypt a BIOS firmware data in the recovery data and push the BIOS firmware data into a non-volatile random access memory, and decrypt an embedded controller firmware data in the recovery data and push the embedded controller firmware data into the non-volatile random access memory.