Firmware Redundancy for Reliable Field Upgrades
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic devices with processing units and firmware face challenges such as firmware update failures, corruption, and the lack of redundancy, which can lead to device instability and reduced reliability.
Innovation Solution
The implementation of an electronic device with a memory containing multiple copies of firmware, each capable of executing the device according to the TPM standard, along with a signature for validity checking and a program for starting the device. This setup allows for the selection and execution of the most recent valid firmware copy, ensuring device operation even in the presence of errors or updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple copies of firmware are stored in memory, then reliability is improved through redundancy, but device complexity increases
Solution Approach 1:
The patent implements multiple copies of firmware in memory, where each copy can independently execute device operations. This copying approach provides redundancy so that if one firmware copy becomes corrupted or invalid, the device can switch to another valid copy, thereby improving reliability without requiring complex error correction mechanisms
Solution Approach 2:
The firmware is segmented into multiple separate copies stored at different positions in memory. Each copy is independently valid and executable. This segmentation allows the system to isolate firmware errors to specific copies while maintaining operational capability through other copies, resolving the contradiction between reliability and complexity
2Adaptability or versatility
If firmware updates are performed, then adaptability is improved, but risk of corruption increases
Solution Approach 1:
Before performing a firmware update, the system prepares by storing multiple valid firmware copies in advance. When an update is needed, the system can switch to a pre-existing valid copy rather than attempting to write the new firmware directly, thereby maintaining adaptability while preventing corruption risks during the update process
Solution Approach 2:
The patent implements a cushioning mechanism where multiple valid firmware copies are maintained in memory before any update operation. This creates a safety buffer that prevents system failure during updates - if the current firmware becomes corrupted during updating, the device can immediately switch to another valid copy, thus cushioning against the inherent risks of firmware updates
3Reliability
If validity checking is implemented, then reliability is improved, but processing time increases
Solution Approach 1:
Validity checks (such as signature verification) are performed in advance during firmware installation and before switching between copies. The system pre-validates firmware copies and stores validity information, so that during device startup or firmware switching, the processor only needs to retrieve and compare pre-computed validity data rather than performing comprehensive checks, thereby maintaining reliability while minimizing time loss
Data Source
AI summary
A device includes a memory, a first firmware copy of the device stored in a first position of the memory and a second firmware copy of the device stored in a second position of the memory, where each of the first firmware copy and the second firmware copy includes instructions, when executed by the device, perform an operation of the device; and a first delta copy associated with the first firmware copy. The first delta copy includes instructions that differ from the first firmware copy when executed at the first position and are the same when executed at the second position. The device is configured to receive the first delta copy from an external system and store the first delta copy in the memory.