Firmware Rollback Policy Design for Agile Version Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing anti-rollback solutions for firmware updates are not suited for agile developments, as they prevent downgrading to previous versions, which can be necessary when new firmware versions become buggy, and are time-consuming and cumbersome.
Innovation Solution
A computer-implemented method for designing firmware that includes writing the firmware and providing it with version data and rollback data, allowing for controlled downgrading to older versions without creating new version numbers or signatures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional anti-rollback solution is used (incrementing version number and preventing installation of older versions), then firmware integrity is protected, but firmware update flexibility and agility are reduced
Solution Approach 1:
The patent applies preliminary action by pre-defining a rollback policy that specifies which older firmware versions are authorized for installation. This policy is established in advance, allowing the system to permit controlled downgrades while maintaining security. The policy includes criteria such as version number comparisons and authorized version lists, enabling flexible updates without compromising firmware integrity.
2Device complexity
If traditional anti-rollback solution is used, then firmware version control is simplified, but the ability to revert to previous versions when bugs are detected is lost
Solution Approach 1:
The patent applies dynamics by making the firmware version control system adaptive rather than static. The rollback policy can be dynamically configured to allow or prevent downgrades based on specific conditions, such as authorized version lists or version number relationships. This dynamic approach enables easy reversion to previous versions when needed while maintaining simplified control through policy-based management.
3Reliability
If traditional anti-rollback solution is used, then security is maintained, but time-consuming and cumbersome processes are introduced when version reverts are needed
Solution Approach 1:
The patent applies self-service by enabling the firmware update system to automatically evaluate whether a downgrade is permitted based on pre-configured rollback policies. The system independently compares the target firmware version against the authorized versions defined in the policy, eliminating the need for manual security verification processes. This self-service mechanism maintains security while significantly reducing update time.
Data Source
AI summary
The invention relates to a computer implemented method for designing a firmware including writing the firmware version, and providing the firmware version with a version data identifying the firmware version. The method also includes providing the firmware version with a second data, called rollback data, the second data provided to be compared to the version data of other versions of the firmware, and authorizing, and indicating a limit for, older firmware versions to which the firmware may be downgraded. The invention further relates to a firmware obtained by such a method and a method for modifying the version of a firmware installed on a platform and designed by such a method.