Rebootless Firmware Update Error Recovery via Dual Signaling Pathways

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing Information Handling Systems (IHSs) face challenges in updating firmware without causing downtime or performance degradation, especially when transmission failures occur during the update process.

Innovation Solution

The implementation of a remote access controller that supports error recovery by initiating firmware updates, detecting transmission failures, identifying alternative signaling pathways, and resuming transmission to ensure seamless updates without rebooting the system.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of time

If firmware updates are performed without rebooting the system, then downtime is minimized and continuous operation is maintained, but transmission failures during the update process can occur causing update errors

Engineering Contradiction:
ImprovedowntimeVSAvoidupdate success rate
Core Design Contradiction:
Loss of timeVSReliability

Solution Approach 1:

The system performs preliminary actions by establishing multiple signaling pathways (I2C sideband bus and PCIe inband bus) before the firmware update begins. When a transmission failure is detected on the current pathway, the system can immediately switch to a pre-available alternative pathway without interrupting the update process or requiring system reboot, thus maintaining both continuous operation and update reliability

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system prepares compensatory measures in advance by having multiple communication pathways ready. This cushioning approach ensures that if one pathway fails during firmware transmission, there is already an alternative pathway available to complete the update, preventing update failure and eliminating the need for reboot

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

2Device complexity

If a single signaling pathway is used for firmware transmission, then the system complexity is reduced, but the system cannot recover from transmission failures without rebooting

Engineering Contradiction:
Improvesignaling pathway configurationVSAvoiderror recovery capability
Core Design Contradiction:
Device complexityVSEase of repair

Solution Approach 1:

The system implements multi-functionality by enabling the signaling pathways to serve dual purposes: the I2C sideband bus is used for both management communications and firmware transmission, while the PCIe inband bus serves for both data processing and firmware update. This allows the system to handle multiple functions through the same pathways, reducing the need for dedicated error recovery infrastructure while maintaining robust recovery capability

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If the system reboots to recover from firmware update errors, then update reliability is improved, but downtime and performance degradation occur

Engineering Contradiction:
Improveupdate correctnessVSAvoidsystem downtime
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system introduces an intermediary error recovery mechanism that acts as a mediator between transmission failures and system reboot. When a firmware transmission failure is detected, the error recovery logic intercepts the error condition and redirects it through an alternative signaling pathway, preventing the error from propagating to a state that would require system reboot, thus maintaining update correctness while avoiding downtime

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12282391B2Systems and methods for error recovery in rebootless firmware updates
Publication Date: 2025.04.22 DELL PROD LP
  • US12282391B2 patent drawing
  • US12282391B2 patent drawing
  • US12282391B2 patent drawing

AI summary

Systems and methods include a remote access controller of an IHS (Information Handling System) that provides remote management of the IHS. The remote access controller initiates an update of firmware used to operate a hardware component of the IHS by transmitting a firmware image to the hardware component via a first signaling pathway connecting the remote access controller to the hardware component. The remote access controller detects a failure in transmission of the firmware image to the hardware component via the first signaling pathway and identifies a second signaling pathway connecting the remote access controller to the hardware component. The remote access controller resumes transmission of the firmware image to the hardware component via the second signaling pathway and the firmware used to operate the hardware component is updated using the transmitted firmware image.