Package-Based Remote Firmware Update Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Firmware updates for devices with filesystems running from volatile memory face challenges in authenticity verification and efficient data transmission, leading to prolonged boot times and network utilization issues due to the need for reinstallation and validation upon each reboot.
Innovation Solution
A method where a provider server maintains a set of installation packages for firmware updates, replacing outdated packages with new ones, generating a signed validation hash for the updated firmware, and transmitting only the necessary packages, allowing devices to validate and install updates efficiently without reinstallation during boot processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firmware is transmitted and reinstalled upon each reboot to ensure authenticity verification, then firmware authenticity is guaranteed, but boot time increases and system efficiency decreases
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing validation hashes of firmware images in non-volatile memory before reboot. During boot, the system only needs to retrieve and verify the pre-computed hash against the loaded firmware, rather than reinstalling or revalidating the entire firmware image. This preliminary preparation of validation data eliminates the time-consuming reinstallation process while maintaining authenticity verification.
2Reliability
If complete firmware images are transmitted over the network for updates, then firmware完整性 is ensured, but network bandwidth consumption increases
Solution Approach 1:
The patent extracts only the essential validation components (hashes and signatures) from the complete firmware image and transmits these extracted elements separately. The main firmware image can be obtained through other means (local storage, alternative update mechanisms), while the critical authenticity verification data is transmitted efficiently over the network. This extraction of only the necessary validation elements reduces network bandwidth consumption while ensuring firmware integrity through hash verification.
3Reliability
If firmware validation is performed by comparing hashes during boot, then authenticity verification is achieved, but network bandwidth is consumed for transmitting validation data
Solution Approach 1:
The patent uses copying by storing pre-computed validation hashes in non-volatile memory during firmware installation. During subsequent reboots, the system copies these pre-stored hashes from non-volatile memory to volatile memory for verification, rather than retrieving them over the network each time. This local copying of validation data eliminates repeated network transmissions while maintaining the ability to perform authenticity verification through hash comparison.
Data Source
AI summary
A method for updating firmware includes receiving, at a device, an updated installation package. The updated installation package includes an updated version of an installation package, which belongs to a set of installation packages stored on the device for installation of firmware on the device. The method further includes updating the set of installation packages by replacing the installation package with the updated installation package. The method further includes installing updated firmware in volatile memory of the device based on the updated set of installation packages. The method further includes storing an image of the updated firmware in nonvolatile storage of the device. Additionally, the method includes, during a boot process, loading the image from the nonvolatile memory of the device onto the volatile memory of the device, to enable running the updated firmware from the volatile memory, and verifying the authenticity of the updated firmware.