Redundant FSBL Image Recovery for Corruption-Resilient Booting
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing first stage bootloaders (FSBL) for space applications are limited in their ability to quickly boot, support watchdog stroking, and log boot status, and they do not efficiently handle corrupted software images or communicate with additional field programmable gate arrays (FPGAs), particularly in space environments where radiation can cause data corruption and emission issues.
Innovation Solution
A novel FSBL method that reads software images from flash memory using redundant copies and recovery mechanisms, validates images using header information and cyclic redundancy checks, and communicates with a monitor FPGA for watchdogging and system logging, allowing for the compilation of valid images from corrupted sections and reducing operation voltage through DDR SDRAMs and error correction methods.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the FSBL reads only one image from flash memory in SREC format, then the device complexity is reduced, but the reliability deteriorates because the system cannot recover from corrupted images
Solution Approach 1:
The patent implements redundant copying by storing multiple copies of the software image in flash memory. The FSBL reads multiple image copies and selects a valid one for booting, thereby improving reliability without requiring complex error correction mechanisms. This directly addresses the contradiction by using simple copying to achieve fault tolerance.
Solution Approach 2:
The patent performs preliminary validation of image copies before booting by checking checksums and validating image integrity. This preliminary action ensures that a valid image is selected before the boot process begins, improving reliability while keeping the complexity manageable through systematic pre-checking procedures.
2Reliability
If the watchdog is kept off during boot process, then the ease of operation is improved, but the reliability deteriorates because the system cannot detect boot failures
Solution Approach 1:
The patent dynamically controls the watchdog timer state during the boot process. The watchdog is temporarily disabled during critical boot operations to prevent false failures, then enabled afterward for normal operation. This dynamic state change allows the system to maintain reliability while avoiding operational complications.
Solution Approach 2:
The patent prepares the watchdog timer in advance by configuring its timeout parameters and initial state before the boot process begins. This beforehand cushioning ensures the watchdog is properly set up to detect boot failures without requiring complex runtime adjustments, balancing reliability with ease of operation.
3Adaptability or versatility
If the FSBL does not support communication with additional FPGA, then the device complexity is reduced, but the adaptability deteriorates because the system cannot log boot status or support watchdogging
Solution Approach 1:
The patent implements universal communication interfaces that allow the FSBL to interact with multiple types of FPGAs and peripheral devices through standardized protocols. This multi-functionality enables the system to log boot status, support watchdogging, and communicate with various FPGAs without requiring separate dedicated interfaces for each function, thereby improving adaptability while managing complexity.
4Reliability
If the system uses redundant copies and validation mechanisms, then the reliability is improved, but the loss of time increases due to additional reading and validation steps
Solution Approach 1:
The patent applies partial validation by performing checksum checks on only critical portions of the image or using progressive validation strategies. Instead of fully validating every byte of redundant copies, the system validates enough to ensure reliability while minimizing the time penalty, thus balancing reliability improvement with acceptable boot time.
Solution Approach 2:
The patent performs preliminary validation of image copies during system initialization or before critical operations. By validating images in advance and caching validation results, the system reduces the time penalty during actual boot operations while maintaining high reliability through thorough pre-validation.
Data Source
AI summary
The present invention relates to a method of reading images using redundant copies and recovery mechanisms to produce valid images, including: reading an OS boot table from a default location in at least one flash memory to at least one DDR SDRAM of a printed circuit board, using at least one processor connected to at least one FPGA; wherein the boot table describes where to find an OS image and a RAM filesystem image in the flash memory; reading a RAM filesystem image from the flash memory into the DDR SDRAM; and validating the boot table and the RAM filesystem image by checking them for corruption using header information and cyclic redundancy check methods; wherein when at least one of the OS image or the RAM filesystem image is corrupt, a valid image can be compiled using valid sections of each of the OS image or the RAM filesystem image.