OOB MCU Secure Firmware Updates Heterogeneous Platforms
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
ARM-based heterogeneous computing platforms lack Embedded Controllers (ECs) or microcontrollers to support Out-of-Band (OOB) management, which is crucial for secure firmware updates and management operations.
Innovation Solution
Integration of an Out-of-Band (OOB) Microcontroller Unit (MCU) into the heterogeneous computing platform, which enables OOB management by receiving firmware update commands, validating firmware payloads using a crypto device, and installing the validated firmware on target devices even when the host processor is in a low-power state.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If ARM-based heterogeneous computing platforms are used, then computing versatility and performance are improved, but OOB management capability is lost
Solution Approach 1:
The system is divided into separate functional components: the ARM-based heterogeneous computing platform handles computing workloads, while a dedicated OOB MCU handles out-of-band management tasks. This segmentation allows each component to be optimized for its specific function, maintaining computing versatility while restoring OOB management capability.
Solution Approach 2:
An OOB MCU is introduced as an intermediary component between the ARM-based platform and external management systems. This intermediary enables OOB management operations without interfering with the main computing platform's versatility and performance, effectively bridging the capability gap.
2Use of energy by moving object
If host processor is in low-power state, then energy consumption is reduced, but firmware update capability is lost
Solution Approach 1:
Power management is segmented between the host processor and the OOB MCU. The host processor can enter low-power states to reduce energy consumption, while the OOB MCU remains independently powered and capable of executing firmware update operations, thus decoupling energy savings from functionality loss.
Solution Approach 2:
The OOB MCU is designed to operate autonomously in low-power states, independently managing firmware updates without requiring the host processor to be awake. This self-service capability allows the system to maintain critical update functions while minimizing overall energy consumption.
3Reliability
If OOB MCU is integrated into heterogeneous computing platform, then OOB management capability is restored, but device complexity increases
Solution Approach 1:
The OOB MCU is designed with multi-functionality, handling various OOB management tasks including firmware updates, system monitoring, and communication protocols. By consolidating these functions into a single integrated component, the solution restores OOB management capability while minimizing the increase in overall device complexity.
Data Source
AI summary
Systems and methods for a secure firmware updates in heterogeneous computing platforms. In some embodiments, an Information Handling System (IHS) may include a heterogeneous computing platform and an Out-of-Band (OOB) Microcontroller Unit (MCU) integrated into the heterogeneous computing platform, where the OOB MCU is configured to: receive a firmware update command while a host processor of the heterogeneous computing platform is in a low-power state, where the firmware update command indicates a target device; validate, using a crypto device, a firmware payload associated with the firmware update command; and cause the validated firmware payload to be installed on a memory of the target device while the host processor is in the low-power state.