Protected Embedded Firmware Segmentation for Custom Development
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing embedded systems face challenges in allowing customers to easily load their own custom firmware while protecting the functionality of the base firmware, which often includes IP-protected algorithms.
Innovation Solution
A method and system that allows an embedded device to obtain a customer image, analyze settings information, link the customer image with a base image, and integrate the images into the embedded device's memory, enabling the customer image to leverage protected functionality of the base image.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firmware is made fixed with dedicated functions, then reliability and performance are improved, but adaptability and ease of customization deteriorate
Solution Approach 1:
The firmware is segmented into a base image containing protected IP algorithms and a customer image containing custom applications. The base image remains fixed and protected, while the customer image can be customized and loaded dynamically. This segmentation allows the system to maintain reliability through the fixed base image while enabling adaptability through custom customer images.
Solution Approach 2:
The customer image is nested within the base image memory structure. The customer image is loaded into a designated memory region alongside the base image, allowing custom applications to leverage base image functionality while maintaining the integrity of the protected firmware. This nesting enables customization without affecting the core reliable functionality.
2Ease of operation
If custom firmware is allowed to be loaded, then ease of customization is improved, but protection of base firmware IP deteriorates
Solution Approach 1:
The firmware is divided into a protected base image and a customer image. The base image containing IP-protected algorithms remains separate and unchanged, while the customer image can be freely customized and loaded. This segmentation allows easy customization through customer images while maintaining IP protection in the base image.
Solution Approach 2:
An evaluation device acts as an intermediary between the customer and the embedded device. The evaluation device compiles and validates customer images before they are loaded onto the embedded device. This intermediary ensures that customizations are properly formatted and do not compromise the protected base firmware, enabling ease of customization while maintaining IP security.
3Manufacturing precision
If memory is fixed for specific functions, then manufacturing precision is improved, but ease of manufacture and customization deteriorate
Solution Approach 1:
Memory is segmented into fixed regions for the base image and flexible regions for customer images. The base image occupies a predetermined memory range ensuring precise allocation for critical functions, while customer images can be loaded into designated customer memory regions. This segmentation maintains manufacturing precision for core functionality while enabling ease of customization for customer applications.
Solution Approach 2:
The base image is pre-loaded into the embedded device during manufacturing, establishing fixed memory allocations for critical functions. The evaluation device then handles the loading of customer images at the customer's discretion. This preliminary action ensures manufacturing precision for the base functionality while leaving customization ease for the customer through the evaluation device interface.
Data Source
AI summary
Systems and methods are disclosed for enabling custom development on protected embedded devices. An example method includes obtaining, from an evaluation device, a customer image with the customer image being pre-compiled and used a base image at linking time for symbol resolution and with internal memory including the base image within a first fixed memory range within the internal memory. Settings information included in the customer image is analyzed. The customer image is linked to the base image based on the settings information such that the customer image and base image function as an integrated image on the embedded device. The internal memory is updated to include the linked customer image and base image and the customer image encompasses a second fixed memory range within the internal memory. Results are output to the evaluation device.