Protected Storage Segment for Secure In-Service Firmware Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for updating firmware in computer systems that provide continuous service, such as network switches and database query systems, often require rebooting, which is undesirable as it disrupts service.
Innovation Solution
A computer system with a Protected Storage Segment (PSS) in volatile memory, where firmware-authentication program code is stored, allowing for secure authentication and switching of firmware versions without rebooting by using a privilege control circuit to manage access rights.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firmware update is performed by rebooting the system, then firmware authentication and version switching can be completed securely, but service continuity is disrupted
Solution Approach 1:
The system performs preliminary actions by loading the firmware authentication program code into a protected storage segment (PSS) of volatile memory during system initialization, before any firmware update is needed. This pre-positioning of authentication code enables rapid verification during updates without requiring system reboot, thus maintaining service continuity while ensuring security.
Solution Approach 2:
The memory system is segmented into a protected storage segment (PSS) that stores firmware authentication code and other memory areas for firmware storage and execution. This segmentation allows the authentication function to be isolated and executed independently from the main firmware, enabling secure verification during runtime without disrupting overall system operation.
2Loss of time
If firmware authentication code is stored in protected storage segment of volatile memory, then fast authentication without reboot is enabled, but memory access security and privilege management complexity increases
Solution Approach 1:
The system implements dynamic privilege control where the privilege control circuit can change access permissions to the protected storage segment based on the current operational state. During firmware authentication, the circuit grants temporary access to the authentication code in PSS, then revokes it afterward. This dynamic adjustment enables fast authentication while managing security through state-dependent access control.
Solution Approach 2:
A privilege control circuit acts as an intermediary between the processor and the protected storage segment. This intermediary manages all access requests to the PSS, verifying privileges and controlling when the authentication code can be executed. This mediation simplifies the overall security model by centralizing access control logic while enabling rapid authenticated access when needed.
Data Source
AI summary
A computer system includes a volatile memory and at least one processor. The volatile memory includes a protected storage segment (PSS) configured to store firmware-authentication program code for authenticating firmware of the computer system. The at least one processor is configured to receive a trigger to switch to a given version of the firmware, to obtain, in response to the trigger, a privilege to access the PSS, to authenticate the given version of the firmware by executing the firmware-authentication program code from the PSS, to switch to the given version of the firmware upon successfully authenticating the given version, and to take an alternative action upon failing to authenticate the given version.