Software Image Verifier Module for Boot Loader Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current boot loaders in modern vehicles lack compliance with functional safety standards and fail to verify the safety of software images, leading to potential hazards due to incorrect or corrupted software loading, which can result in system failures.
Innovation Solution
Implementing a functional safety standard compliant module that generates and verifies software images with safety features, such as checksums, using a Software Image Verifier (SWIV) module to ensure correct and secure loading of software into RAM, compliant with standards like ISO 26262 and ASIL requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a traditional boot loader is used to load software images, then the booting process is simple and fast, but the software image integrity cannot be verified and functional safety compliance is lacking
Solution Approach 1:
The boot loader is divided into multiple modules: a first boot loader module that performs basic loading functions, and a software image verifier module that performs integrity verification. This segmentation allows the system to gain safety verification capabilities while maintaining the simplicity of the original boot loading process.
Solution Approach 2:
The software image verification is performed as a preliminary action during the booting process, before the software image is executed. The checksum is calculated and verified in advance, ensuring that only verified software images are loaded into RAM and executed, thus preventing system failures from corrupted images.
2Reliability
If software image verification is added to ensure safety, then system reliability improves, but the booting process time increases
Solution Approach 1:
The software image verification is integrated into the booting process as a preliminary action that must be completed before software execution. By performing the checksum verification during the initial loading phase rather than delaying it, the system ensures safety compliance without significantly extending the overall booting time.
Solution Approach 2:
The verification process uses efficient checksum calculation algorithms (such as CRC) that can quickly verify software image integrity without requiring complex mechanical or manual verification processes. This substitution of efficient computational methods minimizes the time overhead of verification.
3Reliability
If checksum verification is implemented for all software images, then system safety is enhanced, but computational resources and processing time increase
Solution Approach 1:
The system uses efficient checksum verification algorithms (such as CRC - Cyclic Redundancy Check) that provide reliable software image safety verification with minimal computational overhead. These algorithms are mathematically optimized to detect corruption with high probability while consuming relatively low processing power and energy compared to more complex verification methods.
Data Source
AI summary
Various embodiments include methods and devices for generating and verifying a software image with a safety feature. Embodiments may include generating a safety feature from a first software image, and generating a second software image including the safety feature. Embodiments may include, retrieving a first safety feature from a software image with the first safety feature, calculating a second safety feature based on information relating to the software image with the first safety feature, comparing the first safety feature and the second safety feature, and verifying safety of the software image with the first safety feature in response to the first safety feature matching with the second safety feature. The methods and devices may be implemented in compliance with functional safety standards, such as ISO 26262 functional safety standards and, in compliance with Automotive Safety Integrity Level (ASIL) requirements, such as ASIL-D and/or ASIL QM requirements.