Virtual Trusted Runtime BIOS Address Replacement via Router
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional BIOS systems cannot be replaced in real-time without disrupting the operation of an electronic device, as they are essential for initializing and configuring hardware components and loading the operating system.
Innovation Solution
Implementing a virtual trusted runtime BIOS managed by a virtual machine monitor, which allows for the replacement of a portion of the BIOS through a web-based protocol, redirecting communications to a replacement portion without requiring a system reboot, by using a router to update addresses and manage resources securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional BIOS systems are used for initializing and configuring hardware components, then system startup and hardware initialization can be performed, but the BIOS cannot be replaced in real-time without disrupting system operation
Solution Approach 1:
The BIOS is divided into multiple domains including a privileged domain and unprivileged domains. The privileged domain contains core BIOS functions that must remain stable, while unprivileged domains can be updated and replaced. This segmentation allows partial BIOS replacement without disrupting overall system operation, as the privileged domain maintains system stability while unprivileged domains provide updateable functionality.
Solution Approach 2:
A router is introduced as an intermediary component that manages communication between different BIOS domains and handles address translation. The router enables seamless switching between original and replacement BIOS portions by managing address mappings, allowing BIOS updates without system disruption while maintaining operational continuity.
2Ease of repair
If BIOS update services are implemented to allow BIOS updates, then BIOS can be updated, but system operation may be disrupted requiring a reboot
Solution Approach 1:
The BIOS architecture implements dynamic domain activation where unprivileged domains can be activated, updated, and deactivated without system reboot. The router dynamically manages address mappings to switch between different BIOS versions or portions, enabling continuous system operation during BIOS updates and eliminating the need for downtime.
Solution Approach 2:
The system maintains continuous BIOS functionality during updates by keeping the privileged domain active and stable while allowing unprivileged domains to be updated in the background. The router ensures continuous address translation and communication routing, enabling BIOS updates without interrupting system operation or requiring reboots.
3Reliability
If a virtual machine monitor manages a virtual trusted runtime BIOS in a privileged domain, then secure BIOS management is achieved, but device complexity increases
Solution Approach 1:
The virtual machine monitor is designed to perform multiple functions including managing the virtual trusted runtime BIOS, handling domain isolation, and coordinating with the router for address management. By consolidating these functions in a single multi-functional component, the architecture reduces overall system complexity while maintaining security through centralized privileged domain management.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
An implementation may include a virtual trusted runtime BIOS managed by the virtual machine monitor. A replacement portion of the virtual trusted runtime BIOS may be included. A router can replace an address to a resource of the virtual trusted runtime BIOS with the address to the resource of the replacement portion of the virtual trusted runtime BIOS