Wireless FPGA Configuration Update for Hardware Vulnerability Remediation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for updating the hardware configuration of Field Programmable Gate Arrays (FPGAs) in consumer electronic devices are resource-intensive and difficult to perform wirelessly, as they require physical reconfiguration in a controlled environment, making it challenging to address hardware vulnerabilities in devices that are no longer under manufacturer control.

Innovation Solution

A mechanism for wirelessly updating FPGAs in mobile or electronic devices by detecting hardware vulnerabilities, identifying necessary configuration updates, and transmitting these updates from a server to the device for immediate application, thereby resolving the vulnerabilities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If wired connection and controlled environment are used for FPGA updates, then update reliability is improved, but device complexity and resource requirements increase

Engineering Contradiction:
Improveupdate reliabilityVSAvoidupdate process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces the mechanical wired connection system with a wireless communication system. The FPGA configuration data is transmitted wirelessly through communication interfaces (WiFi, Bluetooth, cellular) between a server and the mobile device, eliminating the need for physical cable connections and controlled environment setup, thus reducing update process complexity while maintaining reliability through protocol-level error handling

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The mobile device performs self-diagnosis to detect hardware vulnerabilities using onboard sensors and processing units. The device automatically initiates the update process by communicating with remote servers, downloading configuration data, and applying fixes without requiring manual intervention or return to a controlled environment, enabling autonomous vulnerability remediation

Inventive Principle:
Principle #25Self-service

2Manufacturing precision

If physical return to controlled environment is required, then update accuracy is improved, but loss of time and productivity decrease

Engineering Contradiction:
Improveconfiguration update accuracyVSAvoidupdate time
Core Design Contradiction:
Manufacturing precisionVSLoss of time

Solution Approach 1:

The patent transitions the update process from a spatial dimension (physical transport to controlled environment) to a network dimension (wireless data transmission). Configuration updates are delivered remotely through communication networks, allowing the device to remain in its operational location while receiving accurate configuration data from authorized servers, thus eliminating transport time while maintaining update accuracy through secure transmission protocols

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Solution Approach 2:

The system performs preliminary vulnerability detection using onboard hardware sensors and processing units before initiating the update process. The device automatically identifies hardware issues, retrieves appropriate configuration fixes from remote servers, and applies corrections in-place, eliminating the need to wait for physical return to a controlled environment and significantly reducing overall update time

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11455159B2Wirelessly updating field programmable gate arrays upon detection of hardware vulnerability
Publication Date: 2022.09.27 GOLDMAN SACHS & CO LLC
  • US11455159B2 patent drawing
  • US11455159B2 patent drawing
  • US11455159B2 patent drawing

AI summary

A mechanism for wirelessly updating an FPGA that is built into a wireless mobile or another wireless electronic device is described herein. The wireless update may be performed responsive to detecting a hardware vulnerability or another hardware issue in the mobile device. When the hardware vulnerability or another hardware issue is detected, the mechanism may identify a fix for the hardware vulnerability. A fix may be a particular FPGA configuration update known to fix the issue. The configuration update to the FPGA is received and the current FPGA configuration is overwritten with data from the configuration update. A determination is made that the hardware vulnerability no longer exists.