Systems and methods for failsafe firmware upgrades
First Claim
Patent Images
1. A method for firmware updates, the method comprising:
- running a primary bootloader application contained in a firmware image by using a vehicle telematics device, wherein the vehicle telematics device comprises a processor and a firmware memory coupled to the processor and partitioned into a plurality of segments, each segment for storing an individual firmware image segment, and the firmware image is contained in the firmware memory, the firmware image further comprising a first firmware image segment, and a second firmware image segment;
verifying the integrity of the first firmware image segment by using the vehicle telematics device;
verifying the integrity of the second firmware image segment by using the vehicle telematics device;
selecting a firmware image contained in the firmware memory to boot by using a failsafe process; and
booting the vehicle telematics device by using the selected firmware image, wherein the firmware memory comprises a default firmware image segment and a transferred firmware image segment, the method further comprising selecting the default firmware image segment to boot the vehicle telematics device when the first firmware image segment is invalid and the second firmware image segment is invalid,wherein the transferred firmware image segment stored within the firmware memory is independent of a partition location such that transferring a single image is sufficient without the need to transfer a plurality of images;
wherein the transferred firmware image segment comprises metadata that identifies a firmware image segment in which the transferred firmware image segment is to be stored;
wherein the method further comprises;
checking an image ID for the first firmware image segment by using the vehicle telematics device; and
checking an image ID for the second firmware image segment by using the vehicle telematics device;
selecting the first firmware image segment to boot the vehicle telematics device when the first firmware image segment and the second firmware image segment are valid, and the image ID for the first firmware image segment is greater than the image ID for the second firmware image segment.
5 Assignments
0 Petitions
Accused Products
Abstract
Systems and methods for failsafe firmware upgrades in accordance with embodiments of the invention are disclosed. One embodiment includes a vehicle telematics device, including: a processor; and a firmware memory comprising a firmware image coupled to the processor, wherein the firmware image further comprise a first segment and a second segment; wherein a primary bootloader application located in the firmware image: verifies the integrity of the first segment; verifies the integrity of the second segment; selects a firmware image contained in the firmware memory using a failsafe process; and boots the vehicle telematics device using the selected firmware image.
263 Citations
15 Claims
-
1. A method for firmware updates, the method comprising:
-
running a primary bootloader application contained in a firmware image by using a vehicle telematics device, wherein the vehicle telematics device comprises a processor and a firmware memory coupled to the processor and partitioned into a plurality of segments, each segment for storing an individual firmware image segment, and the firmware image is contained in the firmware memory, the firmware image further comprising a first firmware image segment, and a second firmware image segment; verifying the integrity of the first firmware image segment by using the vehicle telematics device; verifying the integrity of the second firmware image segment by using the vehicle telematics device; selecting a firmware image contained in the firmware memory to boot by using a failsafe process; and booting the vehicle telematics device by using the selected firmware image, wherein the firmware memory comprises a default firmware image segment and a transferred firmware image segment, the method further comprising selecting the default firmware image segment to boot the vehicle telematics device when the first firmware image segment is invalid and the second firmware image segment is invalid, wherein the transferred firmware image segment stored within the firmware memory is independent of a partition location such that transferring a single image is sufficient without the need to transfer a plurality of images; wherein the transferred firmware image segment comprises metadata that identifies a firmware image segment in which the transferred firmware image segment is to be stored; wherein the method further comprises; checking an image ID for the first firmware image segment by using the vehicle telematics device; and checking an image ID for the second firmware image segment by using the vehicle telematics device; selecting the first firmware image segment to boot the vehicle telematics device when the first firmware image segment and the second firmware image segment are valid, and the image ID for the first firmware image segment is greater than the image ID for the second firmware image segment. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A vehicle telematics device, comprising:
-
a processor; and a firmware memory coupled to the processor and partitioned into a plurality of segments, each segment for storing an individual firmware image segment, wherein the firmware memory comprises; a primary bootloader application, and a firmware image comprising a first firmware image segment and a second firmware image segment; wherein the primary bootloader application is configured to; verify the integrity of the first firmware image segment; verify the integrity of the second firmware image segment; select a firmware image contained in the firmware memory by using a failsafe process; and boot the vehicle telematics device by using the selected firmware image, wherein the firmware memory further comprises a default firmware image segment and a transferred firmware image segment, wherein the primary bootloader application selects the default firmware image segment to boot the vehicle telematics device when the first firmware image segment is invalid and the second firmware image segment is invalid, and wherein the transferred firmware image segment stored within the firmware memory is independent of a partition location such that transferring a single image is sufficient without the need to transfer a plurality of images; and wherein the transferred firmware image segment comprises metadata that identifies a firmware image segment in which the transferred firmware image segment is to be stored; wherein the primary bootloader application; checks an image ID for the first firmware image segment; and checks an image ID for the second firmware image segment; and wherein the primary bootloader application selects the second firmware image segment to boot the vehicle telematics device when the first firmware image segment and the second firmware image segment are valid, and the image ID for the second firmware image segment is greater than the image ID for the first firmware image segment. - View Dependent Claims (9, 10, 11, 12, 13, 14, 15)
-
Specification