Algorithm for non-volatile memory updates

• US 6,754,828 B1
• Filed: 07/13/1999
• Issued: 06/22/2004
• Est. Priority Date: 07/13/1999
• Status: Expired due to Term

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Li, Yan, Datta, Sham M., Fish, Andrew J., OʼDonnell, Amy, Marisetty, Suresh, Ayyar, Mani, Thangadurai, George
• Primary Examiner(s): HUA, LY
• Application Number:
  US09/352,715
• Time in Patent Office: 1,806 Days
• Field of Search: 713/200, 713/187, 713/1, 713/2, 713/101, 717/168, 709/310, 710/22
• US Class Current: 726/2
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A novel processor architecture and algorithms are provided which improve non-volatile memory updates and increases processor performance in successive generations of processors. A new processor architecture is supported by a software model consisting of two new firmware layers and the legacy 32 bit basic input output system (BIOS) firmware. The new firmware layers consist of a Processor Abstraction Layer (PAL) and a System Abstraction Layer (SAL). The PAL and SAL have procedure calls which allow updates of the firmware components in the non-volatile memory of a system, e.g. non-volatile ROM.

The present invention includes invoking a system abstraction layer update procedure to implement a new input binary into the non-volatile memory. An algorithm for the non-volatile memory includes selecting a lead processor to perform an update and using the system abstraction layer update procedure. The system abstraction layer update procedure is used to call an appropriate authentication routine. The system abstraction layer update procedure is used to call a specific non-volatile memory implementation routine.

Claims

1. A computer, comprising:

a processor; and

a non-volatile memory, the processor being coupled to the non-volatile memory by a system bus, wherein the non-volatile memory includes a FLASH memory and the non-volatile memory further including;

a processor abstraction layer, and

a system abstraction layer.

2. The computer of claim 1, wherein execution, by the processor, of a procedure within the system abstraction layer is to update at least one binary block in the nonvolatile memory.

3. The computer of claim 1, wherein the processor abstraction layer includes an authentication routine to authenticate an update to the at least one binary block that is in the processor abstraction layer, the procedure within the system abstraction layer to cause the execution of the authentication routine prior to the update to the at least one binary block.

4. The computer of claim 3, wherein the at least one binary block in the nonvolatile memory includes a header that has a field selected from a group consisting of a version number and a date stamp.

5. The computer of claim 4, wherein the authentication routine is to authenticate based on a value of the field in the header.

6. A computer, comprising:

a processor; and

a non-volatile memory, the processor being coupled to the non-volatile memory by a system bus, and the non-volatile memory further including;

a processor abstraction layer, wherein the processor abstraction layer includes multiple binary code blocks which provide a standard firmware interface to abstract processor implementation specific features of the processor; and

a system abstraction layer.

7. The computer of claim 6, wherein execution, by the processor, of a procedure within the system abstraction layer is to update at least one of the multiple binary code blocks.

8. The computer of claim 7, wherein the processor abstraction layer includes an authentication routine to authenticate an update to the at least one binary code block, the procedure within the system abstraction layer to cause the execution of the authentication routine prior to the update to the at least one binary code block.

9. The computer of claim 8, wherein the at least one binary code block includes a header that has a field selected from a group consisting of a version number and a date stamp.

10. The computer of claim 9, wherein the authentication routine is to authenticate based on a value of the field in the header.

11. A computer, comprising:

a processor; and

a non-volatile memory, the processor being coupled to the non-volatile memory by a system bus, and the non-volatile memory further including;

a processor abstraction layer, wherein the processor abstraction layer includes at least one binary code block comprising an enhancement to the processor; and

a system abstraction layer.

12. The computer of claim 11, wherein execution, by the processor, of a procedure within the system abstraction layer is to update the at least one of the binary code block.

13. The computer of claim 12, wherein the processor abstraction layer includes an authentication routine to authenticate an update to the at least one binary code block, the procedure within the system abstraction layer to cause the execution of the authentication routine prior to the update to the at least one binary code block.

14. The computer of claim 13, wherein the at least one binary code block includes a header that has a version number, wherein the authentication routine is to authenticate based on a value of the version number.

15. A computer, comprising:

a processor; and

a non-volatile memory, the processor being coupled to the non-volatile memory by a system bus, and the non-volatile memory further including;

a processor abstraction layer, and

a system abstraction layer, wherein the system abstraction layer includes a procedure interface which imposes a unique header onto multiple binary blocks held in the processor abstraction layer for the non-volatile memory.

16. The computer of claim 15, wherein the system abstraction layer procedure interface is operatively coupled to an authentication routine in the processor abstraction layer for performing updates to multiple binary blocks held in the non-volatile memory.

17. The computer of claim 16, wherein the authentication routine is to authenticate an update to the multiple binary blocks, the procedure interface within the system abstraction layer to cause the execution of the authentication routine prior to the update to the multiple binary blocks.

18. A computer, comprising:

a processor; and

a non-volatile memory, the processor being coupled to the non-volatile memory by a system bus, and the non-volatile memory further including;

a processor abstraction layer, and

a system abstraction layer, wherein the computer is a reliable available and serviceable computer.

19. The computer of claim 18, wherein execution, by the processor, of a procedure within the system abstraction layer is to update at least one binary code block in the non-volatile memory.

20. The computer of claim 19, wherein the processor abstraction layer includes an authentication routine to authenticate an update to the at least one binary code block, the procedure within the system abstraction layer to cause the execution of the authentication routine prior to the update to the at least one binary code block.

21. The computer of claim 20, wherein the at least one binary code block includes a header that has a version number, wherein the authentication routine is to authenticate based on a value of the version number.

22. A method for an update to a non-volatile memory in an electronic system, comprising:

starting in a firmware of the electronic system and marking a new input binary to be updated in the non-volatile memory;

starting an initialization mode in which a single processor (BSP) is selected for managing the operation of the update;

releasing a protected binary block in the non-volatile memory to be a normal block for programming;

communicating between the single processor and a system abstraction layer (SAL) procedure interface for calling an appropriate authentication routine to validate the new input binary that is executing in the initialization mode; and

providing the new input binary access to the non-volatile memory and copying the new input binary into the non-volatile memory to update the non-volatile memory if the new input binary is authenticated.

23. The method of claim 22, wherein calling an appropriate authentication routine to validate the new input binary includes using the SAL procedure interface for calling a processor abstraction layer authentication routine from the non-volatile memory for a processor abstraction layer update.

24. The method of claim 22, wherein calling an appropriate authentication routine to validate the new input binary includes using the SAL procedure interface for calling a system abstraction layer authentication routine from the non-volatile memory for a system abstraction layer update.

25. The method of claim 22, wherein providing the new input binary access to the non-volatile memory and copying the new input binary into the non-volatile memory includes using a system abstraction layer for adjusting an a number of directory table entries within a firmware interface table (FIT) to point to the new input binary.

26. A method for a run-time update of a non-volatile memory of an electronic system, comprising:

exposing a system abstraction layer (SAL) update procedure to a caller program of an update utility for updating the non-volatile memory with a new input binary;

selecting a lead processor, in coordination with an operating system of the electronic system, to perform the run-time update using the SAL update procedure;

using the SAL update procedure to call an appropriate authentication routine to validate the new input binary; and

using the SAL update procedure to call a specific non-volatile memory implementation routine.

27. The method of claim 26, wherein using a SAL update procedure includes using a firmware update utility for invoking the system abstraction layer update procedure.

28. The method of claim 26, wherein using the SAL update procedure to call an appropriate authentication routine to validate the new input binary includes using the SAL update procedure to call an appropriate authentication routine to validate a new input binary located on a server network.

29. The method of claim 26, wherein using the SAL update procedure to call an appropriate authentication routine to validate the new input binary includes using the SAL update procedure to call an appropriate authentication routine to validate a new input binary provided over the Internet.

30. The method of claim 26, wherein selecting a lead processor includes bringing other processors in a multiprocessor system into a spin loop.

31. The method of claim 26, wherein using the SAL update procedure to call an appropriate authentication routine includes using the SAL update procedure to call a SAL authentication routine from a system abstraction layer.

32. The method of claim 31, wherein using the SAL update procedure to call a specific non-volatile implementation routine includes installing the new input binary into the system abstraction layer if the new input binary is verified against the appropriate authentication routine.

33. A method for authenticating a new input binary to a non-volatile memory of an electronic system, comprising:

using a system abstraction layer procedure interface from the non-volatile memory to impose a unique header onto binary blocks in the non volatile memory;

exposing the system abstraction layer procedure interface to a caller program in a non-volatile memory update utility; and

using the system abstraction layer procedure interface to check the validity of the new input binary by calling an appropriate authentication routine from the non-volatile memory.

34. The method of claim 33, wherein using the system abstraction layer procedure interface in the non-volatile memory to impose a unique header onto binary blocks in the non volatile memory includes imposing a unique header that contains a version number following an ascending order and a date stamp.

35. The method of claim 34, wherein the method further includes replacing a binary block in the non-volatile memory with the new input binary when the new input binary has been authenticated to be of an appropriate version number and date.

36. The method of claim 35, wherein using system abstraction layer procedure interface in the non-volatile memory to impose a unique header onto binary blocks in the non volatile memory includes imposing a unique header onto the new input binary.

37. A computer readable medium having computer-executable instructions, which when executed by a machine, cause the machine to perform operations comprising:

invoking a system abstraction layer update procedure from a non-volatile memory to implement a new input binary into the non-volatile memory;

selecting a lead processor, in coordination with an operating system of an electronic system, to perform a run-time update using the system abstraction layer update procedure;

using the system abstraction layer update procedure to call an appropriate authentication routine; and

using the system abstraction layer update procedure to call a specific non-volatile memory implementation routine.

38. The computer readable medium of claim 37, wherein using the system abstraction layer update procedure to call the appropriate authentication routine comprises using the system abstraction layer update procedure to call a processor abstraction layer authentication routine from the non-volatile memory for a processor abstraction layer update.

39. The computer readable medium of claim 37, wherein using the system abstraction layer update procedure to call the appropriate authentication routine comprises using the system abstraction layer update procedure interface to call a system abstraction layer authentication routine from the non-volatile memory for a system abstraction layer update.

40. A method of communicating between a firmware update utility and a non-volatile memory, comprising:

using a system abstraction layer procedure interface from the non-volatile memory for imposing a unique header onto multiple binary blocks in the non volatile memory;

exposing the system abstraction layer procedure interface to the firmware update utility; and

using the system abstraction layer procedure interface to check the validity of a new input binary by calling an appropriate authentication routine from the non-volatile memory.

41. The method of claim 40, wherein the method further includes imposing a unique header onto the new input binary and implementing the new input binary in the non-volatile memory when the new input binary has been authenticated to be of an appropriate version number and date.

42. The method of claim 40, wherein using the system abstraction layer procedure to check the validity of the new input binary by calling the appropriate authentication routine from the non-volatile memory comprises using the system abstraction layer procedure to call a processor abstraction layer authentication routine from the non-volatile memory for a processor abstraction layer update.

43. The method of claim 40, wherein using the system abstraction layer procedure to check the validity of the new input binary by calling the appropriate authentication routine from the non-volatile memory comprises using the system abstraction layer procedure to call a system abstraction layer authentication routine from the non-volatile memory for a system abstraction layer update.