Method for selecting an executable software image

• US 8,201,211 B2
• Filed: 05/07/2002
• Issued: 06/12/2012
• Est. Priority Date: 05/09/2001
• Status: Active Grant

• Current Assignee: InterDigital Patent Holdings, Inc. (InterDigital, Inc.)
• Original Assignee: Thomson Licensing SA (Vantiva SA)
• Inventors: Proust, Laurent, Hamery, Dominique
• Primary Examiner(s): Pendleton, Brian
• Assistant Examiner(s): Chokshi, Pinkal R
• Application Number:
  US10/475,844
• Publication Number:
  US 20040146270A1
• Time in Patent Office: 3,689 Days
• Field of Search: 725/132, 725/134, 725/140, 725/142, 725/152, 717/168, 717/172, 717/174, 707/999.203
• US Class Current: 725/140
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: H04N 21/235 Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/435 Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4432 Powering on the client, e.g. bootstrap loading using setup parameters being stored locally or received from the server resetting in general G06F1/14; program loading or initiating in general G06F9/445; bootstrapping in general G06F9/4401; secure boots of computer platforms G06F21/57
• CPC Class Codes: H04N 21/8173 End-user applications, e.g. Web browser, game

Abstract

An apparatus and an associated methodology is provided to select and run an image of an executable software, the method including the steps of: starting a self executable boot and load software stored in the apparatus configured to run an executable software image; reading a table stored internally in the apparatus by the self executable boot and load software, referencing an executable software images that are stored in the apparatus; selecting an uncorrupted executable software image from one of the executable software images that are referenced in the table; and starting the image chosen by said selecting.

Claims

1. A method of selecting and running an executable software image in an apparatus, the method comprising:

starting a self executable boot and load software stored in the apparatus configured to boot an executable software image;

reading, by the self executable boot and load software, a table stored internally in the apparatus, the table referencing an integer number n greater than 1 of executable software images, the n executable software images being pre-stored in the apparatus in a predetermined order, each of the executable software images being independently bootable, the n images being distributed over two parts of the memory, a first number (n−

m) of images being stored in an erasable part of a memory and a second, complementary number m of images, m being an integer number less than or equal to n, being stored in a part of the memory not erasable or having erase protection;

checking whether the table is present and uncorrupted before said reading;

selecting one uncorrupted executable software image from the executable software images that are referenced in the table; and

booting the one executable software image chosen by said selecting, wherein

the n executable software images are not downloaded to the apparatus in a current boot process.

2. The method according to claim 1, wherein the reading and the selecting further comprise:

reading the table following a predetermined order to read references of the table in an order of preference of the executable software images to which each reference corresponds,

integrity checking that a first selected image corresponding to the first reference in the table reached by reading the table is uncorrupted, the first image only being selected when the integrity check of the first image is positive; and

reading a next reference following the previous reference in the table in the predetermined read order when the first image or a previously checked image is corrupted, and reexecuting at least one of the selecting and starting operations when the current checked image is uncorrupted, and when the current checked image is corrupted then repeating the operation for the next reference in the order of reading the table, until an uncorrupted image is found and run.

3. The method according to claim 1, wherein the references in the table corresponding to the (n−

m) images contained in the memory areas without erase protection are read first, and then if none of these images is selected, reading continues for the m images contained in the memory areas that are not erasable or that have erase protection.

4. The method according to claim 1, wherein when checking shows that the table is corrupted, at least one of the integrity checking and storing operations are carried out for the m images contained in the memory areas that are not erasable or that have erase protection.

5. The method according to claim 1, wherein the m images stored in the memory areas that are not erasable or with erase protection are stored on different media.

6. The method according to claim 1, wherein the memory areas without erase protection in which the (n−

m) images belonging to the first part are stored, are memory areas on a hard disk.

7. The method according to claim 1, wherein the memory areas with erase protection in which the m images belonging to the second part are memory areas on a hard disk or a fast memory.

8. The method according to claim 1, before one of the images is run for execution, a check is made that this image is not stored in compressed mode, the image being decompressed before being loaded and executed if it is found to be compressed.

9. The method according to claim 1, wherein an integer number n of images is loaded prior to execution of the process, and distributed in a first part containing (n−

m) images stored in memory areas without erase protection and a second part containing m images stored in memory areas with erase protection, and in that the reference table is created for the n images.

11. The method according to claim 1, further comprising:

checking whether the one executable software image chosen from the executable software images that are referenced in the table is corrupted or not, after said selecting.

12. The method according to claim 11, further comprising:

selecting another executable software image that is referenced in said table, when the one executable software is determined to be corrupted in said checking.

13. The method according to claim 1, further comprising the steps of:

a first checking whether the table is corrupted or not;

a second checking whether the one executable software image selected from the n executable software images referenced in the table is corrupted or not, after said first checking has confirmed that the table is not corrupted;

copying the one selected executable software image to a random access memory; and

a third checking whether the one selected executable software image in the random access memory is corrupted or not.

10. A digital television decoder or receiver comprising a processor and a storage unit, the processor configured to:

start a self executable boot and load software stored in the storage unit of the decoder or receiver, the self executable boot and load software being configured to boot an executable software image;

read, by the self executable boot and load software, a table that is stored internally in the decoder or receiver, the table referencing an integer number n greater than 1 of executable software images, the n executable software images being pre-stored in the storage unit in a predetermined order, each of the executable software images being independently bootable, the n images being distributed over two parts of the memory, a first number (n−

m) of images being stored in an erasable part of a memory and a second, complementary number m of images, m being an integer number less than or equal to n, being stored in a part of the memory not erasable or having erase protection;

checking whether the table is present and uncorrupted before said reading;

select an one uncorrupted executable software image from the executable software images that are referenced in the table; and

boot the one executable software image chosen by said selecting, wherein

the n executable software images are not downloaded to the decoder or receiver in a current boot process.

14. The digital television decoder or receiver according to claim 10, wherein the processor configured to:

perform a first check to see whether the table is corrupted or not;

perform a second check to see whether the one executable software image selected from the n executable software images referenced in the table is corrupted or not, after said first check has confirmed that the table is not corrupted;

copy the selected one executable software image to a random access memory; and

perform a third check to see whether the selected one executable software image in the random access memory is corrupted or not.

15. The digital television decoder or receiver according to claim 14, wherein the selected one executable software image processes digital information received by the decoder or receiver into images, sounds and synchronization information.