SYSTEMS AND METHODS FOR UPDATING SOFTWARE IN A HAZARD DETECTION SYSTEM

• US 20170075679A1
• Filed: 11/03/2016
• Published: 03/16/2017
• Est. Priority Date: 06/30/2014
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Lee, Jeffrey Theodore, Solnit, Jonathan, Veit, Kelly, Satterthwaite, Edwin H. Jr.
• Granted Patent: US 10,331,430 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/656 while running
• CPC Class Codes: G06F 9/4401 Bootstrapping security arrangements therefor G06F21/57
• CPC Class Codes: G06F 9/4406 Loading of operating system
• CPC Class Codes: G08B 17/10 Actuation by presence of smoke or gases , e.g. automatic alarm devices for analysing flowing fluid materials by the use of optical means
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00

Abstract

Systems and methods for updating software in a hazard detection system are described herein. Software updates may be received by, stored within, and executed by a hazard detection system, without disturbing the system'"'"'s ability to monitor for alarm events and sound an alarm in response to a monitored hazard event. The software updates may be received as part of a periodic over-the-air communication with a remote server or as part of a physical connection with a data source such as a computer. The software updates may include several portions of code designed to operate with different processors and/or devices within the hazard detection system. The software updates may also include language specific audio files that can be accessed by the hazard detection system to play back language specific media files via a speaker.

Claims

1-43. -43. (canceled)

44. A system, comprising:

at least one sensor;

a non-volatile memory comprising a plurality of code images, wherein a first code image is active and a second code image is inactive; and

a plurality of processors each operative to run based on code stored in the active code image, the plurality of processors comprising at least a first processor and a second processor, wherein the first processor is operative to;

manage a software update process to replace the inactive code image with an updated code image, and

wherein the second processor is operative to;

monitor the at least one sensor for an event while the first processor is managing the software update process.

45. The system of claim 44, wherein the updated code image comprises first processor code, wherein the first processor is operative to:

install the first processor code in internal memory of the first processor;

reboot using the installed first processor code;

verify that reboot is successful; and

set the updated code image as the active code image in response to the verified successful reboot.

46. The system of claim 44, wherein the updated code image comprises first processor code and wherein the active code image comprises active first processor code, wherein the first processor is operative to:

install the first processor code in internal memory of the first processor;

reboot using the installed first processor code;

determine that the reboot is unsuccessful;

install the active first processor code in the internal memory of the first processor; and

reboot using the installed active first processor code.

47. The system of claim 44, wherein the updated code image comprises second processor code, wherein the first processor is operative to:

notify the second processor that the second processor code is available for a second processor software update;

wherein the second processor is operative to;

independently determine when to upgrade its software in response to the second processor software update notification; and

update its software with the second processor code in response to its independent determination.

48. The system of claim 47, wherein the updated code image comprises first and second processor code portions, wherein the second processor comprises internal non-volatile memory comprising a second processor (SP) active code portion and a SP inactive code portion, wherein the second processor is operative to:

copy a selected one of the first and second processor code portions to the SP inactive code portion; and

execute code in the SP active code portion while copying the selected code to the SP inactive code portion to monitor the at least one sensor for an event.

49. The system of claim 48, wherein the second processor is operative to:

authenticate the selected code portion copied to the SP inactive code portion; and

determine whether it is safe to reboot the second processor in response to a successful authentication of the selected second processor code portion.

50. The system of claim 48, wherein the second processor is operative to:

authenticate the selected code portion copied to the SP inactive code portion; and

mark the selected code portion as bad in response a failed authentication of the selected second processor code portion.

51. The system of claim 48, wherein the second processor is operative to:

reboot using the selected code portion copied to the SP inactive code portion;

verify that reboot is successful; and

set the selected code portion as the SP active code portion in response to the verified successful reboot.

52. The system of claim 48, wherein the second processor is operative to:

reboot using the selected code portion copied to the SP inactive code portion;

determine that reboot is unsuccessful;

reboot using the code portion stored in the active code portion; and

verify that the reboot is successful.

53. A method for updating software in a system comprising first and second processors, wireless communications circuitry, and at least one sensor, the method comprising:

performing a system status check to determine whether the first processor is permitted to execute a software update process;

executing the software update process while the system status check is satisfied;

ceasing the executing of the software update process if the system status check is not satisfied; and

using the second processor to monitor the at least one sensor and to transmit data via the wireless communications circuitry in response to a monitored event while the software update process is executing.

54. The method of claim 53, wherein the executing the software update process comprises:

determining whether a software update is available by accessing a remote server; and

receiving the software update if available.

55. The method of claim 53, wherein the executing the software update process comprises:

storing a software update image in an inactive portion of a non-volatile memory, wherein the first processor is executing code stored in an active portion of the non-volatile memory.

56. The method of claim 55, wherein the software update image comprises first processor code, wherein the executing the software update process comprises:

installing the first processor code into a memory of the first processor;

rebooting the first processor using the installed first processor code; and

setting the stored software update image as the active portion of the non-volatile memory in response to a successful reboot of the system processing using the installed first processor code.

57. The method of claim 55, wherein the software update image comprises code portions for each of the first processor and the second processor.

58. The method of claim 55, wherein the software update image comprises second processor code, wherein the executing the software update process comprises:

selectively updating the second processor, wherein the second processor independently determines when to update its software.

59. The method of claim 58, wherein the second processor comprises internal memory comprising a second processor (SP) active portion and a SP inactive portion, wherein the second processor is executing code stored in the SP active portion, where the selectively updating comprises:

storing the second processor code in the SP inactive portion;

determining if it is safe to reboot;

rebooting the second processor using the second processor code stored in the SP inactive portion when it is determined safe to reboot, wherein the monitoring is suspended during the rebooting; and

setting the SP inactive portion as the SP active portion in response to a successful reboot of the second processor.

60. A non transitory computer readable medium comprising computer readable instructions recorded thereon for:

performing a system status check to determine whether a first processor is permitted to execute a software update process;

executing the software update process while the system status check is satisfied;

ceasing the executing of the software update process if the system status check is not satisfied; and

using a second processor to monitor at least one sensor and to transmit data via wireless communications circuitry in response to a monitored event while the software update process is executing.

61. The non transitory computer readable medium of claim 60, wherein the computer readable instructions recorded thereon for:

storing a software update image in an inactive portion of a non-volatile memory, wherein the first processor is executing code stored in an active portion of the non-volatile memory.

62. The non transitory computer readable medium of claim 61, wherein the computer readable instructions recorded thereon for:

installing a first processor code into a memory of the first processor, wherein the software update image comprises the first processor code;

rebooting the first processor using the installed first processor code; and

setting the stored software update image as the active portion of the non-volatile memory in response to a successful reboot of the system processing using the installed first processor code.

63. The non transitory computer readable medium of claim 61, wherein the software update image comprises second processor code and wherein the second processor comprises internal memory comprising a second processor (SP) active portion and a SP inactive portion, wherein the second processor is executing code stored in the SP active portion, wherein the computer readable instructions recorded thereon for:

storing the second processor code in the SP inactive portion;

determining if it is safe to reboot;

rebooting the second processor using the second processor code stored in the SP inactive portion when it is determined safe to reboot, wherein the monitoring is suspended during the rebooting; and

setting the SP inactive portion as the SP active portion in response to a successful reboot of the second processor.