-
公开(公告)号:US11119754B1
公开(公告)日:2021-09-14
申请号:US16837530
申请日:2020-04-01
Applicant: Amazon Technologies, Inc.
Inventor: Jiming Sun , Tsung Ho Wu
IPC: G06F8/65 , G06F9/455 , G06F8/71 , G06F8/61 , G06F21/64 , G06F9/4401 , G06F16/901 , G06F13/40 , G06F9/30
Abstract: An update process for updating components of one or more host devices includes selecting an update path for updating a system component of the one or more host devices and generating an update manifest including a plurality of update payloads for the system component that are included in the update path. The update path may be selected and/or derived based on a multi-stage combination of a hash of an update payload corresponding to a current version of the system component and respective hashes of the one or more update payloads using a reversible function to maintain backward and forward trackability and compatibility for the updates. A plurality of possible update paths may be represented in a directed graph that is managed by a control system. The update payloads may be uploaded to the host devices to cause the host devices to update the system component based on the update manifest.
-
公开(公告)号:US10936300B1
公开(公告)日:2021-03-02
申请号:US16433892
申请日:2019-06-06
Applicant: Amazon Technologies, Inc.
Inventor: Jiming Sun , Tsung Ho Wu , Bradshaw Darrow Austin
Abstract: Various embodiments provide for the live updating of system software or firmware, such as BIOS information, without the need for a reboot. A payload containing BIOS update information can be generated and signed with an encryption key. The information in the payload is able to be updated through a live update, and can be selected in part based on the configuration and BIOS version of the computing device to be updated. Upon an update being triggered, a target device is placed into a management mode wherein normal work is suspended and the device is isolated. The payload is verified and decrypted, and appropriate functions called in order to update the relevant BIOS information. After the update is verified, the device exits management mode and resumes a typical workflow. If the update is not successful, or unable to be performed via live update, a conventional update can be performed that includes a reboot.
-