# US 12,118,366 B2 · Method, computer program and apparatus for performing a boot process for a system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,118,366 B2
- Document ID: US12118366B2
- Status: Granted
- Kind: B2
- Application number: 17/717,655
- Filed: 2022-04-11
- Published: 2022-10-13
- Granted: 2024-10-15
- Earliest claimed: 2021-04-12
- Assignees: Elektrobit Automotive GmbH
- Applicants: Elektrobit Automotive GmbH
- Inventors: Uwe Hildebrand
- Web page: https://patentgrep.com/patent/US12118366B2

## CPC

- G06F 8/63: {Image based installation; Cloning; Build to order}
- G06F 9/4408: {Boot device selection}
- G06F 9/4403: {Processor initialisation}
- G06F 9/441: {Multiboot arrangements, i.e. selecting an operating system to be loaded}
- G06F 9/4418: {Suspend and resume; Hibernate and awake}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

The present invention relates to a method, to a computer program containing instructions and to an apparatus for performing a boot process for a system that supports redundant copies of boot images. In a first step, an active copy of the boot images is determined (S1). Then the active copy of the boot images is processed (S2). In response to a successful boot process, another copy of the boot images is then set (S3) as the active copy for a subsequent boot process.

## Claims

### Claim 1

A method for performing a boot process for a system that supports redundant copies of boot images (BIAi, BIBi), having the steps:
determining an active copy of the boot images (BIAi, BIBi);
processing the active copy of the boot images (BIAi, BIBi);
setting another copy of the boot images (BIAi, BIBi) as the active copy for a subsequent boot process in response to a successful boot process;
causing a previous boot-process stage to ascertain corruption of an active copy of a current-boot-process-stage boot image during the boot process;
processing a corresponding redundant copy of the corrupted active copy of the current-boot-process-stage boot image to be executed as the current-boot-process-stage boot image during the boot process; and
processing, in a next boot-process stage following the current-boot-process stage, an active copy of a next-boot-process-stage boot image to complete the boot process as the successful boot process including repairing the corrupted active copy of the current-boot-process-stage boot image via a hypervisor stage replacing the corrupted active copy of the current-boot-process-stage boot image with the corresponding redundant copy.

### Claim 2 (depends on 1)

The method as claimed in claim 1, wherein at least one flag (F, Fi) is used to indicate the active copy of the boot images (BIAi, BIBi).

### Claim 3 (depends on 2)

The method as claimed in claim 2, wherein the at least one flag (F, Fi) is stored in a memory of the system or is provided by an external unit.

### Claim 4 (depends on 3)

The method as claimed in claim 3, wherein the at least one flag (F, Fi) is set for individual stages of a boot sequence or globally for the boot sequence.

### Claim 5 (depends on 1)

The method as claimed in claim 1, wherein redundant copies of the boot images (BIAi, BIBi) are available only for individual stages of a boot sequence.

### Claim 6 (depends on 5)

The method as claimed in claim 5, wherein, in response to an update process for a loadable software component or a loadable firmware component, delaying a subsequent boot process until successful completion of the update process.

### Claim 7

An apparatus for performing a boot process for a system that supports redundant copies of boot images (BIAi, BIBi), having:
an analysis unit for determining an active copy of the boot images (BIAi, BIBi);
a processing unit for:
processing the active copy of the boot images (BIAi, BIBi),
setting another copy of the boot images (BIAi, BIBi) as the active copy for a subsequent boot process in response to a successful boot process,
causing a previous boot-process stage to ascertain corruption of an active copy of a current-boot-process-stage boot image during the process,
processing a corresponding redundant copy of the corrupted active copy of the current-boot-process-stage boot image to be executed as the current-boot-process-stage boot image during the boot process, and
processing, in a next boot-process stage following the current-boot-process stage, an active copy of a next-boot-process-stage boot image to complete the boot process as the successful boot process including repairing the corrupted active copy of the current-boot-process-stage boot image via a hypervisor stage replacing the corrupted active copy of the current-boot-process-stage boot image with the corresponding redundant copy.

### Claim 8

A non-transitory computer-readable medium having stored there on a computer program containing instructions that, when executed by a computer, cause the computer to perform a boot process for a system that supports redundant copies of boot images (BIAi, BIBi), the boot process having operations comprising:
determining an active copy of the boot images (BIAi, BIBi);
processing the active copy of the boot images (BIAi, BIBi);
setting another copy of the boot images (BIAi, BIBi) as the active copy for a subsequent boot process in response to a successful boot process;
causing a previous boot-process stage to ascertain corruption of an active copy of a current-boot-process-stage boot image during the boot process;
processing a corresponding redundant copy of the corrupted active copy of the current-boot-process-stage boot image is processed to be executed as the current-boot-process-stage boot image during the boot process; and
processing, in a next boot-process stage following the current-boot-process stage, an active copy of a next-boot-process-stage boot image to complete the boot process as the successful boot process including repairing the corrupted active copy of the current-boot-process-stage boot image via a hypervisor stage replacing the corrupted active copy of the current-boot-process-stage boot image with the corresponding redundant copy.

### Claim 9 (depends on 8)

The non-transitory computer-readable medium as claimed in claim 8, wherein redundant copies of the boot images (BIAi, BIBi) are available only for individual stages of a boot sequence.

### Claim 10 (depends on 9)

The non-transitory computer-readable medium as claimed in claim 9, wherein, in response to an update process for a loadable software component or a loadable firmware component, delaying a subsequent boot process until successful completion of the update process.

### Claim 11 (depends on 8)

The non-transitory computer-readable medium as claimed in claim 8, wherein at least one flag (F, Fi) is used to indicate the active copy of the boot images (BIAi, BIBi).

### Claim 12 (depends on 11)

The non-transitory computer-readable medium as claimed in claim 11, wherein the at least one flag (F, Fi) is stored in a memory of the system or is provided by an external unit.

### Claim 13 (depends on 12)

The non-transitory computer-readable medium as claimed in claim 12, wherein the at least one flag (F, Fi) is set for individual stages of a boot sequence or globally for the boot sequence.