Fault-tolerant variable region repaving during firmware over the air update

A device, comprising:

• one or more processors;
• a network interface;
• and
• one or more hardware-based memory devices storing computer-readable instructions which, when executed by the one or more processors, cause the device to:
• receive, over the network interface, a firmware update payload of firmware variables as part of a firmware over the air (FOTA) update process,
• attempt to validate the firmware update payload using a runtime cryptographic process,
• if the firmware update payload is validated, use a secure spare region of a non-volatile memory device to create a back-up of firmware variables contained in a secure primary region of the non-volatile memory device, and write the firmware variables from the payload into the primary region, and
• if the firmware update payload is not validated, then abort the FOTA update process.

One or more hardware-based computer-readable memory devices storing computer-executable instructions which, when executed by one or more processors disposed in a computing device, cause the device to:

• receive a firmware update payload in a firmware over the air (FOTA) update wherein the firmware update payload includes a whitelist of variable records, the whitelist of variable records specifying one or more device states;
• extract variable records from the firmware update payload;
• use the extracted variable records to repave a primary region of a secure non-volatile memory store on the device;
• and
• persist the one or more device states in accordance with the whitelist of variable records after the FOTA update is completed.