Method and apparatus for booting a computer system

[0001] This application is a continuation-in-part of application Ser. No. 10/266,694, filed on Oct. 9, 2002 now abandoned, which claims priority to New Zealand Application 520786, filed on Aug. 14, 2002. The entire contents of each of the above-identified applications are hereby incorporated by reference.

[0002] This invention relates to booting a computer system or other digital processing device, and has particular relevance to desktop computer systems and personal computers including mobile computing devices.

[0003] From a cold or hard boot the first program that a personal computer typically runs is a set of instructions loaded in Read Only Memory (ROM) or Electrically Erasable Read Only Memory (EEPROM) which contains the information required to initialise the system hardware and enable the machine to activate a hard disk drive to find the boot-strap loader.

[0004] Therefore, at present, operating systems load boot information and files from the local hard disk drive into the working or system memory, commonly called Random Access Memory (RAM). This information usually includes file system drivers, the operating system kernel, and configuration and device information that have to be parsed into useful information, and general cosmetic customisations.

[0005] Because of the sheer number and size of these files, computers often take several minutes to boot i.e. to get to a useable state, which end users often find very frustrating.

[0006] The time taken to boot a personal computer can have a significant impact on worker productivity. Personal computers are widely used in workplaces, particularly in office environments. In a large office the time spent waiting for computers to boot can result in a large quantity of unproductive time. If personnel are using mobile personal computers which are taken to meetings throughout the working day, then the problem is magnified.

[0007] Furthermore, it is not uncommon to have to re-boot a personal computer due to an operating system error that simply occurs as a result of use of the computer.

[0008] Furthermore, in some environments the continuing functionality of a computer system or other digital processing device can be very important, for example the control of a communication system or a production process. Therefore, down time resulting from a system failure or “crash” must be kept to a minimum.

[0009] The Advanced Configuration and Power Interface (ACPI) specification enables boot times to be reduced, but even systems that implement this specification usually require users to wait at least 30 seconds before they can use their computers.

[0010] To achieve this it is known to provide an “image” of the booted computer memory and to store this to hard disk or in memory as in U.S. Pat. No. 6,446,203. This patent specification still requires that the operating system be booted sufficiently to identify the area of the disk to be read, and it provides no security for the image, nor any provision for changing the image, nor any reference to storing other than the working memory.

[0011] US application 2002/0078338 stores a boot image in secondary memory, and boots from this if detected, however it has no security and is unable to detect changes in configuration.

[0012] US application 2001/0039612 provides a boot image in memory at power down but has no provision for security of the image, nor does it appear to require more than the working memory to be stored.

[0013] US application 20002/0169950 provides a boot image of the initial boot process and a compressed boot image of the middle part as well as providing a copyright check on the initial boot image, but has no other apparent security or hardware check.

[0014] WO 01/13221 uses a ROM to store a boot image, including user programs but has no apparent security, although it does store a compressed OS on disk.

[0015] U.S. Pat. No. 7,167,3417 provides a boot image stored on hard disk in compressed state, but updated for configuration changes. It has no apparent security or hardware check.

[0016] It is therefore an additional problem with a computer storing an image which boots on power up that there is held in the computer an insecure version of the booted computer memory data, possibly including data held securely elsewhere. This therefore would allow extraction of the memory image to be one means of bypassing whatever security is involved in the normal booting process.

[0017] Still further, it is possible that hardware on the computer has changed while the computer was switched off. In such cases the computer either recognises that the hardware has changed, and abandons the boot image for a full boot, or fails to recognise that changes have occurred and attempts to boot normally. Both courses will result in extended boot periods.

[0018] It is an object of the present invention to provide a method and apparatus for booting a computer system which will reduce the time required for existing systems to boot, meanwhile providing a secure environment for data stored within the computer memory.

[0019] It is a further object of the present invention to provide measures which will allow changes in the configuration of the computer system but which will not cause a total abandonment of a fast boot procedure because of such changes.

[0020] These objects of the present invention will at least go some way toward overcoming disadvantages of the prior art, or will provide the public with a useful choice.

[0021] A method of booting a computer system having a system working memory to a level where the operating system is fully loaded, including the steps of providing a memory image of desired contents of the system working memory, loading the memory image in non-volatile reprogrammable memory, and upon the system being required to boot, loading the memory image from the non-volatile reprogrammable memory into the system working memory characterised in that upon reloading the memory image the loader recognizes changed hardware in the computer system incompatible with portions of the memory image, and processes initialization for this changed hardware before proceeding with unaffected portions of the memory image.

[0022] Preferably the method includes the step of encrypting and compressing the memory image and loading the encrypted compressed memory image into the non-volatile reprogrammable memory, and upon reloading, decompressing and decrypting the compressed memory image so that the decompressed memory image is loaded into the working memory.

[0023] Preferably the step of providing a memory image of desired contents of the system working memory includes the step of providing a memory image of post-boot contents of the system working memory, the contents of CPU registers and the contents of other chipset devices.

[0024] Preferably the step of providing a memory image of desired contents of the system working memory includes the step of providing a memory image which is an image of all data stored in the system working memory and other hardware device registers prior to the computer system last being shut down.

[0025] Preferably the memory image includes pages from virtual memory or the volatile page file.

[0026] Preferably it includes the step of creating the memory image during the set up process of the operating system.

[0027] Preferably it includes the step of updating the memory image in response to a significant change to the configuration of the system.

[0028] Preferably the updating step includes the step of archiving the last known good memory image.

[0029] Preferably the non-volatile reprogrammable memory is flash memory and the method includes the step of modifying the operating system source code to support a flash file system and/or a Flash Translation Layer (FTL).

[0030] Preferably it includes the step of modifying the firmware or BIOS to boot from the non-volatile reprogrammable memory.

[0031] Preferably a password is required for the firmware to boot from the memory image.

[0032] Preferably failure to supply a correct password deletes any and all stored memory images.

[0033] Preferably the memory image is an image including all system settings and memory contents relating to a logged in user.

[0034] Alternatively the invention relates to a computer system including

• • [0035] a digital processing means,
  • [0036] a working memory for the digital processing means,
  • [0037] a non-volatile reprogrammable memory including a memory image of desired contents of the system working memory and other portions of memory, the non-volatile reprogrammable memory being capable of transferring the memory image to the system working memory in order to boot the computer system characterised in that the memory image includes hardware configuration and hardware context information.

[0038] Preferably where the computer hardware configuration has altered from that in the memory image, those portions of the image relating to changed hardware are not loaded, and the changed hardware is recognised and initialised before the remainder of the memory image is processed.

[0039] Preferably the system includes a disk drive or other memory storage device including at least one archive copy of the memory image.

[0040] Preferably the memory image is an image of desired post-boot contents of the existing working memory, the CPU registers, other chipset registers and any temporarily stored memory pages.

[0041] Preferably the memory image is an image of all data stored in the working memory prior to the computer system being shut down.

[0042] Preferably the memory image was created during a setup process of an operating system of the computer system.

[0043] Preferably the system includes a disk drive or other memory storage device including at least one “last known good” copy of the memory image.

[0044] Preferably the non-volatile reprogrammable memory uses Flash memory.

[0045] Alternatively the invention relates to a method of shutting down a computer system having a system working memory, the method including the steps of

• • [0046] creating a memory image of the contents of the system working memory, the hardware configuration and context, CPU registers, chipset registers and volatile page file memory,
  • [0047] loading the memory image in a non-volatile reprogrammable memory in a compressed form, and
  • [0048] shutting down the computer system.

[0049] Preferably the memory image is additionally encrypted.

[0057] The examples referred to below relate to use of the invention to boot a personal computer and to a personal computer having a non-volatile reprogrammable memory configured to effect booting the computer. However, the invention is also applicable to other digital processing devices which require an operating system to be loaded for use, for example computer game machines, business machines and telecommunication apparatus.

[0058] Referring to FIG. 1, a flow diagram of a boot or start up process for a computer system according to the invention is illustrated.

[0059] The method described with reference to FIG. 1 assumes that a “cold” or “hard” boot is being performed. Those skilled in the art will see that the method is also applicable to situations where a “warm” or “soft” boot is performed.

[0060] Referring to FIG. 1, a user activates the system power button for example in step 1. This applies power to the system and, in the usual way, the firmware software initiates the boot sequence. Therefore in step 2, the firmware is activated, performs its usual POST initialisation sequence, and then does one of two things. The firmware either: a) looks to the hard drive of the system for the operating system boot loader, as occurs in existing boot sequences; or (b) alternatively, the firmware looks to a non-volatile reprogrammable memory provided in the computer system. Even if the firmware initially looks to the hard drive for the operating system boot loader, the boot loader still directs the system to download a memory image from the non-volatile reprogrammable memory, as will be described further below, though this may be conditional on the user entering a password stored in firmware.

[0061] The non-volatile reprogrammable memory is provided as an integrated circuit, which is accessible to the computer system, for example being provided on the motherboard of the personal computer. Alternatively, it is provided as a PCI add-in card to retrofit to an existing machine. The non-volatile reprogrammable memory may also be provided in other ways, so long as it satisfies requirements of being accessible to the system to enable its contents to be accessed sufficiently quickly by the system to make the boot method of the present invention worthwhile.

[0062] Turning now to step 3, the operating system boot loader therefore starts the boot process either directly from the contents of the non-volatile reprogrammable memory, or from the hard drive of the system.

[0063] The non-volatile reprogrammable memory contains a memory image of the contents of RAM which are sufficient, when loaded into system memory, to enable the computer system to be provided in a useable state for a user i.e. to boot the computer system.

[0064] Depending upon the requirements of the user, the memory image that is captured and provided in the non-volatile reprogrammable memory may take a variety of forms. For example, the non-volatile reprogrammable memory may contain a memory image of the post-boot system working memory (i.e. RAM) contents.

[0065] Another alternative, for example, is to load the non-volatile reprogrammable memory with a preferably compressed memory image of all data currently stored in RAM. In a preferred form, this compressed memory image is stored from a previous shutdown procedure similar to a State S4 shutdown procedure in the current ACPI 2.0a specifications. This includes computer and/or operating system settings of the computer system where it is in a state ready for use by a user, and is preferably provided to a user for a user to resume use of the system where it is in a condition which is the same or substantially the same as it was when the user commenced shutdown.

[0066] Details of a standard ACPI S4 shutdown can be found from the current ACPI specification, Revision 2.0, which is available at url http://www.acpi.info.

[0067] The memory image may also be only a partial image of the system memory. Therefore, the image may comprise data relating to the bulk of the operating system for example, and the remainder of the information necessary to build or establish the system working memory may be loaded into the working memory from another memory storage device such as the system hard disk. This arrangement may be preferable where the size of the non-volatile reprogrammable memory needs to be limited, for example due to cost constraints, but the invention is still worthwhile because the overall time taken to perform a boot process is still significantly reduced as compared to known boot processes.

[0068] The memory image may be initially created during the set up process of the operating system, or may alternatively be replaced whenever a user makes a significant change to the configuration of the computer. Also, the memory image may be captured every time the user initiates a shut down sequence. These options are discussed further with reference to FIG. 2.

[0069] The memory image is preferably compressed, so that a compressed memory image (CMI) is stored in the non-volatile reprogrammable memory and retrieved from the non-volatile reprogrammable memory when required. Compression can save a significant amount of memory space without the decompression process adding significantly to the reduced boot time provided by the present invention. A compression algorithm such as that available in the open source zlib library may be used.

[0070] In addition to compression the memory image may also be encrypted to the same standard as the hard drive to prevent attempts to recover information from the memory where the hard drive carrying the same data is secured.

[0071] In FIG. 1, where it has been determined that a compressed memory image exists (step 6), the user is required to choose (step 7) among CMI files if there are multiple files (as, for instance, for multiple users or different operating systems) and is prompted for a password (step 8). If an incorrect password is supplied (step 9) the logon attempt may be retried (step 11) but if it eventually fails (step 12) the computer deletes the compressed memory image (step 13) and any data in the volatile page file (the temporary storage on the hard disk) and shuts down (step 15). These precautions render it difficult to break the fast boot system. If the CMI is deleted the next boot will be a normal boot sequence (steps 4-5, 36-39).

[0072] When a password is supplied and correct the boot loader checks for any major changes in hardware from that of the compressed memory image (step 17). If there are none the CMI located in the non-volatile reprogrammable memory is decompressed, and the computer system settings and full memory contents are loaded into RAM from the decompressed CMI (step 21), thus providing all the applications, services and device drivers.

[0073] The operating system then takes over from the previously stored state, clears the volatile page file (step 23) and checks for any changes in the hot pluggable hardware configuration. If it finds any it will set the modification flag to FALSE (step 25) so that on close down a new image will be made.

[0074] The quicker boot process is now completed.

[0075] If a changed hardware configuration is found at the hardware check (step 17) the boot loader clears all temporary data but processes the memory image to the point where the hardware change needs servicing (step 30). Any changed device drivers are then loaded (step 31) and the memory image decompression and loading is then resumed, jumping over the inapplicable portion (step 32). The OS is thus instantiated and the PC boots fully, as previously, however the modification flag will be set so that a new memory image will be saved at shut down.

[0076] Because the memory contents are loaded very quickly from the non-volatile reprogrammable memory into RAM, rather than being searched for and transferred from the system hard disk, the time required for the boot process is dramatically reduced.

[0077] In one example of booting a personal computer (PC) using the Microsoft Windows™ operating system, the firmware checks the non-volatile reprogrammable memory for boot information first, and loads the windows boot files and kernel into memory. The registry hives may be created and stored in non-volatile reprogrammable memory if storage space permits, or they may be created and stored on the local hard drive, as is the case with existing systems. While Windows is loading, device drivers will be loaded into RAM from non-volatile reprogrammable memory. Services and third party start-up applications will be pre-loaded from the local hard drive. A typical personal computer may be physically modified to implement this process by providing 64 megabyte or upwards of non-volatile reprogrammable memory chip(s) added to the motherboard of the machine. The firmware on the PC is modified to allow booting from the non-volatile reprogrammable memory using built in support for a flash file system (FFS) and Flash Translation Layer (FTL). Microsoft Windows™, for example Windows XP, may be modified to support the FFS/FTL through internal drivers (e.g. FAT16/32, NTFS, and FFS/FTL) or third party drivers. Hardware support can be provided through an add-on PCI based product. Windows boot files and device drivers are added to the non-volatile reprogrammable memory, and third party start up programs are physically moved to the start of the hard drive.

[0078] In another example using a Windows operating system, the firmware boots from non-volatile reprogrammable memory, and loads and decompresses the memory image into RAM. Minor environmental changes are loaded or created from the beginning of the hard drive after the memory image is in RAM. These include (but are not limited to) the following:

• • [0079] Application installations
  • [0080] Non-critical start-up applications
  • [0081] Registry hives
  • [0082] Page file (virtual memory).

[0083] Physical modifications to a typical personal computer running Microsoft Windows operating system are similar to those referred to in the example above, however a user customised compressed Windows memory image is created during Windows setup, and is stored in non-volatile reprogrammable memory. Further customised settings are stored at the beginning of the hard drive.

[0084] FIG. 2 shows an alternative sequence for those computers which use a firmware which checks for component changes. This sequence differs from that of FIG. 1 only in that the ZBIOS performs the hardware configuration checks rather than using an operating system which provides the checks.

[0085] Turning now to FIG. 3, a shut down process for a computer system according to the invention is diagrammatically illustrated. The process begins in step 1 with the user selecting a shut down command from the operating system. The operating system, as part of the shut down process, then checks for a modification flag in step 3. The modification flag is one that is set by the operating system whenever a significant change is made to the configuration of the computer. A significant change may include (without limitation) the following:

• [0086] a) new application installations
  • [0087] i) application installations that require components to load once the operating system boots.
• [0088] b) changes to registry hives
• [0089] c) device driver upgrades
• [0090] d) service pack/hotfix installations
• [0091] e) service modifications
• [0092] f) user environment customisations
  • [0093] (i) desktop
  • [0094] (ii) wallpaper
  • [0095] (iii) themes
  • [0096] (iv) sounds
  • [0097] (v) icons
  • [0098] (vi) colour schemes.

[0099] Therefore, with each new user session from a boot up the modification flag is set to false. Then, when a significant change occurs, such as changes listed above for example, then the flag is set to true. For purposes of clarity, the list of significant changes provided above is not exhaustive. Furthermore, a user may wish to exclude some of the actions from the list provided above.

[0100] Returning to FIG. 3, if the modification flag is false as shown in step 5, then the operating system closes all open files, devices and services but does not save any system configuration data, since nothing in that area has changed, as shown in step 14. The operating system then continues its normal shut down process, currently implemented in the ACPI 2.0a specifications as a State S5 Shutdown, in step 15. The computer is then in a state where it either switches itself off or reboots.

[0101] If the modification flag is true as shown by step 4 in FIG. 3, then the “last known good” (LKG) compressed memory image is archived to an appropriate storage means such as the system's local hard drive. This occurs in step 6.

[0102] Then, in step 7, the CMI that was used to last boot the system, being the active CMI, is now used as the LKG CMI.

[0103] The operating system then initiates a modified shut down procedure, beginning with step 8.

[0104] In step 8 a new encryption key is generated and stored in a new CMI. Subsequent to this at step 9 the current hardware information is written to the new file and then at step 10 all data currently stored in RAM is compressed and encrypted using an appropriate compression algorithm and stored. Next, any paging data in the volatile page file is loaded into the Paging Data subsection of the new CMI file at step 11 and then the current hardware context is loaded at step 12. The loading process then completes and the final file in non-volatile RAM is marked as the new Active CMI at step 13. The operating system then finishes the modified shut down process as described above with reference to step 15.

[0105] From the method shown in FIG. 3 it can be seen that an archive of compressed memory images which may be used to boot the system is retained. In this way, if a user makes a significant change which is deleterious to the operation of the machine i.e. is undesirable, or if the system crashes, a user will always have at least one compressed memory image from which the machine may be rebooted.

[0106] FIG. 4 shows a similar shutdown sequence, but this time for a firmware controlled computer, where the initial and final parts of the modified shutdown procedure are under firmware control.

[0107] FIG. 5 shows the layout of a typical compressed memory image (CMI) file, where the encryption key and authentication information are stored first, followed by the hardware configuration information, then the RAM contents, the paging data from the virtual memory file (or volatile page contents) and finally the hardware context of the current hardware. The reloading of the compressed and encrypted information is sufficient to return the computer to a fill working state if no changes have been made to its configuration since last shutdown.

[0108] FIG. 7 shows the three operations relating to the storage of the paging files (volatile page file or virtual memory file) where these may have been stored in the compressed memory image. The first time the system requests a page (Step 1) which should be in the volatile page file it is retrieved from the CMI paging data, decompressed and decrypted before being exported to RAM as at step 2. If the page ages out in RAM, because pages with a higher priority must be stored, it will be swapped out to the volatile page file as at steps 3 and 4. Subsequently, as in normal operation, where the system again requests that memory page it will be swapped in from the volatile page file as shown by steps 5 and 6.

[0109] Turning now to FIG. 7, the basic processor and memory components of an example of a computer system according to the present invention are shown. To those skilled in the art to which the invention relates, other arrangements and communication paths for the memory devices are possible. The system has a central processing unit (CPU) 701 within which is provided a control unit 702. Working memory in the form of random access memory (RAM) 403 is provided, as is non-volatile reprogrammable memory 704. A data bus 705 allows data to be interchanged between RAM 703 and the CPU 701 under control of the control unit 702 via address data control bus 706. Similarly, a data bus 707 allows data to be interchanged between the non-volatile reprogrammable memory 703 and the CPU under control of the control unit 402 via address data control bus 708. Therefore, bus 707 allows information in RAM comprising the entire memory content to be transferred to non-volatile reprogrammable memory 704. Buses 705 and 707 may comprise a system bus. Furthermore, the content of RAM 703 may have been subject to compression whereby the compressed image may be transferred via bus 707 to be stored in non-volatile reprogrammable memory 704. Then, when required, the memory image stored in non-volatile reprogrammable memory 704 may be transferred directly to RAM 703, or may firstly be compressed and then installed in RAM 703.

[0110] The non-volatile reprogrammable memory 704 has the advantage that it is essentially a solid state device which is non-volatile so the contents of the non-volatile reprogrammable memory are retained when the power supply is removed from the computer system. However, those skilled in the art will appreciate that references in this document to non-volatile reprogrammable memory include the use of flash RAM i.e. the forms of non-volatile reprogrammable memory which require a source of external power such as a battery for example in order to maintain the memory content.

[0111] A non-volatile reprogrammable memory device according to the invention may be provided as an integrated circuit on the system motherboard for example, or on a separate board or card. In particular, if desired, non-volatile reprogrammable memory may be provided on a card such as those referred to under the trade marks SmartMedia or CompactFlash.

[0112] Some non-volatile reprogrammable memory products that are currently available have load times orders of magnitude faster than hard drives, so it will be seen that the method and system according to the present invention provides significant advantages in terms of boot times compared with prior art systems.

[0113] Other types of non-volatile memory and Solid State Disks may be used with or instead of Flash Memory, such as Magnetic RAM (MRAM) which boasts transfer speeds exponentially faster in both read and write operations than Flash Memory. MRAM is expected to be mass produced in 2005.

[0114] Preferably the set-up application for the desired operating system additionally creates a Compressed Memory Image (CMI), containing a compressed image of all data currently stored in RAM, such as is currently implemented in the ACPI 2.0a specifications (currently available from http://www.acpi.info) as a State S4 system context file. This file is stored in the non-volatile reprogrammable memory, but the set-up application does not shut the computer down as is the case for a State S4 system context file creation in the current ACPI 2.0a specifications, rather it follows a programmed shut down procedure.

[0115] Preferably the operating system source code is modified to internally support a flash file system (FFS) through a Flash Translation Layer (FTL), such as Intel's own FTL specification (http://www.intel.com/design/flcomp/applnots/297816.htm).

[0116] Conveniently the compressed memory image (CMI) has the compressed version of all data currently stored in RAM resulting from a previous shut down procedure, similar to a State S4 shutdown procedure in the current ACPI 2.0a specifications.

[0117] In the most preferred embodiment the previous CMI is archived to installed and non-volatile reprogrammable memory to be used as a “last known good” CMI.

[0118] References in this document to computer systems include digital data processing systems generally.

[0119] Throughout the description and claims of this specification the word “comprise” and variations of that word, such as “comprises” and “comprising”, are not intended to exclude other additives, components, integers or steps.

[0120] The invention provides a method of allowing a computer to boot up considerably more quickly than a standard hard disk boot even if the computer configuration has changed since the last good boot, thereby providing a reduced level of expenditure on user time wasted waiting for a computer to load software to the point at which a user can carry out useful work on it. Additionally it provides for doing this in a secure manner.