Eureka on the web
When you want the answer in the next five minutes.
The agent works the prompt against patents and technical literature, citing every source.
Run your analysis now →Filing growth compares 2021 (62 records) with 2024 (60) — a three-year span. 2024 is the most recent year we treat as complete: publication lags filing by roughly 18 months, so 2025 onwards are still filling in and any growth rate that ends there would understate the field. Top-5 share is the combined record count of the five largest assignees divided by all 989 records in scope (CR5), not by the ranked leaders only.
This dataset tracks 989 patent families filed between 2015 and mid-2026 that combine system or BIOS firmware with secure boot, root-of-trust, boot-integrity or recovery-mechanism claims under UEFI-adjacent IPC classes. The scope is deliberately narrow: it isolates firmware that verifies or restores its own integrity at boot time, not general operating-system security or hardware trust anchors in isolation. Publication lags filing by roughly eighteen months, so the apparent drop-off in the most recent year overstates the actual slowdown in filing activity.
Coverage spans six major receiving offices, with the United States, China and Europe accounting for the large majority of filings. The technology composition shows firmware claims are rarely filed alone: a substantial minority also cite digital-information-transmission art, reflecting how secure boot chains now extend into network-delivered firmware updates.
Pick a task. Every answer cites the patents behind it.
The filing curve and IPC composition together describe a field that expanded through the early 2020s and has since plateaued, with claim activity concentrated overwhelmingly in core digital-data-processing art.
Filings rose from 90 in 2017 to a peak of 91 in 2023, with the 2022 midpoint at 71 confirming genuine growth rather than noise. The pullback since then, visible even before accounting for publication lag, suggests the core secure-boot claim space is now well-occupied by incumbents rather than open to easy new filings.
All 989 records sit in G06F, but 217 also carry H04L classification, and smaller counts touch G11C memory and H04W wireless art. This pairing pattern shows secure boot patenting has moved beyond static BIOS verification into claims that cover firmware delivered and verified over a network.
Shares are the percentage of the 989 records in scope. A patent can carry several IPC classes, so the shares add up to more than 100%.
This page is one run against one query. Ask Eureka your own question about system firmware and secure boot and every answer comes back with the patent numbers behind it.
Try EurekaA method for allowing a firmware update when a digital certificate for a firmware update image is expired includes initiating a firmware update of a computing device and determining, using a secure boot process, that a firmware update image has an expired digital certificate. The firmware update image is stored in nonvolatile memory accessible to a service processor and to a host processor of the computing device. The method includes determining that the firmware update image and an image of firmware with code of the secure boot process were digitally signed by a same entity and overriding the secure boot process to allow execution of the firmware update image in response to determining that this condition holds.Filed by Lenovo Enterprise Solutions (Singapore); granted January 2025. It addresses a practical failure mode — certificate expiry blocking a legitimate firmware update — rather than a new cryptographic primitive.


| # | Publication no. | Patent title | Citations |
|---|---|---|---|
| 1 | US20140351571A1 | Out of band management of basic input/output system secure boot variables | 261 |
| 2 | US20030074548A1 | Method and system for tracking a secure boot in a trusted computing environment | 200 |
| 3 | US20130031374A1 | Firmware-based trusted platform module for arm processor architectures and trustzone security extensions | 189 |
| 4 | US20110131447A1 | Automated modular and secure boot firmware update | 172 |
| 5 | US20080126779A1 | Methods and apparatus to perform secure boot | 171 |
| 6 | US9230112B1 | Secured booting of a field programmable system-on-chip including authentication of a first stage boot loader … | 162 |
| 7 | US20090249053A1 | Method and apparatus for sequential hypervisor invocation | 142 |
| 8 | US20150012737A1 | Secure Boot for Unsecure Processors | 138 |
| 9 | US20180004953A1 | Secure industrial control platform | 116 |
| 10 | US20040076043A1 | Reliable and secure updating and recovery of firmware from a mass storage device | 107 |
Citation counts favour older filings simply because they have had more time to accumulate citations within the searched corpus; treat them as a measure of influence on subsequent filers, not of current commercial relevance.
Each row carries its publication number; clicking a row searches Eureka by that number.
When you want the answer in the next five minutes.
The agent works the prompt against patents and technical literature, citing every source.
Run your analysis now →When it has to run inside your own pipeline.
Patent search, landscape analysis and assignee resolution as MCP tools. Drop them into any agent framework, or call REST directly.
Browse MCP servers →Three patterns stand out once the raw counts are read against filing dates and citation behaviour: a cooling market, a jurisdictional concentration, and a shift toward network-delivered firmware.
Filings peaked in 2023 and every major tracked assignee shows zero filings in the latest year, with Intel and Huawei each down 100% year-on-year. Some of this is publication lag, but the length and breadth of the pullback across nearly every top assignee suggests the core secure-boot mechanisms are now settled rather than still being staked out.
More than half of all tracked filings went to the USPTO, with China and the EPO a distant second and third. Anyone clearing a new firmware-security product for the US market is working against the densest and best-litigated part of this landscape; clearance in China or Europe faces a comparatively thinner prior-art base.
Nearly a quarter of the dataset pairs firmware/secure-boot claims with digital-information-transmission classification. This reflects a real architectural shift: boot integrity checks increasingly govern firmware pulled over a network connection, not just firmware already resident on a device.
Co-assigned filings are uncommon in this dataset, and the strongest pairing links a major processor vendor with a university research group, alongside a software vendor paired with an individual inventor. This points to a field where most substantive IP is built and held internally rather than through joint filing programmes.
Eureka can read the same corpus for gaps instead of for coverage: under-claimed branches adjacent to system firmware and secure boot, with the prior art for and against each one.
The named assignee list is dominated by platform and OEM vendors — the companies that ship the firmware stack itself — with every one of the largest showing no filings in the most recent tracked year.
Intel, Microsoft, Dell, HP, IBM and Huawei anchor the top of the assignee ranking, and every one of them recorded zero filings in the latest tracked year, with Intel and Huawei explicitly down 100% year-on-year. This is consistent with a maturing claim space where the foundational mechanisms are already covered.
Even as the largest platform vendors slow down, OEM-side assignees continue to secure grants addressing specific operational failure modes — such as certificate expiry blocking a legitimate update. These are narrower, more defensible claims than the broad boot-integrity patents filed a decade earlier.
The strongest co-assignee relationships pair a major processor vendor with a university research group, suggesting some secure-boot cryptographic work still originates in sponsored academic research before being filed jointly or licensed onward.
| Assignee | Recent year | YoY |
|---|---|---|
| Dell Products L.P. | 0 | — |
| Intel Corporation | 0 | -100% |
| Microsoft Technology Licensing, LLC | 0 | — |
| Hewlett-Packard Development Company, L.P. | 0 | — |
| Huawei Technologies Co., Ltd. | 0 | -100% |
| International Business Machines Corporation (IBM) | 0 | — |
| Lenovo (Singapore) Pte. Ltd. | 0 | — |
| Quanta Computer Inc. | 0 | — |
The dataset points to a settled core and a thinner set of adjacent openings. The next step is usually to test a specific claim idea against this prior art rather than read further summary.
Run a specific claim concept — such as certificate-override logic or network-delivered attestation — against the 989 tracked families to see how close existing filings sit before drafting.
Explore in EurekaSet up ongoing monitoring on the assignees showing zero recent filings, since a return to filing activity from any of them would signal a shift back toward active claim-staking.
Set up monitoring in EurekaThe assignee ranking in this dataset is led by major platform and OEM vendors including Intel, Microsoft, Dell, HP, IBM and Huawei, reflecting the fact that these companies control the firmware stacks that secure boot protects. Notably, every one of these top holders shows zero filings in the most recent tracked year, with Intel and Huawei both down 100% year-on-year. This suggests the largest incumbents consider their core positions already secured rather than still expanding them.
No, filing activity peaked at 91 families in 2023 and has declined since, with the 2022 midpoint of 71 confirming this was a real growth curve rather than noise around a flat trend. Some of the apparent 2025-2026 drop reflects normal publication lag of roughly eighteen months, but the breadth of the pullback across nearly every major assignee points to a genuine plateau in new filing, not just a reporting artefact.
The United States accounts for 532 of the 989 tracked filings, making it by far the densest and highest-risk jurisdiction for freedom-to-operate clearance. China follows with 149 filings and Europe with 101, both offering comparatively thinner prior art. Companies planning a US launch of firmware-security features should budget more clearance time and cost than for a China- or Europe-first release.
US12210625B2, assigned to Lenovo Enterprise Solutions (Singapore), covers a method for allowing a firmware update to proceed when its digital certificate has expired, provided the update image and the existing boot firmware were signed by the same entity, by overriding the secure boot process under that condition. It is a narrow operational fix rather than a broad new cryptographic primitive, addressing the practical failure case where certificate expiry would otherwise block a legitimate, trusted update. Anyone building certificate-lifecycle handling into a secure boot chain should review this claim specifically rather than assume it is covered by older, broader boot-integrity patents.
Based on the IPC composition, areas with thinner filing density relative to the core secure-boot mechanisms include certificate-expiry override handling, service-processor-mediated firmware recovery, and attestation of firmware delivered over wireless channels, since only small counts of records touch G06N, H04W and related classes. These branches sit adjacent to the dense core rather than replacing it, so a workable filing strategy is usually to claim a specific operational mechanism in one of these areas rather than attempt a broad new boot-integrity primitive.
Go past this page: query the whole system firmware and secure boot corpus yourself, in your own scope.
Every answer comes back with patent numbers you can open.
Disclaimer. This page is generated from Patsnap Eureka data drawn from a limited snapshot of global patent and scientific-literature records, and is provided for general information and reference only.
Patent data carries inherent limitations: recent filings (typically the most recent 18–24 months) are under-counted due to standard publication lag; counts may be reported at either a patent-family or a patent-record basis and are not always directly comparable; classification, applicant-name, and citation data may contain errors, duplicates, or omissions; and the underlying search query defines and constrains the scope shown. As a result, the analysis may be incomplete or inaccurate and may not reflect the full technology landscape.
Nothing on this page constitutes an exhaustive prior-art, novelty, freedom-to-operate, or validity search, nor does it constitute legal, financial, investment, or professional advice, and it should not be relied upon as such. Any patent, commercial, or strategic decision should be verified independently and reviewed with qualified patent, legal, and domain professionals. Patsnap makes no warranties, express or implied, as to the accuracy, completeness, or fitness for any particular purpose of the information presented.
Machine translation. Assignee and organisation names originally recorded in Chinese, Japanese or Korean have been rendered into English by an AI translation step so that the tables stay readable. These renderings are best-effort and may not match a company's registered English name; the original name is what the underlying patent record carries, and it is what any Eureka query launched from this page uses.