TY - CONF A1 - Inderwies, Tom A1 - Mottok, Jürgen T1 - Secure Software Update of a Secure Module in the Power Grid T2 - Proceedings of the Regensburg Applied Research Conference 2020 (RARC 2020), July 31st N2 - During a product lifecycle the capability to update the software of devices is paramount. Thus, new functionalities can be introduced, adapted and existing errors can be fixed. But by introducing an update capability, new attack vectors regarding the system security are introduced. To benefit from the advantages of software updates, especially from remote, while preventing security vulnerabilities, this paper presents a secure update mechanism of a system comprised of multiple controllers. This concept leverages cryptography and security relevant information to protect the authenticity, integrity and confidentiality of updates, while ensuring a fail-safe update to ensure the availability of the system. Therefore, digital signatures, a secure communication channel and cryptographic hashes are utilized. KW - power grid KW - software update KW - it-security KW - embedded systems KW - cryptography KW - security gateway Y1 - 2021 UR - https://opus4.kobv.de/opus4-oth-regensburg/frontdoor/index/index/docId/1013 UR - https://doi.org/10.35096/othr/pub-641 SP - 25 EP - 31 ER -