1013 2020 eng 25 31 conferenceobject 0 2021-02-03 -- -- During a product lifecycle the capability to update the software of devices is paramount. Thus, new functionalities can be introduced, adapted and existing errors can be fixed. But by introducing an update capability, new attack vectors regarding the system security are introduced. To benefit from the advantages of software updates, especially from remote, while preventing security vulnerabilities, this paper presents a secure update mechanism of a system comprised of multiple controllers. This concept leverages cryptography and security relevant information to protect the authenticity, integrity and confidentiality of updates, while ensuring a fail-safe update to ensure the availability of the system. Therefore, digital signatures, a secure communication channel and cryptographic hashes are utilized. Proceedings of the Regensburg Applied Research Conference 2020 (RARC 2020), July 31st https://doi.org/10.35096/othr/pub-641 publish Creative Commons - CC BY-NC-ND - Namensnennung - Nicht kommerziell - Keine Bearbeitungen 4.0 International Tom Inderwies Jürgen Mottok eng uncontrolled power grid eng uncontrolled software update eng uncontrolled it-security eng uncontrolled embedded systems eng uncontrolled cryptography eng uncontrolled security gateway Computerprogrammierung, Programme, Daten Fakultät Elektro- und Informationstechnik Research Center for Artificial Intelligence - RCAI Laboratory for Safe and Secure Systems (LAS3) Digitale Transformation