Open Access

Tom Inderwies, Jürgen Mottok

• During a product lifecycle the capability to update the software of devices is paramount. Thus, new functionalities can be introduced, adapted and existing errors can be fixed. But by introducing an update capability, new attack vectors regarding the system security are introduced. To benefit from the advantages of software updates, especially from remote, while preventing securityDuring a product lifecycle the capability to update the software of devices is paramount. Thus, new functionalities can be introduced, adapted and existing errors can be fixed. But by introducing an update capability, new attack vectors regarding the system security are introduced. To benefit from the advantages of software updates, especially from remote, while preventing security vulnerabilities, this paper presents a secure update mechanism of a system comprised of multiple controllers. This concept leverages cryptography and security relevant information to protect the authenticity, integrity and confidentiality of updates, while ensuring a fail-safe update to ensure the availability of the system. Therefore, digital signatures, a secure communication channel and cryptographic hashes are utilized.…