| Title | Secure firmware update in embedded systems |
| Publication Type | Conference Paper |
| Year of Publication | 2019 |
| Authors | Keleman, Levon, Matić, Danijel, Popović, Miroslav, Kaštelan, Ivan |
| Conference Name | 2019 IEEE 9th International Conference on Consumer Electronics (ICCE-Berlin) |
| Keywords | Asymmetric Encryption, asymmetric encryption algorithms, authenticity, composability, confidentiality, cryptography, embedded devices, embedded system, Embedded systems, firmware, great numbers, Hash functions, intellectual property, man-in-the-middle, man-in-the-middle attacks, Metrics, potential attackers, pubcrawl, Resiliency, safety critical operations, secure firmware update, secure update process, security, specific encryption algorithms, symmetric encryption, symmetric encryption algorithms, target hardware, telecommunication security, update, update package encryption process, weak point |
| Abstract | Great numbers of embedded devices are performing safety critical operations, which means it is very important to keep them operating without interference. Update is the weak point that could be exploited by potential attackers to gain access to the system, sabotage it or to simply steal someone else's intellectual property. This paper presents an implementation of secure update process for embedded systems which prevents man-in-the-middle attacks. By using a combination of hash functions, symmetric and asymmetric encryption algorithms it demonstrates how to achieve integrity, authenticity and confidentiality of the update package that is sent to the target hardware. It covers implementation starting from key exchange, next explaining update package encryption process and then decryption on the target hardware. It does not go into a detail about specific encryption algorithms that could be used. It presents a generalized model for secure update that could be adjusted to specific needs. |
| DOI | 10.1109/ICCE-Berlin47944.2019.8966174 |
| Citation Key | keleman_secure_2019 |
Secure firmware update in embedded systems