Services > Security
Secure firmware updates for connected industrial devices
Signed and encrypted firmware updates, verified on the device, whether the update arrives over the air or over a wired connection.
- Over the air or wired
- Verified on the device
- Bad updates are stopped
What we offer
Security as a top priority
Proekspert helps device manufacturers to prepare for the EU Cyber Resilience Act.
We develop secure firmware update solutions that ensure the device software is protected no matter how the update package is delivered to the device: over-the-air (OTA) or wired medium.
WHY THIS SOLUTION
Three scenarios to use secure firmware update solution
Scenario 1
Preventing unintended device firmware updates
Updating devices over the internet or on-site by a technician poses risks of malicious usage and simple human error and may render a device inoperable, causing enormous expense, especially when the device is in a difficult to reach or remote location. To give device manufacturers more control in the software update process, Proekspert has developed a hardware-level device firmware authenticity validation solution.
Scenario 2
Licensing device firmware
Device makers need control over software that is run on their devices. Proekspert has developed a hardware-level license verification solution to determine if an end-user is eligible for software updates or new features.
Scenario 3
Protect device firmware against industrial espionage
Firmware update packages can be encrypted for each device individually, so an intercepted package can’t be read or reused.
Common risks when updating device software
Unverified sources
Offline devices cannot verify if a specific firmware image is coming from an authentic source.
Lack of trained specialists
Updating device software manually on a site is costly for maintenance service providers.
Malicious users
Malicious users may tamper with a device by spoofing it or replacing data packages sent to the server.
Unintended features
A wrong firmware version may ruin a user experience, break important features, or even brick the device.
BENEFITS
Key features of our solution
Secure remote device updates
Enabling secure remote updates Over-the-Air and via Ethernet
Preventing human errors
Preventing human errors by protecting a device against manual invalid FW updates online and offline
Protecting against malicious usage
Protecting device software against malicious usage and network attack
Licenses policies and certificate updates
Enabling device-level software licenses
How it works
Secure FW update from a cloud service
Proekspert’s firmware authenticity verification software uses a crypto processor chip (TPM) integrated with a device’s motherboard to automatically verify an update file signature and/or decrypt a previously encrypted firmware update package.
Each TPM is unique, so on the device software development side the firmware is signed or encrypted for devices one by one. When a device updater discovers firmware with an incorrect signature or encryption, the update process halts without altering already installed software.
See how we built secure over-the-air firmware updates for Danfoss frequency converters →
Contact us
Share your challenge with us
We have tens of years of experience in developing secure software by design. Keeping the balance between security and end-user experience is a common practice for us. Leave your contacts below, and let's have a quick online call to see if we are the right partner for you to prepare your devices and infrastructure for CRA.
Jukka Antero Halttunen
Embedded Software and Systems Lead
Languages: EST, ENG, FIN