Patent ID: 7522732
Filing Date: 2009-04-21
Classification: G06F

Abstract:
1. A method for controlling the distribution of a software code update for an embedded software application on a device, wherein the distribution is from a sender to a plurality of devices each including the software application via a plurality of recipients, comprising: assigning an asymmetric key pair, including a public key PU securely distributing the private key PR assigning an asymmetric key pair, including a public key PU securely distributing the private key PR generating a random secret session key; encrypting the software code update using the secret session key by the sender to produce a secure body of an encrypted message; computing an authentication value HV encrypting HV encrypting the secret session key and the secure value MIC using the public key PU sending the encrypted message, including the secure body and the secure header; receiving the encrypted message by one or more of the recipients; decrypting the secure header using the private key PR computing an authentication value HV decrypting the secure value MIC using the public key PU comparing the authentication value HV decrypting the secure body using the secret session key to obtain the software code update.