Vehicle computer update authentication

A system including a first computer in a vehicle including a first processor and a first memory, the first memory storing instructions executable by the first processor such that the first processor is programmed to:

• receive, from a second computer, a first request to install a first computer update, the first request including identification data;
• send a second request, to a third computer, remote from the vehicle and from the second computer, a first authentication for the first request to install the first computer update, the second request including the identification data;
• receive, from the third computer, the first authentication;
• send, to a fourth computer that is a user device, an instruction to make a third request, from a user at the fourth computer, for a second authentication of the first request to install the first computer update;
• receive, from the fourth computer, based on the instruction to the fourth computer to make the third request for the second authentication, the second authentication;
• determine, prior to installing the first computer update, whether the first computer update complies with acceptance criteria;
• then install, after receiving the first authentication from the third computer and the second authentication received from the fourth computer, and upon determining that the first computer update complies with the acceptance criteria, the first computer update received from the second computer;
• and
• also upon determining that the first computer update complies with the acceptance criteria, generate an updated acceptance criteria, the updated acceptance criteria based at least in part on the first computer update, and then use the updated acceptance criteria in a second computer update.