Validation of software residing on remote computing devices

A computer-implemented method for validating existing software on an electronic control unit (ECU), the method comprising:

• obtaining an authentic copy of software of the ECU during an initialization phase of the ECU, wherein the authentic copy is a last known authorized software of the ECU and is stored in a trusted software repository;
• sending a validation request comprising a random data string to the ECU;
• receiving a remote check value from the ECU, wherein the remote check value is generated by the ECU based on the random data string and the existing software;
• computing a local check value based on the authentic copy and the random data string;
• and
• determining whether the existing software is authentic based on a comparison of the received remote check value and the local check value;
• and
• modifying operation of one or more of the ECU and the overall system incorporating the ECU in response to a determination that the existing software is not authentic.

A secure server for validating existing software on an electronic control unit (ECU), the secure server comprising:

• one or more processors;
• and
• a memory device including one or more computer-readable instructions that, when executed by the one or more processors, cause the system to perform operations comprising:
• obtaining an authentic copy of software of the ECU during an initialization phase of the ECU, the authentic copy being stored in a trusted software repository located separately from the remote computing device, wherein the authentic copy is a last known authorized software of the ECU;
• sending a validation request comprising a random data string to the ECU;
• receiving a remote check value from the ECU, wherein the remote check value is generated by the ECU based on the random data string and the existing software on the ECU;
• computing a local check value based on the authentic copy and the random data string;
• determining whether the existing software is authentic based on a comparison of the received remote check value and the local check value;
• and
• modifying operation of one or more of the ECU and the overall system incorporating the ECU in response to a determination that the existing software is not authentic.

A computer implemented method for validating existing software on an electronic control unit (ECU), comprising:

• obtaining an authentic copy of software of the ECU during an initialization phase of the ECU, the authentic copy being stored in a trusted software repository located separately from the ECU, wherein the authentic copy is a last known authorized software of the ECU;
• sending a validation request comprising a random data string to the ECU;
• receiving a remote check value from the ECU wherein the remote check value is generated by the ECU based on the random data string and the existing software on the ECU;
• computing a local check value based on the authentic copy and the random data string;
• determining whether the existing software is authentic based on a comparison of the received remote check value and the local check value, and
• modifying operation of one or more of the ECU and the overall system incorporating the ECU in response to a determination that the existing software is not authentic.