Secure over-the-air firmware upgrade

A system for secure over-the-air delivery of a firmware upgrade to an embedded device, comprising:

• a server having:
• a memory programmed to store the firmware upgrade, a firmware key, and a key encryption key;
• and
• a processor coupled to the memory and programmed to:
• receive or determine a delivery mode associated with the firmware upgrade,
• obtain the firmware upgrade, the firmware key, and the key encryption key,
• pre-encrypt, using the firmware key, the firmware upgrade,
• pre-encrypt, using the key encryption key, the firmware key,
• encrypt, using a first session key, the pre-encrypted firmware upgrade and the pre-encrypted firmware key, the controller being between the server and the embedded device,
• establish a connection with the controller, and
• transmit the encrypted firmware upgrade and the encrypted firmware key to the controller when the server, the controller, and the embedded device are simultaneously online for the transmission, the encrypted firmware upgrade and the encrypted firmware key being subsequently delivered or transmitted to the embedded device.