Software update protection system

A method for protection from a software update with unpredictable behavior in a vehicle comprising:

• generating a signed update mode record at a back office portal external to the vehicle;
• receiving the signed update mode record at a component in the vehicle;
• verifying within the component that the signed update mode record is from the back office portal and was created for the component;
• erasing one or more credentials within the component that establish the component as valid to a plurality of devices in the vehicle in response to the verification of the signed update mode record;
• performing an irreversible action within the component;
• entering the component into a software update mode;
• exiting the component from the software update mode;
• and
• rejecting each request from the plurality of devices to the component that relies on the credentials that were erased from the component.

A vehicle comprising:

• a plurality of devices;
• and
• a component in communication with the plurality of devices and operational to:
• receive a signed update mode record generated by a back office portal external to the vehicle;
• verify that the signed update mode record is from the back office portal and was created for the component;
• erase credentials within the component that establish the component as valid to the plurality of devices in response to the verification of the signed update mode record;
• perform an irreversible action within the component;
• enter a software update mode;
• exit the software update mode;
• and
• reject each request from the plurality of devices to the component that relies on the credentials that were erased from the component.