Vehicle computer system and method

A system comprising:

• data processing hardware;
• and
• memory hardware in communication with the data processing hardware, the memory hardware storing instructions that when executed on the data processing hardware cause the data processing hardware to perform operations comprising:
• requesting, via a boot manager of a host module, a hardware security module (HSM) to verify an application software of the host module;
• configuring, via the verified application software, a memory protection unit (MPU) to at least one of no execute and no write for at least one area of a memory of the host module;
• and
• executing the application software with the HSM enabled.

A vehicle comprising:

• an electronic control unit (ECU) configured to receive programming session requests including executable code;
• and
• a microcontroller communicatively coupled to the ECU and including data processing hardware and memory hardware, the memory hardware storing a hardware security module (HSM), a host module, and a memory protection unit (MPU), the HSM configured to cause the data processing hardware to perform operations including:
• initiating the host module, the host module including a boot manager, a bootloader, and application software;
• determining, via the boot manager, which of the bootloader and the application software to execute;
• verifying, via the HSM, at least one of the bootloader and the application software;
• configuring, via one of the bootloader and the application software, the memory protection unit (MPU) to at least one of no write and no execute for at least one area of a memory of the host module;
• and
• executing one of the bootloader and the application software via the host module.