System and method for authorizing transfer of software into embedded systems

• US 7,636,859 B2
• Filed: 08/30/2005
• Issued: 12/22/2009
• Est. Priority Date: 01/04/2001
• Status: Active Grant

• Current Assignee: Cummins Incorporated
• Original Assignee: Cummins Incorporated
• Inventors: McNulty, Mark P., Little, Lincoln M.
• Primary Examiner(s): Simitoski; Michael J
• Application Number:
  US11/215,144
• Publication Number:
  US 20060090077A1
• Time in Patent Office: 1,575 Days
• Field of Search: 713/182, 713/191, 713/1, 713/2, 726/26
• US Class Current: 713/191
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]

Abstract

A method of authorizing transfer of software into an embedded system, comprising the steps of obtaining a hardware identification code (HWID) relating to one of a service/recalibration tool and an embedded system, obtaining a software identification code (SWID) relating to at least a portion of software information that is not resident in the embedded system but is to be downloaded into the embedded system, creating a password as a function of the HWID and the SWID, and downloading a password-protected portion of the software information from the service/recalibration tool into the embedded system based on the password.

Claims

1. A method of authorizing transfer of software into an embedded system, comprising the steps of:

obtaining a hardware identification code (HWID) unique to one of a service/recalibration tool and an embedded system,

obtaining a software identification code (SWID) relating to at least a portion of software information not yet resident within, and to be downloaded into, the embedded system,

obtaining a password that is a function of the HWID and the SWID, and

downloading a password-protected portion of the software information into the embedded system based on the password by providing a set of software downloading instructions resident within the service/recalibration tool with the password, and downloading the password protected portion of the software information from the service/recalibration tool into the embedded system only if the set of software downloading instructions verifies validity of the password.

2. The method of claim 1 wherein the step of obtaining the HWID includes:

accessing a memory unit of the embedded system via the service/recalibration tool,

obtaining from the memory unit the HWID, and

downloading the HWID from the memory unit of the embedded system into the service/recalibration tool.

3. The method of claim 2 wherein the HWID relates to a system identifier associated with the embedded system.

4. The method of claim 1 wherein the step of obtaining the HWID includes:

accessing a memory unit of the service/recalibration tool,

downloading from the memory unit an identifier associated with the service/recalibration tool, and

establishing the HWID as the identifier.

5. The method of claim 1 wherein the password is a function of the HWID, the SWID and an additional identifier in the form of a timeout value, and wherein the method further includes the steps of:

resetting a timer if the downloading step corresponds to a first attempt to download the password-protected portion of the software information based on the password, and

disallowing downloading of the password-protected portion of the software information based on the password when the timer reaches the timeout value.

6. The method of claim 1 wherein the password is a function of the HWID, the SWID and an additional identifier in the form of a password version identifier, and wherein the method further includes the steps of:

obtaining a software version identifier corresponding to a version identifier associated with the password-protected portion of the software information to be downloaded, and

disallowing downloading of the password-protected portion of the software information based on the password if the password version identifier does not correspond to the software version identifier.

7. The method of claim 1 wherein the downloading step includes downloading the password-protected portion of the software information upon verification that the password is valid.

8. The method of claim 7 wherein the password is a function of the HWID, the SWID and an additional identifier in the form of a timeout value, and wherein the method further includes the steps of:

resetting a timer if the downloading step corresponds to a first attempt to download the password-protected portion of the software information based on the password, and

invalidating me password subsequent downloads of password-protected portion of the software information when the timer reaches the timeout value.

9. The method of claim 1 wherein the password is a function of the HWID, the SWID and an additional identifier in the form of a password version identifier, and wherein the method further includes the steps of:

obtaining a software version identifier corresponding to a version identifier associated with the password-protected portion of the software information to be downloaded, and

invalidating the password with respect to the password-protected portion of the software information if the password version identifier does not correspond to the software version identifier.

10. The method of claim 1 wherein the embedded system is a control computer associated with a vehicle carrying an internal combustion engine.