Secure reprogramming of embedded processing system

1. An embedded processing system comprising:

processing circuitry;

a memory system; and

a reprogramming control configured to:

receive a transaction indicator and user credentials from a reprogramming system, the transaction indicator identifying a type of configuration item to program in the memory system;

access user authentication data to authenticate authority of a user to program the memory system based on the transaction indicator and the user credentials;

receive an encrypted configuration item of the type identified;

receive transmitted cryptographic information comprising one or more encryption parameters associated with the encrypted configuration item;

decrypt and authenticate the encrypted configuration item as a decrypted and authenticated configuration item responsive to authenticating the authority of the user, wherein the transmitted cryptographic information and stored cryptographic information are used to decrypt the encrypted configuration item; and

store the decrypted and authenticated configuration item in the memory system, wherein the transmitted cryptographic information is stored for a transaction duration within the embedded processing system and erased upon completion of a load transaction, and the stored cryptographic information is retained after completion of the load transaction.

2. The embedded processing system of claim 1 , wherein the reprogramming control is further configured to authenticate the authority of the user based on the user credentials received from the reprogramming system and the user authentication data stored in the embedded processing system.

3. The embedded processing system of claim 2 , wherein the transaction indicator is associated with the encrypted configuration item.

4. The embedded processing system of claim 3 , wherein authentication of the authority of the user is based on the transaction indicator, the user credentials received from the reprogramming system, and the user authentication data.

5. The embedded processing system of claim 1 , wherein decryption and authentication of the encrypted configuration item comprises one or more asymmetric cryptographic methods using unique key pairs that result in an authentication failure based on an incorrect key, a missing key, or software that is tampered with resulting in an authentication failure.

6. The embedded processing system of claim 1 , wherein the reprogramming control is further configured to encrypt a configuration item extracted from the memory system prior to transferring the configuration item external to the embedded processing system.

7. The embedded processing system of claim 1 , wherein the embedded processing system is a controller of a gas turbine engine, and the encrypted configuration item comprises an application configured to control operation of the gas turbine engine.

8. A method comprising:

receiving a transaction indicator and user credentials from a reprogramming system at a reprogramming control of an embedded processing system, the transaction indicator identifying a type of configuration item to program in a memory system of the embedded processing system;

accessing user authentication data to authenticate a user to program the memory system based on the transaction indicator and the user credentials;

receiving an encrypted configuration item of the type identified at the embedded processing system;

receiving transmitted cryptographic information comprising one or more encryption parameters associated with the encrypted configuration item;

decrypting and authenticating, by the reprogramming control, the encrypted configuration item as a decrypted and authenticated configuration item responsive to authenticating the authority of the user using the transmitted cryptographic information and stored cryptographic information to decrypt the encrypted configuration item;

storing the decrypted and authenticated configuration item in the memory system of the embedded processing system;

storing the transmitted cryptographic information for a transaction duration within the embedded processing system; and

erasing the transmitted cryptographic information upon completion of a load transaction while retaining the stored cryptographic information after completion of the load transaction.

9. The method of claim 8 , further comprising:

authenticating the authority of the user based on the user credentials received from the reprogramming system and the user authentication data stored in the embedded processing system.

10. The method of claim 9 , wherein

the transaction indicator associated with the encrypted configuration item.

11. The method of claim 10 , wherein authentication of the authority of the user is based on the transaction indicator, the user credentials received from the reprogramming system, and the user authentication data.

12. The method of claim 8 , wherein decryption and authentication of the encrypted configuration item comprises one or more asymmetric cryptographic methods using unique key pairs that result in an authentication failure based on an incorrect key, a missing key, or software that is tampered with resulting in an authentication failure.

13. The method of claim 8 , further comprising:

encrypting a configuration item extracted from the memory system prior to transferring the configuration item external to the embedded processing system.

14. The method of claim 8 , wherein the embedded processing system is a controller of a gas turbine engine, and the encrypted configuration item comprises an application configured to control operation of the gas turbine engine.