Secure over-the-air firmware update
Design a bootloader and update flow that checks signatures and rolls back when a new firmware fails.
The brief
A device in the field that cannot be updated is a liability, and one that accepts any update is worse. Design an update system for a microcontroller with two firmware slots, a signed image, a version check, and an automatic rollback when the new firmware does not report healthy. Good looks like: a working update from a test server, a rejected tampered image, a rolled-back bad image, and a threat model that explains each choice.
What you will build
- Write the threat model for a field device
- Create signed firmware images
- Build a bootloader or use MCUboot with two slots
- Download and verify an image over Wi-Fi
- Test a tampered image and a crashing image
- Document the update and recovery flow
Free, open data to build it with
Sign up free to get the data and links
It takes a minute with your email. AiTeky Pass (₹999/month or ₹9,999/year) is free for your first 30 days.

