The problem
Vehicle software changes in the field. If update keys sit only with a cloud operator, the OEM cannot prove who authorised a change. Certificate expiry then stops aftersales.
How DuoKey helps
DuoKey keeps PKI and signing with the manufacturer, including at the edge. Cloud can host the update service. It does not hold the last word on vehicle software.
Security leadership
The questions this programme had to answer
What changed
How DuoKey closes the OTA control gap
OEM
Signing stays with the manufacturer
Update authority stays with the OEM, not only inside the cloud that delivers software.
Edge
Credentials work where cars operate
Keys used in the field remain under OEM custody, on the platforms already in production.
OTA
Rotation without stopping updates
Certificate lifetime matches production cadence instead of creating an outage window.
Proof
A record for type-approval reviews
Security and engineering can show who signed what, when and under which policy.
More programmes
Sprechen Sie über die Entscheidungen, die für Ihr Sicherheitsprogramm zählen.
Sagen Sie uns, wo Kontrolle heute schwierig ist. Wir helfen Ihnen, den nächsten praktischen Schritt zu finden.