---
title: 5 Tools for Secure Over-the-Air Firmware Updates in Electric Vehicles
description: The Raptor and Kvaser toolchain EMB Power builds around for secure, auditable OTA firmware updates in UK and EU EV and hybrid control programmes.
---

[Skip to content](https://blog.emb-power.com/5-tools-for-secure-over-the-air-firmware-updates-in-electric-vehicles#main-content)

![EMB\_Power\_Logo](https://blog.emb-power.com/hs-fs/hubfs/EMB_POWER_logo-16x9-tp-1.png?width=250&height=140&name=EMB_POWER_logo-16x9-tp-1.png)

Open main navigation

Close main navigation

- [Contact us](https://www.emb-power.com/contact-us)

[Contact us](https://www.emb-power.com/contact-us)

 Oct 28, 2026, 9:19:43 AM

# 5 Tools for Secure Over-the-Air Firmware Updates in Electric Vehicles

[EMB Power Team](https://blog.emb-power.com/author/emb-power-team)

Share: [facebook-f icon](http://www.facebook.com/share.php?u=https://blog.emb-power.com/5-tools-for-secure-over-the-air-firmware-updates-in-electric-vehicles) [linkedin-in icon](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.emb-power.com/5-tools-for-secure-over-the-air-firmware-updates-in-electric-vehicles) [Twitter icon](https://twitter.com/intent/tweet?url=https://blog.emb-power.com/5-tools-for-secure-over-the-air-firmware-updates-in-electric-vehicles) [pinterest-p icon](http://pinterest.com/pin/create/link/?url=https://blog.emb-power.com/5-tools-for-secure-over-the-air-firmware-updates-in-electric-vehicles) [envelope icon](mailto:?body=https://blog.emb-power.com/5-tools-for-secure-over-the-air-firmware-updates-in-electric-vehicles)

Five tools make a secure over-the-air (OTA) firmware update programme practical for an electric or hybrid vehicle project: a field-programming application, a reliable CAN interface, a calibration tool, a model-based development environment, and a data logger for the audit trail. **EMB Power** is New Eagle's exclusive UK and EU partner for the Raptor control toolchain, and we pair it with Kvaser's CAN hardware to build that stack for engineering teams who need updates to be controlled, verifiable and recoverable — not just fast.

## Why Secure OTA Updates Matter in EV Programmes

An EV or hybrid control system is only going to get more software-defined over its life: bugs get fixed, calibrations get refined, and new features ship after the vehicle is already in a customer's hands. Doing that without a workshop visit is the whole point of OTA capability — but it only pays off if every update is authenticated, traceable and reversible. A firmware update process with no audit trail or rollback path turns a convenience into a liability the moment something goes wrong in the field. The five tools below are the stack we specify to avoid that outcome.

## The Five-Tool Stack EMB Power Builds Around

Each of these plays a distinct role, from writing the firmware in the first place through to proving, after the fact, exactly what was deployed and when.

### 1. Raptor-SERVICE — Field ECU Programming and Diagnostics

Raptor-SERVICE is New Eagle's PC-based field tool for updating ECU firmware, running diagnostics and troubleshooting Raptor-enabled controllers without pulling the hardware out of the vehicle. It's licensed as a node-locked software package with an optional annual maintenance plan, so a programme can equip field engineers with exactly the tool they need rather than a generic reflash utility. EMB Power supplies and supports the licensing for UK and EU customers directly.

### 2. Kvaser CAN Interfaces — the Physical Link That Has to Hold Up

A firmware transfer that drops mid-write is exactly the failure mode a good update process is designed to avoid, which makes the physical CAN interface more than a commodity choice. Two Kvaser interfaces come up most often in our EV and hybrid projects:

- **Kvaser Leaf Light R v2** — a compact, plug-and-play USB-to-CAN interface, well suited to bench programming and quick field connections where simplicity matters more than extended environmental ratings.
- **Kvaser U100-C** — a ruggedised single-channel CAN/CAN FD-to-USB interface (Type-C variant) rated to 8 Mbit/s, with reinforced galvanic isolation (5,000 VAC) and an IP67, −40 °C to 85 °C rating — the isolation in particular matters on a vehicle with high-EMI switching hardware nearby, where an unisolated interface can introduce transfer errors.

Both integrate directly with Raptor-SERVICE and with the Raptor-DEV development environment, so the same hardware link supports development, bench validation and field deployment.

### 3. Raptor-CAL — Confirming the Update Actually Took

Raptor-CAL handles ECU calibration and live parameter tuning after an update lands, which makes it the tool that answers the question a firmware push alone can't: did the ECU come back up operating within specification? It reads back version information and audit logs, supports secure seed-and-key access for calibration changes, and lets an engineer adjust calibration maps where the new firmware supports it — closing the loop between "the file transferred" and "the controller is behaving correctly."

### 4. Raptor-DEV — Building Update-Ready Firmware From the Start

Raptor-DEV is New Eagle's MATLAB®/Simulink®-based control development environment, and the easiest way to make OTA updates reliable later is to design for them here, not bolt them on afterwards. That means building update hooks and rollback logic into the model itself, implementing UDS (Unified Diagnostic Services, ISO 14229) session and authentication logic alongside the control strategy, and using Raptor-TEST to run the same update scenarios — success, interruption and recovery — on the bench before anything reaches a vehicle.

### 5. Kvaser Data Loggers — the Audit Trail

Deploying the update isn't the end of the process; proving what happened is. A hardware logger such as the Kvaser Memorator 2xHS v2 captures high-speed, multi-channel CAN and CAN FD traffic with timestamped, time-synchronised logs, operates without a driver install for fast field or lab deployment, and exports trace files that open in Raptor, CANalyzer or Wireshark for post-update review. For a regulated or fleet programme, that log is what turns "we think the update worked" into a documented record.

## Five Habits That Keep the Rollout Secure

- **Encrypt and sign every firmware payload**, and reject anything that doesn't pass verification before it writes to the controller.
- **Authenticate the update session** using the Raptor security blocks and standard UDS services, rather than a bespoke handshake only one engineer understands.
- **Block downgrade paths** so a device can't be rolled back to a firmware version with a known vulnerability.
- **Log every attempt**, successful or not, so a field failure can be diagnosed from the trace rather than guessed at.
- **Test the full workflow on real hardware** — including the interrupted-transfer and recovery paths — before the first update ships outside the lab.

## Why EMB Power

EMB Power is New Eagle's exclusive UK and EU reseller and integration partner for the Raptor toolchain and Kvaser CAN hardware, and — following New Eagle's 2026 acquisition of Pi Innovo — for the OpenECU range as well. Our controls engineers have taken OTA-capable firmware from first Simulink model through to validated field deployment across automotive, marine, commercial vehicle and off-highway programmes, which means UK and EU customers get direct technical support and a single point of contact rather than a generic reseller handoff.

## FAQ

### Do I need all five tools from day one?

No — most programmes start with Raptor-DEV and a Kvaser interface for development, then add Raptor-SERVICE and a data logger as the project moves toward field trials or production. The important part is designing the update hooks into the Raptor-DEV model early, since retrofitting them later is materially more work.

### What's the practical difference between the Kvaser Leaf Light R v2 and the U100-C?

The Leaf Light R v2 is a simple, low-cost USB-to-CAN interface suited to bench work and quick connections. The U100-C adds CAN FD support, reinforced galvanic isolation and an IP67 rating, which matters in a vehicle environment with high electromagnetic interference or a less controlled physical connection.

### Why keep a CAN trace log after an update, if the update already reports success?

A success flag from the update tool confirms the transfer completed; it doesn't by itself give you a record to hand to an auditor, a regulator or your own quality team months later. A timestamped trace does.

If you're specifying a secure OTA or field-programming workflow for an EV, hybrid or off-highway controls project, [contact EMB Power](https://emb-power.com/contact) to talk through the right Raptor and Kvaser toolchain for your programme.

[ECUs](https://blog.emb-power.com/tag/ecus), [Rapid Prototyping](https://blog.emb-power.com/tag/rapid-prototyping)

[facebook-f icon](https://www.facebook.com/embpowerltd) [linkedin-in icon](https://www.linkedin.com/company/emb-power-limited/) [instagram icon](https://www.instagram.com/restomods_uk/)

- [Products](https://www.emb-power.com/all-products)
- [Hardware](https://www.emb-power.com/hardware) 
    - [Controllers](https://www.emb-power.com/controllers)
    - [Displays](https://www.emb-power.com/displays)
    - [Data Loggers](https://www.emb-power.com/data-loggers)
    - [Telematics](https://www.emb-power.com/telematics)
    - [I/O Devices](https://www.emb-power.com/io-devices)
- [Software](https://www.emb-power.com/software)
- [Services](https://www.emb-power.com/services)
- [Resources](https://www.emb-power.com/resources)

---

[![EMB\_Power\_Logo](https://blog.emb-power.com/hs-fs/hubfs/EMB_POWER_logo-16x9-tp-1.png?width=250&height=140&name=EMB_POWER_logo-16x9-tp-1.png "EMB_Power_Logo")](http://www.emb-power.com)

Ash Lea, Alderley Road, Chelford, Macclesfield, SK11 9AP UK

Copyright © 2026, EMB Power Limited

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "EMB Power Team",
    "url" : "https://blog.emb-power.com/author/emb-power-team"
  },
  "dateModified" : "2026-10-28T09:19:43.116Z",
  "datePublished" : "2026-10-28T09:19:43.000Z",
  "headline" : "5 Tools for Secure Over-the-Air Firmware Updates in Electric Vehicles",
  "mainEntityOfPage" : {
    "@id" : "https://blog.emb-power.com/5-tools-for-secure-over-the-air-firmware-updates-in-electric-vehicles",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://blog.emb-power.com/hubfs/EMB_POWER_logo-16x9-tp-1.png"
    },
    "name" : "EMB Power Limited"
  }
}
```