1. A communication device having a memory and a processor coupled to said memory, said communication device comprising: an image update system to receive a software update image from an update server, said image update system executing at an operating system (OS) level; and a trusted execution environment (TEE) operating on said communication device to restrict control access and data access, by an OS and applications executing on said OS level, to systems operating within said TEE, said TEE including: a critical component database including data identifying critical software components associated with secure operation of said communication device, wherein said critical software components include at least one of a binary executable, header data, or digital signature data, and wherein said identifying data is included in said critical component database prior to said software update image being received from said update server; and a secure update application system to verify, using said identifying data, the inclusion of said critical software components in said software update image prior to installation of said software update image on said communication device.