SYSGO & PikeOS® Wherever Safety & Security matters ENGAGEMENT >

SYSGO Headquarters , Klein-Winternheim (near Mainz)

Reference List SYSGO & PikeOS® Certified Platform Wherever Safety & Security matters for critical Applications Aerospace & Defense SYSGO is the leading European provider Our certified software platform allows a • Airbus of real-time operating systems for critical strict separation of applications, enabling • RheinMetall embedded applications in the Internet customers to securely combine applications of Things (IoT). Our products have been of different criticality on the same hardware Automotive designed to meet the highest requirements platform even when they are reusing legacy when it comes to Safety and Security. code. The benefits are reduced hardware • Magna Our customers are leading players in the cost and weight, a smaller number of • Continental Aerospace & Defense, Railway, Automotive and different hardware platforms to support and Industrial Automation industries, who use more straightforward and thus less costly Railway our PikeOS product as a platform for critical certification of individual components. systems that need to be certified against • Knorr-Bremse industry specific Safety and Security standards. Using our certified and • DB Deutsche Bahn separation technology, customers can As an independent entity within the choose between different domain specific Industrial Thales Group, SYSGO employs approx. personalities, which can host market specific 150 employees in Germany, , UK and run-time systems like AUTOSAR, ARINC 653 • Siemens the Czech Republic. Our international partner or POSIX as well as general purpose • SWARCO network includes leading technology operating systems such as our embedded providers as well as distribution and support ELinOS or Android. Medical partners throughout Europe and Asia. PikeOS is hardware independent and supports all leading hardware platforms for • B. Braun As our products are used in the most critical embedded systems. • Hamilton Medical environments and applications, SYSGO has strict in-house quality requirements in Certificates & Standards product development. Our company processes are certified according to We have designed PikeOS from scratch for ISO 9001:2015, and in 2016 we achieved mission-critical projects with certification the certification against ISO/IEC 27001:2013. requirements according to various Safety Since 2018 the PikeOS is also and Security standards such as DO-178B/, certified according to Common Criteria EAL3+. ISO 26262, IEC 61508, EN 50128 or IEC 15408  www.sysgo.com/common-criteria (Common Criteria). 80% of our engineers have distinct certification experience. We We maintain our products during the en- support our customers throughout the tire life-time of customer solutions, even entire certification and supply when exceeding 20 years. As an European certification details and documentation. company, our products are ITAR free. Wherever Safety & Security matters

Our Partner Ecosystem Software Partners* Hardware Partners*

SYSGO is committed to establish the • AdaCore • AMD technological and business partnerships • aicas • ARM Arrow Europe that will help its customers to achieve their • ANSYS • Cetrac - Silkan goals. At SYSGO we know how important • Candera • congatec AG it is for the users of our products to have • Codesys • Curtiss-Wright a development environment that combines • CoreAVI • ELTEC Elektronik AG flexibility, openness and efficiency, and itis • Karamba Security • Gaisler - Cobham our commitment to accurately address the • Disti • Infineon needs of the industry sectors involved in the • Imagination Technologies • Intel Corporation development of highly reliable applications. • iSystem • Kontron • Lauterbach • MEN For SYSGO, building a successful ecosystem • LDRA • Mikro Elektronik GmbH means to partner with both hardware and • Paragon • Mercury Mission Systems (MMS) software companies that are complementary • Rapita • Microchip to its solutions, bring a real added value, • Rightware • and target the same industry sectors and • Rti • NXP application types. This is why we work closely • The Qt Company • Phytec Technology Holding AG with leading CPU and board vendors as well • TTTech Group • Qualcomm Technologies Inc. as with specialised software companies for • Vector Informatik • Renesas Electronics Corporation embedded applications worldwide. This way, • WolfSSL • ST Microelectronic customers can always be sure that they • Teledyne e2V can develop their application for the latest • Texas Instruments hardware architectures and platforms while • TQ Components still protecting their investments into former • Xilinx generations.

Next to our partnerships with hardware and software vendors, SYSGO actively participates * Find more partners at in different industry consortiums with * www.sysgo.com/partners business partners and customers in order to drive innovation and adoption of modular platforms. Some of these are industry-specific, such as EUROCAE, the European Organization for Civil Aviation Equipment. Others are industry-agnostic - like the Open Group, a global consortium that enables the achievement of business objectives through IT standards. SYSGO & PikeOS® >

PikeOS in Action Aerospace & Defense Automotive

Airbus A350 PikeOS with its small, certifiable micro- In the Automotive industry with its kernel and its virtualisation infrastruc- applications ranging from non-critical PikeOS is used for critical and ture is the ideal embodiment of the IMA infotainment systems to highly critical non-critical applications at Airbus (Integrated Modular Avionics) vision. It control functions in the car, PikeOS can in the cockpit of the A350. The supports non-critical cabin management be used as an integrated and pre-certified IMA-compatible FSA-NG system applications as well as highly critical control platform for a broad variety of Guest provides access to recorded flight functions in the cockpit on a single OSs: from POSIX to Linux and Android to data for both the pilots during the platform. PikeOS provides a broad variety AUTOSAR or GENIVI. Thanks to strict flight and the maintenance crew of Guest OSs: From the avionics-specific separation technology, applications of on the ground. ARINC-653 API or space-specific RTEMS to different Security levels, different Safety POSIX, Ada, and embedded Linux. Due to levels, real-time or non-real-time can These are mixed-critical applications its small size, criticality partitioning, and run concurrently in a mixed-critical divided into multiple partitions unparalleled company support for the environment on a single standard that use personalities like POSIX certification process, PikeOS is also an hardware platform. This even includes for new external applications and ideal platform for Safety-critical applications re-used legacy code. Taking all this PikeOS Native for internal platform which need to be certified up to the highest together, PikeOS reduces cost and effort of services, using the ARINC 653 criticality levels. ISO 26262 certification. mechanisms. The applications are safety-critical and certified under Transportation & Railway Industrial Automation & IoT various safety levels according to the DO-178B standard. Initiatives like the European Train Cont- As Industrial Automation applications rol System (ETCS) strive to replace older increasingly communicate with the outside Magna SurroundVue™ and incompatible signaling, control and world to finally turn into IoT devices, train protection systems with common Security becomes even more important. The hypervisor technology of interoperable systems. All of these require PikeOS allows developers to strictly PikeOS is used in Magna’s a robust real-time operating system (RTOS) isolate graphical or communication 360-degree view system platform to allow applications to run in a applications from time-critical measurement SurroundVue™ and integrates safe and secure manner, meeting Safety systems or critical control functions with camera system and vehicle standards like EN 50128. With PikeOS, Safety requirements according to IEC 61508. information system on the same developers have access to a hard real-time Thanks to its separation technology, Linux hardware. The new platform hypervisor based on a , applications and proprietary intellectual creates the basis for further which is certified to the highest SIL-level property can be divided into separate joint customer projects and is of the EN 50128 standard. Using a pre- partitions. Accounting for the long lifetime an important step for certified PikeOS and a pre-certified Board of industrial applications, SYSGO will autonomous vehicles in series Support Package (BSP), development support its solutions without limitation, production. teams can focus on developing and protecting customer investments. certifying the Safety application. Our best rated Asset

Built in Germany Support throughout Customer Voices to be certified worldwide the Certification Process “I want to thank SYSGO for Certifying software according to Safety Our separation kernel based virtualisation successfully applying their and Security standards can be an arduous platform comes with all the artifacts security partitioning expertise task. Certification is a complex process, and required for certification. Depending on to the challenge of spacecraft certification costs are very much related the architecture it comprises planning flight software.” to the number of lines of code and the documentation, development and verification modularity of the software. artefacts and evidence documentation. James Windsor Micro-kernel and system software are Technical Officer PikeOS‘ safe & secure virtualization has been pre-certified for selected architectures European Space Agency designed from scratch with certification and boards, and the same holds true for in mind. The separation kernel is selected – greatly reducing certification equipped with a modular architecture effort and cost. Certifications Kits are component (ASP) and a Platform Support available for DO-178B/C, ISO 26262 and “We were very impressed by Package (PSP) to separate processor- IEC 61508. When it comes to Security, the scalability of SYSGO’s specific and board-specific functionality. The PikeOS products are certified based on PikeOS that can be seen as system softwareallows to create multip- IEC 15408 (Common Criteria). a high performance RTOS as le independent partitions for various OS‘s, SYSGO actively supports its customers well as a powerful embedded APIs, and runtime environments. As a during the entire certification process. We virtualization platform.” result, PikeOS is a small and modular have more than 25 years of experience platform - perfect for certification. Even with certification of Safety-critical real-time Rudolf Dienstbeck in case of hardware obsolescence, the software products, and 80% of our System Engineer modular ASP and PSP structure allows engineers do have Safety certification Lauterbach GmbH fast and cost efficient ports to new CPU competences. architectures or new boards, minimizing re-certification effort. PikeOS Characteristics

Because PikeOS has been designed with • Developed from ground-up to meet By the way the necessary level of flexibility to address certification criteria different industry verticals through the • Only ONE technology combining Safety SYSGO develops its products concept of ‘Guest OS’, it can equally address and Security, real-time and virtualisation according to industry standards the different certification standards. Due to • Same core technology used for all Safety • DO-178B/C up to Level A the modular design with strict separation and Security certification standards • IEC 61508 up to SIL 3 of applications, changes or additions in • Modular design - certify no more than • EN 50128 up to SIL 4 one application do not necessarily require you really use • ISO 26262 up to ASIL D re-certification of the entire system, but just • Certified according to DO-178B/C, of the affected application. ISO 26262, IEC 15408 EXPERIENCE > PikeOS® Volume System Architecture AppApp App AppApp Provide Partition

PikeOS Para-Virtualized HW-Virtualized PikeOS Native (Native, POSIX, Guest OS Guest OS ARINC 653, ...) Linux Linux Device Driver User Space / Partitions

PikeOS® System Software

® Kernel Space / PikeOS Kernel () Hypervisor

Architecture Platform Kernel LeveLevell Support Package Support Package Driver

SoC / Target Boot Loader Custom Hardware

CPU0 CPUn Serial Hardware CAN Ethernet Graphics ...

PikeOS at a Glance PikeOS® - RTOS & Hypervisor The integrated scheduler combines time and priority driven , so that • Separation kernel-based PikeOS is the European No1 software real-time requirements for critical hard RTOS platform for highly critical Safety and applications are met while still providing • Embedded virtualization Security applications. It has been completely best effort scheduling for non-critical tasks. • Robust time & resource developed to perform at the highest Safety partitioning (DAL A, ASIL D, SIL 4) and Security levels This way, some PikeOS partitions can be • MILS compliant Security (EAL 3+). As a common and certified used to provide network and industrial architecture for CC’s EAL 3+ code base, it greatly increases flexibility and communication protocols or run certification speed in application development. Modular infotainment applications on top of • Large software and certification kits for Aerospace & Defense, operating systems such as Linux or hardware ecosystem Automotive, Railway, Industrial and Medical Android, whileothers contain Safety-critical • Certifiable IP stack and applicationshelp to significantly reduce real-time applications and functions. file system time-to-market and certification cost. • -based IDE CODEO Single and Multi-Core Support PikeOS is based on a separation kernel and Safety Certifications combines a hard Real-Time Operating System Being hardware-agnostic, PikeOS supports (RTOS) with hypervisor technology providing a wide range of single and multicore • DO-178B/C partitions which can host different processors (MCP). The virtualisation concept • IEC 61508 applications on the same hardware platform. fully supports multi-core architectures, • EN 50128 The PikeOS Hypervisor strictly separates providing a variety of execution models • ISO 26262 applications by time and resource from SMP to AMP and hence allowing a • IEC 62304 partitioning and control of the trade-off between performance and communication channels. This even allows certification requirements. Supported Guest OSs to co-host applications with different levels of criticality, as failures in one application PikeOS is accompanied by CODEO, an • Linux, Android™ cannot propagate to any other. Another Eclipse-based IDE (Integrated Development • Legacy RTOS, RTEMS benefit is the possibility to isolate GPL code Environment), with easy-to-use configuration • POSIX, ARINC 653, Java from a customer’s intellectual property and tools, remote debugging, target monitoring, • AUTOSAR to secure data at rest. remote application deployment, and runtime analysis tools. Supported Platforms Partitions isolate Applications CODEO is a complete environment for • PowerPC Any PikeOS partition can host virtualized embedded systems covering the whole • operating systems or a runtime development cycle from early simulation/ • ARMv7, ARMv8 environment, which run safely separated emulation tools to software update • SPARC V8/LEON, … from any other partition’s payload. mechanisms for deployed systems. • Multi-core (MCP) processor Solid Base for Success

ELinOS at a Glance

Supported Hardware*

• ARMv7 • ARMv8 • x86 (32/64) • PowerPC e500, e500mc, e5500 (32/64) • Board Support Packages (BSPs) available for almost every board made by SYSGO’s hardware partners ELinOS SYSGO also monitors Common Vulnerabilities • Support for SMP The Linux Essentials and Exposures (CVE) databases to provide (Symmetric Multi-Processing) in-time updates to fix potential Security on multi-core platforms like Linux is a popular choice for embedded issues. ELinOS is very easy to use and speeds x86 (32/64), PPC e500, PPC systems due to its flexibility, a broad range up project development significantly. e500mc, PPC e5500 (32/64) of functionality and of course cost. and ARM is included In addition, Linux offers connectivity, Feature-driven Configuration • Open source real-time Security features, and source code Linux extensions availability. However, embedded systems A main advantage of ELinOS is its unique • Kernel pre-emption/low- require a very different approach than feature driven configuration approach that latency patches are included servers and clients. Developers need to configures both kernel and user space support a broad variety of hardware, and at once. Developers can just graphically Supported File Systems application footprint must be small. Some select the components they need from a applications need to run in real-time, and base of 1,500+ pre-compiled libraries and • Ext2, Ext3, Ext4 all need appropriate device drivers. Also binaries, and the kernel will be compiled • reducing the complexity of the system by accordingly. Similarly, the root file system • UBIFS including only required services is a major will contain the selected applications and • Flash-Friendly File System point to reduce potential Security risks. libraries only. The result is a system F2FS Finally, the product lifecycle can exceed tailored to the individual project’s needs • JFFS2 and YAFFS2 20 years, and the system needs to be without any unnecessary components or • SquashFS supported across the entire time span. functions, reducing complexity, increasing • ReiserFS Security and keeping the footprint of the • FAT Standard desktop or server Linux distributions Linux environment as small as possible. • NTFS are not appropriate for embedded applications. • NFS v4.1 They require a distribution containing the Complete Development Environment • Initramfs latest stable and well tested kernel equipped • others with industrial grade drivers, connectivity ELinOS Industrial Grade Linux contains all stacks, real-time extensions, support for development tools needed for embedded Industrial industrial hardware, a state-of-the-art Linux within one package: Compiler, linker Automation Support embedded development environment and and debugger integrated into CODEO, support from engineers with experience SYSGO‘s Eclipse-based integrated development • CAN in the fields of industrial applications. This environment (IDE). As a cross development • CANOpen is why SYSGO has developed ELinOS, an platform, it even allows developers to affordable embedded industrial-grade use Windows for the development of Linux environment with real-time extension, sophisticated embedded applications in designed for an immediate out-of-the-box the IoT market. ELinOS is backed by SYSGO’s * Others on request experience. It allows developers to focus on experienced engineers who provide support, writing their specific applications instead consulting, professional services and of spending time and efforts for Linux complete project development. customization. PEOPLE & KNOWLEDGE

Let‘s make the world “a bit“ safer Jobs @ SYSGO for Professionals and Students

At SYSGO, we have highly-motivated and international teams with a broad range of skills and working experience. Their good cooperation and engagement are key to our success. We are continuously improving our working environment to provide all colleagues the best and required conditions to apply their talents and develop their skills. As such, we are the trusted and reliable partner to provide our customers with the best solutions possible.

On our career site you can find our job offers, how to apply and further details. Ifyou find a job offer matching your profile, knowledge and experience, we appreciate receiving your application. We also look forward to receiving unsolicited applications.

 www.sysgo.com/jobs

Keep in Contact!

Take advantage of the latest news, whitepapers and professional articles. Subscribe to our newsletter:  www.sysgo.com/newsletter

 www.sysgo.com/     

Knowledge Center Document Center

www.sysgo.com www.sysgo.com/knowledge-center www.sysgo.com/document-center

Rel. 1.4 (PUBLIC) © 2020-06 by SYSGO GmbH. SYSGO, ELinOS, PikeOS and SYSGO Headquarters SYSGO France SYSGO Czech Republic

CODEO are trademarks or registered trademarks of SYSGO GmbH. All other Phone +49 6136 9948 500 Phone +33 1 30 09 12 70 Phone +420 222 138 111 products, logos and service names are the trademarks of their resp. owners. [email protected] [email protected] [email protected]