DATA MODUL SECURE SOFTWARE UPDATE CONCEPT FOR A CORTEX A9 OVER USB MEMORY STICK

Transcription

1 DATA MODUL SECURE SOFTWARE UPDATE CONCEPT FOR A CORTEX A9 OVER USB MEMORY STICK Markus Mahl Head of Product Marketing Embedded August 27, 2013 Data Modul Group Company Profile Slide 1

2 AGENDA Motivation Secure Software Update (SSU) Concept SW Components Update Update Process Configuration File Secure Update Strategies Data Modul Hardware: edm-qmx6 / edm-ncb/qseven Data Modul Company Facts August 27, 2013 Data Modul Group Company Profile Slide 2

3 MOTIVATION Data Modul has released a Q7 CPU Modul based on a imx6, Cortex A 9 Processor Data Modul BSP including Mainline Linux OS, Barebox, Yocto. Software Components which can be updated: Bootloader, Linux Kernel, Rootfs Conventional updates mechanisms need a connection with a host computer OBJECTIVE: PROVIDE AN EASY, SECURE AND REPRODUCIBLE UPDATE PROCESS 8/27/2013 Presentation Data Modul AG Slide 3

4 SECURE UPDATE PROCESS: SW COMPONENTS TO BE UPDATED 8/27/2013 Presentation Data Modul AG Slide 4

5 UPDATE PROCESS Copy all SW Images to be updated on the USB Memory Stick (Full Image, Linux Kernel, Rootfs, Device Tree) Generate a simple ASCII File with the Update Description and Copy it on the USB Memory Stick Connect the USB Memory Stick to the Host USB Port (the same used for esata) Reset your board and automatically the update process will start A LED will inform about the Update Process: GREEN LED continuously lighting: Update process in progress GREEN LED blinking: Update process has been successfully completed RED LED: Error in update process Information of the Update Process is logged on the Serial Console and also on a file on the USB Memory Stick 8/27/2013 Presentation Data Modul AG Slide 5

6 CONFIGURATION FILE: INITFILE # Booting Selection and Update Images FLASH_LINUX_KERNEL_IMAGE=zImage-3.10 FLASH_LINUX_KERNEL_IMAGE_MD5SUM_FILE=zImage-3.10.md5 # Ethernet Configuration (tftp, nfs) ETHERNET_DHCP_ON_OFF=OFF ETHERNET_STATIC_IPV4= # TFT LVDS Parameters TFT_LVDS_PANEL_TIMING_H_ACTIVE_LINES=800 TFT_LVDS_PANEL_TIMING_V_ACTIVE_LINES=480 8/27/2013 Presentation Data Modul AG Slide 6

7 SECURE UPDATE STRATEGIES Several Strategies has been investigated to avoid unbootable boards after erroneous update Recovery SD Card: Changing a switch, the board will boot from the SD Card. SPI Software Solution: Protect SPI Flash with a Read Only (RO) region where an original and fix bootloader will be saved. This bootloader starts the customer (updateable) bootloader on a Read Write (RW) region. SPI Hardware Solution: Use of two different SPIs: The first SPI Flash RO preprogrammed with a basic bootloader. The second SPI Flash is RW and contents the customer (updateable) bootloader. Selection of the booting SPI is controlled by a ucontroller, which analyses the booting process. 8/27/2013 Presentation Data Modul AG Slide 7

8 EDM-QMX6 Qseven Modul with i.mx6 developed and designed by Data Modul 100% Qseven compatible i.mx6 CPU-Module Scalable Solo/Dual/Quad core HDMI & DisplayPort Up to 4 Gbyte DDR3 RAM Up to 32 Gbyte SSD (emmc) Secure Software Update (SSU) concept Linux OS support based on the Mainline Kernel Outstanding Video Performance Low Power Consumption (<5W) August 27, 2013 Data Modul Group Company Profile Slide 8

9 EDM-NCB/QSEVEN Reference Baseboard Nano-ITX Baseboard for Qseven Modules Full x86 and ARM compatibility DisplayPort or HDMI output Power input: +12V to +24V DC Dual channel LVDS (2x 24 Bit) with power sequencing and backlight control Mini PCI Express / msata support 8x USB 2.0, CAN, SPI, I²C, AC 97 Audio August 27, 2013 Data Modul Group Company Profile Slide 9

10 STARTERKIT EDM-QMX6 - Available now! - Selling price: DMO Virtual Machine on USB Stick - Cables - Power Supply - SD-Card with Security Back-Up August 27, 2013 Data Modul Group Company Profile Slide 10

11 SHORT FACTS EUROPEAN MARKET LEADER IN THE SEGMENT OF DISPLAY TECHNOLOGY. Headquarters: Munich, Factory: Weikersheim Sales offices: Germany, France, Spain, USA, Italy, UK, Denmark, Finland, Singapore, Dubai, South Africa, Switzerland Products: Flat panel displays, embedded computer systems, complete information systems Business segments: Displays and Systems Formation: 1972, listed on German stock exchange since 1989 Turnover: 140,2 Mio. Euro (2012) Employees: 315 (Ø 2012) August 27, 2013 Data Modul Group Company Profile Slide 11

12 DATA MODUL IN MUNICH & WEIKERSHEIM Munich Headquarters Weikersheim Factory August 27, 2013 Data Modul Group Company Profile Slide 12

13 THANK YOU! August 27, 2013 Data Modul Group Company Profile Slide 13