VxWorks

Advanced Technology

Wind River® offers a portfolio of add-on capabilities to VxWorks® to support critical functions for enhancing the performance of embedded devices, machines, and systems.

SECURITY PROFILE

VxWorks with Security Profile for VxWorks delivers an expandable, future-proof set of advanced software capabilities to safeguard devices and data residing in and traveling across the Internet of Things.

Security Profile enhances the VxWorks Core Platform with a comprehensive set of security features to efficiently and effectively protect devices and data at every stage—from boot-up and full operation to data transmission and at rest.

Secure Run-Time Loader

Security Profile protects the integrity of the system and safeguards intellectual property from piracy and code from reverse engineering. Wind River has partnered with Wibu-Systems to deliver a solution that can decrypt (AES) and verify digital signatures (ECC) of downloadable kernel modules and real-time processes.

Network Security

Security Profile incorporates the latest version of Wind River SSL to enable state-of-the-art encryption, and Wind River SSH, Wind River Cryptography Libraries, and Wind River IPsec and IKE to effectively secure network communications.

Advanced User Management

Security Profile protects devices from unauthorized access and enables the definition and enforcement of user-based policies and permissions.

Secure Boot

Security Profile helps prevent the injection and execution of malicious code by only allowing authenticated (signed) binaries to run.

Encrypted Containers

Security Profile safeguards data when the device is idle or powered down.

SAFETY PROFILE

VxWorks together with Safety Profile for VxWorks delivers advanced safety partitioning capabilities that enable reliable application consolidation, helping drive down bill-of-material (BOM), maintenance, and upgrade costs. The upcoming optional IEC 61508 SIL 3 certification evidence package for Safety Profile reduces the amount of time and effort required to certify an embedded system.

Consolidation via Separation

Safety Profile adds advanced time partitioning to the space partitioning enabled in the VxWorks Core Platform. Taken together, they ensure reliable, interference-free consolidation of multiple applications of different criticality levels onto one hardware platform (single core or multi-core).

Separation via partitioning allows customers to update specific applications in a targeted fashion, without having to retest or re-certify the entire system.

VIRTUALIZATION PROFILE

Virtualization Profile for VxWorks integrates a real-time embedded, Type 1 hypervisor into the core of VxWorks, making it possible to consolidate multiple stand-alone hardware platforms onto a single multi-core platform. This set of capabilities significantly reduces costs while dramatically boosting device functionality.

Virtualization Profile enhances the VxWorks Core Platform with the following additional capabilities:

Real-Time, Embedded, Type 1 Hypervisor

  • 64-bit hypervisor with support for 32- and 64-bit virtual machines
  • Support for single or multi-core virtual machines

Device Virtualization Framework Through VirtIO

  • Flexible device virtualization through open standards

Inter–Virtual Machine Communication

  • High-speed virtual TCP/IP network

Architecture Support

  • Support for Intel® architecture with support for VT-x

MICRO RUNTIME

Wind River Micro Runtime provides an optimized embedded Java runtime engine for VxWorks, enabling the deployment of Java applications specifically for embedded devices that have a smaller footprint requirement on resource-constrained devices.

IoT developers can use Micro Runtime to design applications, bringing the benefits of Java to embedded development—such as increased development efficiency and code portability, as well as over-the-air bug fixes that save money and create new revenue opportunities.

Designed for Embedded and IoT

To address requirements of IoT resource-constrained devices, Micro Runtime includes key communication protocols (TCP, UDP, CoAP, and MQTT) and peripheral interfaces (GPIO, I2C, and SPIO), and has been optimized for memory/CPU-constrained systems.

Write Once—Deploy Often

Micro Runtime reduces project costs by investing in the Java application development once and then extending its use across multiple projects, important in the IoT-connected world.

Designed with Security as a Priority

Micro Runtime provides all the security features of standard Java and adds advanced security support with the Bouncy Castle cryptographic APIs for Java. In addition, Micro Runtime was designed to be self-contained to allow proper sandboxing of applications and was developed using a strict security lifecycle development process.

Take Advantage of the Large Java Ecosystem

In addition to your C/C++ application developers, you can now tap into the large ecosystem and knowledge base of the more than 9 million Java developers who can hit the ground running on your project team.

Speeds Project Time-to-Market

With the Micro Runtime engine and a full software development kit (SDK), engineers have support for the entire application lifecycle. Java developers just connect the target board to a Linux or Windows host with a network cable and start debugging Java applications using the familiar Eclipse-based Wind River Workbench development environment.

Easily Provide Maintenance and Upgrades

Micro Runtime's remote application management means there is no need to re-flash the whole system. This saves you support costs by not having to roll a truck, helps you maintain a competitive edge by adding new features, and even can help by adding new revenue streams.