Monthly E-letter

Latest edition | Subscribe

Solution for the conflict between security requirements and update capability

(Göttingen, 1.03.2010) High Security needs and future-orientated update concepts often make conflicting demands on system design. emlix GmbH is currently developing and realizing context-optimized complete solutions in the fields of ID Cards and measurement data transfer in the energy sector.

The requirements in both these fields are almost identical: very high sensitivity with regard to the secrecy of personal data and data security paired with future-orientated update concepts that allow non-experts to load software updates, bug fixes and security patches reliably in the field.

This especially applies to the basic software for a smart metering gateway being developed for the Stadtwerke-Allianz utilicount GmbH & Co. KG. This “intelligent“ accessory for electricity, water and gas meters, which forms an interface with both the invoicing departments of the utilities and with home automation installations, must answer data security questions in two areas. The PTB in Braunschweig certifies the correct transfer of precise measurement values, tariff information and time stamps.

These datasets must be transferred to the invoicing departments signed and safe from manipulation. BSI and the German Data Protection Act make strict rules about the handling of personal data – such as the energy use data, which is finely segmented according to time of use. These datasets must therefore be reliably encrypted and digitally signed before being transferred via open networks.

The update concept must make sure that any software elements that are loaded onto the gateway are correctly and securely implemented and activated, and that they do not compromise the data security and reliability of the unit. This process must be initiated remotely and run automatically. Problems during the updates must not lead to system failure under any circumstances. The continuous collection of data must be guaranteed.

In addition, there are other specific requirements on the basic software such as, for example, multi-customer capability, multi-utility capability and a tariff selection module. emlix has developed a complete concept for the basic software and is also responsible for the integration of so-called added-value applications on top of the basic software.

This software will, in the future, be used by various meter and gateway manufacturers and will be the platform for, among other things, diverse systems for home automation. emlix will take over the maintenance and further development of the system and will be responsible for version management. The company will also make sure that long-term maintainability and reproducibility are ensured.

About emlix GmbH

emlix develops Embedded Linux systems for controlling and networking devices and facilities. With 30 full-time employees in Göttingen, Berlin and Nuremberg, emlix offers know-how and experience in the fields of board support, seminars, applications and customer-specific solutions. Its embedded Linux systems are integrated in products of innovative companies in bioengineering, medical-, measurement-, information-, safety- and automation-technology. emlix was founded in January of 2000 and is one of the first companies, that has taken the “planning, development and adaptation of open source software into functionally optimized operating system platforms on the basis of Linux” as one of its core competencies. www.emlix.com

©MMX Industrial Embedded Systems.
An OpenSystems Media publication.