Express Logic Initiates EAL4+ Security Certification Effort for Secure Cloud
February 23, 2018
Express Logic Partners with the World's Leading Security Lab Brightsight to Obtain Common Criteria EAL4+ Security Certification for X-Ware IoT Platform SC
Express Logic, provider of the comprehensive X-Ware IoT Platform Secure Cloud (SC) powered by the industry-leading ThreadX RTOS with more than 6.2 billion deployments, announced today that it has partnered with Brightsight, the world’s leading security lab, to perform the deeply embedded industry’s first EAL4+ security certification for cloud connectivity. The Norwegian National Security Authority (SERTIT) is the certification authority for this effort.
IoT security is the primary concern of the embedded industry — and for good reason. In 2017, the technology research firm Gartner predicted that more than 20 billion IoT devices will be deployed by 2020. Furthermore, Gartner predicts that by 2020, 95 percent of new product designs will contain IoT connectivity. Most striking, perhaps, is that through the year 2022, Gartner predicts that half of all security budgets for IoT will go to fault remediation, recalls, and safety failures rather than protection. These numbers are staggering and, even if they come only partially to fruition, represent a massive challenge to embedded IoT developers. To help meet this challenge, Express Logic has established itself as the safety leader in the embedded IoT space with its industrial-grade approach, including precertification to SIL 4 and ASIL D safety standards. Express Logic’s new EAL4+ security certification effort represents another significant step forward by focusing squarely on IoT security needs of the embedded industry, making what is already the most safe IoT platform also the most secure.
X-Ware IoT Platform Secure Cloud (SC)
X-Ware IoT Platform SC is the subset of X-Ware IoT Platform that pertains to cloud connectivity. It includes the popular ThreadX RTOS, NetX Duo embedded IPv4 & IPv6 TCP/IP stack, NetX Secure TLS, and NetX MQTT. These are the necessary components for connectivity with most of the world’s most popular cloud providers and they are also the subject of this EAL4+ security certification effort. Furthermore, this EAL4+ certification effort is designed to be generic — not based on any particular microprocessor or cloud provider and therefore portable to virtually any device based on X-Ware IoT Platform SC.
Industrial-Grade Performance, Connectivity, and More
Like all Express Logic products, the X-Ware IoT Platform SC is 100% created in-house, meaning that it includes no open-source code and is professionally supported. X-Ware IoT Platform provides high performance while maintaining a very small footprint, making it ideal for even the smallest of IoT devices. For example, X-Ware IoT Platform SC support for an embedded sensor typically requires less than 32KB of flash memory. Using X-Ware IoT Platform, embedded developers have plenty of room for their own application code, even on the smallest of devices.
In addition to the performance and size advantages of the X-Ware IoT Platform, ThreadX and NetX Duo have attained the highest level of safety certifications, including IEC 61508 SIL 4 (the highest, most dependable level as determined by IEC), IEC 62304 Class C, ISO 26262 ASIL D, EN 50128 SW-SIL 4, UL 60730-1 Annex H, CSA E60730-1 Annex H, IEC 60730-1 Annex H, IEC 60335-1 Annex R, and IEC 60335-1 Annex R, 1998.
X-Ware IoT Platform SC is more than just an RTOS with connectivity capabilities. In addition to the ThreadX RTOS and NetX Duo included in X-Ware IoT Platform SC, the safety-certified FileX embedded FAT-32/exFAT file system, GUIX GUI development and embedded runtime framework, and USBX embedded host/device USB stack are also available for use. Hence, embedded developers can leverage the entire X-Ware IoT Platform solution to create real IoT applications — ones that must do more than just communicate with the cloud.