SYSGO is the leading European manufacturer of embedded software solutions such as the real-time operating system and hypervisor PikeOS and the embedded industrial-grade Linux ELinOS. Since 1991, SYSGO has been supporting customers in the Aerospace, Automotive, Railway and IIoT industries in the development of Safety-critical applications. SYSGO was the first company worldwide to achieve the Safety requirement level SIL 4 for its multi-core capable real-time operating system and hypervisor PikeOS. PikeOS version 5.1.3 meets the Common Criteria at the EAL5+ level for x86 64-bit, ARMv8, or PowerPC and is also certified according to the strictest Safety standards such as IEC 61508, EN 50128, EN 50657 and ISO 26262, thus enabling application development according to the “Safe & Secure by Design” principle. For industrial embedded systems, SYSGO also offers ELinOS, a Linux distribution with real-time extensions for embedded systems. Furthermore, solutions such as the Railway development platform (SAFe-VX) and the Secure Automotive Connectivity Platform (SACoP) for secure data transfer in, with and between automobiles are available.

SYSGO works closely with its customers throughout the entire product life cycle and supports them in the formal certification of software according to international standards for functional and IT Security. SYSGO is headquartered in Klein-Winternheim near Frankfurt, has subsidiaries in France and the Czech Republic and maintains a worldwide sales network. The company is ISO 9001:2015 and DIN EN ISO / IEC 27001:2017 certified and part of the European Thales Group.

Images are recommended, and please highlight the key benefits of the solution(s).  Do not include links in the solution description.

PikeOS is a real-time operating system (RTOS) that offers a separation kernel-based hypervisor with multiple partitions to execute applications and other operating systems strictly separated from each other. It enables you to build devices for environments with strong demands for Safety and Security. SYSGO’s PikeOS 5 provides a range of mechanisms to mitigate interference and provide assurance, for example those listed below.

Mitigating cache interference

1. Cache partitioning can divide cache space between cores so that the use of the cache is separated into blocks reserved for use by particular applications. In the event of an application malfunction, only the contents of the block of cache assigned to it could be impacted.
2. Cache bandwidth monitoring can be implemented to allow for a malfunctioning application to be sanctioned, e.g. restarting or stopping the offending application. This can be used together with cache partitioning to further negate the impact of application malfunctions on software timing behavior.
3. Cache-coloring can be used at the Platform Support Package (PSP) level, provided there is hardware support for it within the platform.

Mitigating interference due to interrupt overload

1. An interrupt limiter can be implemented in the PSP to control the effects of spurious interrupt bursts.
2. Time partitioning facilities enable scheduling of execution of drivers during non-critical sections.
3. ARINC 653 (APEX) is the de-facto standard for space/avionics and time partitioning in Safety-critical avionics RTOS and is also supported by PikeOS certification evidences.

Mitigating interference due to operating system services and objects

1. Interference due to operating systems and objects can be mitigated using built-in OS mechanisms such as fine-grained locking to limit critical sections and ensure coherence of individual OS objects. For example, ARINC 653 avionics partitions can run in parallel within PikeOS 5 will not conflict on OS kernel objects.
2. The design and methods provided by the OS for Inter-Process Communication (IPC) can affect interference. PikeOS 5 provides IPC via sampling and queuing ports, which not only isolate IPC overhead to the partitions involved, but also present no performance overhead while the IPC channel is quiet. Queuing ports operate on a First-In-First-Out (FIFO) principle, whereas sampling ports provide a single message buffer that is automatically updated by a write operation.
3. PikeOS certification kits provide formal assurance that system object contention is correctly addressed within the operating system. These include evidence from Worst-Case Execution Time (WCET) analysis, OS partitioning analysis, and testing.

The LDRA tool suite’s Eclipse plug-in provides a full integration with the PikeOS development toolchain using SYSGO’s Codeo IDE. Communications with the target are designed to be highly configurable, including the use of serial or multiplex communications channels.