IoT Security for EdgeController

Nowadays most edge controllers run a modern embedded operating system like Yocto or Linux. While it is a matter of course for PCs and network servers that the operating system is always up to date and therefore contains all security updates, this is still not the case with embedded controllers. Even if these mostly IoT-based edge controllers have other accessible interfaces such as USB, JTAG, UART (TTL, RS232, RS485), CAN or other manufacturer-specific ISP variants (ISP: In-System-Programming) in addition to Ethernet It is often time consuming to manually update hundreds of these EdgeServers. To solve this problem, version 1.6 of the ARIGO Framework RUMO 4.0 has been expanded so that a second boot partition can be set up on the EdgeServers via the Ethernet interface, on which an update boot kernel adapted to the respective operating system is installed. A web server is executed in this update kernel so that a backup can be made with a browser via the web UI. Then the actual operating system update takes place on the main partition. A RAUC (Robust Auto-Update Controller) service is used so that this can be carried out safely on site. Even if the update was interrupted, for example due to a power failure, a secure access to the update kernel is guaranteed and the operating system update can be continued without any problems. The latest operating system and security updates can be installed with the ARIGO Framework RUMO 4.0 in the shortest possible time via remote access on hundreds of edge controllers. If the ARIGO Framework RUMO 4.0 is installed on a central computer, this update process can even be carried out centrally and automatically.