john wall, senior vice president and head of blackberry...

John Wall, Senior Vice President and Head of BlackBerry QNX

Leo Forget, Project Manager, BlackBerry QNX

What’s New in QNX® SDP 7.0?

Moderator:

Brandon Lewis, OpenSystems Media

Speakers:

Agenda

Housekeeping

Presentation

Questions and Answers

Wrap-up

What’s New in QNX SDP 7.0

Introducing the most advanced and secure embedded operating

system software platform

April 5, 2017

3

© 2017 BlackBerry. All Rights Reserved. 3

• Market trends driving OS technology

• What is an embedded operating system software platform?

• Platform Requirement #1: Ecosystem

• Platform Requirement #2: Security

• Platform Requirement #3: Safety

• Platform Requirement #4: Maintainability & Long term support

• Q&A

What’s New in QNX SDP 7.0

Overview

4


Poll Question

Who is in our audience today?

A. I am an embedded engineer

B. I am an embedded engineering manager or director

C. I am an executive

D.I am a market analyst

E. Other

5


Market Trends Driving OS Technology

6


Automotive Market Trends

Growth Areas

Total Auto Production Growth

Market Trends (TAM/SAM)

• Auto production CAGR steady 2.9% ‘16-’21 (SAM excludes economy & low-end vehicles)

• Top 10 OEMs account for 82% of units in SAM & 71% of growth

• Connected car and autonomous cars drive growth opportunities

• Telematics, ADAS, Gateways, Cluster growing faster than IVI

• 32b and 64b processors necessary for these applications (need real OS)

• Software complexity and architecture integrity drives OS vendor consolidation

Automotive Growth by Category

Source: LMC Automotive, IHS Market, Strategy Analytics

7


0 10 20 30 40 50 60 70 80 90 100

Space shuttle

Hubble space telescope

Boeing 787

Android

F-35 fighter

Windows 7

Large Hadron Collider

Facebook

Modern luxury car

Million lines of code

Software Complexity

Implications for Automakers

• More ECUs means more wiring

• Increased cost & weight

• 6-8 operating systems per vehicle

• Increased Complexity

• Both means increased security risks

50

60

70

80

90

100

110

120

2010 2011 2012 2013 2014 2015 2016 2017 2018

ECU count

ECU count,Luxury car

Source: Strategy Analytics, informationisbeautiful.net

2019


Shift to Autonomous Driving

8


• 60-100+ ECUs• 6-8 operating systems• Isolated operations• Increasing cost & complexity• Minimal upgradability

TODAY

• 6-10 High Performance Compute (HPC) platforms• Consolidated software systems• Coordinated operations• Reduced weight, cost & complexity• Future-proof with built in upgradability

TOMORROW

Handful of other ECUs

ADAS

Controller

Cockpit

Controller Safety

Controller

Body

ControllerChassis

Controller

Emissions

Controller


ECU Consolidation

9



Cockpit and ADAS Consolidation

10



IVI Microcontroller Forecast

• Microcontroller opportunity* 2015 vs. 2023 (Overall Market $433 Mil $485 Mil)

– 8 bit MCU: $35 Million in 2015 to $9 Million in 2023 (CAGR -16.7%)

– 16 bit MCU: $150 Million to $110 Million (CAGR -3.9%)

– 32 bit MCU: $230 Million to $270 Million (CAGR 2.0%)

– 64 bit MCU: $18 Million to $96 Million (CAGR 22.8%)

Source: Strategy Analytics, 2016

11


Secure

AuthenticationSecure

Manufacturing

FIPS Certified

Encryption

Secure RTOSSafety Trust Acoustics

TelematicsIVIClusterADAS

Engineering Services

Secure Vehicle

Software

Platform

Secure

Authentication

Secure

Manufacturing

Secure IoT Infrastructure

and managed services including OTA

End-to-End Security Consulting Services Secure OTA

Software Delivery

Secure

Communications

Software

Update

Business

Logic

IPR – Patent Portfolio

BlackBerry QNX

Providing an end to end solution

12


What is an embedded operating system

software platform?

13


What is an Embedded Software Platform?

Consider a Platform StrategyConsider an OS

Platform Strategy = Embedded Software Platform + Hardware Platform(s)

14


Embedded Software Platform

Considerations

• Technology Domain Dimension– HMI domain

– Connectivity Domain

– Real-time domain

• Product Line Dimension– Product line needs to scale from low-end to high-end devices

– Multiple products on a variety of hardware platforms

• Time Dimension– On going implementation of emerging standards & technologies

– Hardware evolution and obsolescence

– Long term support & maintenance

15


Choosing Your Embedded Software Platform

What are your options?

Convergence Divergence

One solution & support channelcovers all major silicon Vendors

Growing number of Linux distros required to support relevant hardware

Yocto Poky-2.0.1

Yocto Project* Jethro 2.0.3

Snapdragon 600 Linux Platform

(Linaro)

Vibrante

Genevi

Intel System Studio

LinaroseLinux

Android

Automotive Grade Linux (AGL)

IMXLINUX: Embedded Linux

QorIQ Linux® SDK

Linux for Tegra" (formerly "L4T") dev. kit

Automotive Android Processor SDK for

DRA7x

16


Poll Question

How familiar are you with QNX SDP?

A. I have no prior experience with QNX technology

B. I am just beginning to use QNX SDP

C. I have worked on many projects that utilize QNX SDP

D.I already have my copy of QNX SDP 7.0

E. Other

17


Platform Requirement #1

Ecosystem

18


Key ecosystem factors to consider when choosing an embedded operating system software platform

Access to Silicon and Hardware

Access to Software Technology

Access to Engineering Talent

Ecosystem

SUPPORTED PROCESSOR VARIANTS IN QNX SDP 7.0

ARMv8 ARMv7

X86-64 X86-32

19


Silicon Vendors

Ecosystem

Access to Silicon / Hardware

GPU Vendors

Wifi/BT Vendors Cellular Module Vendors*

* Cellular support provided via QNX Wireless Framework

20


BlackBerry QNX is more than an OS company. Our portfolio includes:

• Foundational Building Blocks• OS• Hypervisor

• A complete software platform for the car• IVI (QNX Car)• Telematics• Cluster• ADAS• Acoustic Management• Control Gateways

• Differentiators• Safety Certifications (ISO 26262 ASIL D)• Micro kernel architecture (reliability, high availability)• Security (architecture, tools, M-PKI, lifecycle management)• Execution (have never delayed a SOP in 20+ years)

Connected Car System Level Security

Aco

ust

icM

anag

emen

t Active Noise Control

Engine Sound Enhancement

Handsfree

In-Car communication

Co

ntr

ol

Gat

eway

s QNX Wireless Framework

OTA

Security

Tele

mat

ics QNX Wireless Framework

Security

Acoustics (eCall, Handsfree)

Safe

ty

HPC (high performance computing)

Cluster Platform

ADAS Platform

QNX Camera Framework

ISO 26262 OS

Info

tain

men

t

QNX Browser (Blink)

QNX Multimedia

QNX Projection Manager (supports CarPlay, Android Auto, SDL, CarLife, Mirrorlink)

QNX Bluetooth Framework for Auto

QNX Speech Integration Framework

QNX NAV Engine Integration Framework

QNX Hypervisor

QNX OS

Ecosystem


21


AUTOMOTIVE ECOSYSTEM

Production-proven automotive ecosystem is the industry’s biggest and broadest, giving QNX customers more options than any other vendor

Ecosystem


22


Ecosystem


23


Familiar development environment• Development environment based on Open Standards. Not proprietary• Ramp up quickly. QNX Neutrino looks and feels like Unix• Develop using C/C++, HTML5, Qt, Python, etc.• Port code over easily. QNX Neutrino is certified POSIX compliant

Ecosystem

Access to Engineering Talent

Update to Eclipse Neon with Marketplace client & CDT 9.0

Support for 64 bit toolchain and targets (x86 and arm)

C++14 awareness

Valgrind integration

Unit testing integration

QT Application Development Support

macOS host support

Comprehensive development suite• Develop, debug, analyze and optimize

from a common tool suite. • Choose IDE or command line• Common-industry-standard interface • Open extensible platform for

seamless tool integration from third-parties.

• Support for Eclipse Marketplace.

WHAT’S NEW IN THE QNX SDP 7.0 IDE

24



Security

25


BlackBerry QNX Runtime Security

Layered And Completely Integrated

Applications

Temporal & Spatial Control

Runtime Integrity

Application Sandboxing

Authorization

Tamper Resistance

ECU Validation

Automaker and 3rd party apps (embedded & connected)

Control & Restrict CPU usage, Resource Access, Protect against defects and rogue execution

Monitor system behavior, Intrusion detection logging & reporting

Whitelisting, Pathspace control, Resource Access, Abilities, Trusted Code Execution

Mandatory Access Control (MAC)

Secure boot, Signed Execution, Image Verification, Integrity Measurement model

Unique Certificate through Certicom Secure Manufacturing

26


QNX SDP 7.0 Security

High Level Feature Set

Authentication Control

Open PAM support (Pluggable Authentication Module)

Login/password support

System IntegritySecure Boot

Integrity Measurement

Secure Logging

File System Self Verify

Networking security

Restricted Data FlowMemory Protection via Micro-kernel architecture

Pathspace Control

Timely ResponseHeap and Stack protection

Address Space Layout Randomization (ASLR)

Anomaly Detection

Use ControlDiscretionary access controls

Mandatory access controls

Access control lists

Process Manager Abilities

Rootless Operations

Data ConfidentialityEncrypted File-system

Resource Availability

Adaptive Partitioning

High Availability Manager

27


Rootless OperationPathspace Control Anomaly Detection

Restricts access of a process to a defined path space so that all path space access is controlled. This is enforced by an explicit allow / denypolicy.

Runtime behavior monitoring to detect anomalous behavior in the system. Will detect everything from periodic anomalies to illegal system call sequences. Allows system designers to decide on the reaction to the anomalous event. It can be trained and is continually self-learning.

Access Denied

Root access is divided into >50 root level capabilities via QNX Abilities. Processes who traditionally ran as root no longer have to because they can be limited to the QNX Abilities they need.


Feature Spotlight

28



Multi-layered, Policy Driven Control

QNX APS Partition 0 QNX APS Partition 1

HMI

App

Media

App

Control

App

Se

cu

re L

oggin

g

Se

cu

rity P

olic

ies

Discretionary Access

Control

Access Control List

MAC

Secure Filesystem

Pathspace Control

An

om

aly

Dete

ctio

n


Control

Access Control List

MAC

Secure Filesystem

Pathspace Control


Control

Access Control List

MAC

Secure Filesystem

Pathspace Control

29



Managing Users and Software

QNX Software Center provides

Centralized installs

Secure delivery

Proactive updates

Compliance Management

With myQNX License Manager, you can

Centralize Management

Assign/Redeploy development seats

Monitor Activations

Delegate Administration

30


BlackBerry Security Professional Services

Radical transformation of security capabilities

Managing risk to your business

Penetration TestingIndustry leading assessmentsCESG standards

ComplianceAchieving regulatory compliancePCI-DSS, Cyber Essential+

IT Health CheckBusiness security postureUnderstand your attack surface

Forensic ServicesInvestigation and AnalysisAssociation of Chief Police Officers

Product Security Incident ResponseMonitor, Watch, and Fix

SDLCBusiness security postureUnderstand your attack surface

31



Safety

32


QNX Certification Experience

Telecommunications Industrial Medical Military defenseAutomotive

FIPS IEC 61508 IEC 62304 ISO 26262 CC EAL

• Impact analysis• Static analysis

• Hazard analysis• Residual risk

management

• Security function tests

• Security vulnerability report

• Configuration management

• Crypto documentation

• Dependent failure analysis

• Decommissioning requirements

33


QNX SDP 7.0 based products currently undergoing certification include:• QNX OS for Safety ( covers ISO 26262 and IEC 61508 )• QNX OS for Medical ( covers IEC 62304 )

Certified products are version compatible with QNX SDP 7.0 and available for all processor variants.

Functional safety requirements

definition

Functional safety management

planSafety case

Safety impact analysis

Hazard and risk analysis

Safety manual

QNX SDP 7.0

Safety Certifications

34



Maintainability & Long Term Support

35


Long Term Support

Vendor track record

BlackBerry QNX provides Industry-best product lifespan• We don’t force software migration• Your product choices are stable for years to come

BlackBerry QNX provides unparalleled product support• Released products supported indefinitely• QNX RTOS v4

• First released in 1991• Still used by customers• Customers still receiving technical support

• QNX RTOS v2• First released in 1982• Still used by customers• Still supported

36



QNX Software Center

Binary Level Traceability• All software packages and binaries are versioned and tagged • All QNX deliveries under full configuration management

Patch Set Management• Manage multiple software baselines• Import & Export patch sets

Open source & Third Party IP• All Open Source License Compliance information is now

delivered via the QNX Software Center • Project teams can accurately and efficiently complete their

own open source diligence

37


Proven Experience

Deep Expertise

CommitmentGlobal

Footprint

Integration & Optimization

ExpertsService

Excellence

Thousands of person-years in development, support, integration

Experts in all areas of in-car embedded device software

Dedicated, dependable and trusted staff

Maximize performance on custom hardware, faster time to market, integration experts

Regional experienced teams in US, EMEA and APAC

100% success at meetingStart Of Production (SOP) deadlines


Engineering Services team

38


Questions & Answers

Audience Q & A

John Wall,

Senior Vice President and Head of BlackBerry QNX

Leo Forget,

Project Manager,

BlackBerry QNX

Thanks for joining us

Event archive available at:

http://ecast.opensystemsmedia.com/

E-mail us at: [email protected]

http://ecast.opensystemsmedia.com/

mailto:[email protected]

john wall, senior vice president and head of blackberry...

Documents