Open and smart cyber-physical systems (CPS) are considered to be the next revolution in ICT with enormous economic potential, enabling novel business models for integrated services and products. In many areas of CPS devices, there is a strong trend towards open systems, which can be extended during operation, instantly adding functionalities on demand. The main goal of the TAPPS (Trusted Apps for open CPS) project is the development of a platform for CPS apps that can also access and modify device internals. Therefore, the solution will address all necessary layers from hardware over software to an app store concept, always ensuring security and full real-time support for the applications. The extensibility and the pervasive trusted environment of TAPPS are important differentiators that will enable new market extensions to keep pace with user expectations and latest technology.
As current, rich execution platforms for apps are limited in security, the project will develop a parallel, real-time Trusted Execution Environment (TEE) for highly trusted CPS apps. The TEE is located inside the System Control Units and therefore separated from the existing execution environment. It exploits functionalities provided by the novel hardware-, processor- and network-centric security mechanisms as well as uses a hypervisor for virtualization. Furthermore, TAPPS will provide and validate an end-to-end solution for development and deployment of Trusted Apps, including an app store and a model-based tool chain for trusted application development including verification tools. This multi-level trusted apps platform and the tool chain are matured and validated in health and automotive application domains using realistic industrial use cases, paving the way for future exploitation in further demanding application domains.
This project has received funding from the European Union’s Horizon 2020 Programme for research, technological development and demonstration under grant agreement no 645119.
As main building block, TTTech provides the network for the distributed TAPPS platform. The Deterministic Ethernet connection between multiple TAPPS platforms needs to support the apps executed on the platform to have a dependable and partly real-time communication service. The solution will be based on established TTEthernet technology and extends it in the most relevant areas for Trusted Apps communicating over the Internet. R&D thus includes safety and security features and goes strongly into the direction of more open and dynamic yet deterministic connectivity for the applications, e.g. as demanded in Internet (of Things) use cases.