Boosting security with STM32MP1 ecosystem extensions

By providing code for security mechanisms such as OP-TEE (Open Portable Trusted Execution Environment) and the TF-A (Trusted Firmware-A) project, ST helps STM32MP1 developers address the key concepts of information security in their applications: confidentiality, integrity, availability, and authenticity verification. In addition, ST has extended the roster of Authorised Partners in embedded security with Sequitur Labs.

Sequitur Labs’ EmSPARK Security Suite for STM32MP1 streamlines firmware development implementing protective techniques such as secure boot and device authentication. “We are proud to partner with STMicroelectronics in delivering the EmSPARK Security Suite to meet mission critical, STM32MP1-enabled, device protection requirements,” said Philip Attfield, CEO, Sequitur Labs. “The combination of EmSPARK and STM32MP1 makes our customers’ IoT applications and data safe.”

EmSPARK Security Suite works with the Arm TrustZone architecture integral to the STM32MP1 and assists with secure provisioning to simplify deploying connected devices while keeping secrets safe. In this, it is optimised for applications such as industrial control, building automation, smart-home equipment, machine vision, automotive communication, and medical devices.

These new resources join the STM32MP1 ecosystem alongside solutions from Authorised Partners Prove&Run, TimeSys, and Witekio, which provide reliable and field-tested solutions to security-software development challenges.

ProvenRun helps STM32MP1 customers integrate security in their design by providing custom security engineering services (secure boot, secure firmware, OP-TEE) and more advanced solutions leveraging on ProvenCore, a secure OS that has been certified. The TimeSys Vigiles Vulnerability Management Suite is embedded in OpenSTLinux and constantly watches for relevant vulnerabilities that open devices to cyberattacks. Vigiles also provides remediation information for device lifecycle management. Witekio’s FullMetalUpdate open-source over-the-air (OTA) solution helps IoT platform operators manage their own OTA updates, combining security with flexibility and economy.

ST has also revealed details of software expansion packages tailored for STM32MP1 that help customers leverage AI in computer-vision projects and accelerate development of predictive-maintenance applications. These include X-LINUX-AI, an OpenSTLinux Expansion Package that targets Artificial Intelligence for STM32MP1 microprocessors. The package contains Linux AI frameworks and application examples to help users quickly begin implementing computer-vision use cases with STM32 Evaluation Boards and Discovery Kits.

To accelerate development of predictive-maintenance applications, the X-LINUX-PREDMNT  expansion package helps implement edge gateway features between sensors and cloud services. The pack contains functions for sending processed sensor data to the IoT cloud, visualising data on the dashboard, and analysing the data to detect conditions that may indicate the need for maintenance intervention. X-LINUX-PREDMNT also includes the AWS IoT Greengrass Edge Computing service.

Finally, ST has added safety documentation and a self-test library software package, X-CUBE-STL, that suit building and certifying functional-safety systems to IEC 61508 safety integrity levels SIL-2 and SIL-3. Leveraging X-CUBE-STL and the separation concept of STM32MP1’s dual-core architecture, developers can cost-effectively separate the safe partition - managed by the Arm Cortex-M4 core - from the non-safety-related application on the Arm Cortex-A7, accelerating time to market for factory automation, battery management, meters, and medical devices.