The use of Linux in the domain of embedded systems is growing very fast. Due to the complexity of hardware and software on Linux-based platforms, it is challenging to meet the performance requirements, especially for the mixed-criticality system with both real-time and best-effort tasks. We propose a reference design of Linux-based mixed-criticality system using PREEMPT_RT patch to improve real-time performance and QEMU/KVM virtual machine to reduce interferences. An evaluation environment of the proposed design is built with recent software and hardware to investigate the performance characteristics via experimental measurements. We measure and analyze the baseline kernel latency, the system throughput and the real-time performance under multiple conditions. In detailed analysis, we reveal novel insights on the real-time capabilities and limitations of Linux-based embedded systems. The results show that our design can meet the 100µs deadline goal of 1kHz real-time task with high probability under various extreme interferences, and can deliver high throughput for best-effort workload.

The complexity of a System of Systems makes resilience one of its key attributes. Numerous studies have focused on the quantitative assessment of resilience by trailing indicators, yet discussions on resilience assurance through monitoring leading indicators remain scarce. Resilience assurance in SoS faces two major challenges: lack of structured argumentation work related to resilience and conflicts among multiple independent stakeholders. This paper first introduces a resilience argumentation approach based on STAMP (Systems-Theoretic Accident Model and Processes), then employs cooperative consensus process model to seek consensus on resilience assurance. Finally, under the requirements of the international standard IEC 62853 for open systems dependability, a consensus based resilience assurance framework is proposed. Two SoS case studies, Microgrid and Mobility as a Service, are used to demonstrate the application of the proposed approach.

Blockchain and smart contracts are widely used in IoT access control to create decentralized, trustworthy environments for secure access and record management. However, their application introduces a dual challenge: The transparency of blockchain and the use of addresses as identifiers can expose account privacy. To tackle this issue, this paper proposes a blockchain-based IoT access control system that enhances account anonymity and preserves privacy, particularly regarding user behavior, habits, and access records through the use of zero-knowledge proofs. The system incorporates an access control mechanism that combines access control lists with capability-based access control, enabling ownership verification of access rights without disclosing identity information. To evaluate the system’s feasibility, we conduct experiments in a smart building scenario, including both qualitative comparisons with existing methods and quantitative analyses of performance in terms of time, space, and gas consumption. The results indicate that our scheme achieves the best time efficiency in the proof generation and authorization phases, completing them in just 7 and 10 s, respectively—representing half the time required by the second-best approach. These findings underscore the system’s superior cost efficiency and enhanced security compared to existing solutions.

The system of systems (SoS) is essential for integrating independent systems to meet increasing service demands. However, its growing complexity leads to disruptions that are difficult to predict and mitigate, making resilience analysis a critical aspect of SoS development. Resilience reflects an SoS’s ability to absorb and adapt to disruptions, yet its quantitative assessment remains challenging due to diverse stakeholders. To address this, we propose a model-based approach leveraging ArchiMate for SoS visualization and quantitative modeling, combined with a resilience indicator derived from model simulations. This indicator identifies critical constituent systems (CSs) and informs resilient design strategies. Using Mobility as a Service (MaaS) as a case study, we demonstrate how the proposed method can be implemented in a specific SoS.