SCOTT’s partner TU Graz has developed an open-source, portable, and lightweight update framework for constrained IoT devices named UpKit. This framework encompasses all phases of the software update process: from the generation and signature of a new firmware, to the transmission of the latter to an IoT device, its verification and installation. UpKit employs a novel update architecture that is agnostic to how new firmware images are distributed and that introduces a double-signature process to guarantee the freshness of a new firmware.

Curious? Check out the implementation for several operating systems, off-the-shelf hardware platforms, as well as cryptographic libraries at

A paper describing UpKit in detail was also recently published at the 39th IEEE International Conference on Distributed Computing Systems (ICDCS), and can be downloaded from

There is so much more to see … check out