SZ Lin presented on Moxa's open source journey and establishing an Open Source Office. Moxa is establishing processes for open source compliance, including identifying the origin and licenses of software, meeting license obligations, and conforming to the OpenChain specification. Moxa has formed an Open Source Review Board and steering committee to oversee its open source policy and processes. The goal is to build trust with suppliers and customers through responsible open source management.

1. Open Source Journey in Moxa
Build up Open Source Office in Hardware Manufacture
Company
SZ Lin (林上智)
Embedded Linux Development Center,
Software Engineer
09/27/2019

2. About Me
2
SZ LIN (林上智)
 Software Engineer at Moxa
 Debian Developer
 OpenChain 2.0 Traditional Chinese Translator
 CIP Technical Steering Committee Member

3. Introduction to Moxa
3

4. Fast Facts
# 1
Supplier in
Serial
Connectivity
# 3
Supplier in
Industrial Ethernet
Infrastructure
Market Leadership
devices worldwide
Connecting
57 Millionyears of experience in
industrial automation
30+
Moxa is a leading provider of edge connectivity, industrial computing,
and network infrastructure solutions for enabling connectivity.
Numerous Global Awards

5. Branches in four
Continents
12 1300+
Employees
Worldwide
Global Presence
Headquarters
Taipei, Taiwan
Moxa Europe
Germany
France
UK
Moxa China
Shanghai
Beijing
ShenzhenMoxa Americas
Brea, CA
Moxa India
Bangalore
Moxa Korea
Seoul
Moxa Russia
Moscow
Moxa Brazil
Sao Paulo
Countries of
Dist. & Service
Network
70+120+
Distributors
Worldwide

6. Smart
Grid
Smart
Rail
Smart
Oil Field
Smart
Factory
Smart
Transportation
Smart
Marine
Application
Device
Network
Management
Industrial
Routers
Industrial
Ethernet
Industrial
Wireless
LAN
Network Infrastructure
Connectivity Solutions for Your Networks
Serial
Connectivity
I/O
Connectivity
Edge Connectivity
Embedded
Computers
Industrial
Computing

7. Open Source Software In Moxa
7

8. 8
Final Commercial Product or Service
Moxa
Proprietary
Open
Source
3rd Party
Commercial
Integration & Testing

9. 9
Industrial
Systems
Industrial
Grade
SecuritySustainability

10. Moxa Joined Civil Infrastructure
Platform Project
10

11. 11

12. 12

13. Scope of Activities in CIP
13

14. 14

15. 15
Software
supplier
Software
supplier
Software
supplier
Software
supplier
Software
supplier
Software
supplier
Software
supplier
Software
supplier
FOSS info.
FOSS info.
Without
FOSS info.
Without
FOSS info.
FOSS
issue
FOSS info.
FOSS info.

16. Open Source Management
16

17. 17
Copyright Patent
A patent gives its owner the right to
exclude others from making, using,
selling, and importing an invention
for a limited period of time, usually
twenty years.
src: https://en.wikipedia.org/wiki/Patent
Copyright is a legal right, that grants
the creator of an original work
exclusive rights to determine whether,
and under what conditions, this
original work may be used by others
src: https://en.wikipedia.org/wiki/Copyright

18. 1
8
Copyright Patent
Identify key recommended processes
for effective open source management
[1].
It is a shared defensive patent pool
with the mission to protect Linux [2].

19. Moxa Joined OIN Community

20. 20
Final Commercial Product or Service
Moxa
Proprietary
Open
Source
3rd Party
Commercial
Integration & Testing
1. Identification of the origin and
license of used software.
2. Identification of license
obligations.
3. Fulfillment of license obligations
when products ship.

21. Define Free and Open Source Policy

22. FOSS Office Organization in Moxa
FOSS
Steering
Committee
Open Source
Review
Board
• Internal Consultant
• Law Department Representative
• Engineering and Product Team Representative
• External Consultant
• Supply Chain
• Sponsor
• Compliance Officer
• Law Department Representative
• Engineering and Product Team Representative

23. Overview of OpenChain
Specification
23

24. 24
Open
Source
Compliance
Policies
Processes
Training
Tools

25. 25

26. 26
Open Source
Policy
Software
Staff
1.1.1
1.1.2
Program
Open Source
inquiry contact info.
2.1.1
Open Source
Contribution Policy
5.1.1
5.1.3
training, internal
wiki, other
practical
communication
Contribution
Process
5.1.2
Documentation
1. Awareness of participants
2. Program scope
1.3.1 1.4.1
Conformance
Documentation
1. Program meet
specification
2. Keep at least 18
months
6.1.1, 6.2.1
Review
Process
1.5.1
2.1.2
Release
Process
4.1.*
Development
Documentation
1. R&R
2. Role competencies
3. Competence evaluation
4. Name of role
5. Review and remediation
of non-compliant cases.
1.2.*
2.2.*
Open Source
Obligation
Compliance
Artifacts
Supplied
Software
Open Source
Version
Copyright
3.1.*
3.2.1

27. Processes, Tooling and Support
2
7
OpenChain
Trust between entities in the supply chain
The OpenChain Project builds
trust in open source by making
open source license
compliance simpler and more
consistent
SPDX
Trust for software packages
Software Package Data Exchange
(SPDX) is a file format used to
document information on the
software licenses under which a
given piece of computer
software is distributed.
FOSSology
Free scanning technology
FOSSology is a open source
license compliance software
system and toolkit

28. Timeline (est.)
Phase
2019
Jun. Jul. Aug. Sep. Oct. Nov. Dec.
Specification
Moxa FOSS
Policy
Processes,
tools and
training
Conformance

29. Specification
Moxa FOSS
policy
Processes,
tools and
training
Conformance

30. Open Source Activities in Moxa
30
2018 2019 Future
InnerSource
Open Source Office

31. 31
When you want something, all
the universe conspires in
helping you to achieve it.

32. © 2013 Moxa Inc. All rights reserved.© 2013 Moxa Inc. All rights reserved.
Thank you

33. References
1. https://resources.github.com/whitepapers/introduction-to-innersource/
2. https://dirkriehle.com/wp-content/uploads/2018/05/Inner-Source-Ten-Years.pdf
3. https://www.oreilly.com/programming/free/files/getting-started-with-
innersource.pdf