Safety Information

The AuboStudio enables the configuration of numerous safety features of the AUBO robot, such as safety I/O interfaces, along with additional electrical interfaces for connecting to various devices and protective devices. All safety features and I/O interfaces are designed according to ISO 13849-1:2015 (PL=d, CAT 3). The power and force limitation safety features meet the impact force limit requirements in ISO/TS 15066-2016, with the force value lower than the maximum thresholds specified for transient and quasi-static contact between humans and robots. The network communication functions meet the cybersecurity requirements of ISO 10218-1:2025.

Safety instructions

Danger

"Danger" indicates a highly dangerous situation that, if not avoided, could result in serious injury or death.

Warning

"Warning" indicates a dangerous situation that, if not avoided, could result in injury.

Tip

"Tip" indicates a potential risk of equipment damage or data loss.

Info

"Info" indicates information that requires special attention.

Personnel safety

Before entering the working area of robot, ensure that all safety rules are strictly followed.

Please remain vigilant at all times and ensure your own safety!

Safety rules

To ensure the safe operation of the robot and personal user safety, adherence to the following safety guidelines is mandatory:

1. Please familiarize yourself with the operating procedures and safety information related to the hardware prior to use.
2. When the robot is operational, do not stretch your hands or other objects into the robot's operational area to prevent potential injury.
3. Before activating the robot power supply, please ensure the surrounding area is safe and free from any obstacles, which could interfere with robot operation.
4. In the event of an abnormal operation or unusual noises, please stop the robot immediately and contact the technical support team for inspection and maintenance.

Adhering the above safety guidelines will ensure safety operation of robot to the greatest extent possible, while also protect the personal safety of the user.

Network security

AuboStudio is compatible with communication protocols including TCP/IP, VNC and X. The core functions of the system do not depend on the external Internet and work normally when offline. Before using network functions, always conduct a risk assessment of the network security of the current environment.

Tip

• TCP/IP: the basic network communication protocol of the system.
• VNC: remote desktop protocol, transmitted in plaintext by default. Use it only on trusted intranets, and never expose it to external networks.
• X: graphical remote forwarding protocol, unencrypted by design. Use it only on isolated intranets.

Network architecture and environment requirements

• Offline operation: The core functions of the ARCS system support fully offline operation. To access AuboStudio wirelessly, deploying a local LAN is sufficient.
• Trusted environment access: If the device is to be connected to the Internet, deploy it in a trusted network environment, such as behind an enterprise intranet firewall.
• Communication restrictions: Apart from the [Package Download] function, the system does not communicate with the Internet in any other way. Installation packages can also be uploaded offline, so an Internet connection is optional.
• Secure transmission: When downloading software installation packages over the network, the system enforces HTTPS encrypted transmission.
• Peripheral and component security: When connecting external hardware, such as PLCs or USB flash drives, make sure it is secure and compliant. Open-source tools used in the system have passed security evaluation and are pinned to fixed versions; dynamic upgrades are not supported, which avoids uncontrollable risks.

Security operation recommendations

1. Identity authentication: It is strongly recommended to enable SSH key authentication and to connect devices only through secure software, so as to improve the security of identity authentication and reduce the risk of unauthorized remote access. For the procedure, see Enabling SSH access.
2. Environment discipline: Operate the server with caution. Avoid downloading unverified software or performing unconventional operations, prevent the spread of malicious software, and keep the server environment clean and standardized.
3. External network control: If the LAN to which the robot is connected is connected to an external network, identity control authentication must be enabled in the firewall to strictly prevent unauthorized access.

Built-in static security mechanisms

The system provides basic security protection that does not rely on user intervention:

• Password verification: When modifying features that involve safety risks, such as equipment safety and personal safety, the software forces verification of the corresponding password.
• Security prompt: The software has no default password at the factory. Set a strong password immediately after device deployment. For the procedure, see Authority - Classic mode.
• Installation package verification: Installation packages of the software and firmware carry SHA-256 checksums. The system verifies integrity during installation and rejects installation if the verification fails.

Advanced security restrictions (enable as needed)

The system provides stricter security control capabilities. The following features are disabled by default and can be enabled manually according to business security requirements:

• Network firewall whitelist: After configuration, only the IP addresses or subnets in the list can access the device, and port-level restrictions are not supported. For port access control, enable or disable services one by one through [Communication Service Management]. For the procedure, see Security - Whitelist.
• Advanced authority system: Supports access control based on the [Role] and [User Permission] system. For advanced mode settings, see Authority - Advanced mode.

Disclaimer

AUBO and its affiliates shall not be liable for any data loss, service interruption, privacy breach or other losses arising from safety attacks, device vulnerabilities, user errors, third-party service failures, or other non-official reasons.

Password security

In the interest of ensuring operational safety, the software has been designed to incorporate a password setting function. Users are able to manage and control different operations through the setting of distinct passwords. Please refer to Authority - Classic mode for further information.

To ensure optimal password security, please follow these recommendations:

1. Set a complex password that contains upper/lower-case letters, numbers, and special characters, and avoid using common words or personal information.
2. Passwords should ideally have a minimum of 8 characters, since longer passwords are more difficult for others to guess.
3. To avoid unexpected disclosure of password, set a unique password for each operation, and do not share a password for two or more operations.
4. To reduce the risk of password guessing or cracking, it is advisable to change passwords every three months.

Tip

Please keep Admin password in mind. The system does not support password recovery functionality. If you forget the password, you may be unable to use the device. Furthermore, it is imperative to safeguard your password from unauthorized access.