Two-way communication system and method between avionics network domain and information network domain based on virtualization

Abstract

In order to effectively solve the problem of security isolation and flow protection of two-way communication between the avionics network domain and the information network domain in the airborne environment, the present invention provides a two-way communication between the avionics network domain and the information network domain based on virtualization systems and methods. In the network domain boundary control device of the airborne information network, the present invention designs a two-way secure communication architecture model based on virtualization technology, and creates avionics network access control virtual machines and information through virtual machine management software set in the system privilege layer. The network access control virtual machine is deployed in the avionics network access control virtual machine to communicate with high security level applications, and in the information network access control virtual machine to deploy modules that communicate with low security level applications, and each program module runs in isolation. In this way, the physical isolation of high and low security level communication control modules inside the module is realized, which effectively solves the problem of security isolation and flow protection of two-way communication between the avionics network domain and the information network domain in the airborne environment. Two-way secure communication between electrical networks provides a solution.

Description

Technical field [0001] The present invention relates to a bidirectional communication system and method between an avoulte network domain and an information network domain. Background technique [0002] In the aviation field, high-security applications running in the avionics system provide a guarantee for the normal operation of the entire plane. In the traditional electronic system of the aircraft, the avionics data is transmitted in a closed airborne environment through the avionics network (such as avionics full-duplex exchanger Ethernet), which is not subject to external information security attacks to ensure the avionics data. safety. With a large number of applications in the civil aviation electronic system, in order to provide more, more convenient services to the aircraft operators, the aircraft designers introduced the Ethernet's onboard information service system, through residing and running low security. The level application implements a variety of information serv...

AI Technical Summary

Problems solved by technology

[0004] In order to effectively solve the problem of security isolation and flow protection of two-way communication between the avionics network domain and the information network domain in the airborne environment, the present invention provides a two-way communication between the avionics network domain and the information network domain based on virtualization systems and methods

Images