A systematic approach to resource access management for avionics systems

Abstract

This invention discloses a resource access management method for a systematic avionics system, comprising: Step 1, multi-platform network resource access control, performing resource access control on the systematic avionics system to form an inter-aircraft network access resource library; Step 2, resource access control for a single-platform avionics system, including: resource driving and adaptation conversion of single-platform access resources, and resource access control of access resources; and resource access control of the service layer in the single-platform avionics system, wherein the access layer of the single-platform avionics system is configured with an available resource list; Step 3, maintenance of the available resource list, maintaining the available resource list of each single-platform avionics system in the systematic avionics system, and providing the service layer with the latest callable resource information. The technical solution provided by this invention solves the problem of resource access and management for inter-aircraft network resources of multiple airborne platforms.

Description

Technical Field

[0001] This invention relates to, but is not limited to, the field of resource access technology, and particularly to a systematic avionics system resource access management method. Background Technology

[0002] An open architecture is an architecture that features application system portability and customizability, interoperability between nodes on a network, and easy access to software from multiple sources.

[0003] The access layer of the systematic avionics system, which adopts an open architecture, mainly realizes the access control and management of resources such as internal and external sensors, weapons, processors, memory, and I / O. It provides point-to-point interconnection encapsulation and adaptation and resource management for resources, and realizes adaptation proxy and access control of heterogeneous / homogeneous resources.

[0004] Currently, most avionics systems access resources through a single airborne platform, and this single-platform access method cannot be ported to the access and management of inter-aircraft network resources across multiple airborne platforms. Therefore, resource access and management issues still exist for inter-aircraft network resources across multiple airborne platforms. Summary of the Invention

[0005] The purpose of this invention is to provide a systematic avionics system resource access management method to solve the problems of resource access and management for inter-aircraft network resources of multiple airborne platforms.

[0006] The technical solution of the present invention: Embodiments of the present invention provide a resource access management method for a systematic avionics system, comprising:

[0007] Step 1, multi-platform network resource access control, including: resource access control of the systematic avionics system to form an inter-aircraft network access resource pool;

[0008] Step 2, single-platform resource access control, which is to perform resource access control on a single-platform avionics system, including: resource driving and adaptation conversion of single-platform access resources, and resource access control of access resources; and resource access control of the service layer in the single-platform avionics system; wherein, the access layer of the single-platform avionics system is configured with a list of available resources;

[0009] Step 3, maintenance of the available resource list, includes: maintaining the available resource list of each single-platform avionics system in the systematized avionics system, and providing the service layer with the latest callable resource information.

[0010] Optionally, in the resource access management method for a systematic avionics system as described above, step 1 includes:

[0011] Individual aircraft monitor network access requests from the inter-aircraft network to control access to inter-aircraft network access resources and to create or update the inter-aircraft network access resource pool.

[0012] Optionally, in the resource access management method for a systematic avionics system as described above, step 1 specifically includes:

[0013] Step 11, Access Monitoring: By monitoring network access requests from the network layer of the single-platform avionics system, the received network access requests are used as input for access control.

[0014] Step 12, Access Control: By parsing the network access request received by the search, and generating query request information based on the access request information obtained from the parsing search, the query request information is used to search in the inter-machine network access resource database to obtain query results. The access request information and query results are matched and calculated to determine the legality of the network access request.

[0015] Step 13, authentication and authorization: Based on the access control's determination of the legitimacy of the network access request, authenticate and authorize the legitimate network access request, and issue a secure access key to store the inter-machine network access resources requested by the network access request with the secure access key in the inter-machine network access resource library.

[0016] Optionally, in the resource access management method of the systematic avionics system described above,

[0017] The inter-aircraft network access resource library is used to provide query support for query request information, store the legal inter-aircraft network access resources that have been accessed, and push the legal inter-aircraft network access resources that have been accessed to the available resource list of the access layer of each single-platform avionics system in real time, so that the service layer can call the network resources.

[0018] Optionally, in the resource access management method for a systematic avionics system as described above, step 2 includes two parts:

[0019] The first part is that the access layer of the single-platform avionics system performs resource-driven and adaptation conversion on the access resources in the resource layer to form a single-platform resource access request. Based on the query results of the single-platform resource access request in the access control rule base, the legality of the requested single-platform access resource is judged and controlled in combination with the resource access control, so as to push the legal single-platform access resource to the available resource list and the access control rule base.

[0020] The second part involves the access layer of the single-platform avionics system controlling resource access in the service layer, generating single-platform resource access requests, determining the legality of the accessed single-platform resources based on the query results of the single-platform resource access requests in the access control rule base, managing the use of legally accessible resources, and pushing legally accessible resources to the available resource list and access control rule base.

[0021] Optionally, in the resource access management method of the systematic avionics system described above,

[0022] The access control rule base is used to provide query and search functions during the process of determining the legality of resource access requests on a single platform, and to generate new access control rules through reasoning and learning.

[0023] The access control rule base is used to provide query and search functions in the process of determining the legality of resource access requests on a single platform, and to generate new access control rules through reasoning and learning.

[0024] Optionally, in the resource access management method for a systematic avionics system as described above, step 3 includes:

[0025] Based on the inter-machine network access resource library obtained in step 1, and the single-platform access resources and single-platform access resources obtained in step 2, all resources pushed to the available resource list are uniformly identified and encoded, thereby maintaining the resource information in the available resource list in real time.

[0026] Optionally, in the resource access management method for a systematic avionics system as described above, step 3 specifically includes:

[0027] Step 31, resource identification and classification, including: identifying inter-aircraft network access resources, single-platform access resources and single-platform access resources of the systematic avionics system;

[0028] Step 32, resource coding and storage, includes: uniformly identifying and coding all resources pushed to the available resource list, and then storing them in the resource library list according to link type, sensor type, and weapon type;

[0029] Step 33, resource organization and aggregation, includes: parsing legitimate single-platform resource access requests, organizing and aggregating the parsing results of the access requests, selecting the required resource information from the resource library list based on the organization and aggregation results of the requests, and organizing and aggregating the selected resource information to form accessible resources, which are then pushed to the service layer via resource access control.

[0030] The beneficial effects of this invention are as follows: This invention proposes a resource access management method for a systematic avionics system. Addressing the resource access management problem, it proposes a three-part strategy: multi-platform network resource access control, single-platform resource access control, and available resource list maintenance. This resource access management method is based on the access control of a single airborne avionics system, combined with an access control rule base and available resource list maintenance, to conduct research on systematic avionics system resource access management methods, enhancing resource encapsulation, adaptation, and management capabilities. The resource access management method provided by this invention is proposed for the inter-aircraft network and platform resource access process of a systematic avionics system. Through the above three-part strategy, the inter-aircraft network of the systematic avionics system possesses the ability to access and manage resources, providing strong support for research on resource encapsulation, adaptation, and management, filling the gaps in existing research on avionics system resource access management, and providing a research foundation for the design of avionics system resource access management for next-generation aircraft. In the process of resource access management, the technical solution of this invention controls resource access to the resource layer through a common resource interface, provides available resource information to the service layer through resource access control functions, and provides access control capabilities to the network layer through a systematic avionics system access control function. Attached Figure Description

[0031] The accompanying drawings are provided to further understand the technical solutions of the present invention and constitute a part of the specification. They are used together with the embodiments of this application to explain the technical solutions of the present invention and do not constitute a limitation on the technical solutions of the present invention.

[0032] Figure 1 A flowchart illustrating the resource access management method for a systematic avionics system provided in this embodiment of the invention;

[0033] Figure 2 This is a flowchart of the multi-platform architecture-level access control process in an embodiment of the present invention;

[0034] Figure 3 This is a flowchart of the single-platform resource access control process in an embodiment of the present invention;

[0035] Figure 4 This is a flowchart illustrating the maintenance of the available resource list in an embodiment of the present invention. Detailed Implementation

[0036] To make the objectives, technical solutions, and advantages of the present invention clearer, the embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that, unless otherwise specified, the embodiments and features described in this application can be arbitrarily combined with each other.

[0037] The steps illustrated in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases the steps shown or described may be performed in a different order than that presented here.

[0038] As explained in the background section, most current avionics systems use a single airborne platform resource access method, which cannot be adapted to the access and management of inter-airborne network resources across multiple airborne platforms.

[0039] Therefore, in response to the resource access and management issues existing in the inter-aircraft network resources of multiple airborne platforms, this embodiment of the invention provides a systematic avionics system resource access management method.

[0040] The present invention provides the following specific embodiments, which can be combined with each other. For the same or similar concepts or processes, they may not be described again in some embodiments.

[0041] Figure 1 This is a flowchart illustrating the resource access management method for a systematic avionics system provided in this embodiment of the invention. Before detailing the implementation process of the resource access management method for a systematic avionics system provided in this embodiment of the invention, the relationships between the various layers in the systematic avionics system will be explained first.

[0042] The access layer of a systematic avionics system provides point-to-point interconnection encapsulation and adaptation, as well as resource management. For example... Figure 1 As shown, the access layer includes onboard resource access and network space resource access.

[0043] a) Onboard resource access refers to the adaptation, access control, and control of sensor, weapon, network, storage, and computing resources within a single airborne avionics system;

[0044] b) Cyberspace resource access refers to the adaptation, access control, and access management of networked sensor, weapon, network, storage, and computing resources within the systematic avionics system.

[0045] The access layer of a systematic avionics system has the following functions:

[0046] a) Plug and play resources

[0047] The access layer design of the systematic avionics system is based on the concept and principles of Open System Architecture (SOA), adopts a service-oriented software architecture design approach, and is based on a common resource interface standard. Through resource-driven, adaptation and conversion, as well as resource access control and management, the systematic avionics system resources are made plug-and-play, providing the service layer with the latest available resources in real time. The service layer can then integrate and call upon the resources provided by the access layer. In other words, the access layer has the characteristic of plug-and-play avionics resources.

[0048] b) Adaptive Access

[0049] In the access control and access control processes of the access layer in a systematic avionics system, the access control rule base and access control rule base can adaptively form new access control rules and access control rules through reasoning and learning based on pre-loaded preset access rules, preset access rules, and access resources and access requests added during operation, so that the access layer has adaptive access and access characteristics.

[0050] c) Flexible expansion

[0051] In a systematic avionics system, the access layer performs unified access authentication and access control for the accessed resources. All resources are encapsulated according to standard interfaces. The access control system of a single aircraft adopts a common access process. The access resource library has a large resource information storage capacity and rich resource type identification capabilities. The access layer of an advanced avionics system supports flexible access to a large number of resources of many types and has the characteristics of flexible expansion.

[0052] The resource access management method for a systematic avionics system provided in this invention addresses the resource access management problem by proposing a three-part strategy: multi-platform network resource access control, single-platform resource access control, and available resource list maintenance. These three strategies enable the inter-aircraft network of the systematic avionics system to possess resource access management capabilities, providing support for resource encapsulation, adaptation, and management. The resource access management method specifically includes the following execution steps:

[0053] Step 1, multi-platform network resource access control, including: resource access control of the systematic avionics system to form an inter-aircraft network access resource pool;

[0054] Step 2, Single-platform resource access control, involves controlling resource access to the single-platform avionics system. This includes: driving and adapting access resources for the single-platform system, and controlling access to these resources; as well as controlling resource access to the service layer within the single-platform avionics system; such as... Figure 1 As shown, the access layer of this single-platform avionics system is configured with a list of available resources.

[0055] Step 3, maintenance of the available resource list, includes: maintaining the available resource list of each single-platform avionics system in the systematized avionics system, and providing the service layer with the latest callable resource information.

[0056] In this embodiment of the invention, the specific implementation of step 1 above may include:

[0057] Individual aircraft monitor network access requests from the inter-aircraft network to control access to inter-aircraft network access resources and to create or update the inter-aircraft network access resource pool.

[0058] like Figure 1 As shown, in practical applications, the specific implementation process of step 1 in this embodiment of the invention may include the following steps:

[0059] Step 11, Access Monitoring: By monitoring network access requests from the network layer of the single-platform avionics system, the received network access requests are used as input for access control.

[0060] Step 12, Access Control: The network access request received by the search is parsed and a query request is generated based on the access request information obtained from the parsing search. The query request information is used to search the inter-machine network access resource database to obtain the query results. The access request information and the query results are matched and calculated to determine the legality of the network access request.

[0061] Step 13, authentication and authorization: Based on the access control's determination of the legitimacy of the network access request, authenticate and authorize the legitimate network access request, and issue a secure access key to store the inter-machine network access resources requested by the network access request with the secure access key in the inter-machine network access resource library.

[0062] It should be noted that the inter-aircraft network access resource library in this embodiment of the invention can provide query support for query request information, and is used to store the legally accessed inter-aircraft network access resources, and to push the legally accessed inter-aircraft network access resources to the available resource list of the access layer of each single-platform avionics system in real time, so that the service layer can call the network resources.

[0063] In this embodiment of the invention, the single-platform resource access control in step 2 above may include the following two aspects.

[0064] On the one hand, the access layer of the single-platform avionics system performs resource-driven and adaptation conversion on the access resources in the resource layer (this step realizes the identification and access of access resources), forming a single-platform resource access request. Based on the query results of the single-platform resource access request in the access control rule base, the system combines resource access control to determine the legality of the requested single-platform access resource, thereby pushing the legal single-platform access resource to the available resource list and the access control rule base.

[0065] On the other hand, the access layer of the single-platform avionics system performs resource access control on the access resources in the service layer, forms single-platform resource access requests, and determines the legality of the accessed single-platform resources based on the query results of the single-platform resource access requests in the access control rule base. It also manages the use of legally accessible resources and pushes legally accessible resources to the available resource list and the access control rule base.

[0066] It should be noted that the access control rule base in this embodiment of the invention can provide query and search during the process of determining the legality of resource access requests on a single platform, and can form new access control rules through reasoning and learning.

[0067] In addition, the access control rule base in this embodiment of the invention is used to provide query search during the process of determining the legality of resource access requests on a single platform, and to form new access control rules through reasoning and learning.

[0068] In this embodiment of the invention, the specific implementation of step 3 above may include:

[0069] Based on the inter-machine network access resource library obtained in step 1, and the single-platform access resources and single-platform access resources obtained in step 2, all resources pushed to the available resource list are uniformly identified and encoded, thereby maintaining the resource information in the available resource list in real time.

[0070] In practical applications, step 3 of this invention may include the following:

[0071] Step 31, resource identification and classification, including: identifying inter-aircraft network access resources, single-platform access resources and single-platform access resources of the systematic avionics system;

[0072] Step 32, resource coding and storage, includes: uniformly identifying and coding all resources pushed to the available resource list, and then storing them in the resource library list according to link type, sensor type, and weapon type;

[0073] Step 33, resource organization and aggregation, includes: parsing legitimate single-platform resource access requests, organizing and aggregating the parsing results of the access requests, selecting the required resource information from the resource library list based on the organization and aggregation results of the requests, and organizing and aggregating the selected resource information to form accessible resources, which are then pushed to the service layer via resource access control.

[0074] The resource access management method for a systematic avionics system provided in this invention addresses the resource access management problem by proposing a three-part strategy: multi-platform network resource access control, single-platform resource access control, and available resource list maintenance. This resource access management method is based on the access control of a single airborne avionics system, combined with an access control rule base and available resource list maintenance, to conduct research on systematic avionics system resource access management methods, enhancing resource encapsulation, adaptation, and management capabilities. The resource access management method provided in this invention is proposed for the inter-aircraft network and platform resource access process of a systematic avionics system. Through the above three-part strategy, the inter-aircraft network of the systematic avionics system possesses the ability to access and manage resources, providing strong support for research on resource encapsulation, adaptation, and management, filling the gaps in existing research on avionics system resource access management, and providing a research foundation for the design of avionics system resource access management for next-generation aircraft. In the process of resource access management, the technical solution of this invention controls resource access to the resource layer through a common resource interface, provides available resource information to the service layer through resource access control functions, and provides access control capabilities to the network layer through a systematic avionics system access control function.

[0075] The following detailed description of the implementation of the resource access management method for the systematic avionics system provided in this invention is illustrated through some specific embodiments.

[0076] like Figure 1 The specific process for resource access management of the avionics system shown is as follows:

[0077] Process (1) Multi-platform network architecture-level access control: This process achieves higher security level inter-machine network access control by listening to inter-machine network access requests.

[0078] Process (2) Single platform resource access control. This process achieves resource access control and service layer resource access control through resource driving and adaptation conversion.

[0079] Process (3) maintains the list of available resources. This process is based on the inter-machine network resource information and platform resource access information in step (2) to realize the unified identification and encoding of access resources, and maintains access resources in real time, providing the service layer with the latest callable resource information nodes to enter the network.

[0080] like Figure 2 The specific process of multi-platform system-level access control is as follows:

[0081] Process (1) Access monitoring: This process monitors network access requests from the network layer and pushes the received access request information to the access control in real time.

[0082] Process (2) Access Control: This process parses and searches the received access request information, generates query request information after parsing the information, searches the inter-machine network resource library, and after completing the search, matches and calculates the access request information and query results to determine the legality of network access. Legal network access information is then pushed to authentication and authorization and stored in the inter-machine network resource library.

[0083] Process (3) Inter-machine network resource library: This process supports the search and query of access request information and the storage of information on legal network resources that have been accessed. It pushes the information on legal network resources that have been accessed to the available resource list maintenance sub-module of the platform resource access control module in real time, so that the service layer can call the network resources.

[0084] Process (4) Authentication and Authorization: This process authenticates and authorizes legitimate network access requests based on the information pushed by the access control submodule and issues a secure access key.

[0085] like Figure 3 The specific process for single-platform resource access control is as follows:

[0086] Process (1) Resource-driven and adaptation conversion: This process identifies and accesses the access resources and sends the access request information to the resource access control.

[0087] Process (2) Resource access control: This process controls the legality of access resources within the platform and pushes legal access resource information to the list of available resources and the access control rule base.

[0088] Process (3) Access control rule base. This process enables the query and search of access request rules from the resource access control submodule, and at the same time, it forms new access control rules through reasoning and learning.

[0089] Process (4) maintains the list of available resources. This process implements a unified identification code for access resources and maintains access resources in real time, providing the service layer with the latest information on callable resources.

[0090] Process (5) Resource access control: This process determines the legality of resource access requests, manages the use of accessible resources, and pushes legal resource access information to the list of available resources and the access control rule base.

[0091] Process (6) Access control rule base, which supports querying and searching access request rules from the resource access control submodule, and forms new access control rules through reasoning and learning.

[0092] like Figure 4 The following are the specific steps for maintaining the available resource list:

[0093] Process (1) Resource identification and classification: This process classifies inter-machine network resource information and platform resource access information;

[0094] Process (2) Resource Encoding and Storage: After the resources are encoded, they are stored in the resource library list module according to the type such as link, sensor, and weapon.

[0095] Process (3) Resource organization and aggregation: This process parses the legal resource access information and organizes and aggregates the parsing results. Based on the resource access parsing information, the required resource information is selected from the resource library list, and the selected resources are organized and aggregated to form accessible resources, which are then pushed to the service layer via the resource access control module.

[0096] While the embodiments disclosed in this invention are as described above, the content is merely for the purpose of facilitating understanding of the invention and is not intended to limit the invention. Any person skilled in the art to which this invention pertains may make any modifications and changes to the form and details of the implementation without departing from the spirit and scope disclosed herein; however, the scope of patent protection of this invention shall still be determined by the scope defined in the appended claims.

Claims

1. A resource access management method for a systematic avionics system, characterized in that, include: Step 1, multi-platform network resource access control, including: resource access control of the systematic avionics system to form an inter-aircraft network access resource pool; Step 2, single-platform resource access control, which is to perform resource access control on a single-platform avionics system, including: resource driving and adaptation conversion of single-platform access resources, and resource access control of access resources; and resource access control of the service layer in the single-platform avionics system; wherein, the access layer of the single-platform avionics system is configured with a list of available resources; Step 3, maintenance of the available resource list, includes: maintaining the available resource list of each single-platform avionics system in the systematic avionics system, and providing the service layer with the latest callable resource information; Step 1 includes: Individual aircraft can monitor network access requests from the inter-aircraft network to control access to inter-aircraft network access resources and create or update the inter-aircraft network access resource database. Step 1 specifically includes: Step 11, Access Monitoring: By monitoring network access requests from the network layer of the single-platform avionics system, the received network access requests are used as input for access control. Step 12, Access Control: By parsing the network access request received by the search, and generating query request information based on the access request information obtained from the parsing search, the query request information is used to search in the inter-machine network access resource database to obtain query results. The access request information and query results are matched and calculated to determine the legality of the network access request. Step 13, authentication and authorization: Based on the access control's determination of the legitimacy of the network access request, authenticate and authorize the legitimate network access request, and issue a secure access key to store the inter-machine network access resources requested by the network access request with the secure access key in the inter-machine network access resource library.

2. The resource access management method for a systematic avionics system according to claim 1, characterized in that, The inter-aircraft network access resource library is used to provide query support for query request information, store the legal inter-aircraft network access resources that have been accessed, and push the legal inter-aircraft network access resources that have been accessed to the available resource list of the access layer of each single-platform avionics system in real time, so that the service layer can call the network resources.

3. The resource access management method for a systematic avionics system according to claim 2, characterized in that, Step 2 includes two parts: The first part is that the access layer of the single-platform avionics system performs resource-driven and adaptation conversion on the access resources in the resource layer to form a single-platform resource access request. Based on the query results of the single-platform resource access request in the access control rule base, the legality of the requested single-platform access resource is judged and controlled in combination with the resource access control, so as to push the legal single-platform access resource to the available resource list and the access control rule base. The second part involves the access layer of the single-platform avionics system controlling resource access in the service layer, generating single-platform resource access requests, determining the legality of the accessed single-platform resources based on the query results of the single-platform resource access requests in the access control rule base, managing the use of legally accessible resources, and pushing legally accessible resources to the available resource list and access control rule base.

4. The resource access management method for a systematic avionics system according to claim 3, characterized in that, The access control rule base is used to provide query and search functions during the process of determining the legality of resource access requests on a single platform, and to generate new access control rules through reasoning and learning. The access control rule base is used to provide query and search functions in the process of determining the legality of resource access requests on a single platform, and to generate new access control rules through reasoning and learning.

5. The resource access management method for a systematic avionics system according to claim 4, characterized in that, Step 3 includes: Based on the inter-machine network access resource library obtained in step 1, and the single-platform access resources and single-platform access resources obtained in step 2, all resources pushed to the available resource list are uniformly identified and encoded, thereby maintaining the resource information in the available resource list in real time.

6. The resource access management method for a systematic avionics system according to claim 5, characterized in that, Step 3 specifically includes: Step 31, resource identification and classification, including: identifying inter-aircraft network access resources, single-platform access resources and single-platform access resources of the systematic avionics system; Step 32, resource coding and storage, includes: uniformly identifying and coding all resources pushed to the available resource list, and then storing them in the resource library list according to link type, sensor type, and weapon type; Step 33, resource organization and aggregation, includes: parsing legitimate single-platform resource access requests, organizing and aggregating the parsing results of the access requests, selecting the required resource information from the resource library list based on the organization and aggregation results of the requests, and organizing and aggregating the selected resource information to form accessible resources, which are then pushed to the service layer via resource access control.

Images