Communication system and communication method

Abstract

The present invention relates to a communication system, wherein the communication system comprises: a first communication unit, the first communication unit comprising a first communication processor for providing communication via a first channel; at least one second communication unit separated from the first communication unit, the at least one second communication unit comprising a second communication processor for providing communication via a second channel; a coupling unit, the coupling unit being used to couple the first communication unit with at least one second communication unit, wherein the first communication unit further comprises: a communication control unit and an encryption unit, the communication control unit being coupled to the second communication unit via the coupling unit, wherein the communication control unit is configured to enable mutual use of electronic resources between the first communication unit and the second communication unit, and the encryption unit being used to provide encrypted communication via the first communication channel and the second communication channel. The present invention also relates to a communication method.

Description

Technical Field

[0001] The invention relates to a communication system having a first communication unit and at least one second communication unit. The invention also relates to a communication method. Background Art

[0002] The invention and its potential problems are described below by the example of a radio communication system having at least one radio unit (or radio device or simply radio), however, it should be understood that the invention is not limited to this application but can also be used in communication systems in general.

[0003] Today, radio equipment must have several levels of reliability. A distinction must be made between highly secure architectures for creating computer systems with Multiple Independent Levels of Security (MILS) and Multiple Independent Levels of Safety (MILSF), where MILSF radio equipment is primarily used in avionics and air traffic control (ATC).

[0004] As a result, users sometimes own multiple radios, since radio communications for securing relevant applications usually have to be protected with appropriate encryption, but not every radio supports the necessary or required encryption. On the other hand, the certification of a radio often depends on the country of origin used, so not all radios can be used in another country. However, up to now, different radios have been managed and operated completely independently of each other, which is expensive and uncomfortable for users. Intuitively, these recipients usually believe that different radios are associated with different users, which is not the case here.

[0005] For the user of such radio equipment, the use and handling of multiple radio equipment is uncomfortable. The same situation sometimes applies to the receiver.

[0006] European patent EP 2 911 363 B1 describes a radio device having a first radio unit and a second radio unit with different functionalities. The first radio unit is functionally separated from the second radio unit by a software separation kernel. The first radio unit and the second radio unit access common hardware resources of the radio device, whereby the first radio unit and the second radio unit access common hardware resources of the radio device. Summary of the invention

[0007] In this context, the problem addressed by the invention is to provide the user with a more comfortable but safe possibility to use different radio devices.

[0008] This problem is solved according to the invention by a communication system and a communication method having the features of the independent claims.

[0009] Accordingly, the following is provided:

[0010] -A communication system, wherein the communication system comprises: a first communication unit, the first communication unit comprising a first communication processor for providing communication via a first channel; at least one second communication unit separated from the first communication unit, the at least one second communication unit comprising a second communication processor for providing communication via a second channel; a coupling unit, the coupling unit being used to couple the first communication unit with the at least one second communication unit, wherein the first communication unit further comprises: a communication control unit and an encryption unit, the communication control unit being coupled to the second communication unit via the coupling unit, wherein the communication control unit is configured to enable mutual utilization of electronic resources between the first communication unit and the second communication unit, and the encryption unit being used to provide encrypted communication also via the first communication channel and the second communication channel.

[0011] -A communication method, in particular by using a communication system according to the present invention, the communication method comprising: providing communication via a first communication channel by a first communication unit; providing communication via a separate second communication channel by a separate second communication unit; and coupling the first communication unit with the second communication unit so that the first communication unit can achieve mutual utilization of electronic resources between the first communication unit and the second communication unit, and so that the first communication unit also provides encrypted communication via the first communication channel and the second communication channel.

[0012] The invention is based on the concept of providing a communication system, such as a radio communication system, which shares hardware resources and software resources by appropriately coupling at least two communication units of the communication system to each other. For this purpose, a coupling unit for appropriately coupling the two communication units and a communication control unit for controlling the mutual use of the hardware resources and the software resources are provided. This enables the simultaneous operation of two initially separate communication units. In addition, the solution according to the invention provides a significant simplification of the system layout of the communication system by combining initially separate and different communication units into one new unit with a reduced system management workload.

[0013] Or in other words: With the solution according to the invention, the first communication unit expands the second communication unit by at least one communication channel, wherein the parallel use of two or more communication channels is now possible.

[0014] In addition, an encryption unit is provided by the first communication unit, which encryption unit can also be used by another communication unit, namely the second communication unit, via the coupling device. The second communication unit thus does not need its own encryption unit and can still utilize the encryption resources of the first communication unit for encrypted communication with other communication users. This is particularly advantageous because, also in this way, for example without corresponding authentication, the second communication unit is now fully functional in terms of encryption and can effectively be used as the first communication unit.

[0015] Advantageous configurations and developments emerge from the further dependent claims and from the description with reference to the figures.

[0016] In a preferred embodiment, the communication control unit and the encryption unit are configured so that the first communication unit and the second communication unit are exposed as a single communication unit to an external subscriber located outside. In this way, only a single communication unit is visible to the external subscriber, and the entire communication system functions and can operate as one communication unit.

[0017] In a particularly preferred and advantageous application, the communication system is a radio communication system. In the radio communication system or, for short, the radio system, the first communication unit is in particular a first radio unit with a first radio processor for providing radio communication via a first radio channel and for controlling functions of the first radio unit. The second communication unit of the radio communication system is designed as a second radio unit with a second radio processor for providing radio communication via a second radio channel. The second radio unit is separate from the first radio unit so that it can be operated independently. In particular, the second radio unit does not need its own encryption unit and / or certificate, since it can use the encryption resources and / or certificate resources of the first radio unit, respectively.

[0018] In a further embodiment, at least one of the radio units has multi-band capability, ie at least one of the radio units is able to perform radio transmissions using different frequency bands, such as HF, VHF and UHF.Preferably, at least one of the radio units is a software defined radio unit.

[0019] In a particularly preferred embodiment, the encryption unit is configured to provide payload encryption. The payload encryption provides fast and secure (such as Advanced Encryption Standard (AES) 256) transmission of IP voice, video and data, because through payload encryption, the service content and optional message attachments are encrypted. This is particularly preferred for security-related applications, such as for avionics, police or military applications.

[0020] In another embodiment, the coupling unit is configured to implement data communication and / or data exchange between the first communication unit and the second communication unit.

[0021] In another embodiment, the coupling unit is configured to organize the communication, in particular the radio communication, of the first communication unit and the second communication unit. The two functionalities of the coupling unit, namely the data communication on the one hand and the communication organization on the other hand, can each be implemented in a common unit or can also be implemented functionally in separate units.

[0022] In another preferred configuration, the coupling unit comprises a hardwired connection between the first communication unit and the second communication unit.

[0023] In another configuration, at least one of the communication units (i.e., the first communication unit and / or the second communication unit) further comprises a remote interface. The remote interface is configured to enable the corresponding communication unit to be configured by an external host such as a computer, a control device, a processor, etc. In particular, by adopting the remote interface, the frequency of the communication or radio signal can be set, respectively, to enable remote maintenance, to provide remote control of the communication unit, etc.

[0024] According to one aspect, at least one of the first communication channel and the second communication channel is a wired channel.

[0025] According to another or additional aspect, at least one of the first communication channel and the second communication channel is a wireless channel.

[0026] In another preferred embodiment, at least one of the second communication units comprises a further encryption unit. The further encryption unit is configured to provide encrypted communication also via the first communication channel and the second communication channel. The encryption provided by the further encryption unit is preferably different from the encryption provided by the (first) encryption unit of the first communication unit. This has the advantage that each communication unit provides different encryption. Therefore, different communication units of the communication system can use all existing encryption types of the communication system, which represents a very simple but still very effective functional extension with respect to encryption.

[0027] In another preferred embodiment, the first communication unit has a certified first functionality certified by a first (authorized) certification authority. Additionally or alternatively, the second communication unit has a certified second functionality certified by a second (authorized) certification authority. In a particular preferred embodiment, the first certification authority providing the certified first functionality may be different from the second certification authority providing the certified second functionality.

[0028] An advantage of this embodiment is that preferably both communication units are fully certified, wherein both communication units are certified according to their functionality. For radio communication, preferred functionality is the characteristics required for radio communication, in particular encryption algorithms, specific waveforms and / or specific types of transmission. In addition, functionality is also considered to include operating states or modes of the communication unit, such as multi-stage standby or listening mode, which must meet specific criteria of the standard. In general, functionality is the ability of the communication unit to perform a specific function or group of functions. This mainly involves usability, so that the first communication unit can ensure, for example, complex communications, for example by encryption or complex waveforms, while the second radio unit enables relatively simple radio transmissions.

[0029] Different certificates are preferably used for different functionalities, so that the certificate provided by at least one of the first certification authority and the second certification authority is, for example, a security certificate and / or an information certificate.

[0030] According to another idea of ​​the invention, for example for emergency radio features, a high reliability and therefore low complexity functionality can be implemented in one communication unit. Alternatively, the other communication unit preferably provides a higher quality and a more complex structure of its functionality in order to enable more complex communications. As an example, encrypted transmissions are performed with the communication unit. This complex and highly secure communication process is proven by means of a second certificate in order to indicate the trustworthiness of the radio unit.

[0031] In one configuration, the certificate of at least one communication unit is preferably a security certificate. This is particularly necessary for flight safety of simple functions, in particular emergency operations. In the case of a security certificate, renewal is always associated with a recertification, which in turn means a high assessment effort. In another preferred configuration, the certificate of at least one communication unit is an information certificate. This certificate meets the common criteria for so-called SCA certificates. The "Common Criteria for Security Assessment of Information Technology" (CC) is an international standard for the assessment and certification of the security of computer systems with respect to data security and the corresponding criteria for unauthorized data manipulation.

[0032] According to a particularly preferred embodiment, new and particularly complex waveforms, which are always newly developed as transmission methods, can be integrated into the respective communication units without invalidating already acquired certificates. In particular, the intention is that after an extension of the respective communication unit with regard to its functionality, the certificate will continue to be valid. In particular, the new functionality can be a new waveform which is loaded as part of a Service Component Architecture (SCA) certificate.

[0033] Where appropriate, the above configurations and developments may be combined in any manner. Other possible configurations, improvements and implementations of the present invention also include combinations of features of the present invention (not explicitly mentioned), which have been described above or described below with reference to the embodiments. In particular, in this case, those skilled in the art will also add various aspects as improvements or supplements to the basic form of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] The invention is described in more detail below on the basis of an embodiment shown in the schematic diagram of the accompanying drawings, in which:

[0035] Figure 1 shows a schematic overview of a first embodiment of a communication system according to the invention;

[0036] Figure 2 shows a schematic overview of a second detailed embodiment of a radio communication system according to the invention;

[0037] Figure 3 A flow chart showing an embodiment of a communication method according to the present invention is shown.

[0038] The accompanying drawings are intended to provide a further understanding of the embodiments of the present invention. The accompanying drawings illustrate the embodiments and, in conjunction with the description, help explain the principles and concepts of the present invention. Other embodiments and many advantages mentioned become apparent in view of the accompanying drawings. The elements in the drawings are not necessarily shown to scale.

[0039] In the drawings, similar elements, features, and components that are functionally equivalent and operate in the same manner are in each case provided with the same reference number unless otherwise indicated. DETAILED DESCRIPTION

[0040] Figure 1 A schematic overview of a communication system according to the invention is shown.

[0041] exist Figure 1 In the embodiment of the present invention, the communication system is denoted by reference numeral 10. The communication system 10 comprises a first communication unit 11, a separate second communication unit 12 and a coupling unit 13.

[0042] The first communication unit 11 comprises a communication processor 14 for providing communication via a first channel 15. Likewise, the second communication unit 12 comprises another communication processor 16 for providing communication via a second channel 17. The first communication channel 15 and the second communication channel 17 may be wired channels or / and wireless channels.

[0043] The coupling unit 13 preferably comprises a hardwired connection between the communication unit 11 and the second communication unit 12, such as a NATO plug and a NATO connector. However, the coupling unit 13 may also be a wireless connection between the two communication units 11, 12. The coupling unit 13 couples the first communication unit 11 with the second communication unit 12, so that the first communication unit 11 and the second communication unit 12 can use the hardware resources and software resources from the corresponding other communication unit 11, 12.

[0044] For this purpose, the first communication unit 11 further includes a communication control unit 18 and an encryption unit 19. The communication control unit 18 and the encryption unit 19 are configured so that the first communication unit 11 and the second communication unit 12 are exposed as a single unit to an external subscriber located outside.

[0045] The communication control unit 18 of the first communication unit 11 is coupled to the second communication unit 12 via the coupling unit 13. The communication control unit 18 is configured to control the communication of the second communication unit 12, including the setting of a security level required for a specific communication of the second communication unit 12. In particular, the communication control unit 18 can define, for example, that a specific waveform must be used for a specific radio transmission for security purposes. The communication control unit 18 can also define the type of communication, such as radio communication, a specific frequency band (such as HF, VHF and UHF) that should be used for signal transmission, etc.

[0046] The communication control unit 18 is also configured to enable mutual utilization of electronic resources between the communication units 11, 12. In particular (but not exclusively), the mutual utilization of resources refers to the encryption function provided by the encryption unit 19. In this way, the encryption unit 19 of the first communication unit 11 not only provides encrypted communication for the first communication channel, but also provides encrypted communication for the second communication channel of the second communication unit 12 via the coupling unit 13.

[0047] Figure 2 A schematic overview of a second detailed embodiment of a communication system according to the invention is shown.

[0048] exist Figure 2 In the embodiment shown, the communication system 10 is a radio communication system 10 comprising a first radio unit 11 and a second radio unit 12. The first radio unit 11 comprises a first radio processor 14 for providing radio communication via a first radio channel 15. The second radio unit 12 comprises a second radio processor 16 for providing radio communication via a second radio channel 17.

[0049] The coupling unit 13 comprises a data interface 20 . The data interface 20 enables a data communication and / or data exchange between the first radio unit 11 and the second radio unit 12 .

[0050] The coupling unit 13 further comprises a further interface 21 . The further interface 21 organizes the radio communication between the first radio unit 11 and the second radio unit 12 .

[0051] Each of the first radio unit 11 and the second radio unit 12 further comprises a remote interface 22. The remote interface 22 is used to enable an external host computer 23 to access and configure the respective first radio unit 11 and the second radio unit 12.

[0052] exist Figure 2 In the illustrated embodiment, the second radio unit 12 further comprises an encryption unit 24. This further encryption unit 24 within the second radio unit 12 provides encryption that is different from the encryption provided by the encryption unit 19. Thus, in this embodiment, encrypted communications may be provided by the encryption unit 19 or by the encryption unit 24, such that the radio communications system collectively provides multiple encryption types for its wireless communications.

[0053] The first radio unit 11 comprises a first certificate 25 provided by a first authorized certification authority. The second radio unit 12 comprises no certificate or comprises a second certificate 26 provided by a second authorized certification authority. Preferably, the first certificate 25 is different from the second certificate 26.

[0054] Figure 3 A flow chart showing an embodiment of a communication method according to the present invention is shown.

[0055] In a step S1 , communication via a first communication channel is provided by a first communication unit.

[0056] In a further step S2 , communication via the second communication channel is provided by a separate second communication unit.

[0057] The method further comprises a step S3 of coupling the first communication unit with the second communication unit. The coupling step S3 comprises mutual utilization of electronic resources between the first communication unit and the second communication unit controlled by the first communication unit. The coupling step S3 also comprises providing encrypted communication by the first communication unit via the first communication channel and the second communication channel.

[0058] Although the present invention has been described above by preferred embodiments, the present invention is not limited thereto but can be modified in many ways. In particular, the present invention can be changed or modified in various ways without departing from the core of the present invention.

[0059] Reference numerals list

[0060] 10 (Radio) communication system

[0061] 11. First communication / radio unit

[0062] 12 Second communication / radio unit

[0063] 13 Coupling unit

[0064] 14. First Communications / Radio Processor

[0065] 15 First (radio) channel

[0066] 16 Second communication / radio processor

[0067] 17 Second (radio) channel

[0068] 18 Communication control unit

[0069] 19 Encryption Unit

[0070] 20 Data Interface

[0071] 21 Interface

[0072] 22 Remote Interface

[0073] 23 External host computer

[0074] 24 Encryption Units

[0075] 25 First Certificate

[0076] 26 Second Certificate

[0077] S1-S3 Method Steps

Claims

1. A communication system (10), the communication system (10) comprising: a first communication unit (11) comprising a first communication processor (14) for providing communication via a first communication channel (15), at least one second communication unit (12), separate from said first communication unit (11), comprising a second communication processor (16) for providing communication via a second communication channel (17), a coupling unit (13), the coupling unit (13) being used to couple the first communication unit (11) with the at least one second communication unit (12), Wherein, the first communication unit (11) further comprises: - an encryption unit (19) for providing encrypted communication via said first communication channel (15) and said second communication channel (17); - A communication control unit (18) coupled to the second communication unit (12) via the coupling unit (13), wherein the communication control unit (18) is configured to control the communication of the second communication unit (12) and enable mutual use of electronic resources between the first communication unit (11) and the second communication unit (12), wherein the mutual use of electronic resources refers to the encryption function provided by the encryption unit (19), so that the encryption unit (19) is also configured to provide encrypted communication to the second communication channel (17) of the second communication unit (12) via the coupling unit (13).

2. The communication system according to claim 1, wherein: The communication control unit (18) and the encryption unit (19) are configured so that the first communication unit (11) and the second communication unit (12) are exposed as a single unit to an external subscriber located outside.

3. The communication system according to claim 1 or 2, wherein: The communication system (10) is a radio communication system, wherein the first communication unit (11) is designed as a first radio unit having a first radio processor for providing radio communication via a first radio channel, and wherein the second communication unit (12) is designed as a second radio unit having a second radio processor for providing radio communication via a second radio channel.

4. The communication system according to claim 3, wherein: At least one of the first radio unit and the second radio unit has multi-band capability.

5. The communication system according to claim 1, wherein: The encryption unit (19) is configured to provide payload encryption.

6. The communication system according to claim 1, wherein: The coupling unit (13) is configured to enable data communication and / or data exchange between the first communication unit (11) and the second communication unit (12).

7. The communication system according to claim 1, wherein: The coupling unit (13) is configured to organize the communication between the first communication unit (11) and the second communication unit (12).

8. The communication system according to claim 1, wherein: The coupling unit (13) comprises a hard-wired connection between the first communication unit (11) and the second communication unit (12).

9. The communication system according to claim 1, wherein: At least one of the first communication unit (11) and the second communication unit (12) further comprises a remote interface (22), and the corresponding first communication unit (11) and the second communication unit (12) can be configured by an external host via the remote interface (22).

10. The communication system according to claim 1, wherein: At least one of the first communication channel (15) and the second communication channel (17) is a wired channel.

11. The communication system according to claim 1, wherein: At least one of the first communication channel (15) and the second communication channel (17) is a wireless channel.

12. The communication system according to claim 1, wherein: At least one of the second communication units (12) comprises a further encryption unit (24), wherein the further encryption unit (24) is configured to provide encrypted communication, and wherein the encryption provided by the further encryption unit (24) is different from the encryption provided by the encryption unit (19).

13. The communication system according to claim 1, wherein: The first communication unit (11) has a first certified functionality certified by a first authorized certification authority, and / or wherein: The second communication unit (12) has a second authenticated functionality authenticated by a second authorized certification authority, wherein in particular the first authorized certification authority is different from the second authorized certification authority.

14. The communication system according to claim 13, wherein: The certificate provided by at least one of the first authorized certification authority and the second authorized certification authority is a security certificate and / or an information certificate.

15. A communication method, the communication method comprising: (S1) providing communication via a first communication channel by a first communication unit; (S2) providing communication via a separate second communication channel by a separate second communication unit; as well as (S3) The first communication unit is coupled to the second communication unit via a coupling unit (13), so that the first communication unit can mutually utilize electronic resources between the first communication unit and the second communication unit, wherein the mutual utilization of electronic resources refers to the encryption function provided by the encryption unit (19) of the first communication unit, so that the first communication unit is also configured to provide encrypted communication to the second communication channel of the second communication unit via the coupling unit (13).

Images