An aircraft control domain boundary bi-directional secure communication function test device

Abstract

This invention provides a testing device for two-way security communication functions at the boundary of an aircraft control domain. The testing device includes a first communication testing device and a second communication testing device, both connected to the device under test (DUT) for detecting its communication functions. Both the first and second communication testing devices include a main control module, multiple simulation modules connected to the main control module, and an interface communication module. The main control module schedules and manages the multiple simulation modules, and the simulation modules perform simulation tests on the communication functions of the DUT. This invention effectively solves the problem of lacking dedicated functional testing and verification devices for two-way security protection devices at the boundary of an aircraft control domain. It has advantages such as real-time simulation of two-way security communication message transmission and reception, configurable test scenarios, and flexibility.

Description

Technical Field

[0001] This invention relates to the field of aircraft airborne network design technology, specifically to a test device for two-way security communication function at the boundary of an aircraft control domain. Background Technology

[0002] Aircraft onboard networks generally consist of two network domains: the aircraft control domain and the airline information service domain. The aircraft control domain includes high-security onboard systems such as avionics systems and flight control systems, while the airline information service domain includes low-security onboard systems such as onboard information service equipment and electronic flight bag equipment.

[0003] To enable aircraft operation and maintenance functions, real-time two-way communication is typically required between the aircraft control domain and the airline information service domain. However, to protect the aircraft control domain from cyberattacks originating from the airline information service domain, a boundary two-way security protection device is usually installed at the boundary of the aircraft control domain to enable two-way secure communication. Currently, however, there is no dedicated testing equipment for the boundary two-way security protection device, making it impossible to test and verify two-way secure communication within the aircraft control domain. Summary of the Invention

[0004] To effectively address the lack of dedicated functional testing and verification devices for two-way security protection devices at the boundaries of aircraft control domains, this invention designs a two-way security communication function testing device for the boundaries of aircraft control domains.

[0005] The technical solution to achieve the purpose of the invention is as follows: A test device for two-way security communication function of aircraft control domain boundary, the test device includes a first communication test device and a second communication test device, both of which are connected to the device under test and are used to test the communication function of the device under test;

[0006] Both the first communication test device and the second communication test device include a main control module, multiple simulation modules connected to the main control module, and an interface communication module. The main control module schedules and manages the multiple simulation modules, and the simulation modules perform simulation tests on the communication functions of the device under test.

[0007] Furthermore, the first communication test device and the second communication test device also include an interface working mode management module. One end of the interface working mode management module is connected to the main control module, and the other end is connected to the interface communication module. The interface working mode management module is used to receive interface working mode setting parameters sent by the main control module and set the interface communication module to perform bidirectional or unidirectional communication with the device under test.

[0008] Furthermore, the simulation module of the aforementioned first communication test equipment includes a flight control function communication interface simulation module, a data link function communication interface simulation module, and a central maintenance function communication interface simulation module;

[0009] The flight control function communication interface simulation module performs simulation testing on the flight control function communication interface of the device under test, the data link function communication interface simulation module performs simulation testing on the data link function interface of the device under test, and the central maintenance function communication interface simulation module performs simulation testing on the central maintenance function communication interface of the device under test.

[0010] Furthermore, the simulation module of the aforementioned second communication test equipment includes an aircraft parameter function communication interface simulation module, an information system maintenance function communication interface simulation module, and a cockpit printing service function communication interface simulation module;

[0011] The aircraft parameter function communication interface simulation module performs simulation testing on the aircraft parameter function communication interface of the device under test; the information system maintenance function communication interface simulation module performs simulation testing on the information system maintenance function communication interface of the device under test; and the cockpit printing service function communication interface simulation module performs simulation testing on the cockpit printing service function communication interface of the device under test.

[0012] Furthermore, the interface communication module of the first communication test device is an ARINC664P7 interface communication module, and the ARINC664P7 interface communication module is connected to the device under test via an ARINC664P7 network.

[0013] The interface communication module of the second communication test equipment is an aviation Ethernet interface communication module, and the aviation Ethernet interface communication module is connected to the device under test via aviation Ethernet.

[0014] Furthermore, the method for simulating the communication function of the device under test using the aforementioned testing device includes a simulation test process for the one-way communication function of the device under test and a simulation test process for the two-way communication function of the device under test.

[0015] Furthermore, the simulation test process for the one-way communication function of the aforementioned device under test includes the following steps:

[0016] S11. Set the first communication test device to sending mode and the second communication test device to receiving mode;

[0017] S12. The simulation module of the first communication test device sends a message to the device under test, and the device under test receives the message and sends it to the second communication test device.

[0018] S13. The second communication test device generates and outputs a feedback message based on whether a message has been received.

[0019] S14. Determine the one-way passage function of the device under test based on the feedback message.

[0020] Furthermore, the simulation test process for the bidirectional communication function of the aforementioned device under test includes the following steps:

[0021] S21. Set both the first communication test device and the second communication test device to bidirectional communication mode;

[0022] S22. The simulation module of the first communication test device sends a message to the device under test. The device under test receives the message and sends it to the second communication test device. The second communication test device generates and outputs a feedback message based on whether it has received the message.

[0023] S23. The simulation module of the second communication test device sends a response message to the device under test. The device under test receives the corresponding message and sends it to the first communication test device. The first communication test device generates and outputs a response feedback message based on whether it receives the response message.

[0024] S24. Determine the bidirectional communication function of the device under test based on the feedback message and the response feedback message.

[0025] Compared with the prior art, the beneficial effects of the present invention are:

[0026] 1. This invention achieves both one-way communication testing and two-way communication testing in the aircraft control domain by setting up two-way security communication testing sub-devices for the aircraft control domain and the airline information domain within the verification device for two-way security communication functions at the boundary of the aircraft control domain, and by operating these two sub-devices simultaneously.

[0027] 2. This invention, by deploying the aircraft control domain bidirectional security communication function test module and the airline information domain bidirectional security communication function test module on different devices, and communicating with the device under test through the ARINC664P7 network and aviation Ethernet respectively, can simulate the sending and receiving of bidirectional security communication messages in real time.

[0028] 3. This invention uses the ARINC664P7 interface working module management module and the aviation Ethernet interface working mode management module to set the one-way and two-way communication modes of ARINC664P7 and aviation Ethernet, providing configurability and flexibility for test scenarios. Attached Figure Description

[0029] To more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below.

[0030] Figure 1 This is an architecture diagram of the test device for the two-way security communication function at the boundary of the aircraft control domain in a specific implementation.

[0031] Figure 2 This is a flowchart illustrating the test procedure for the one-way communication function of the device under test in a specific implementation method.

[0032] Figure 3 This is a flowchart of the test procedure for the two-way communication function of the device under test in a specific implementation method. Detailed Implementation

[0033] The present invention will be further described below with reference to specific embodiments, and the advantages and features of the present invention will become clearer as a result. However, these embodiments are merely exemplary and do not constitute any limitation on the scope of the present invention. Those skilled in the art should understand that modifications or substitutions can be made to the details and form of the technical solutions of the present invention without departing from the spirit and scope of the present invention, but all such modifications and substitutions fall within the protection scope of the present invention.

[0034] See Figure 1 The diagram shows the architecture of the test device for the two-way security communication function of the aircraft control domain boundary. The test device includes two sub-devices (the first communication test device and the second communication test device). The first communication test device is the aircraft control domain two-way security communication test sub-device; the second communication test device is the airline information domain two-way security communication function test sub-device.

[0035] Both the first and second communication test devices are connected to the device under test (DUT) and are used to test the communication functions of the DUT. Each device includes a main control module, multiple simulation modules connected to the main control module, and an interface communication module. The main control module schedules and manages the multiple simulation modules, and the simulation modules perform simulation tests on the communication functions of the DUT. When the device is started, these two sub-devices operate simultaneously.

[0036] See Figure 1 As shown, the test sub-equipment for two-way security communication in the aircraft control domain includes a main control module 101 for testing two-way security communication functions in the aircraft control domain, a simulation module 102 for flight control function communication interface, a simulation module 103 for data link function communication interface, a simulation module 104 for central maintenance function communication interface, an ARINC664P7 interface communication module 105, and an ARINC664P7 interface working mode management module 106.

[0037] Aircraft Control Domain Two-Way Security Communication Function Test Main Control Module 101: This module is the main control module of the aircraft control domain two-way security communication function test sub-equipment, and completes the scheduling function of the flight control function communication interface simulation module 102, the data link function communication interface simulation module 103, the central maintenance function communication interface simulation module 104, and the ARINC664P7 interface working mode management module 106.

[0038] Flight control function communication interface simulation module 102: This module performs the simulation function of the flight control function communication interface. This module sends print service data messages to the ARINC664P7 interface communication module 105 and receives print service response messages from the ARINC664P7 interface communication module 105, and displays the message content and communication status in real time.

[0039] Data link function communication interface simulation module 103: This module performs the data link function communication interface simulation function. This module sends data link communication messages to ARINC664P7 interface communication module 105 and displays the message content and communication status in real time.

[0040] Central maintenance function communication interface simulation module 104: This module performs the simulation function of the central maintenance function communication interface. This module sends central maintenance function communication messages to the ARINC664P7 interface communication module 105 and displays the message content and communication status in real time.

[0041] ARINC664P7 Interface Communication Module 105: This module completes the ARINC664P7 interface communication function. It provides function call interfaces for ARINC664P7 network sending and receiving, which are called by the Flight Control Functional Communication Interface Simulation Module 102, Data Link Functional Communication Interface Simulation Module 103, and Central Maintenance Functional Communication Interface Simulation Module 104; it also provides an ARINC664P7 interface working mode setting interface, which is called by the ARINC664P7 interface working mode management module 106.

[0042] ARINC664P7 Interface Working Mode Management Module 106: This module performs ARINC664P7 interface working mode management functions. This module receives ARINC664P7 interface working mode setting parameters from the aircraft control domain bidirectional security communication function test main control module 101, and sets the ARINC664P7 interface communication module 105 to either unidirectional or bidirectional communication based on these parameters.

[0043] See Figure 1As shown, the test sub-equipment for the two-way security communication function of the airline information domain includes the main control module 107 for testing the two-way security communication function of the airline information domain, the simulation module 108 for the aircraft parameter function communication interface, the simulation module 109 for the information system maintenance function communication interface, the simulation module 110 for the cockpit printing service function communication interface, the aviation Ethernet interface communication module 111, and the aviation Ethernet interface working mode management module 112.

[0044] Airline Information Domain Two-Way Security Communication Function Test Main Control Module 107: This module is the main control module of the airline information domain two-way security communication function test sub-equipment, and completes the scheduling and management functions of the aircraft parameter function communication interface simulation module 108, the information system maintenance function communication interface simulation module 109, the cockpit printing service function communication interface simulation module 110, and the aviation Ethernet interface working mode management module 112.

[0045] Aircraft parameter function communication interface simulation module 108: This module completes the simulation of the aircraft parameter function communication interface. This module calls the aviation Ethernet interface communication module 111 to receive data link communication messages, parse the messages, and synchronously display the message content.

[0046] Information System Maintenance Function Communication Interface Simulation Module 109: This module performs simulation of the information system maintenance function communication interface. This module calls the aviation Ethernet interface communication module 111 to receive central maintenance function communication messages, parse the messages, and synchronously display the message content.

[0047] Cockpit Printing Service Function Communication Interface Simulation Module 110: This module simulates the cockpit printing service function communication interface. This module calls the aviation Ethernet interface communication module 111 to receive printing service data messages, parse the messages, and synchronously display the message content; it also calls the aviation Ethernet interface communication module 111 to send printing service response messages and synchronously displays the message content and communication status.

[0048] Aviation Ethernet Interface Communication Module 111: This module completes the aviation Ethernet interface communication function. This module provides function call interfaces for aviation Ethernet sending and receiving, which can be called by the aircraft parameter function communication interface simulation module 108, the information system maintenance function communication interface simulation module 109, and the cockpit printing service function communication interface simulation module 110; it also provides an aviation Ethernet interface working mode setting interface, which can be called by the aviation Ethernet interface working mode management module 112.

[0049] Aviation Ethernet Interface Working Mode Management Module 112: This module performs the aviation Ethernet interface working mode management function. It receives the aviation Ethernet interface working mode setting parameters from the airline's information domain bidirectional security communication function test main control module 107, and sets the aviation Ethernet interface communication module 111 to either unidirectional or bidirectional communication based on these parameters.

[0050] In this specific embodiment, the method for simulating the communication function of the device under test by the testing device includes a simulation test process for the one-way communication function of the device under test and a simulation test process for the two-way communication function of the device under test.

[0051] For the test procedure of one-way communication in the aircraft control domain, please refer to [link / document / reference]. Figure 2 As shown, it includes the following steps:

[0052] Step 1: Run the main control module 101 for testing the two-way security communication function in the aircraft control domain, and run the main control module 107 for testing the two-way security communication function in the airline information domain to begin the one-way communication test in the aircraft control domain.

[0053] Step 2: Run the ARINC664P7 interface working mode management module 106 and set the ARINC664P7 interface working mode to queue transmission mode; run the aviation Ethernet interface working mode management module 112 and set the aviation Ethernet interface working mode to receive mode.

[0054] Step 3: Run the data link function communication interface simulation module 103 to perform data link function communication interface simulation; run the aircraft parameter function communication interface simulation module 108 to perform aircraft parameter function communication interface simulation.

[0055] Step 4: The data link function communication interface simulation module 103 calls the ARINC664P7 interface communication module 105 to send a data link communication message; the aircraft parameter function communication interface simulation module 108 calls the aviation Ethernet interface communication module 111 to receive the data link communication message.

[0056] Step 5: Run the central maintenance function communication interface simulation module 104 to perform the central maintenance function communication interface simulation; run the information system maintenance function communication interface simulation module 109 to perform the information system maintenance function communication interface simulation.

[0057] Step 6: The central maintenance function communication interface simulation module 104 calls the ARINC664P7 interface communication module 105 to send the central maintenance function communication message; the information system maintenance function communication interface simulation module 109 calls the aviation Ethernet interface communication module 111 to receive the central maintenance function communication message; the avionics network simulation main control module 101 determines whether to stop data excitation. If yes, then proceed to step 7; if no, then proceed to step 4.

[0058] Step 7: The main control module for testing the two-way security communication function in the aircraft control domain determines whether the ARINC664P7 network message has been successfully sent. If yes, proceed to step 8; otherwise, proceed to step 3. The main control module 107 for testing the two-way security communication function in the airline information domain determines whether the aviation Ethernet message has been successfully received. If yes, proceed to step 8; otherwise, proceed to step 3.

[0059] Step 8: End execution.

[0060] For the test procedure of one-way communication in the aircraft control domain, please refer to [link / document / reference]. Figure 3 As shown, it includes the following steps:

[0061] Step 1: Run the main control module 101 for testing the two-way security communication function in the aircraft control domain, and run the main control module 107 for testing the two-way security communication function in the airline information domain to begin the two-way communication test in the aircraft control domain.

[0062] Step 2: Run the ARINC664P7 interface working mode management module 106 and set the ARINC664P7 interface working mode to queue bidirectional communication mode; run the aviation Ethernet interface working mode management module 112 and set the aviation Ethernet interface working mode to bidirectional communication mode.

[0063] Step 3: Run the flight control function communication interface simulation module 102 to perform flight control function communication interface simulation; run the cockpit printing service function communication interface simulation module 110 to perform cockpit printing service function communication interface simulation.

[0064] Step 4: The flight control function communication interface simulation module 102 calls the ARINC664P7 interface communication module 105 to send the printing service data message; the cockpit printing service function communication interface simulation module 110 calls the aviation Ethernet interface communication module 111 to receive the printing service data message.

[0065] Step 5: The cockpit printing service function communication interface simulation module 110 calls the aviation Ethernet interface communication module 111 to send a printing service response message; the flight control function communication interface simulation module 102 calls the ARINC664P7 interface communication module 105 to receive the printing service response message.

[0066] Step 6: The main control module for testing the two-way security communication function in the aircraft control domain determines whether the transmission and reception are successful. If yes, proceed to step 7; otherwise, proceed to step 3. The main control module 107 for testing the two-way security communication function in the airline information domain determines whether the transmission and reception are successful. If yes, proceed to step 7; otherwise, proceed to step 3.

[0067] Step 7: End execution.

[0068] The aircraft control domain boundary two-way security communication function testing device in this specific embodiment has the following advantages:

[0069] 1. This invention achieves one-way communication testing and two-way communication testing of the aircraft control domain by setting up two-way security communication testing sub-devices for the aircraft control domain and two-way security communication testing sub-devices for the airline information domain inside the two-way security communication function verification device of the aircraft control domain boundary, and by running these two sub-devices simultaneously.

[0070] 2. By deploying the aircraft control domain two-way security communication function test module and the airline information domain two-way security communication function test module on different devices, the present invention can simulate the sending and receiving of two-way security communication messages in real time.

[0071] 3. This invention uses the ARINC664P7 interface working module management module and the aviation Ethernet interface working mode management module to set the one-way and two-way communication modes of ARINC664P7 and aviation Ethernet, providing configurability and flexibility for the test scenario.

[0072] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

[0073] Furthermore, although this specification describes embodiments, not every embodiment contains only one independent technical solution. This narrative style is merely for clarity. Those skilled in the art should consider the specification as a whole, and the technical solutions in each embodiment can also be appropriately combined to form other embodiments that can be understood by those skilled in the art.

Claims

1. A test device for two-way security communication function at the boundary of an aircraft control domain, characterized in that, The testing apparatus includes a first communication testing device and a second communication testing device, both of which are connected to the device under test and are used to test the communication function of the device under test. Both the first communication test device and the second communication test device include a main control module, multiple simulation modules connected to the main control module, and an interface communication module. The main control module schedules and manages the multiple simulation modules, and the simulation modules perform simulation tests on the communication functions of the device under test. The interface communication module of the first communication test equipment is an ARINC664P7 interface communication module, and the ARINC664P7 interface communication module is connected to the device under test via an ARINC664P7 network; the interface communication module of the second communication test equipment is an aviation Ethernet interface communication module, and the aviation Ethernet interface communication module is connected to the device under test via an aviation Ethernet network. The simulation test process for the one-way communication function of the device under test includes the following steps: S11. Set the first communication test device to sending mode and the second communication test device to receiving mode; S12. The simulation module of the first communication test device sends a message to the device under test, and the device under test receives the message and sends it to the second communication test device; S13. The second communication test device generates and outputs a feedback message based on whether a message has been received; S14. Determine the one-way passage function of the device under test based on the feedback message. The simulation test process for the bidirectional communication function of the device under test includes the following steps: S21. Set both the first communication test device and the second communication test device to bidirectional communication mode; S22. The simulation module of the first communication test device sends a message to the device under test, the device under test receives the message and sends it to the second communication test device, and the second communication test device generates and outputs a feedback message based on whether it receives the message; S23. The simulation module of the second communication test device sends a response message to the device under test, the device under test receives the corresponding message and sends it to the first communication test device, and the first communication test device generates and outputs a response feedback message based on whether it receives the response message; S24. Determine the bidirectional communication function of the device under test based on the feedback message and the response feedback message.

2. The test device for two-way security communication function at the aircraft control domain boundary according to claim 1, characterized in that: The first communication test device and the second communication test device further include an interface working mode management module. One end of the interface working mode management module is connected to the main control module, and the other end is connected to the interface communication module. The interface working mode management module is used to receive the interface working mode setting parameters sent by the main control module and set the interface communication module to perform bidirectional or unidirectional communication with the device under test.

3. The test device for two-way security communication function at the aircraft control domain boundary according to claim 1, characterized in that: The simulation module of the first communication test equipment includes a flight control function communication interface simulation module, a data link function communication interface simulation module, and a central maintenance function communication interface simulation module; The flight control function communication interface simulation module performs simulation testing on the flight control function communication interface of the device under test, the data link function communication interface simulation module performs simulation testing on the data link function interface of the device under test, and the central maintenance function communication interface simulation module performs simulation testing on the central maintenance function communication interface of the device under test.

4. The test device for two-way security communication function at the aircraft control domain boundary according to claim 1, characterized in that: The simulation module of the second communication test equipment includes an aircraft parameter function communication interface simulation module, an information system maintenance function communication interface simulation module, and a cockpit printing service function communication interface simulation module; The aircraft parameter function communication interface simulation module performs simulation testing on the aircraft parameter function communication interface of the device under test; the information system maintenance function communication interface simulation module performs simulation testing on the information system maintenance function communication interface of the device under test; and the cockpit printing service function communication interface simulation module performs simulation testing on the cockpit printing service function communication interface of the device under test.

Images