Airborne application dynamic access control method and system based on zero trust mechanism

Abstract

The invention provides an airborne application dynamic access control method based on a zero-trust mechanism, and relates to the technical field of airborne embedded systems.The method includes the steps that a zero-trust security authentication framework is established around identity information of avionics domain / open domain applications, and the zero-trust security authentication framework is established based on the minimum permission principle and the dynamic authorization principle; a closed-loop scheme of identity authentication, dynamic permission granting and behavior auditing is designed by utilizing identity information of both communication parties of an open domain and an avionics domain according to the characteristic that attribute characteristics such as a physical position, an authentication result, an access result, access time, an application version, a communication data link, access frequency and the like of equipment or application are possibly changed; and continuous authentication and dynamic access control of entities such as other airplanes or equipment in the open domain are realized. The method prevents an attacker from directly attacking the airborne application by bypassing the boundary protection through various means in the environment of opening the network boundary to cause serious information leakage or system failure. And the application access credibility and reliability of the airborne system are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of airborne embedded systems, and in particular provides an airborne application dynamic access control method and system based on a zero-trust mechanism. Background Art

[0002] With the rapid development of information technology, the requirements for security and reliability of airborne systems are increasing. The traditional static access control method based on network boundaries can no longer meet the access control needs of modern airborne systems in dynamic network environments. Because network boundaries are becoming increasingly blurred, attackers in open domains can bypass boundary protection through various means and directly attack airborne applications or systems, which may lead to serious information leakage or system failure.

[0003] Therefore, a more advanced and flexible access control mechanism is needed to ensure the security of airborne systems. Summary of the invention

[0004] The purpose of this application is to solve the above technical problems and propose a method and system for dynamic access control of airborne applications based on a zero-trust mechanism, which realizes dynamic access control of airborne application access in an open domain network environment, and can prevent attackers from bypassing boundary protection by various means to directly attack airborne applications in an open network boundary environment, resulting in serious information leakage or system failure. It improves the credibility and reliability of airborne system application access.

[0005] In order to achieve the above object, the present invention adopts the following technical solution: a method for dynamic access control of airborne applications based on a zero-trust mechanism, the method comprising:

[0006] S1: Configure corresponding access control policies under different trust value intervals;

[0007] S2: The airborne application open domain / avionics domain log management module receives audit logs related to other open domain aircraft and equipment, avionics domain applications and systems, and open domain network access control modules and access entities, and performs standardized processing on the audit logs;

[0008] S3: The airborne application open domain / avionics domain log management module sends the standardized logs and stores them into the airborne message middleware module according to message classification;

[0009] S4: asynchronously consumes classified log messages from the onboard message middleware module and extracts key parameters from the log messages;

[0010] S5: dynamically evaluate the trust value of the application using a preset trust value evaluation rule or algorithm according to the key parameters extracted in S4;

[0011] S6: According to the trust value evaluation result obtained in S5 and the access control policy configured in S1, obtain the corresponding access policy under the trust value;

[0012] S7: sending the corresponding access policy under the trust value obtained in S6 to the open domain network access control unit through the message middleware, and the open domain network access control unit performs access control on the access request according to the access policy;

[0013] S8: When a new access or new operation is performed on the application, S2-S7 are repeated to complete the continuous dynamic access control of the onboard application.

[0014] The dynamic access control method for airborne applications based on a zero-trust mechanism provided by the present invention also has the following technical features: the access control policy includes the granting of access rights, partial granting of access rights, and denial of access rights; the access control policy is stored in a structured data format.

[0015] The airborne application dynamic access control method based on the zero trust mechanism provided by the present invention also has the following technical features: the standardized processing includes preprocessing the log information, cleaning the log information, and unifying the data format of the log information.

[0016] The method for dynamic access control of airborne applications based on a zero-trust mechanism provided by the present invention also has such a technical feature that S7 includes:

[0017] Perform integrity check on received policy data;

[0018] Parse and verify the correctness of the received policy data;

[0019] Detect and resolve conflicts in the parsed policy data;

[0020] Load and implement policy data.

[0021] Another object of the present invention is to provide an airborne application dynamic access control system based on a zero trust mechanism, the system being used to implement the control method as described in any one of the above, comprising:

[0022] The airborne application open domain / avionics domain log management module is used to receive audit logs related to other aircraft or equipment in the open domain and airborne applications in the avionics domain, and to extract key data, clean useless data, and normalize the log format of the diversified logs;

[0023] Onboard message middleware module for asynchronously receiving and processing normalized log messages;

[0024] The onboard application trust value evaluation engine module is used to asynchronously consume the classified audit logs in the message middleware, and dynamically evaluate the trust status of the application through the trust value evaluation algorithm combined with the identity information of the application;

[0025] An airborne application access control unit module for open domain network access, used to receive, verify, parse, load and implement access control policies;

[0026] The onboard application policy management module is used to receive policy configuration requests, parse, verify and store access control policies, and is responsible for matching application trust values ​​with corresponding access control policies;

[0027] The airborne application unified identity management module is used to receive, standardize and structure the application identity information, and support the trust value evaluation of the application.

[0028] The airborne application dynamic access control system based on the zero-trust mechanism provided by the present invention also has such a technical feature that the key data of the diversified logs include the airborne application name, application version, access time and aircraft communication data link.

[0029] The airborne application dynamic access control system based on the zero trust mechanism provided by the present invention also has such a technical feature that the airborne application access open domain network access control module includes receiving the latest application access control policy information sent by the airborne application trust value evaluation engine from the airborne message middleware module, and performing integrity verification, parsing, conflict detection and processing, loading and implementation on the policy information.

[0030] The airborne application dynamic access control system based on the zero-trust mechanism provided by the present invention also has such a technical feature that the airborne application policy management module includes receiving a policy configuration request sent by ground staff through a ground configuration management tool, and the policy configuration request includes access control policies corresponding to different trust values ​​of the application.

[0031] The airborne application dynamic access control system based on the zero-trust mechanism provided by the present invention also has such a technical feature that the airborne application policy management module is also used to update the access policy and notify the airborne application trust value evaluation engine module of the access policy update message.

[0032] Beneficial Effects

[0033] The method and system for dynamic access control of airborne applications based on the zero-trust mechanism provided by the present invention realizes dynamic access control of airborne application access in an open domain network environment, and can prevent attackers from bypassing boundary protection by various means to directly attack airborne applications in an open network boundary environment, resulting in serious information leakage or system failure. The credibility and reliability of airborne system application access are improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0035] Figure 1 An airborne application dynamic access control system architecture based on a zero-trust mechanism provided by an embodiment of the present invention;

[0036] Figure 2 It is composed of an airborne application dynamic access control system based on a zero-trust mechanism provided by an embodiment of the present invention;

[0037] Figure 3 A timing diagram of the method for dynamic access control of airborne applications based on a zero-trust mechanism provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0038] The present application is further described in detail below in conjunction with the accompanying drawings and examples, but it should be noted that these implementation modes are not limitations of the present application, and any equivalent transformations or substitutions in functions, methods, or structures made by ordinary technicians in the field based on these implementation modes are all within the scope of protection of the present application.

[0039] In the description of the embodiments of the present application, it should be understood that the terms "center", "longitudinal", "lateral", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", etc., indicating the orientation or position relationship, are based on the orientation or position relationship shown in the accompanying drawings, and are only for the convenience of describing the creation of the present application and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the creation of the present application.

[0040] In addition, the terms "first", "second", "third", etc. are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first", "second", etc. may explicitly or implicitly include one or more of the features. In the description of the invention of this application, unless otherwise specified, the meaning of "plurality" is two or more.

[0041] The terms "installed", "connected" and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the invention of this application can be understood by specific circumstances.

[0042] like Figure 1-3 As shown, a method for dynamic access control of airborne applications based on a zero-trust mechanism is provided, the method comprising:

[0043] S1: Ground staff configures corresponding access control policies in different trust value intervals for each open domain / avionics domain specific application through the configuration tool or command line interface of the onboard policy management module;

[0044] S2: The airborne application open domain / avionics domain log management module receives audit logs related to other open domain aircraft and equipment, avionics domain applications and systems, and open domain network access control modules and access entities, and performs standardized processing on the audit logs;

[0045] S3: The airborne application open domain / avionics domain log management module sends the standardized logs and stores them in the airborne message middleware module by message classification. The message middleware provides high availability and load balancing, as well as the ability to prevent DoS attacks, to ensure reliable transmission and storage of logs.

[0046] S4: asynchronously consumes classified log messages from the onboard message middleware module and extracts key parameters from the log messages;

[0047] S5: dynamically evaluate the trust value of the application using a preset trust value evaluation rule or algorithm according to the key parameters extracted in S4;

[0048] S6: According to the trust value evaluation result obtained in S5 and the access control policy configured in S1, the corresponding access policy under the trust value is obtained. The policy management module queries the database based on the received trust value and returns the access control policy of the specific access entity under the trust value to the airborne application trust value evaluation engine. The policy may include granting or denying access rights, etc.

[0049] S7: sending the corresponding access policy under the trust value obtained in S6 to the open domain network access control unit through the message middleware, and the open domain network access control unit performs access control on the access request according to the access policy;

[0050] S8: When a new access or new operation is performed on the application, S2-S7 are repeated to complete the continuous dynamic access control of the onboard application.

[0051] In some embodiments, the S1 includes:

[0052] The ground staff configures the corresponding access control policy for each specific application in the airborne system within different preset trust value intervals through the configuration tool or command window of the airborne policy management module; the access control policy includes but is not limited to the granting, partial granting or denial of access rights. The access control policy information configured by the ground staff is then stored in a structured data format so that other system components (such as the airborne application trust value evaluation engine, open domain network access control unit, etc.) can query and call it as needed to achieve dynamic access control based on trust value.

[0053] In some embodiments, the S2 includes:

[0054] The open domain / avionics domain log management module receives audit logs about access entities from different system components through a network interface; the access entities include but are not limited to access subjects, access objects, open domain network access control units, and airborne application trust value evaluation engines, etc.; then the open domain / avionics domain log management module performs preprocessing operations on the received access logs to eliminate redundant information in the logs and ensure the uniqueness and validity of the log data; the preprocessing operations include but are not limited to deduplication, timestamp correction, and completion of missing fields, so as to ensure the integrity and accuracy of the log data; in addition, it also has a log data cleaning function, which can remove invalid logs in the logs and improve the quality of the log data. Finally, in the standardization processing stage, the open domain / avionics domain log management module has a log data format conversion function, which can convert log data of different formats into a unified log format, and the unified log format includes but is not limited to key information fields such as log level, access subject identification, access object, communication data link, access time, authentication result, access result, etc., so that the subsequent airborne application trust value evaluation engine can use the log data for trust value evaluation.

[0055] In some embodiments, the S3 includes:

[0056] The open domain / avionics domain log management module stores the standardized log data in the message middleware, which has high availability and load balancing functions to ensure the reliability and stability of the log data during transmission and storage. Secondly, the message middleware allows the airborne application trust value evaluation engine and other system modules to consume the log data stored in the message middleware in an asynchronous manner. Finally, the message middleware also has the persistent storage function of log data, which can continue to provide access services to log data after the system is restarted or fault recovery.

[0057] In some embodiments, the S4 includes:

[0058] The airborne application trust value evaluation engine asynchronously obtains standardized log data from the message middleware and extracts key parameters from it; the key parameters include but are not limited to log level, access subject identification, access object, communication data link, access time, authentication result, access result, etc. Then, the airborne application trust value evaluation engine uses the preset trust value evaluation rules or algorithms to analyze and process the key parameters extracted from the log data to dynamically evaluate the trust value of the application; finally, the airborne application trust value evaluation engine represents the evaluation results in the form of values ​​or levels as the basis for the subsequent access control strategy selection; the evaluation results can be updated in real time or regularly to reflect the dynamic changes in the application trust value.

[0059] In some embodiments, the access control policy includes granting of access rights, partial granting of access rights, and denial of access rights; and the access control policy is stored in a structured data format.

[0060] In some embodiments, the policy management module supports the ability to update policies. When the access control policy changes, including adding, deleting or modifying a policy, the policy management module automatically notifies the onboard application trust value evaluation engine to update the policy to ensure that the access control policy used by the onboard application trust value evaluation engine is the latest.

[0061] In some embodiments, the standardization process includes preprocessing the log information, cleaning the log information, and unifying the data format of the log information.

[0062] In some embodiments, the S7 includes:

[0063] Perform integrity check on received policy data;

[0064] Parse and verify the correctness of the received policy data;

[0065] Detect and resolve conflicts in the parsed policy data;

[0066] Load and implement policy data.

[0067] In the above embodiment, the open domain network access control unit has a data verification function when receiving policy data, and can perform integrity verification on the received access control policy data to ensure the integrity of the policy data. Then, when loading the policy into the local execution environment, the open domain network access control unit also has a policy conflict detection and conflict resolution function, which can detect and resolve conflicts between different policies to ensure the correctness and consistency of policy execution. After verification and conflict resolution, the open domain network access control unit loads the access control policy and implements the access control of the application.

[0068] In some embodiments, a dynamic access control system for airborne applications based on a zero-trust mechanism is provided, the system being used to implement the control method as described in any one of the foregoing, including:

[0069] The airborne application open domain / avionics domain log management module is used to receive audit logs related to other aircraft or equipment in the open domain and airborne applications in the avionics domain, and to extract key data, clean useless data, and normalize the log format of the diversified logs;

[0070] Onboard message middleware module for asynchronously receiving and processing normalized log messages;

[0071] The onboard application trust value evaluation engine module is used to asynchronously consume the classified audit logs in the message middleware, and dynamically evaluate the trust status of the application through the trust value evaluation algorithm combined with the identity information of the application;

[0072] An airborne application access control unit module for open domain network access, used to receive, verify, parse, load and implement access control policies;

[0073] The onboard application policy management module is used to receive policy configuration requests, parse, verify and store access control policies, and is responsible for matching application trust values ​​with corresponding access control policies;

[0074] The airborne application unified identity management module is used to receive, standardize and structure the application identity information, and support the trust value evaluation of the application.

[0075] In the above embodiment, the main functions of the airborne application open domain / avionics domain log management module include:

[0076] 1) Multi-source log reception. The open domain / avionics domain log management module is mainly responsible for receiving, integrating, cleaning, processing and storing audit log information from multiple key system modules. These system modules include access subjects (such as open domain devices or applications), access objects (such as airborne applications or resources), airborne application trust value evaluation engines, and open domain network access control units. The logs generated by these modules together constitute the data source for trust value evaluation of access entities.

[0077] 2) Standardization of various formats. Since the log information and formats of each module are inconsistent, it is not conducive to the subsequent airborne application trust value evaluation engine to directly use the log information to evaluate the trust value of the access entity. Therefore, after the airborne application open domain / avionics domain log management module receives the audit log, it is necessary to standardize the log information from different sources and formats to provide a reliable data basis for subsequent trust evaluation.

[0078] 3) Extraction of key data. After receiving and integrating log information, the open domain / avionics domain log management module uses data processing technology to perform data cleaning, standardization, and aggregation operations on the log information to remove redundant information and extract key data, providing data support for subsequent trust value evaluation.

[0079] The functions of the airborne message middleware module are described in detail as follows:

[0080] 1) Decoupling of messaging and communication. As a key component in the system architecture, the message middleware module is designed to reduce the coupling and complexity of direct communication between modules and improve the scalability and flexibility of the system.

[0081] 2) Enhance business scalability. Each business module communicates with each other by sending messages to or receiving messages from the message middleware, without the need to directly establish a connection or understand the specific implementation details of the other party.

[0082] The specific functions of the airborne application trust value evaluation engine module are described as follows:

[0083] 1) Airborne application log consumption and key parameter extraction. The airborne application trust value evaluation engine module first receives formatted log information from the airborne message middleware. The key parameters contained in these log information are an important basis for evaluating the trust status of the application. The airborne application trust value evaluation engine module pre-processes the received log information, extracts key parameters related to trust evaluation, and provides data support for subsequent trust value calculations.

[0084] 2) Trust value evaluation of other aircraft or devices in the open domain. Combined with the application identity information stored in the database (such as application name, version, data link information, etc.), the airborne application trust value evaluation engine module uses an advanced trust value evaluation algorithm to quantitatively evaluate the trust status of the application. The algorithm integrates multiple factors, including but not limited to log level, access subject identification, access object, communication data link, access time, authentication result, access result, etc., to achieve accurate evaluation of the application trust status.

[0085] 3) Distribution of evaluation results. After the trust value evaluation is completed, the airborne application trust value evaluation engine module stores the calculated trust value evaluation results in the database. At the same time, it also distributes the trust value and identity information to the airborne policy management module. As a collaborative component of the airborne application trust value evaluation engine, the airborne policy management module is responsible for matching policy information based on the received trust value and identity information, and returning the access control policy corresponding to the application under the current trust value.

[0086] The specific functions of the open domain network access control module are as follows:

[0087] 1) Receive access control policy: Receive access control policy instructions for open domain devices transmitted by the onboard application trust value evaluation engine.

[0088] 2) Access control policy parsing, conflict resolution, loading and execution: After receiving the policy information, the open domain network access control module parses the policy, resolves policy conflicts, updates and applies these policies.

[0089] 3) Continuously monitor and manage connections. Once the connection is established, the open domain network access control module will monitor the interaction between the open domain device and the airborne device in real time, including data transmission volume, access frequency, etc. The application access behavior is sent to the unified open domain / avionics domain log management module in the form of logs to support the airborne application trust value assessment engine's continuous trust assessment of the access entity. Through this mechanism, abnormal activities such as potential attacks or improper use of resources can be discovered in a timely manner, thereby ensuring the stable operation of the system. The module also has the ability to terminate the connection. When the policy it receives is to terminate the connection, it will immediately take action to terminate the corresponding connection to prevent the further spread of potential security threats.

[0090] The specific functions of the airborne application unified identity management module are described as follows:

[0091] 1) Identity information reception and standardized processing. The unified identity management module is responsible for receiving and processing application identity information from other modules. First, the received identity information is standardized to ensure the uniformity of the format of various identity information, which is convenient for direct application of subsequent modules. The standardization of identity information includes application name, device to which the application belongs, etc.

[0092] 2) Support the trust value evaluation of access entities. After the verification, integration and necessary conversion of identity information, the accuracy, completeness and standardization of identity information are ensured. It provides reliable identity data support for the subsequent evaluation of the trust value of open domain applications by the airborne application trust value evaluation engine, and provides a solid foundation for access control decisions.

[0093] The functions of the onboard application access policy management module are described as follows:

[0094] 1) Responsible for receiving and processing policy configuration requests from ground staff. Ground staff configure corresponding policy rules in the policy management module based on the security requirements of the application. These rules define in detail the security policies that the application should follow in different scenarios.

[0095] 2) Receive the trust value from the trust value evaluation engine and match it with the access control policy. After receiving the trust value, it will match it with the refined access control policy set stored in the database. The policy set contains the access control policies that should be executed on the open domain application within different trust value intervals.

[0096] In some embodiments, the airborne application access open domain network access control module includes receiving the latest application access control policy information sent by the airborne application trust value evaluation engine from the airborne message middleware module, and performing integrity verification, parsing, conflict detection and processing, loading and implementation on the policy information.

[0097] In some embodiments, the key data of the diversified log includes the name of the onboard application, the application version, the access time and the aircraft communication data link.

[0098] In some embodiments, the onboard application policy management module includes receiving a policy configuration request sent by ground staff through a ground configuration management tool, wherein the policy configuration request includes access control policies corresponding to different trust values ​​of the application.

[0099] In some embodiments, the onboard application policy management module is also used to update the access policy and notify the onboard application trust value evaluation engine module of the access policy update message.

[0100] The above is only a preferred embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present application shall be included in the protection scope of the present application. The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and variations can be made without departing from the technical principles of the present application, and these improvements and variations should also be regarded as the protection scope of the present application.

Claims

1. A method for dynamic access control of airborne applications based on a zero-trust mechanism, characterized in that: The method comprises: S1: Configure corresponding access control policies under different trust value intervals; S2: The airborne application open domain / avionics domain log management module receives audit logs related to other open domain aircraft and equipment, avionics domain applications and systems, and open domain network access control modules and access entities, and performs standardized processing on the audit logs; S3: The airborne application open domain / avionics domain log management module sends the standardized logs and stores them into the airborne message middleware module according to message classification; S4: asynchronously consumes classified log messages from the onboard message middleware module and extracts key parameters from the log messages; S5: dynamically evaluate the trust value of the application using a preset trust value evaluation rule or algorithm according to the key parameters extracted in S4; S6: According to the trust value evaluation result obtained in S5 and the access control policy configured in S1, obtain the corresponding access policy under the trust value; S7: sending the corresponding access policy under the trust value obtained in S6 to the open domain network access control unit through the message middleware, and the open domain network access control unit performs access control on the access request according to the access policy; S8: When a new access or new operation is performed on the application, S2-S7 are repeated to complete the continuous dynamic access control of the onboard application.

2. The method for dynamic access control of airborne applications based on zero trust mechanism according to claim 1, characterized in that: The access control policy includes granting of access rights, partial granting of access rights and denial of access rights; the access control policy is stored in a structured data format.

3. The method for dynamic access control of airborne applications based on zero trust mechanism according to claim 1, characterized in that: The standardization process includes preprocessing the log information, cleaning the log information, and unifying the data format of the log information.

4. The method for dynamic access control of airborne applications based on zero trust mechanism according to claim 1, characterized in that: The S7 includes: Perform integrity check on received policy data; Parse and verify the correctness of the received policy data; Detect and resolve conflicts in the parsed policy data; Load and implement policy data.

5. An airborne application dynamic access control system based on a zero-trust mechanism, characterized in that: The system is used to implement the control method according to any one of claims 1 to 4, comprising: The airborne application open domain / avionics domain log management module is used to receive audit logs related to other aircraft or equipment in the open domain and airborne applications in the avionics domain, and to extract key data, clean useless data, and normalize the log format of the diversified logs; Onboard message middleware module for asynchronously receiving and processing normalized log messages; The onboard application trust value evaluation engine module is used to asynchronously consume the classified audit logs in the message middleware, and dynamically evaluate the trust status of the application through the trust value evaluation algorithm combined with the identity information of the application; An airborne application access control unit module for open domain network access, used to receive, verify, parse, load and implement access control policies; The onboard application policy management module is used to receive policy configuration requests, parse, verify and store access control policies, and is responsible for matching application trust values ​​with corresponding access control policies; The airborne application unified identity management module is used to receive, standardize and structure the application identity information, and support the trust value evaluation of the application.

6. The airborne application dynamic access control system based on zero trust mechanism according to claim 5, characterized in that: The key data of the diversified logs include the name of the onboard application, the application version, the access time and the aircraft communication data link.

7. The airborne application dynamic access control system based on zero trust mechanism according to claim 5, characterized in that: The airborne application access open domain network access control module includes receiving the latest application access control policy information sent by the airborne application trust value evaluation engine from the airborne message middleware module, and performing integrity verification, analysis, conflict detection and processing, loading and implementation on the policy information.

8. The airborne application dynamic access control system based on zero trust mechanism according to claim 5, characterized in that: The onboard application policy management module includes receiving a policy configuration request sent by ground staff through a ground configuration management tool, wherein the policy configuration request includes access control policies corresponding to different trust values.

9. The airborne application dynamic access control system based on zero trust mechanism according to claim 5, characterized in that: The onboard application policy management module is also used to update the access policy and notify the onboard application trust value evaluation engine module of the access policy update message.

Images