A device for selecting a sequence of binary data intended to be executed by computing means.

Abstract

This device for selecting (4) a sequence of binary data intended to be executed by computing means (8) comprises: - acquisition means (5) capable of receiving at least one first piece of data (D1); - storage means (6) capable of storing a plurality of binary data sequences; and - selection means (7) capable of extracting one of the binary data sequences from the storage means (6) based on said at least one first piece of data (D1), said selected binary data sequence being intended to be executed by said computing means (8). Figure for the abbreviation: Fig 1

Description

Title of the invention: Device for selecting a sequence of binary data intended to be executed by calculation means Technical field

[0001] The present invention relates to aircraft, and relates more particularly to devices for selecting binary data sequences intended to be carried on board such aircraft. State of the prior art

[0002] During a flight phase of an aircraft near certain strategic locations such as urban areas or airports, the aircraft continuously exchanges data with a set of ground stations, called external electronic systems.

[0003] For example, the ground station recovers in real time and without contact, alarms and values ​​of physical quantities acquired by different sensors of the aircraft, in order to transmit them to a maintenance center.

[0004] This then makes it possible to anticipate the checks and maintenance work to be carried out when the aircraft lands.

[0005] The ground station also constantly transmits, without contact, meteorological data to the aircraft or any information at the request of the crew on board said aircraft.

[0006] The crew, controllers and airlines can therefore carry out a two-way exchange of data in real time and thus ensure the smooth running of the flight and / or reduce maintenance time when the aircraft is on the ground.

[0007] So-called internal data can also be exchanged without contact or by wired connection inside the aircraft.

[0008] More particularly, the aircraft is generally equipped with a plurality of sensors intended to generate useful information to be displayed on the instrument panel of the aircraft.

[0009] Data communication gateways are then installed on board the aircraft to transfer information between the aircraft and an electronic system located outside the aircraft, known as ground equipment, but also between internal electronic systems of the aircraft.

[0010] To do this, the communication gateway, whether wired or contactless, filters the information sent from a transmitter to a receiver.

[0011] It therefore secures unidirectional or bidirectional data flows between two networks of generally heterogeneous trusted domains.

[0012] However, the use of such gateways has certain drawbacks which may cause serious damage to the electronic systems internal and / or external to the aircraft.

[0013] Indeed, avionics components are integrated into an increasingly complex computerized ecosystem, which makes them susceptible to potential cyberattacks.

[0014] Hackers can therefore intercept confidential and / or critical data, or even transmit false information likely to alter the functioning of the receiver.

[0015] Thus, it is advantageous to be able to authorize the execution of certain functions selected specifically based on information received and based on the issues to avoid any data leakage or any deterioration of internal or external equipment.

[0016] To this end, it is proposed to integrate cybersecurity systems on board the aircraft to secure all exchanges on board or with an external electronic system.

[0017] However, the electronic components used to implement this protection are generally commercially available and configured to perform a set of generic functions.

[0018] However, the more active functions there are, the more the number of security breaches is likely to increase.

[0019] There is therefore a need to protect the integrity of data that can be exchanged on board the aircraft or with an external electronic system. Statement of the invention

[0020] In view of the above, the invention therefore has as its subject, according to a first aspect, a device for selecting a sequence of binary data intended to be executed by calculation means.

[0021] The device comprises:

[0022] - acquisition means capable of receiving at least one first piece of data;

[0023] - storage means capable of storing a plurality of data sequences binaries and,

[0024] - selection means capable of extracting one of the binary data sequences storage means as a function of said at least one first data item, said selected binary data sequence being intended to be executed by said calculation means.

[0025] In other words, the environment in which the aircraft is operating is first determined by acquiring at least one first piece of data collected by at least one at least one sensor located inside the aircraft, on its exterior surface or by ground equipment.

[0026] Said at least one first data item can also be acquired by a computer. In other words, the first data item is the result of one or a plurality of calculations involving a plurality of initial variables.

[0027] It is then possible to automatically identify, by analyzing the first data, whether it is recommended, or even necessary, to prohibit and / or authorize the execution of certain functions.

[0028] By way of example, when the functions to be executed concern a gateway for communicating at least a second piece of data from a transmitting system to a receiving system, the selection means extract a first sequence of binary data having the objective, when executed, of leading to the refusal of the transfer of the second piece of data by the gateway if the results of the analysis of the first piece of data recommend it.

[0029] Conversely, when it is advantageous to authorize the transmission of the second data via the communication gateway, the selection means extract a second sequence of binary data different from the first sequence of binary data.

[0030] In this case, the second sequence of binary data makes it possible, when executed by calculation means, to open the communication gateway and therefore to authorize the transfer of the second data from the transmitter to the receiver.

[0031] Advantageously, the selection means are in the form of a logic network of programmable cells.

[0032] Such a network, which comprises circuits composed of freely assemblable elementary logic cells, is commonly called FPGA (for “Field-Programmable Gate Array” in English).

[0033] Since the cells are connected in a generally reversible manner by programming, it is then possible to minimize the number of active functions and thus reduce, or even eliminate, potential security breaches on board the aircraft or ground equipment.

[0034] Preferably, the selection means are in the form of a processing unit or a microcontroller.

[0035] By “processing unit” we mean a processor (CPU for “Processing Unit” according to the Anglo-Saxon term).

[0036] It should be noted that when the device is intended to be embedded in a compact circuit, the processing unit can be replaced by a microcontroller (often abbreviated MCU for “MicroController Unit” in English).

[0037] The processing unit or microcontroller can further be replaced by any electronic device capable of executing machine instructions.

[0038] Preferably, the acquisition means are in the form of a processing unit, a microcontroller or a logic network of programmable cells.

[0039] Advantageously, the acquisition, storage and selection means are coupled by local buses, Ethernet cables or by a shared memory.

[0040] For example, the local buses can be PCI connectors (for “Peripheral Component Interconnect” in English).

[0041] Preferably, the shared memory is a dual-port RAM.

[0042] Dual Ported Random Access Memory (DPRAM) Memory" in English) allows for quasi-simultaneous multiple accesses to input and output.

[0043] The invention further relates to an on-board electronic circuit comprising a device for selecting a sequence of binary data as defined above.

[0044] The invention also relates to an aircraft comprising at least one on-board electronic circuit as defined above.

[0045] The invention also relates to a method for selecting a sequence of binary data intended to be executed by calculation means.

[0046] The method comprises:

[0047] - a step of acquiring at least one first piece of data and,

[0048] - a step of selecting a sequence of binary data from a set of binary data sequences stored as a function of said at least one first data item, said selected binary data sequence being intended to be executed by said calculation means.

[0049] The invention also relates to a computer program comprising instructions which, when the program is executed by a computer, cause the latter to implement the steps of the management method as defined above. Brief description of the drawings

[0050] Other aims, characteristics and advantages of the invention will appear on reading the following description, given solely by way of non-limiting example, and made with reference to the appended drawings in which:

[0051] [Fig.l] schematically illustrates a device for selecting a sequence of binary data and,

[0052] [Fig.2],

[0053] [Fig.3] illustrate two flowcharts of a method for selecting a sequence of binary data implemented by said device according to embodiments of the invention.

[0054] Detailed description of at least one embodiment of the invention

[0055] In [Fig.l] is shown a virtual communication gateway 1 between a first electronic system 2 and a second electronic system 3.

[0056] Such electronic systems 2 and 3 can both be on board an aircraft. These are then internal electronic systems.

[0057] The first electronic system 2 may be in the possession of one of the passengers and has a WLFI antenna which allows it to send a second data item D2 wirelessly to the second electronic system 3, here the WLFI antenna with which the aircraft is equipped.

[0058] In this case, the second data D2 is potentially of malicious origin and therefore likely to alter the second electronic system 3.

[0059] Wireless data transfer can also be bidirectional.

[0060] The second electronic system 3 is then able to send the second data D2 to the first electronic system 2.

[0061] Similarly, the aircraft further communicates with a set of ground stations to transmit to them in real time and without contact the second data D2 via said gateway 1.

[0062] By way of example, the first electronic system 2 comprises a sensor on board the aircraft and intended to send values ​​D2 of a physical quantity to one of the ground stations, here the second electronic system 3.

[0063] The second data D2 will then be transmitted to a maintenance center to anticipate the checks and maintenance work to be carried out on certain components of said aircraft.

[0064] It should be noted that communication between the aircraft and the ground station can be bidirectional.

[0065] The second electronic system 3 then wirelessly sends meteorological data DI to the first electronic system 2 so as to update in real time the meteorological map of the areas that the aircraft must fly over.

[0066] In order to protect the integrity of the second data D2 that can be exchanged between the first electronic system 2 and the second electronic system 3, it is proposed to integrate within the gateway 1 a device 4 for selecting a sequence of binary data so as to manage, in this example, a request to transfer the second data D2.

[0067] Such a device 4 can then be integrated into an on-board electronic circuit and is intended, for example, to open or close the virtual communication gateway 1 as a function of at least a first item of data DI.

[0068] For this purpose, the device 4 comprises acquisition means 5, storage means 6 and selection means 7.

[0069] Such a device 4 is furthermore coupled to calculation means 8 intended to execute at least one sequence of binary data extracted by the selection means 7.

[0070] The acquisition means 5 are capable of receiving said at least one first data item DI coming here from a sensor 9 arranged on board the aircraft.

[0071] In other words, the acquisition means 5 make it possible to determine the environment in which the aircraft is operating.

[0072] To do this, the acquisition means 5 are in the form of a processing unit, a microcontroller or a logic network of programmable cells.

[0073] As for the storage means 6, they are capable of storing a plurality of binary data sequences, each corresponding to a particular environmental situation.

[0074] Of course, each binary data sequence can be replaced in the storage means 6 by any series of characters, which when analyzed, makes it possible to generate a unique and distinct binary data sequence.

[0075] By processing the first data D1, it is then possible to identify whether it is recommended, or even necessary, to close the virtual communication gateway 1 between the first electronic system 2 and the second electronic system 3.

[0076] The storage means 6 are therefore coupled to the selection means 7 so that they can extract one of the binary data sequences as a function of the first data item DL.

[0077] Thus, when it is advantageous to close the virtual communication gateway 1, the selection means 7 extract a first sequence of binary data, which when executed, leads to the refusal of the transfer of the first data D1 by the gateway 1.

[0078] Conversely, when it is recommended to authorize the transmission of the first data item D1 via the gateway 1, the selection means 7 extract a second sequence of binary data different from the first sequence of binary data.

[0079] For this purpose, such selection means 7 may be in the form of a processing unit, a microcontroller or a logic network of programmable cells.

[0080] Furthermore, as soon as the binary data sequence is selected by the selection means 7, the latter are configured to transmit the selected binary data sequence to the calculation means 8 to execute it so as to authorize or prohibit the transfer of said second data D2.

[0081] To do this, the calculation means 8 are generally in the form of a logic network of programmable cells.

[0082] Thus, since the cells are connected in a generally reversible manner by programming, the number of active functions is minimized and potential security breaches are then reduced, or even eliminated, when the virtual gateway 1 is open.

[0083] Reference is made to Figures 2 and 3 which illustrate the method of selecting a sequence of binary data implemented by the device 4.

[0084] With reference to [Fig.2], the selection method begins with a step E1, during which the acquisition means 5 recover the first data DI from the sensor 9.

[0085] In this example, the sensor 9 is a switch capable of indicating whether the weight of the aircraft rests on its wheels (commonly called WoW for “Weight on Wheels” in English).

[0086] In other words, the first DI data reveals whether the aircraft is in flight phase or on the ground.

[0087] Thus, if the aircraft is on the ground, the first data D1, which is here in binary form, is equal to 1.

[0088] In step E2, the selection means 7 analyze the first data D1 and identify that the aircraft is on the ground.

[0089] Then, during step E3, they extract a binary data sequence from the storage means 6, which when executed by the calculation means 8, authorizes the transfer of the second data D2 from the aircraft to the ground station.

[0090] Finally, in step E4, the calculation means 8 send the necessary control signals to input-output ports of the gateway 1 so as to allow the exchange of data between the first electronic system 2 and the second electronic system 3.

[0091] However, when the first data item D1 indicates that the environmental situation of the aircraft is that it is in the flight phase at step E5 illustrated in [Fig.3], it is advantageous to refuse the transfer of the second data item D2 by the gateway 1.

[0092] In this case, the second data D2 is potentially of malicious origin and therefore likely to alter the electronic system of the aircraft. The first data D1, in binary form, is then equal to 0.

[0093] In step E6, the selection means 7 analyze the first data D1 and identify that the environmental situation of the aircraft corresponds to a flight phase.

[0094] Then, in step E7, the selection means 7 extract a sequence of binary data from the storage means 6, which when executed by the calculation means 8, leads to the closing of the gateway 1.

[0095] Thus, in step E8, the calculation means 8 send the necessary control signals to said input-output ports of the gateway 1 so as to prohibit the exchange of data between the first electronic system 2 and the second electronic system 3.

[0096] There are also other environmental situations intended to generate first DI data which lead the selection means 7 to extract a specific binary data sequence which is intended to be executed by the calculation means 8.

[0097] For example, when the first data DI acquired by the acquisition means 5 corresponds to the series of characters “TAKE_OFF”, the aircraft is then in the takeoff phase.

[0098] The selection means 7 therefore extract a sequence of binary data, named “OPERATIONAL_TAKE_OFF” intended to authorize the execution of the functions necessary for the aircraft when it is in the flight phase.

[0099] Similarly, when the first data DI acquired by the acquisition means 5 corresponds to the series of characters “CLIMB”, the aircraft is in the climb phase.

[0100] The selection means 7 extract a sequence of binary data, named “OPERATIONAL_CLIMB” intended to authorize the execution of the functions necessary for the aircraft when it is in the climb phase.

[0101] Of course, such an example is applicable to all phases of flight of an aircraft.

[0102] The environmental situation may also concern the field of authentication.

[0103] For example, when the first data DI acquired by the acquisition means 5 is a password associated with a specific user, here “MAINTAINER”, this means that a maintainer wishes to authenticate himself to a system on board the aircraft.

[0104] The selection means 7 extract a sequence of binary data, named “USER_MAINTAINER” intended to authorize the execution of specific functions, by the calculation means 8, when the user is the maintainer.

[0105] Similarly, when the first DI data acquired corresponds to a password entered by a user of the “AIRLINE” type, this means that the flight personnel wishes to authenticate themselves to said system on board the aircraft.

[0106] The selection means 7 extract a sequence of binary data, named “USER_AIRLINE” intended to authorize the execution of specific functions by the calculation means 8 when the user is the flight crew.

Claims

Claims

1. Device (4) for selecting a binary data sequence intended to be executed by calculation means (8), characterized in that the device (4) comprises: - acquisition means (5) capable of receiving at least one first data item (D1); - storage means (6) capable of storing a plurality of binary data sequences and, - selection means (7) capable of extracting one of the binary data sequences from the storage means (6) as a function of said at least one first data item (D1), said selected binary data sequence being intended to be executed by said calculation means (8) to open or close a virtual communication gateway as a function of said first data item.

2. Management device according to claim 1, in which the selection means (7) are in the form of a logic network of programmable cells.

3. Device according to claim 1 or 2, wherein the selection means (7) are in the form of a processing unit or a microcontroller.

4. Device according to any one of claims 1 to 3, in which the acquisition means (5) are in the form of a processing unit, a microcontroller or a logic network of programmable cells.

5. Device according to any one of claims 1 to 4, in which the acquisition (5), storage (6) and selection (7) means are coupled by local buses, Ethernet cables or by a shared memory.

6. The device of claim 5, wherein the shared memory is a dual-port RAM.

7. On-board electronic circuit comprising a device for selecting a sequence of binary data (4) according to any one of claims 1 to 6.

8. Aircraft comprising at least one on-board electronic circuit according to claim 7.

9. Method for selecting a sequence of binary data intended to be executed by calculation means (8), characterized in that it comprises: - a step of acquiring (E1, E5) at least one first data item (D1) and, - a step of selecting (E3, E7) a sequence of binary data from a set of sequences of binary data stored as a function of said at least one first data item (D1), said selected sequence of binary data being intended to be executed by said calculation means (8) to open or close a virtual communication gateway as a function of said first data item.

10. A computer program comprising instructions which, when the program is executed by a computer, cause the computer to implement the steps of the selection method according to claim 9.