Method and apparatus for adaptive encryption and power management according to energy state and data classification

Abstract

The present disclosure relates to a method and an apparatus for adaptive encryption of data and power management in an environment requiring data security and efficient energy management. The method according to one embodiment of the present disclosure comprises: receiving data processed in an aircraft operation process; determining a security level on the basis of a data type; and determining a data priority on the basis of response speed importance. In addition, an energy state is determined on the basis of remaining battery capacity and expected energy consumption to a destination, and an encryption method to be applied to the data is determined on the basis of the security level and the energy state. Furthermore, a CPU power management mode is determined on the basis of the encryption method and the priority, and when consistency is satisfied, computational resource control including operating frequency and voltage control of the CPU, encryption computation scheduling, computational resource allocation, and the like is performed. According to the present disclosure, data security, processing performance, and energy efficiency can be simultaneously secured, and stable operation can be supported even in a limited energy source environment.

Description

Method and apparatus for adaptive encryption and power management based on energy state and data classification

[0001] The present disclosure relates to the field of data security and power management technology. More specifically, it relates to a method and apparatus capable of simultaneously ensuring security and energy efficiency by adaptively selecting an encryption method based on the energy status and data classification of a UAM / AAM airframe, and controlling a CPU power management mode by considering the computational load and energy status according to the selected encryption method.

[0002] The following description merely provides background information related to the present embodiment and does not constitute prior art.

[0003] Urban Air Mobility (UAM) or Advanced Air Mobility (AAM) is a next-generation transportation system that performs short-distance aerial transport within cities or between adjacent regions using aircraft such as electric vertical take-off and landing (eVTOL) aircraft. These UAM / AAM systems are operated through advanced avionics, real-time communication between aircraft or between aircraft and the ground, cloud-based data interoperability, and autonomous navigation capabilities.

[0004] Therefore, the collection, processing, and transmission of various data are essential in UAM / AAM environments, and securing data security to defend against cyber attacks such as data leakage or tampering is critical.

[0005] Generally, data security technology can be implemented by classifying data into various grades based on its nature or sensitivity and applying security policies corresponding to each grade. For example, data can be categorized into various security grades, and different levels of encryption techniques or processing methods may be applied depending on this classification.

[0006] However, conventional technology had limitations in that data encryption or security processing methods were primarily performed based on uniform or fixed policies. This resulted in problems such as difficulty in providing differentiated responses based on differences in data importance or sensitivity, as well as unnecessary computation and power consumption.

[0007] Meanwhile, UAM / AAM aircraft are characterized by limited energy resources because they use electric batteries as their primary power source. The flight range of the aircraft is directly constrained by battery capacity, and the computational load generated during communication, navigation, onboard device operation, and data processing also increases energy consumption. Therefore, comprehensive energy management is required that encompasses not only flight control and propulsion efficiency but also data processing and security computations.

[0008] However, in conventional technology, security functions such as data encryption are performed independently of the energy state of the gas, which presented a problem in that it was difficult to simultaneously ensure both security and energy efficiency.

[0009] The present disclosure aims to solve the aforementioned problems and provides a method and apparatus for simultaneously ensuring data security and energy efficiency in an operation environment where energy sources are limited, such as an AAM airframe.

[0010] The present disclosure aims to provide a technology capable of adaptively determining an encryption method and a CPU power management mode by comprehensively considering the security class and priority of data, the energy state of the gas, and the CPU load, and controlling the operation and allocation of computational resources according to the result.

[0011] The problems that the present invention aims to solve are not limited to those mentioned above, and other unmentioned problems will be clearly understood by a person skilled in the art from the description below.

[0012] According to one aspect of the present disclosure, a method for performing adaptive encryption of data and power management in an AAM aircraft comprises: receiving data processed during the operation of the aircraft; determining a security level of the data based on the type of the received data; determining a priority of the data based on the importance of the response speed required for processing the data; determining an energy state of the aircraft based on the remaining battery level of the aircraft and the expected energy consumption required for operation to a destination; determining an encryption method to be applied to the data based on the security level and the energy state; and determining a CPU power management mode based on the encryption method and the priority.

[0013] According to another aspect of the present disclosure, an apparatus for performing adaptive encryption of data and power management in an AAM aircraft comprises: at least one memory for storing instructions; and at least one processor configured to execute said instructions, wherein the at least one processor is configured to receive data processed during the operation of the aircraft, determine a security class of said data based on the type of said data, determine a priority of said data based on the importance of the response speed required for processing said data, determine an energy state of said aircraft based on the remaining battery level of said aircraft and the expected energy consumption required for operation to a destination, determine an encryption method to be applied to said data based on said security class and said energy state, and determine a CPU power management mode based on said encryption method and said priority.

[0014] According to an embodiment of the present disclosure, by adaptively selecting an encryption method based on energy status and data classification (security class), a flexible level of security depending on the situation can be secured.

[0015] In addition, by controlling the processor's power management mode considering the energy state of the gas and the computational load, limited energy resources can be utilized efficiently.

[0016] Furthermore, by integrating data security processing and energy management, the possibility of UAM / AAM aircraft operation disruptions can be reduced and operational stability improved.

[0017] The effects of the present disclosure are not limited to those mentioned above, and other unmentioned effects will be clearly understood by a person skilled in the art from the description below.

[0018] Figure 1 is a diagram illustrating connectivity in a UAM / AAM environment.

[0019] Figure 2 is a diagram illustrating the network and system structure of a UAM / AAM airframe.

[0020] Figure 3 is a diagram illustrating a data link system for internal and external communication of a UAM / AAM airframe.

[0021] Figure 4 is a diagram illustrating the data flow of a UAM / AAM airframe based on connectivity and communication interfaces.

[0022] Figure 5 is a diagram illustrating the relationship between the UAM / AAM airframe, the attacker, and the external entity.

[0023] FIG. 6 is a block diagram illustrating a process for determining an encryption method and a CPU energy policy based on the classification (security grade), priority, and energy status of data processed during the operation of an AAM aircraft according to one embodiment of the present disclosure.

[0024] FIG. 7 is a flowchart of a method for adaptive encryption of data and power management in an AAM airframe according to one embodiment of the present invention.

[0025] FIG. 8 is a block diagram schematically illustrating an exemplary computing device that can be used to implement a device for performing a method according to the present disclosure.

[0026] Some embodiments of the present disclosure are described in detail below with reference to exemplary drawings. It should be noted that in assigning reference numerals to the components of each drawing, the same components are given the same reference numeral whenever possible, even if they are shown in different drawings. Furthermore, in describing the present disclosure, if it is determined that a detailed description of related known components or functions could obscure the essence of the present disclosure, such detailed description is omitted.

[0027] In describing the components of the embodiments according to the present disclosure, symbols such as first, second, i), ii), a), b), etc., may be used. These symbols are intended only to distinguish the components from other components, and the essence, order, or sequence of the components is not limited by the symbols. When a part in the specification is described as 'comprising' or 'having' a component, this means that, unless explicitly stated otherwise, it does not exclude other components but may include additional components.

[0028] The detailed description set forth below, together with the accompanying drawings, is intended to describe exemplary embodiments of the present disclosure and is not intended to represent the only embodiment in which the present disclosure may be practiced.

[0029] Figure 1 is a diagram illustrating connectivity in a UAM / AAM environment.

[0030] Referring to Fig. 1, in order to provide not only safe and accurate flight operations but also broadband services on board, the UAM / AAM aerial vehicle communicates with vertiports, ground control systems (GCS), UAM traffic management (UTM), air traffic control (ATC), over-the-air (OTA) update servers, satellites, and other aircraft.

[0031] UAM / AAM aerial vehicles can be classified into CTOL (Conventional Take Off and Landing), STOL (Short Take Off and Landing), and VTOL (Vertical Take Off and Landing) depending on the length of the runway required for takeoff and landing. CTOL is a traditional type of aircraft that requires a long runway for takeoff and landing, whereas STOL requires a relatively short runway, and VTOL can take off and land without a runway.

[0032] eVTOL (Electric Vertical Take-off and Landing) is a new type of aircraft that can be used for UAM or AAM (Advanced Air Mobility) services in urban areas. eVTOLs are characterized by vertical take-off and landing capabilities, the electrification of lift and rotor drives, and automatic, semi-automatic, or remote control functions.

[0033] Applications of UAM / AAM services may include passenger transport (including air taxis), emergency purposes (e.g., rescue, first aid), leisure activities, and cargo transport services. Aircraft operated unmanned or via remote control for specific purposes, such as cargo transport, atmospheric research, or surveillance, may be classified as Unmanned Aircraft Systems (UAS).

[0034] eVTOLs can use various types of communication links, such as air traffic communication, ADS-B (Automatic Dependent Surveillance-Broadcast), V2V (Vehicle to Vehicle), GNSS (Global Navigation Satellite System), satellite communication, cellular connectivity, Wi-Fi, and C2 (Command and Control), to provide safe and accurate flight operations and broadband services on board.

[0035] Air traffic communication can be used to prevent collisions between aircraft and collisions between aircraft and obstacles within the control area, and to promote and maintain the smooth and orderly flow of air traffic.

[0036] ADS-B can be used for air traffic control purposes to broadcast aircraft location information to other aircraft and air traffic control using the VHF (Very High Frequency) band.

[0037] V2V (Vehicle to Vehicle) can be used for communication between aircraft to share information and prevent collisions using mobile networks (e.g., cellular networks).

[0038] GNSS can be a collective term for worldwide positioning, navigation, and time determination functions provided by one or more satellites. GNSS can be augmented by ground stations or geostationary satellites to improve integrity and positional accuracy.

[0039] Satellite communication can be used to provide broadband services on board an aircraft using satellite communication channels.

[0040] Cellular connectivity can be used to provide broadband services on board an aircraft and to provide Command and Control (C2) communication using mobile network channels.

[0041] Wi-Fi can be used to provide broadband services on board aircraft via satellite communication or mobile networks.

[0042] C2 (Command and Control) can be used as a data link between a remotely-piloted aircraft and a remote pilot station for flight management.

[0043] Examples of various communication link types and use cases are shown in Table 1.

[0044]

[0045] Figure 2 is a diagram illustrating the network and system structure of a UAM / AAM airframe.

[0046] The surface of the UAM / AAM airframe features various types of antennas for communicating with external entities. Inside the UAM / AAM airframe, there is a system structure connected to a data bus.

[0047] Referring to FIG. 2, the UAM / AAM airframe is equipped with various types of antennas on its surface to communicate with satellites, other UAM / AAM aircraft, air traffic control stations, maintenance computers, cellular networks, and GCS.

[0048] The internal systems of a UAM / AAM airframe may include a data bus, infotainment system, data link system, storage system, flight control system, autonomous sensors, propulsion system, emergency system, landing gear system, power management system, avionics system, safety manager terminal, and maintenance panel. The safety manager of the UAM / AAM airframe can monitor or access the airframe's systems.

[0049] Data buses can be used for onboard networks to transmit large amounts of data between various systems.

[0050] The infotainment system can be used to provide in-room entertainment services.

[0051] The data link system can be used to provide communication functions both inside and outside the UAM / AAM aircraft. The data link system is communicationally connected to the pilot terminal to transmit or receive various information.

[0052] The storage system can be used to manage various storage systems used in gases.

[0053] The flight control system can be used for flight control, connecting links, and operating mechanisms necessary to control the aircraft's direction during flight.

[0054] Autonomous sensors can be used for various cameras and sensors inside and outside the aircraft.

[0055] The propulsion system can be used to control aircraft components.

[0056] The emergency system can be used to provide safety features for passengers and emergency situations.

[0057] The landing gear system can be used for the takeoff and landing of an aircraft.

[0058] Power management systems can be used for power control of aircraft.

[0059] Avionics systems can consist of system integration, data logging, navigation assistance, and collision avoidance functions.

[0060] The maintenance panel can be used for the maintenance, diagnosis, and downloading of flight logs and software updates.

[0061] Figure 3 is a diagram illustrating a data link system for internal and external communication of a UAM / AAM airframe.

[0062] The data link system is an important component for providing communication functions in the airframe and consists of an internal communication subsystem and an external communication subsystem as shown in FIG. 3.

[0063] The gateway mediates internal and external communication.

[0064] For internal communication, CAN (Controller Area Network) and Ethernet can be used. For stable and low-speed communication, CAN can be used to transmit flight control data and aircraft status information to the FCS (Flight Control System). On the other hand, to transmit high-bandwidth data, Ethernet can be used for communication with the infotainment system.

[0065] For external communication, it may consist of a gateway and various modems such as cellular modems, C2 modems and satellite communication modems, GNSS data receivers, air traffic transceivers, and maintenance ports for diagnosing the aircraft's internal systems.

[0066] Figure 4 is a diagram illustrating the data flow of a UAM / AAM airframe based on connectivity and communication interfaces.

[0067] The data link system transmits multimedia data to aircraft passengers via internal Ethernet.

[0068] The data link system can exchange update packages and update report-related data with an OTA (Over The Air programming) server, exchange GNSS data and vehicle control / status commands with satellites, exchange flight information and aircraft identification information with Veriport / ATC, exchange requests and responses for diagnosis with maintenance engineers, exchange flight information with other vehicles, and exchange aircraft control commands and aircraft status information with the GCS (Ground Control System).

[0069] Figure 5 is a diagram illustrating the relationship between the UAM / AAM airframe, the attacker, and the external entity.

[0070] Referring to FIG. 5, an attacker can eavesdrop on communication data between a vehicle and an external entity. Consequently, UAM control commands, status information, update packages, etc., may be exposed. This can be used to obtain personal data or for further attacks. The vehicle may include a UAM / AAM airframe, vehicle, drone, robot, etc.

[0071] In the following specification, the term 'AAM' is used as a higher-level concept that includes 'UAM', and unless otherwise noted, it is understood to refer collectively to both.

[0072] The major security issues to consider in an AAM environment are as follows.

[0073] Cyber ​​Attacks: Unmanned aerial vehicles and network-based systems are vulnerable to cyber attacks such as data tampering, hacking, and abnormal control, so protection against them is necessary.

[0074] Safety of Unmanned Aerial Vehicles: Due to the nature of AAM aircraft operating in the air, preparations are required for safety issues in the event of problems such as system failure, sensor malfunction, communication loss, or communication errors.

[0075] Flight Control and Management: When multiple aircraft operate in an urban area, an integrated control and management system is required, including collision avoidance, flight trajectory management, and emergency response.

[0076] Privacy Protection: As location information and various personal data from UAM / AAM users may be collected, compliance with relevant regulations and a privacy protection system must be established. Here, a UAM / AAM user refers to an entity that directly utilizes UAM / AAM services or interacts with related systems. For example, this may include not only passengers on board the aircraft but also pilots (including remote pilots), flight managers, and users of ground control systems.

[0077] Physical Security: The aircraft itself and the ground base facilities supporting it need to be protected from physical attacks such as illegal intrusion, theft, and terrorism.

[0078] Infrastructure Security: As ground infrastructure for UAM / AAM operations can be exposed to cyber and physical attacks, security procedures and systems are required.

[0079] Compliance with laws and regulations: With the introduction of new air transport methods, appropriate laws and regulations, including safety and security regulations, need to be established.

[0080] Meanwhile, Advanced Air Mobility (AAM) relies heavily on data for navigation, communication, and overall system functions. Unlike ground vehicles, AAM operates in a three-dimensional airspace, so accurate and reliable data, including real-time updates on airspace conditions, weather information, and the locations of other aircraft, is required for safe and efficient operation. Therefore, ensuring data security is essential due to the unique characteristics and challenges of AAM.

[0081] In particular, for the safe operation of AAM aircraft, communication with external devices is essential during processes such as route planning, guidance, obstacle detection and avoidance, and navigation; therefore, ensuring data confidentiality and integrity during these processes is critical. Data confidentiality prevents unauthorized entities from accessing information, while integrity guarantees that data has not been tampered with or altered during transmission. Various security techniques can be employed to ensure this, which can be broadly categorized into encryption techniques and integrity verification techniques.

[0082] Encryption techniques to ensure data confidentiality include symmetric encryption, asymmetric encryption, and hybrid encryption.

[0083] Symmetric encryption is a method in which the sender and receiver perform encryption and decryption using the same key; it offers fast computation speeds and is efficient for processing large volumes of data. Symmetric encryption can be implemented in the form of block ciphers or stream ciphers. Representative symmetric block cipher algorithms include DES (Data Encryption Standard), AES (Advanced Encryption Standard), SEED, HIGHT (HIGh security and light weight HT), IDEA (International Data Encryption Algorithm), RC5, and ARIA, each of which differs in security strength and computational efficiency. A comparison of major symmetric block cipher algorithms is shown in Table 2.

[0084]

[0085] Among these, AES supports a 128-bit block size and 128 / 192 / 256-bit key lengths, and is widely adopted as an international standard due to its excellent security and efficiency. For example, a comparative analysis of processing speeds by symmetric block cipher algorithm and file size confirmed that AES-256 demonstrated superior processing speed compared to other block cipher methods such as SEED, DES, and 3DES under identical conditions (e.g., files ranging from 64MB to 3GB). This demonstrates that AES-family algorithms are particularly advantageous in environments where computational resources and energy are limited. However, symmetric encryption has limitations, such as security vulnerabilities in the key distribution process and the potential threat to the entire system if the key is exposed.

[0086] Asymmetric encryption is a method that uses a public key and a private key, and examples include RSA, ECC (Elliptic Curve Cryptography), and ElGamal. Asymmetric encryption has strengths in key exchange, sender authentication, and digital signatures. In particular, ECC can provide high security strength with shorter key lengths compared to RSA, making it advantageous in environments with limited computational resources. However, asymmetric encryption is unsuitable for encrypting large volumes of data due to its high computational complexity and slow speed.

[0087] Hybrid encryption is a method that combines the efficiency of symmetric encryption with the security of asymmetric encryption. Specifically, actual data is encrypted using a symmetric key such as AES, while the session key used is encrypted using an asymmetric key such as RSA or ECC and exchanged securely. This enables fast data processing and secure key exchange simultaneously, and it is a structure utilized in protocols such as SSL / TLS.

[0088] Verification techniques for ensuring data integrity include hash functions, Message Authentication Codes (MACs), and digital signatures. Hash functions generate a fixed-length hash value from input data to verify whether the data has been tampered with or forged; representative examples include SHA-256, SHA-512, and SHA-3. Message Authentication Codes simultaneously guarantee data integrity and sender authentication through an authentication tag generated using a secret key shared by the sender and receiver and the message. Digital signatures provide data integrity and sender authentication by having the sender generate an asymmetric key-based digital signature and the receiver verify it; representative examples include RSA signatures and ECDSA (Elliptic Curve Digital Signature Algorithm).

[0089] As encryption and integrity verification techniques possess distinct characteristics in terms of security strength, computational efficiency, and energy consumption, they must be appropriately selected and applied in environments with limited energy and computational resources, such as UAM / AAM aircraft, by comprehensively considering factors like data classification and response speed requirements. Furthermore, the data encryption and integrity verification processes incur additional computational load and energy consumption beyond the energy already used for conventional flight control and propulsion. Since AAM aircraft operate on limited battery-based energy resources, flight range and duration may fluctuate depending on the remaining energy status, and it may be necessary to change flight modes in certain cases. Therefore, it is essential to ensure a balance between security and energy efficiency by performing data security calculations while comprehensively considering the aircraft's energy status.

[0090] Embodiments of the present disclosure will be described with reference to FIGS. 6 and FIGS. 7.

[0091] The present disclosure is based on the need to simultaneously ensure data security and energy efficiency in environments where energy sources are limited, such as in AAM airframes. Conventional technologies have limitations in that data encryption and energy management are performed separately, making it difficult to respond flexibly to changes in data importance or energy status. As a result, there have been problems such as unnecessary computation and power consumption, or conversely, a failure to ensure the required level of security.

[0092] Accordingly, the present disclosure classifies data processed during the operation of an aircraft according to importance, sensitivity, etc., and adaptively selects an encryption method by comprehensively considering the classification results (security level) and the energy status of the aircraft. By controlling the processor's power management mode by reflecting the expected computational load and data priority according to the selected encryption method, limited resources can be utilized efficiently.

[0093] Although this disclosure is described primarily in the context of an AAM environment, this is merely for the convenience of explanation, and it can be flexibly applied to various application environments where energy management and data security are required simultaneously, such as electric vehicles, drones, and IoT devices.

[0094] FIG. 6 is a block diagram illustrating a process for determining an encryption method and a CPU energy policy based on the classification (security grade), priority, and energy status of data processed during the operation of an AAM aircraft according to one embodiment of the present disclosure.

[0095] Here, 'processed data' is a concept encompassing all data generated, transmitted, stored, and analyzed during the operation of the aircraft, and includes, for example, (i) data generated by various sensors, (ii) data transmitted through communication with external entities such as base stations and control systems, (iii) data stored in onboard storage devices, and (iv) data analyzed by flight control modules or security modules.

[0096] Data Type

[0097] As used in this specification, 'data type' refers to a category classified according to the nature or source of all data required for the operation of an AAM aircraft.

[0098] Referring to FIG. 6, data processed during the operation of an AAM aircraft is classified into data types such as flight, control and traffic, environment, communication, passenger and reservation, legal and regulatory, security, and infrastructure. However, the above data types are merely examples to aid in understanding the present invention and may be defined in various ways depending on variations of the embodiments.

[0099] Data Classification

[0100] As used in this specification, 'data classification' refers to a security level classified according to importance and sensitivity based on the data type. Here, importance refers to the degree of impact the data has on the safety or efficiency of AAM aircraft operations, and sensitivity refers to the degree of risk that may arise in terms of information protection if the data is accessed, leaked, or altered without authorization.

[0101] Data classification can be defined, for example, by four security levels: Confidential (Level 4), Private (Level 3), Sensitive (Level 2), and Public (Level 1). In this case, Confidential data (Level 4) represents the highest security level, while Public data (Level 1) represents the lowest. However, this classification is merely an example, and depending on the importance of the data, it may be simplified to three or two security levels. For instance, three security levels can be defined as Confidential / Private / Public or Confidential / Sensitive / Public, while two security levels can be defined as Confidential / Public or Private / Public. Furthermore, Personal data does not merely have a hierarchical relationship in terms of importance compared to Confidential or Sensitive data; rather, it possesses an independent nature as personal information itself.

[0102] Confidential data is data requiring the highest level of security and may relate to types of flight and control data, such as aircraft attitude control data, flight path planning, and remote control commands with ground control centers.

[0103] Private data refers to personally identifiable information (PII), such as passenger names, contact information, reservation records, and payment accounts, and is primarily related to passenger and reservation data types.

[0104] Sensitive data is data for which security measures are recommended, and may include payment information, Energy Storage System (ESS) information, vertiport operation data, and flight logs, and may be related to environmental, infrastructure, and communication data types.

[0105] Public data refers to publicly accessible data, which includes flight information such as flight names, availability, departure and arrival locations, and flight times, and may be related to passenger and reservation data types or environmental data types.

[0106] Appropriate security objectives can be established according to each security level. For example, confidential data may require confidentiality, integrity, availability, non-repudiation, authentication, authorization, and accountability. Personal or sensitive data may require confidentiality, integrity, availability, authentication, and authorization. For public data, only integrity and availability may be considered as basic security objectives.

[0107] The security level of each data and the corresponding security objectives may be adjusted according to the system security policy or the judgment of the security manager.

[0108] Data Priority

[0109] Data priority refers to a concept classified based on the importance of response speeds required during data transmission or processing, and is used to efficiently allocate CPU resources and energy policies.

[0110] Data priority can be set by data type and may not necessarily be proportional to data importance (security level). For example, data with a high security level may not necessarily require immediate processing, and conversely, data with a low security level may require urgent transmission. However, depending on a variation of the embodiment, data priority may also be set by security level.

[0111] Priorities can be defined in three levels, for example: High, Normal, and Low. High priority refers to data requiring immediate processing and response, such as flight control commands, collision avoidance warnings, and emergency landing signals. Normal priority refers to data requiring a moderate response speed, which may include route updates or passenger notification data. Low priority refers to data where a certain level of delay is permitted, such as in-flight entertainment streaming or over-the-air (OTA) software update packages.

[0112] The priority of each data may be adjusted according to system security policies, flight regulations, or the judgment of the security manager.

[0113] Data Security Algorithm

[0114] Symmetric encryption, asymmetric encryption, or hybrid encryption methods may be used to ensure data confidentiality. In addition, techniques such as hash functions, message authentication codes, and digital signatures may be used to ensure data integrity.

[0115] Energy Status

[0116] The energy state in the present disclosure refers not merely to an energy level (Energy Level, 0 to 10) that quantifies the remaining battery capacity, but to an operational capability indicator determined by considering (i) the current remaining battery capacity and (ii) the estimated energy consumption required for operation to a destination or landing point. The energy consumption required for operation to a destination can be predicted based on the current operational phase and the remaining segment by obtaining power demand models for the takeoff, climb, cruise, descent, and landing phases included in the flight plan, and may vary depending on weather conditions (e.g., wind direction, wind speed, air density, etc.) and airframe conditions (e.g., weight, propulsion system efficiency, battery characteristics, etc.).

[0117] Energy states can be classified into four stages, for example: High (Normal), Medium (Economy), Low (Low Power), and Empty (Insufficient).

[0118] For example, if there is sufficient remaining energy to operate stably to the destination, it is classified as High (Normal); if operation is possible to a certain extent but unnecessary functions must be restricted, it is classified as Medium (Economy). Additionally, if continuous operation is limited and only minimal data collection and reception are possible, it is classified as Low (Low Power); and if reaching the destination is impossible, requiring the suspension of critical operations and allowing only limited operation, it is classified as Empty (Insufficient).

[0119] Examples of detailed security policies and operation modes by energy state are shown in Table 3.

[0120]

[0121] Encryption Method Selection

[0122] The encryption method to be applied to each data is determined based on the security level and energy state. For example, examples of encryption methods applied according to the security level of the data and the energy state of the gas are shown in Table 4.

[0123]

[0124] CPU Energy Policy Selection

[0125] CPU energy policy refers to the CPU Power Management Mode used to control the CPU's operating frequency and power consumption methods. In other words, it is an operating mode designed to balance CPU performance and power consumption, determined by comprehensively considering factors such as the selected encryption method, CPU load, and data priority.

[0126] The CPU energy policy according to the embodiment of the present disclosure is not maintained at a fixed level, but is dynamically adjusted according to operating conditions and data characteristics, thereby enabling the simultaneous securing of performance and energy efficiency.

[0127] CPU energy policies can be divided into four modes, for example: Performance, OnDemand, Conservative, and Powersave.

[0128] Performance mode provides optimal performance by maintaining the CPU at maximum frequency. Although this results in high power consumption, it is suitable for high-priority data requiring immediate response, such as flight control commands, collision avoidance warnings, and emergency landing signals, or when high-load encryption (e.g., hybrid, asymmetric) is applied.

[0129] On-Demand mode is a method that increases the frequency to the maximum when the CPU load is high and lowers it to the minimum when the load is low. It can adjust the balance between computational load and power consumption in real time, making it suitable for data processing that requires a normal response speed.

[0130] Conservative mode is similar to On-Demand mode, but it adjusts gradually without abruptly changing the frequency. This ensures a stable balance between performance and power consumption, and it can be utilized for general data transmission or non-real-time communication.

[0131] Powersave mode minimizes power consumption by keeping the CPU at its minimum frequency. While performance may be sacrificed, it is suitable for low-priority data (e.g., in-flight entertainment streaming, OTA updates) or for supporting limited operations during energy-scarce situations.

[0132] CPU energy policies can be determined based on the encryption method and data priority to be applied, as shown in Table 5. However, this is merely an example for the convenience of explanation, and actual policies may vary depending on the operating environment, CPU structure, and administrator settings.

[0133]

[0134] In addition, according to another embodiment, the CPU energy policy may be determined by additionally considering the current CPU load status as well as the encryption method and data priority to be applied.

[0135] For example, even if high-security data needs to be encrypted, if the current CPU load is already high, select the compensation mode instead of the performance mode to prevent overload and distribute the encryption operations to a certain level. Conversely, if the CPU load is low, select the performance mode to perform high-speed encryption.

[0136] According to such an embodiment, by reflecting the CPU load state, it is possible to satisfy encryption security and responsiveness requirements while simultaneously improving system stability and energy efficiency.

[0137] Furthermore, according to another embodiment, the CPU energy policy can be determined by considering not only the above factors but also energy states such as the remaining battery capacity of the gas.

[0138] For example, when the CPU load is low and the battery level is sufficient, high-speed encryption can be performed by selecting performance mode, but when the CPU load is high or the battery level is low, unnecessary energy consumption can be suppressed by selecting power saving mode or maintenance mode.

[0139] Accordingly, according to these embodiments, by comprehensively reflecting CPU load and energy status, limited resources can be utilized more efficiently, and security, performance, and energy sustainability can be simultaneously secured even in environments such as AAM aircraft requiring long-duration operation.

[0140] FIG. 7 is a flowchart of a method for adaptive encryption of data and power management in an AAM airframe according to one embodiment of the present invention.

[0141] Referring to FIG. 7, the method receives data processed during the operation of an AAM aircraft (S701). The received data refers to data generated, transmitted, stored, or analyzed during the operation of the aircraft. The received data may include various data types, such as flight control information, aircraft status information, passenger service information, and public information.

[0142] The method identifies the type of received data and determines a security level (S702). For example, by referring to the correspondence between a predefined data type and a security level, the received data can be classified into one of Confidential, Private, Sensitive, or Public, and this correspondence can be implemented, for example, in the form of a table or a set of rules.

[0143] The method determines the priority based on the importance of the response speed required during the data transmission or processing process (S703). The priority can be defined in High, Normal, and Low stages and can be set in the following manner.

[0144] In one embodiment, by referring to the correspondence between data types and priorities in the form of a table or rule set, priorities may be set, for example, to High for flight control commands and collision avoidance warnings, Normal for route updates and passenger notifications, and Low for entertainment and OTA updates. In this case, the priority may not necessarily be proportional to the security level.

[0145] In other embodiments, data-specific priorities may be set by referring to the correspondence between predefined security levels and priorities. For example, confidential data may be set to High, personal or sensitive data to Normal, and public data to Low.

[0146] In another embodiment, priority settings based on data types are used as the basis, but priorities can be dynamically adjusted according to energy status, operation conditions, administrator policies, etc. For example, the priority of non-essential data can be lowered to Low when energy is low, or the priority of specific data can be raised to High when an emergency occurs.

[0147] The method checks whether the flight plan has been changed (S704).

[0148] If there is a change in the flight plan, determine whether flight to the changed destination is possible. If it is determined that flight to the changed destination is impossible, control the aircraft to land at the nearest location. If it is determined that flight to the changed destination is possible, modify the final destination to the changed destination (S705).

[0149] If there are no changes to the flight plan, proceed to the next step.

[0150] The method determines the energy status of the airframe as one of Normal, Economy, Low Power, or Insufficient based on the current battery level and the estimated energy consumption (S706). The current battery level can be obtained from the Battery Management System (BMS). The estimated energy consumption required for flight to the destination can be obtained from the Flight Control System (FCS) or the Flight Management System (FMS).

[0151] The method determines the encryption method to be applied to the data based on the security level and energy status (S707).

[0152] For example, as the security level increases, a stronger encryption method is selected, and as the energy level decreases, a method with less computational load can be applied.

[0153] In addition, if the energy state is determined to be insufficient, the method does not perform encryption or processing on the data and drops it. For example, in this case, public data or low-sensitivity data may be classified as priority targets for disposal. Refer to Table 4 for examples of encryption methods applied according to specific security levels and energy states.

[0154] The method determines the CPU power management mode by comprehensively considering the determined encryption method, data priority, CPU load, and energy status (S708). The CPU power management mode can be determined as one of Performance, OnDemand, Conservative, or Powersave.

[0155] The method determines whether the consistency between the encryption method, data priority, energy state, and CPU power management mode determined in the above steps is satisfied (S709).

[0156] If the consistency is satisfied based on the inspection results, the process proceeds to step S710; if the consistency is not satisfied, it proceeds to the retry step (S711). For example, cases where consistency is not satisfied may include situations where there is a concern that processing delays may occur due to a concentration of high-priority data even though power saving mode has been selected.

[0157] When consistency is satisfied, the method controls the frequency and voltage of the CPU, encryption operation scheduling, and allocation of computation resources according to the encryption method, energy state, and CPU power management mode (S710).

[0158] For example, the method can control the operating frequency and voltage of the CPU according to a determined CPU power management mode. For instance, in performance mode, the CPU is operated at maximum frequency and voltage to ensure high-speed encryption and data processing performance, while in maintenance or power-saving mode, the frequency and voltage are lowered to minimize energy consumption.

[0159] Additionally, the method can change the scheduling priority of encryption operations or delay data processing based on the determined CPU power management mode. For example, in maintenance or power-saving modes, encryption operations for high-priority data may be performed first, while those for low-priority data may be delayed. In this process, a priority queue is utilized so that urgent signals are processed immediately, while passenger notifications or entertainment data may be processed after a waiting period. In some cases, encryption operations for low-priority data may be suspended and the data discarded.

[0160] In addition, the method can adjust the utilization of cryptographic computation resources, such as the number of CPU cores, threads, and hardware encryption accelerators, depending on the determined encryption method or energy state. For example, in performance mode, multiple cores can be utilized in parallel to process symmetric and asymmetric operations simultaneously, while in power-saving mode, only a single core can be used to reduce unnecessary power consumption.

[0161] The method determines whether to retry if consistency is not satisfied (S711).

[0162] If the energy state is continuously insufficient or if reconfirmation is meaningless due to malicious repetitive data, a retry is not performed. In this case, the data is not transmitted and is immediately discarded (S712).

[0163] If a retry is meaningful due to a temporary overload or policy conflict, the method returns to step S704 and performs the procedure again to reflect the latest state.

[0164] FIG. 8 is a block diagram schematically illustrating an exemplary computing device that can be used to implement a device for performing a method according to the present disclosure.

[0165] Referring to FIG. 8, the computing device (8) may include some or all of memory (800), a processor (820), storage (840), an input / output interface (860), and a communication interface (880). The computing device (8) may be a stationary computing device such as a desktop computer or a server, as well as a mobile computing device such as a laptop computer, a smartphone, or a vehicle. The computing device (8) may be implemented as any specialized hardware accelerator capable of processing operations on an artificial intelligence model in an efficient manner. For example, the computing device (8) may include a graphic processing unit (GPU), a tensor processing unit (TPU), or a neural processing unit (NPU).

[0166] Memory (800) may store a program that enables the processor (820) to perform a method or operation according to various embodiments of the present disclosure. For example, the program may include a plurality of instructions executable by the processor (820), and the method illustrated in FIG. 7 may be performed by executing the plurality of instructions by the processor (820). Memory (800) may be a single memory or multiple memories. In this case, information required to perform a method or operation according to various embodiments of the present disclosure may be stored in a single memory or divided and stored in multiple memories. If memory (800) is composed of multiple memories, the multiple memories may be physically separated. Memory (800) may include at least one of volatile memory and non-volatile memory. Volatile memory includes Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM), etc., and non-volatile memory includes flash memory, etc.

[0167] The processor (820) may include at least one core capable of executing at least one instruction. The processor (820) may execute instructions stored in memory (800). The processor (820) may be a single processor or multiple processors.

[0168] Storage (840) retains stored data even if the power supplied to the computing device (8) is cut off. For example, storage (840) may include non-volatile memory and may include storage media such as magnetic tape, optical disc, or magnetic disc. A program stored in storage (840) may be loaded into memory (800) before being executed by the processor (820). Storage (840) may store a file written in a programming language, and a program generated from the file by a compiler, etc., may be loaded into memory (800). Storage (840) may store data to be processed by the processor (820) and / or data processed by the processor (820).

[0169] The input / output interface (860) may include input devices such as a keyboard, mouse, touch display, microphone, etc., and output devices such as a display, speaker, etc. Through the input / output interface (860), the user can trigger the execution of a program by the processor (820) and / or check the processing results of the processor (820).

[0170] The communication interface (880) can provide access to internal and external networks. The computing device (8) can communicate with other devices through the communication interface (880).

[0171] The present disclosure can be flexibly applied in various application environments where energy management and data security are required simultaneously, such as electric vehicles, drones, and IoT devices.

[0172] Each component of the device or method according to the present invention may be implemented in hardware or software, or in a combination of hardware and software. Additionally, the function of each component may be implemented in software, and a microprocessor may be implemented to execute the function of the software corresponding to each component.

[0173] Various embodiments of the systems and techniques described herein may be realized as digital electronic circuits, integrated circuits, field programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include being implemented as one or more computer programs executable on a programmable system. A programmable system comprises a storage system, at least one input device, and at least one programmable processor (which may be a special-purpose processor or a general-purpose processor) coupled to receive data and instructions from and transmit data and instructions to at least one output device. Computer programs (which are also known as programs, software, software applications, or code) include instructions for the programmable processor and are stored on a "computer-readable recording medium."

[0174] Computer-readable recording media include all types of recording devices in which data that can be read by a computer system is stored. Such computer-readable recording media may be non-volatile or non-transitory media such as ROM, CD-ROM, magnetic tape, floppy disk, memory card, hard disk, magneto-optical disk, and storage device, and may also include transitory media such as data transmission media. Additionally, computer-readable recording media may be distributed across networked computer systems, and computer-readable code may be stored and executed in a distributed manner.

[0175] Although the flowcharts and timing diagrams in this specification describe each process as being executed sequentially, this is merely an illustrative explanation of the technical concept of one embodiment of the present disclosure. In other words, a person skilled in the art to which one embodiment of the present disclosure belongs may modify and adapt the flowcharts and timing diagrams in various ways, such as changing the order described in the flowcharts and timing diagrams or executing one or more of the processes in parallel, without departing from the essential characteristics of one embodiment of the present disclosure; therefore, the flowcharts and timing diagrams are not limited to a chronological order.

[0176] The above description is merely an illustrative explanation of the technical concept of the present embodiment, and a person skilled in the art to which the present embodiment belongs would be able to make various modifications and variations within the scope of the essential characteristics of the present embodiment. Accordingly, the present embodiments are intended to explain, not limit, the technical concept of the present embodiment, and the scope of the technical concept of the present embodiment is not limited by these embodiments. The scope of protection of the present embodiment shall be interpreted by the claims below, and all technical concepts within an equivalent scope shall be interpreted as being included within the scope of rights of the present embodiment.

[0177] CROSS-REFERENCE TO RELATED APPLICATION

[0178] This patent application claims priority to Korean patent application No. 10-2024-0123935 filed on September 11, 2024, the entire contents of which are incorporated into this patent application by reference.

Claims

1. A method for performing adaptive encryption of data and power management in an AAM airframe, The process of receiving data processed during the operation of the aircraft; A process of determining the security level of the data based on the type of received data; A process of determining the priority of the data based on the importance of the response speed required for processing the data; A process of determining the energy state of the said aircraft based on the remaining battery charge of the said aircraft and the estimated energy consumption required for flight to the destination; A process of determining an encryption method to be applied to the data based on the above security level and the above energy state; and A process of determining the CPU power management mode based on the above encryption method and the above priority A method including 2. In Paragraph 1, The above encryption method is, A method characterized by being one of symmetric encryption, asymmetric encryption, hybrid encryption, or non-encryption.

3. In Paragraph 1, The above energy state is, It is classified into Normal, Economy, Low Power, and Insufficient, A method characterized by further including a process of dropping the data without encrypting or transmitting it in response to the above energy state being determined to be insufficient.

4. In Paragraph 1, The process of determining the above CPU power management mode is, A method characterized by determining a CPU power management mode based on the above encryption method, the above priority, and the current CPU load.

5. In Paragraph 1, The process of determining the above CPU power management mode is, A method characterized by determining a CPU power management mode based on the above encryption method, the above priority, the current CPU load, and the above energy state.

6. In Paragraph 1, A method further comprising a process of determining whether consistency is satisfied between the encryption method, the priority, the energy state, and the CPU power management mode.

7. In Paragraph 6, A method further comprising a process of controlling the operating frequency and voltage of the CPU according to the CPU power management mode in response to the determination that consistency is satisfied.

8. In Paragraph 6, A method further comprising, in response to a determination that consistency is satisfied, changing the scheduling priority of an encryption operation according to the CPU power management mode or delaying the processing of the data.

9. In Paragraph 6, A method further comprising a process of adjusting the utilization of computational resources for encryption according to the encryption method or the energy state in response to a determination that consistency is satisfied.

10. A device for performing adaptive encryption of data and power management in an AAM airframe, At least one memory for storing instructions; and It includes at least one processor configured to execute the above instructions, The above-mentioned at least one processor is, Receive data processed during the operation of the aircraft, and The security level of the above data is determined based on the type of received data, and Determine the priority of the data based on the importance of the response speed required for processing the data, and The energy state of the said aircraft is determined based on the remaining battery charge of the said aircraft and the estimated energy consumption required for flight to the destination, and Determining an encryption method to be applied to the data based on the above security level and the above energy state, and A device configured to determine a CPU power management mode based on the above encryption method and the above priority.

11. In Paragraph 10, The above-mentioned at least one processor is, A device configured to determine the above encryption method as any one of symmetric encryption, asymmetric encryption, hybrid encryption, or non-encryption.

12. In Paragraph 10, The above-mentioned at least one processor is, The above energy states are classified into Normal, Economy, Low Power, and Insufficient, and A device configured to drop the data without encrypting or transmitting it in response to the above energy state being determined to be insufficient.

13. In Paragraph 10, The above-mentioned at least one processor is, A device configured to determine a CPU power management mode based on the above encryption method, the above priority, and the current CPU load.

14. In Paragraph 10, The above-mentioned at least one processor is, A device configured to determine a CPU power management mode based on the above encryption method, the above priority, the current CPU load, and the above energy state.

15. In Paragraph 10, The above-mentioned at least one processor is, A device configured to determine whether consistency is satisfied between the above encryption method, the above priority, the above energy state, and the above CPU power management mode.

16. In Paragraph 15, The above-mentioned at least one processor is, A device configured to control the operating frequency and voltage of the CPU according to the CPU power management mode in response to the determination that consistency is satisfied.

17. In Paragraph 15, The above-mentioned at least one processor is, A device configured to change the scheduling priority of encryption operations or delay the processing of data according to the CPU power management mode in response to a determination that consistency is satisfied.

18. In Paragraph 15, The above-mentioned at least one processor is, A device configured to control the utilization of computational resources for encryption according to the encryption method or energy state in response to a determination that consistency is satisfied.

Images