Air-Gapped Microservice Control for Aquatic Vessels

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing control systems for aquatic vessels face challenges in rapid technology insertion, software maintenance, and security, particularly due to cumbersome virtual machines and lack of applicability of microservices in sensitive systems.

Innovation Solution

A containerized architecture with microservices and DevSecOps principles is implemented, enabling rapid insertion and enhanced security through air-gapping, data security, and 'plug and play' microservices for controlling aquatic vessel components, including sensor data processing and collision avoidance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional virtual machines are used for control systems, then security and assurance are maintained, but software maintenance and improvement processes become lengthy and complicated

Engineering Contradiction:
Improvesecurity and assuranceVSAvoidsoftware maintenance and improvement speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments the control system software into microservices that can be independently developed, tested, and deployed. This allows rapid software maintenance and improvement of individual components without requiring lengthy validation of the entire system, while maintaining security through the air-gapped architecture.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an air-gap as an intermediary barrier that physically isolates the control system from external networks. This intermediary enables secure software updates through controlled physical media transfer, resolving the contradiction between security requirements and rapid software improvement needs.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If control systems are isolated from external networks for security, then security from external threats is improved, but technology insertion and updates become more difficult

Engineering Contradiction:
Improvesecurity from external threatsVSAvoidtechnology insertion capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent implements preliminary action by pre-configuring microservices and validating them in development environments before transferring them to the air-gapped control system. This allows technology insertion to occur in advance through secure physical media, maintaining both security and adaptability.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent uses copying by transferring software microservices from external development systems to the air-gapped control system through physical media such as USB drives or portable hard drives. This copying mechanism enables technology insertion while maintaining network isolation and security.

Inventive Principle:
Principle #26Copying

3Productivity

If microservices are implemented in air-gapped systems, then rapid technology insertion and maintenance are improved, but system complexity increases

Engineering Contradiction:
Improvesoftware maintenance speedVSAvoidsystem architecture complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent applies universality by implementing a standardized container orchestration platform that can manage diverse microservices through common interfaces and processes. This universal approach simplifies the management of complex microservice architectures, enabling rapid maintenance while controlling system complexity through standardization.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP4283506A1Controlling a component of an aquatic vessel
Publication Date: 2023.11.29 BAE SYSTEMS PLC
  • EP4283506A1 patent drawingFigure 1~3
  • EP4283506A1 patent drawingFigure 2
  • EP4283506A1 patent drawing

AI summary

A system configured to control a component of an aquatic vessel comprises a computer system (100) comprising a processor (102) and a storage (104) including an application configured to process input data to generate information relating to controlling a component of an aquatic vessel (110). The application comprises a plurality of microservices, and the computer system is configured to not communicate with an external communications network.