Ethernet Switch for Secure Aircraft Data Loading

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing connection devices between data loading and unloading units and aircraft computers lack secure and selective connectivity, particularly failing to prevent program loading during flight operations, and are often expensive or complex.

Innovation Solution

A device with isolated Ethernet ports and a programmable control unit that selectively connects a first computer equipment to multiple second computer equipment items, using a selector to physically isolate ports and require a discrete signal for data transfer authorization, ensuring secure and reliable connectivity by prohibiting data transmission when not powered or without a signal.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If a router is used to route data packets between the load/unload unit and the computers, then data transfer capability is improved, but security is worsened because the router cannot prevent unauthorized data transfer between computers

Engineering Contradiction:
Improvedata transfer capabilityVSAvoidsecurity
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The network connection is segmented into isolated port pairs, where each computer is connected to the load/unload unit through its own dedicated Ethernet port. The selector switch segments the physical connections so that only one port pair is active at a time, preventing unauthorized communication between computers while maintaining data transfer capability.

Inventive Principle:
Principle #1Segmentation

2Reliability

If a secure communication interface with dedicated computer is used to prevent program loading in flight, then security is improved, but cost is worsened

Engineering Contradiction:
ImprovesecurityVSAvoidcost
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

A simple selector switch acts as an intermediary between the load/unload unit and the computers. This intermediary device provides security through physical connection control rather than complex software-based security mechanisms. The selector switch is controlled by a basic control unit that responds to ground/flight status signals, avoiding the need for expensive dedicated secure communication interfaces.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of operation

If Ethernet ports are permanently connected in a router, then ease of operation is improved, but security is worsened because physical isolation cannot be achieved

Engineering Contradiction:
Improveconnection simplicityVSAvoidphysical isolation
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The connection topology is made dynamic through the selector switch, which can change physical connections based on operational requirements. During ground operations, the selector connects the load/unload unit to specific computer ports for data transfer. During flight, the selector dynamically isolates all ports, providing physical security while maintaining ease of operation through automated control based on ground/flight status.

Inventive Principle:
Principle #15Dynamics

4Productivity

If the selector is always connected to all ports, then productivity is improved, but security is worsened during flight operations

Engineering Contradiction:
Improvedata transfer efficiencyVSAvoidflight safety
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The system applies preliminary anti-action by automatically isolating the Ethernet ports before flight operations begin. The control unit receives ground/flight status signals and preemptively switches the selector to isolate all ports when transitioning to flight mode, preventing any possibility of unauthorized data transfer during flight. This preliminary action ensures flight safety while maintaining productivity during authorized ground operations.

Inventive Principle:
Principle #9Preliminary anti-action

Data Source

PatentEP2781066B1Device for selectively connecting a first item of equipment to a plurality of second items of equipment and data processing assembly comprising such a device
Publication Date: 2021.06.30 SAFRAN ELECTRONICS & DEFENSE (FR)
  • EP2781066B1 patent drawingFigure 1
  • EP2781066B1 patent drawingFigure 2

AI summary

Device (1) for selectively connecting at least one first item of computer equipment (100) to a plurality of second items of computer equipment (200), comprising a first Ethernet port (10) for connecting to the first item of equipment, second Ethernet ports (20) for connecting to each of the second items of equipment, a selector (50) designed to physically and selectively link the first Ethernet port to the second Ethernet ports, and a control unit for the selector (60). Data processing assembly comprising items of equipment (100) linked to at least one such connecting device (1).