Aircraft Equipment Authentication via Preamble Marker Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Embedded communication systems in the aeronautics field lack effective authentication mechanisms to distinguish between rebooting of unauthorized equipment and connection of new equipment, failing to detect illegitimate devices upon system rebooting.

Innovation Solution

A method involving the exchange of data frames with a specific marker in the preamble using a packet switching protocol, where the second equipment authenticates the first only when the marker is identified, allowing for secure authentication compatible with high-level design quality assurance processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If complex authentication mechanisms are implemented in non-embedded communication systems, then security is improved, but device complexity increases making it incompatible with high-level design quality assurance processes in aeronautics

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication mechanism complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the authentication function from complex centralized mechanisms and embeds it directly into the data frame structure itself. The marker is taken out as a simple field within the preamble, allowing authentication to be performed locally at the hardware level without complex processing, thus maintaining security while reducing overall system complexity

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent replaces complex software-based authentication mechanisms with a simpler hardware-level detection mechanism. Instead of implementing complex authentication algorithms, the system uses a simple marker detection approach where the receiver checks for the presence of a specific marker in the preamble, substituting mechanical complexity with a more elegant structural solution

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Device complexity

If only physical connection cutting is monitored in embedded systems, then device complexity is reduced, but the ability to distinguish between rebooting of third-party equipment and connection of new equipment is lost

Engineering Contradiction:
Improvedetection mechanism complexityVSAvoidequipment authentication capability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent applies preliminary action by placing the authentication marker in the preamble of data frames before the actual communication begins. This allows the receiver to verify the authenticity of the transmitting equipment right at the start, before any data exchange occurs, enabling early detection of unauthorized equipment without adding complex ongoing monitoring mechanisms

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The marker acts as an intermediary element between the transmitting equipment and the receiver. It serves as a simple yet effective mediator that carries authentication information without requiring complex interaction protocols, allowing the system to distinguish between legitimate and unauthorized equipment through a simple presence check

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of operation

If physical connection monitoring is used in embedded systems, then ease of operation is maintained, but illegitimate equipment cannot be detected when connected upon system rebooting

Engineering Contradiction:
Improveconnection monitoring simplicityVSAvoiddetection of illegitimate equipment
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent ensures continuity of useful action by maintaining the marker detection mechanism throughout all communication operations. The receiver continuously checks for the marker in every received data frame's preamble, ensuring that illegitimate equipment is detected regardless of when it connects or reboots, without interrupting normal operation or adding complexity to the monitoring process

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentUS11256645B2Method for authenticating an equipment, associated emitting device, reception device, communication system and aircraft
Publication Date: 2022.02.22 THALES SA
  • US11256645B2 patent drawing
  • US11256645B2 patent drawing

AI summary

The invention relates to a method for authentication of a piece of equipment by a communication system, comprising:a step for exchanging at least one data frame between a first piece of equipment and a second piece of equipment through a communication bus using a packet switching protocol, the data frame including a preamble and a message body,a step for searching in each exchanged data frame for the presence of a marker in the preamble, the marker being specific to the communication system, andonly when the marker has been found by the second piece of equipment in a data frame, a step for authenticating the first piece of equipment.