Aircraft Maintenance Data Filtering for Secure Mobile Terminal Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current maintenance operations for aircraft are limited by the need for maintenance operators to access fixed physical stations in the cockpit, and there is a demand to reduce maintenance time, which can be improved by enhancing data exchange security and reliability using mobile maintenance terminals.
Innovation Solution
A method and device for configuring an on-board maintenance information system with multiple communication interfaces, a protected domain, an open domain, and a data filtering module, allowing adaptation of data securing elements based on the aircraft's maintenance mode, ensuring secure data exchange and isolation of internal networks from external networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If mobile maintenance terminals are used to reduce maintenance time, then productivity is improved, but data security and network isolation are worsened
Solution Approach 1:
The patent implements dynamic configuration of data filtering modules that adapt their filtering rules based on the connection mode. When a mobile maintenance terminal connects directly to the aircraft network, the filtering module activates strict filtering rules to secure data exchanges. When connecting through ground-based maintenance information systems, the filtering module adjusts its configuration. This dynamic adaptation allows the system to maintain high productivity with mobile terminals while ensuring data security through context-aware filtering.
Solution Approach 2:
The patent introduces a data filtering module as an intermediary component between mobile maintenance terminals and the aircraft's internal network. This filtering module acts as a security mediator that inspects and controls data packets, allowing legitimate maintenance operations to proceed efficiently while blocking potentially harmful or unauthorized data exchanges. The intermediary approach enables mobile terminal usage without compromising network security.
2Ease of operation
If direct connection of mobile terminals to aircraft network is allowed, then ease of operation is improved, but network isolation and security are worsened
Solution Approach 1:
The patent implements preliminary anti-action by pre-configuring data filtering rules and security protocols before mobile terminals connect to the aircraft network. The filtering module is预先 configured with rules that prevent potential security threats from affecting the internal network. This proactive security measure allows direct connectivity for ease of operation while neutralizing harmful factors before they can compromise network security.
Solution Approach 2:
The data filtering module serves as an intermediary security layer between mobile terminals and the aircraft's internal network systems. It mediates all data exchanges, inspecting packets for security threats while allowing legitimate maintenance data to pass through. This intermediary approach maintains ease of direct terminal connectivity while protecting against network security risks through automated filtering and isolation mechanisms.
3Reliability
If data filtering is applied to protect internal network, then reliability is improved, but data exchange efficiency is worsened
Solution Approach 1:
The patent applies local quality by implementing selective data filtering that targets specific data types and communication pathways. Rather than uniformly filtering all data exchanges, the filtering module applies customized filtering rules based on the connection mode and data characteristics. Direct terminal connections receive appropriate security filtering, while ground-based system connections utilize different filtering configurations. This localized approach maintains network security reliability while minimizing unnecessary filtering overhead that would reduce data exchange efficiency.
Data Source
AI summary
Configuring an on-board maintenance information system in an aircraft, the information system comprising a first communication interface and a second communication interface, a protected domain, an open domain, a first maintenance application module of the protected domain, a second maintenance application module of the open domain, a first data filtering module, and a second data filtering module. After having determined a mode of connection for a mobile maintenance terminal to the information system, the second data filtering module is configured to filter data exchanged between the first communication interface and the maintenance application module of the open domain if the terminal is directly connected to the information system via the second interface. If the terminal is connected to the information system via an information system on the ground and via the first communication interface, the second data filtering module is configured to filter data exchanged between maintenance application modules of the protected and open domains.