Aircraft Network Identity Update via Cached Certificates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network access control systems, relying on digital certificates, are ineffective for aircraft network data processing systems due to limited access to certificate revocation lists and device configuration information, especially in disconnected mobile environments like aircraft.
Innovation Solution
An aircraft network data processing system receives updated identity information and digital signatures from connected devices, validating the signatures and newness of the information to ensure only approved devices access the system, using periodic updates from maintenance devices with more frequent access to certificate authorities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If ground-based network access control systems using digital certificates are implemented in aircraft network data processing systems, then device access security is improved, but system reliability deteriorates due to limited access to certificate revocation lists in disconnected mobile environments
Solution Approach 1:
The system performs preliminary actions by maintaining local copies of identity information (certificate revocation lists and device configuration information) stored in persistent storage before disconnection occurs. This allows the aircraft network data processing system to validate devices using pre-cached identity information when disconnected from ground-based networks, ensuring continuous access control functionality without real-time network connectivity.
Solution Approach 2:
Maintenance devices serve as intermediaries between ground-based certificate authorities and the aircraft network data processing system. These maintenance devices obtain updated identity information from ground-based systems and transfer it to the aircraft system during periodic connections, bridging the gap between the disconnected aircraft environment and the ground-based certificate authority infrastructure.
2Adaptability or versatility
If periodic updates from maintenance devices are used to refresh identity information, then adaptability is improved, but device complexity increases due to additional validation procedures
Solution Approach 1:
The validation process is extracted into distinct, modular steps: first verifying the digital signature of received identity information, then comparing timestamps to determine if updates are newer than existing copies, and finally updating persistent storage only if validation succeeds. This extraction of validation logic into separate, manageable operations reduces overall system complexity while maintaining robust security checks.
Solution Approach 2:
The aircraft network data processing system performs self-validation of received identity information by independently verifying digital signatures and comparing timestamps against existing data. This self-service validation approach eliminates the need for continuous external verification services, allowing the system to autonomously determine whether to accept updates without requiring complex real-time communication with ground-based authorities.
Data Source
AI summary
A method and apparatus for updating identity information in an aircraft network data processing system on an aircraft. A data processing device is connected to the aircraft network data processing system. Updated identity information and a digital signature for the updated identity information are received by the aircraft network data processing system from the data processing device. The aircraft network data processing system determines whether the digital signature is correct and whether the updated identity information is newer than current identity information stored in persistent storage in the aircraft network data processing system. Responsive to determinations that the digital signature is correct and that the updated identity information is newer than the current identity information, the updated identity information is stored in the persistent storage in the aircraft network data processing system.