Air Vehicle Software Integrity Authentication via Hash Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for authenticating and ensuring the integrity of software parts on air vehicles are inadequate, especially when data communication connectivity with an off-board security system is lacking, as they rely on techniques developed for physical media that are no longer applicable in the electronic distribution era.
Innovation Solution
A method that determines the integrity of software parts by generating a hash and using public-private key pairs for encryption and decryption, allowing for authentication both with and without data communication connectivity, and utilizing a whitelist maintained by an off-board security system for verification when connectivity is established.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical media handling and transfer techniques are used for software distribution, then authenticity and integrity can be confirmed through secure physical media handling and CRC checks, but the method becomes inapplicable in the electronic distribution era where software is transmitted electronically
Solution Approach 1:
The patent replaces physical media handling mechanisms with electronic cryptographic mechanisms. Instead of physically securing and transporting media, the system uses public key infrastructure (PKI) with digital signatures and hash values to ensure authenticity and integrity of electronically distributed software parts.
Solution Approach 2:
The patent creates a cryptographic copy of the software part through hash value generation. A hash value is computed from the software part and transmitted separately, allowing verification without transmitting the entire software part, thus enabling secure electronic distribution while maintaining integrity confirmation.
2Loss of time
If public key infrastructure techniques are used for authentication, then timely authentication can be achieved, but risks associated with the complexity of key management and infrastructure security arise
Solution Approach 1:
The patent extracts the essential authentication function from the complex PKI infrastructure by using simplified hash value comparison. Instead of requiring full cryptographic verification chains, the system computes a hash value of the software part and compares it with a pre-stored hash value, reducing complexity while maintaining timely authentication.
Solution Approach 2:
The patent performs preliminary action by pre-storing hash values of authorized software parts in the air vehicle's memory before the actual authentication is needed. This allows rapid comparison and verification without requiring complex real-time cryptographic operations or external infrastructure.
3Ease of operation
If whitelist maintenance is performed onboard the air vehicle, then authentication can proceed without external connectivity, but the whitelist cannot be efficiently updated when software parts are provided by multiple vendors
Solution Approach 1:
The patent introduces an intermediary approach by maintaining a whitelist of authorized software part identifiers in the air vehicle's memory. This whitelist acts as a mediator between the air vehicle and external security systems, enabling autonomous authentication operations while providing a mechanism for efficient updates through memory storage and comparison.
Data Source
AI summary
Methods, apparatus and computer program products are provided to authenticate and determine the integrity a software part. In this regard, a software part is authenticated and its integrity is determined by determining a first hash of the digital data that comprises the software part. If the air vehicle lacks data communications connectivity with an off-board security system, the method determines the authenticity and integrity of the software part by decrypting an encrypted hash of a software part in accordance with a public-private key pair to create a decrypted hash, comparing the first hash with the decrypted hash and transmitting the first hash to the off-board security system once data communications connectivity is established. Conversely, if the air vehicle has data communications connectivity with the off-board security system, the method determines the integrity of the software part by transmitting the first hash to the off-board security system for comparison with a whitelist.