Inline ARINC Data Authenticity Inspection Module
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Avionics systems using the ARINC protocol are susceptible to attacks due to lack of data validation, leading to malformed data packets that can compromise system integrity and hinder forensic analysis following an attack.
Innovation Solution
An inline ARINC data authenticity inspection module that processes ARINC data to determine its authenticity before transmission, logging and flagging unauthentic data, and preventing its transmission to intended destinations while allowing authentic data to proceed, using a buffer and inspection partition system with rule listings for compliance checks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data validation is performed on ARINC data packets, then system security and data authenticity are improved, but device complexity and processing time increase
Solution Approach 1:
The inspection module is divided into multiple functional partitions: a buffer partition for receiving and storing incoming ARINC data packets, an inspection partition for validating data authenticity using rule listings, and a forwarding partition for transmitting validated data. This segmentation allows each partition to perform its specific function independently, improving reliability without overwhelming the system with monolithic complexity.
Solution Approach 2:
The system performs preliminary validation of ARINC data packets before they are forwarded to their destination. By inspecting data authenticity in advance using predefined rule listings and logging unauthentic data, the system prevents malicious or malformed packets from reaching avionics endpoints, thereby improving reliability while maintaining manageable complexity through proactive rather than reactive measures.
2Reliability
If all ARINC data packets are validated for authenticity, then system security against attacks is improved, but data transmission speed decreases
Solution Approach 1:
The data transmission path is segmented into parallel channels: validated authentic data flows through the forwarding partition to its destination, while unauthentic data is intercepted by the inspection partition for logging and rejection. This segmentation allows legitimate data to maintain high transmission speed while security validation occurs concurrently, minimizing the impact on overall system performance.
Solution Approach 2:
Authentic data packets that pass validation are rapidly forwarded to their destination without further delay. The inspection process is designed to quickly identify and log unauthentic data, allowing the majority of legitimate traffic to flow through the system at high speed. This approach ensures system security while minimizing the speed penalty associated with validation.
3Loss of information
If unauthentic data is logged and flagged for forensic analysis, then attack investigation capability is improved, but loss of time for processing increases
Solution Approach 1:
The inspection module extracts and logs only unauthentic data packets that fail validation, separating them from the main data flow. By flagging these specific packets with metadata about the attack attempt, the system preserves forensic information for later analysis without requiring time-consuming review of all data packets. This extraction approach minimizes processing time while maintaining comprehensive forensic capabilities.
Data Source
AI summary
An inline ARINC data authenticity inspection module, method and computer program product are provided. In the context of a method, ARINC data that is transmitted via an ARINC bus is received into a buffer partition. The method also includes inspecting the ARINC data from the buffer partition within an inspection partition. The method further includes determining, as a result of having inspected the ARINC data within the inspection partition, whether the ARINC data is authentic. In an instance in which the ARINC data is determined to not be authentic, the method logs receipt of the ARINC data that is determined to not be authentic. However, in an instance in which the ARINC data is determined to be authentic, the method permits data corresponding to the ARINC data to be transmitted to an intended destination.