Avionic Redundant Network Frame Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Redundant communication networks in avionic systems, such as those following the ARINC 664 standard, are vulnerable to cyberattacks and lack robust cybersecurity measures to detect inconsistencies or additional data frames across independent elementary networks.
Innovation Solution
An electronic reception device is configured to verify the consistency of frames received on multiple independent elementary networks by calculating and comparing frame check codes, such as CRC or FCS codes, and employing a majority vote algorithm to detect inconsistencies, thereby identifying potential cyberattacks without the need to store all received frames.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional redundancy management methods are used in redundant communication networks, then network coverage and basic reliability are maintained, but cybersecurity robustness and ability to detect cyberattacks are insufficient
Solution Approach 1:
The reception device pre-calculates and stores expected frame check codes for all valid frames before receiving actual frames. This preliminary preparation enables immediate comparison with received frames during operation, providing rapid cyberattack detection without adding complex real-time processing complexity to the system.
Solution Approach 2:
The invention creates a copy of the frame check code calculation function by pre-computing and storing expected check codes in a lookup table. This copying approach replaces complex real-time verification logic with simple table lookups and comparisons, enhancing security detection capability while minimizing added device complexity.
2Reliability
If frame consistency verification is performed across multiple elementary networks, then detection of additional data frames and cyberattacks is improved, but storage requirements and processing overhead increase
Solution Approach 1:
The invention extracts only the essential verification element (frame check code) from the complete frame data. By comparing only these condensed verification codes rather than entire frames, the system achieves effective consistency verification across multiple elementary networks while minimizing memory storage requirements to just the check codes themselves.
Solution Approach 2:
The invention transforms the verification problem from comparing entire frames (large data volume) to comparing frame check codes (small data volume). This parameter transformation maintains verification effectiveness while dramatically reducing the quantity of data that must be stored and processed in memory.
3Measurement precision
If all received frames are stored for consistency checking, then complete verification is possible, but memory consumption and system resource usage increase significantly
Solution Approach 1:
The invention creates a simplified copy of the verification function by pre-calculating and storing only the necessary frame check codes in a compact lookup table. This copying strategy enables complete verification accuracy through code comparison while avoiding the need to store entire frames, thus minimizing memory volume requirements.
Solution Approach 2:
The invention extracts and stores only the critical verification component (frame check code) from each frame, discarding the need to retain complete frame data. This extraction approach maintains verification precision while reducing memory volume to store only the essential check codes rather than full frames.
Data Source
Figure 1
Figure 2
AI summary
This electronic device (20) for receiving data via a redundant communication network (16) comprising at least two independent elementary networks is configured to be connected to each elementary network. It includes a receiving module (42) configured to receive via the redundant communication network (16) at least one data frame, each frame having a frame identifier and a data field, each frame being transmitted on each of the elementary networks; and a verification module (44) configured, for at least one received frame identifier, to calculate a frame control code for each of the elementary networks, and then to compare the frame control codes between the elementary networks, each frame control code depending on the data field of the frame received via the respective elementary network.