Onboard Access Control for Avionics Data Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current onboard information systems for aircraft are limited to one-directional communication from the avionics domain to the open domain, necessitating a solution for secure two-directional communication to enhance data security, safety, and operational flexibility while adhering to certification rules.
Innovation Solution
An onboard access control system with operator authentication, a security device comprising dual access switches, a controller, and data control modules to manage and filter data exchanges between the avionics and open domains, enabling secure communication from the open domain to the avionics domain, utilizing hardware switches and encryption for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If communication is authorised only from avionics domain to open domain, then security of avionics domain is improved, but communication flexibility deteriorates
Solution Approach 1:
The patent implements dynamic access control by enabling bidirectional communication between domains through authenticated operators. The system transitions from static one-way communication to dynamic two-way communication where access rights are granted temporarily based on operator authentication and profile, resolving the contradiction between security and communication flexibility.
Solution Approach 2:
The patent introduces an access control system as an intermediary between the avionics domain and open domain. This intermediary authenticates operators, manages communication rights, and controls data exchange, allowing secure bidirectional communication while maintaining avionics domain security through controlled access rather than complete isolation.
2Reliability
If operator authentication and access control means are added, then security is improved, but device complexity increases
Solution Approach 1:
The access control system serves multiple functions: authentication of operators, determination of communication rights based on profiles, control of data exchange between domains, and management of communication sessions. By consolidating these security-related functions into a single multi-functional system, the patent reduces overall system complexity while maintaining comprehensive security.
3Adaptability or versatility
If bidirectional communication is enabled, then operational flexibility is improved, but risk of unauthorized access increases
Solution Approach 1:
The patent applies preliminary anti-action by implementing authentication and access control measures before enabling bidirectional communication. The system pre-authenticates operators, pre-determines their communication rights based on profiles, and pre-establishes security policies, thereby preventing unauthorized access before it can occur while still allowing legitimate bidirectional communication.
Data Source
AI summary
An onboard access control system to an information system onboard an aircraft, for communication from the open domain to the avionics domain, the open end avionics domains being connected to each other through a single-directional link from the avionics domain to the open domain. The system includes: a security device including: access switches controlling access to the avionics and open domains, a controller, a module for acquisition putting data into buffer memory and transmission to the avionics domain, a data control module, an acquisition module from the open domain and putting into buffer memory, and an operator's authentication mechanism.