Avionics Message Verification for Decryption Update Certification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing avionics systems require recertification with each change in decryption algorithms, posing a challenge in maintaining security and integrity during aircraft-ground communication, especially in the context of evolving decryption algorithms and potential cyberattacks.
Innovation Solution
An electronic processing device onboard the aircraft with modules to receive and verify decrypted messages, ensuring integrity through comparison criteria, allowing certification without needing to recertify the decryption device, and enabling quick detection of cyberattacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If decryption algorithms are updated to maintain security, then security and integrity are improved, but recertification requirements increase device complexity and time consumption
Solution Approach 1:
The system segments the certification requirement into two parts: the processing device maintains certification while the decryption device operates without requiring recertification. This is achieved by having the certified processing device verify the behavior of the uncertified decryption device through received decrypted messages, thereby isolating the certification burden from the frequently updated decryption algorithms.
Solution Approach 2:
The processing device acts as an intermediary that bridges the certified system and the uncertified decryption device. It receives both encrypted messages and their decrypted counterparts, then verifies the decryption device's behavior by comparing results against expected outcomes, allowing the system to maintain security without requiring the decryption device itself to be certified.
2Reliability
If decryption algorithms are updated frequently to counter cyberattacks, then security detection capability is improved, but system availability decreases due to recertification requirements
Solution Approach 1:
The system separates the decryption function from the certification requirement, allowing the decryption device to be updated freely while the processing device maintains its certification status. This enables frequent algorithm updates for improved cyberattack detection without triggering recertification processes that would reduce system availability.
Solution Approach 2:
The system allows parameters such as decryption algorithms to be changed dynamically in the decryption device without affecting the certification status of the overall system. The processing device verifies these changes through behavioral verification, enabling parameter updates that improve security detection while maintaining system availability.
3Reliability
If decryption device is integrated into the certified system, then security is improved, but adaptability to algorithm changes decreases due to recertification requirements
Solution Approach 1:
The system segments the decryption device from the certified processing device, allowing the decryption component to adapt to algorithm changes independently. The processing device maintains certification through behavioral verification of the decryption device's output, enabling the decryption device to evolve without constraining adaptability through recertification requirements.
Data Source
AI summary
An electronic processing device designed to be onboard an aircraft and including a first reception module that is configured to receive an encrypted message, a second reception module that is configured to receive an associated decrypted message, the decrypted message being calculated by means of a decryption algorithm applied to the encrypted message by a decryption device, external to the processing device, and wherein it further includes a verification module that is configured to verify the behavior of the decryption device by means of a comparison between the encrypted message and the associated decrypted message according to a set of comparison criteria.