Cryptographic Key Configuration Automation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The manual configuration of cryptographic systems, such as those used in aviation data transfer systems, is cumbersome and time-consuming, requiring physical access for user account management, key loading, and channel configuration.

Innovation Solution

A method and system for generating a cryptographic key configuration (CKC) using a terminal with processors and memory devices, which allows users to specify actions through a user interface, access databases, and transfer the CKC to a removable data storage device for automated configuration of cryptographic systems, including authorized user accounts, key mappings, and cryptographic processing channels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If manual configuration is used for cryptographic systems, then physical access and direct control are maintained, but the process becomes cumbersome and time-consuming

Engineering Contradiction:
ImproveConfiguration easeVSAvoidConfiguration time
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The patent creates a digital copy of the configuration process through software applications that generate cryptographic key configurations (CKCs) and transfer them via removable data storage devices. This eliminates the need for repeated physical access to cryptographic systems for each configuration task, allowing administrators to prepare configurations remotely and load them in bulk, thereby reducing configuration time while maintaining operational ease.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent introduces an intermediary system consisting of a terminal with software application, removable data storage device, and database. This intermediary chain allows configuration data to be prepared, stored, and transferred without requiring direct physical access to the cryptographic system for each individual configuration action, thus resolving the contradiction between ease of operation and time loss.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If physical access to cryptographic systems is required for configuration, then direct control and security are maintained, but the process becomes tedious and inefficient

Engineering Contradiction:
ImproveConfiguration efficiencyVSAvoidAccess requirement complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent implements preliminary action by allowing administrators to prepare cryptographic key configurations, user accounts, and mapping data in advance using software applications and databases before actual configuration is needed. The configurations are pre-validated and packaged into transferable formats, so when physical access is finally required, the work is already done, significantly improving productivity while managing access complexity.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent uses removable data storage devices as copies that contain pre-prepared configuration data. Instead of directly modifying cryptographic systems during each configuration task, the system creates and transfers copies of configuration data that can be loaded in bulk, thereby improving configuration efficiency while reducing the complexity of repeated physical access requirements.

Inventive Principle:
Principle #26Copying

3Adaptability or versatility

If multiple cryptographic systems are configured manually, then individual customization is possible, but the overall process becomes time-consuming

Engineering Contradiction:
ImproveSystem configuration flexibilityVSAvoidTotal configuration time
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent creates a universal configuration system where a single software application and database infrastructure can manage multiple cryptographic systems. The same terminal platform and data storage device can be used to configure different cryptographic units, and the system includes templates and predefined structures that enable multi-system configuration through standardized processes, thereby reducing total configuration time while maintaining adaptability.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent applies preliminary action by pre-configuring templates, user account structures, and cryptographic key mappings in the database before actual system configuration. This allows administrators to leverage pre-prepared frameworks when configuring multiple systems, reducing repetitive manual work and significantly cutting total configuration time while preserving the flexibility to customize each system's specific requirements.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10255420B2Configuring cryptographic systems
Publication Date: 2019.04.09 GE AVIATION SYSTEMS LLC
  • US10255420B2 patent drawing
  • US10255420B2 patent drawing
  • US10255420B2 patent drawing

AI summary

Systems and methods for configuring a cryptographic system, such as an avionic data transfer system associated with an aircraft, are provided. More particularly, systems and methods can be used to assemble a cryptographic key configuration (CKC) for use in a cryptographic system. A CKC can include various components for configuration of a cryptographic system. An administrator can generate CKCs for multiple host systems via a user interface (e.g., a graphical user interface) at a terminal and can deliver the CKCs to the host systems via an automated process by way of, for instance, a removable data cartridge.