Single Processor EFB OS Memory Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Class-3 Electronic Flight Bags (EFBs) require separate processors to isolate safety-critical Type C applications from non-critical Type A/B applications, leading to increased weight, power consumption, and cost due to the need for dual processor architecture.
Innovation Solution
A single processor architecture with modified operating system mechanisms to limit access to memory, processing, and display resources, ensuring segregation between critical and non-critical applications through predefined rules, preventing interference and ensuring safe operation of Type C applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate processors are used to isolate Type C applications from Type A/B applications, then safety and reliability are improved, but weight, power consumption, and cost increase
Solution Approach 1:
The patent merges previously separate Type C and Type A/B application processors into a single integrated processor. The processor includes a Type C application execution core and a Type A/B application execution core on the same physical substrate, eliminating the need for separate hardware processors while maintaining functional isolation through software-based security mechanisms.
Solution Approach 2:
The patent introduces a security monitor as an intermediary component that mediates between Type C and Type A/B applications. The security monitor enforces isolation policies, controls resource access, and prevents interference between application types through software-based security policies rather than physical separation.
2Reliability
If separate processors are used to isolate Type C applications from Type A/B applications, then safety and reliability are improved, but power consumption increases
Solution Approach 1:
The patent merges previously separate Type C and Type A/B application processors into a single integrated processor. The processor includes a Type C application execution core and a Type A/B application execution core on the same physical substrate, eliminating the need for separate hardware processors while maintaining functional isolation through software-based security mechanisms.
3Reliability
If separate processors are used to isolate Type C applications from Type A/B applications, then safety and reliability are improved, but device complexity and cost increase
Solution Approach 1:
The patent merges previously separate Type C and Type A/B application processors into a single integrated processor. The processor includes a Type C application execution core and a Type A/B application execution core on the same physical substrate, eliminating the need for separate hardware processors while maintaining functional isolation through software-based security mechanisms.
Solution Approach 2:
The patent creates a universal processor that can execute both Type C safety-critical applications and Type A/B non-critical applications. The single processor is designed to handle multiple application types through configurable security policies and resource management, reducing hardware complexity while maintaining safety requirements.
4Reliability
If access to memory and processing resources is limited through predefined rules, then interference between applications is prevented, but resource utilization efficiency decreases
Solution Approach 1:
The patent implements dynamic resource allocation where the security monitor adjusts resource access permissions based on current system state and security requirements. Resource limits are not fixed but can be dynamically modified to optimize utilization while maintaining isolation, allowing efficient use of memory and processing resources under different operational conditions.
Data Source
AI summary
An electronic flight bag providing computational services for an aircraft and communicating with aircraft avionics may execute aircraft-design-approved Type-C applications together with non-design-approved Type-A/B on a single processor through specific modifications of the operating system to control memory and processor access thereby providing isolation comparable to that of dual processor systems in which the Type-C applications and Type-A/B applications are executed on different processors.


