Flight Management System Config File Security Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need to enhance cybersecurity for aircraft avionic systems by securely managing configuration files that are externally connected, particularly during the loading and updating processes, to prevent unauthorized access and ensure secure data access for flight planning operations.
Innovation Solution
The implementation of a method and system that configures aircraft configuration files using a permission validation process, allowing access to flight management systems (FMS) to validate user and client requests through encryption and decryption procedures based on private and public keys, and enabling a setup manager to update config file content using digital signatures, ensuring secure access and data integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If configuration files are externally connected to onboard avionic systems, then flight planning functionality is enhanced, but cybersecurity risks increase
Solution Approach 1:
The patent implements preliminary validation procedures before allowing access to configuration files. The FMS validates user credentials, client requests, and digital signatures before permitting any access or modifications to the config file, preventing unauthorized access before it can occur.
Solution Approach 2:
The patent introduces an intermediary validation layer between the external config file and the avionic system. The FMS acts as a mediator that receives requests, validates them through multiple procedures (user authentication, client verification, digital signature validation), and only permits access if all validations succeed.
2Reliability
If permission validation procedures are implemented for config file access, then cybersecurity is enhanced, but system complexity increases
Solution Approach 1:
The patent segments the validation process into distinct, modular procedures: user authentication validation, client request validation, and digital signature validation. Each validation procedure is a separate functional block that can be independently implemented and maintained, reducing overall system complexity despite the multiple validation steps.
3Stability of the object's composition
If digital signature validation is required for config file updates, then data integrity is ensured, but access time increases
Solution Approach 1:
The patent performs preliminary validation of digital signatures and user credentials before allowing config file access or updates. By validating permissions and digital signatures in advance, the system ensures data integrity while streamlining the actual file access process, as the heavy validation work is completed before the critical operation.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods, systems, and apparatuses are provided for flight management to configure an aircraft configuration (config) file accessible by the avionic system wherein an avionic service is implemented by a flight management system (FMS) for corroborating allowance of access using one of a set of validation procedures for corroboration prior to execution of a request for content to the config file including validating that a user request for a session is authorized based on user identification data, that a client request by an Electronic Flight Bag (EFB) application for a session is authorized based on client identification data, and in response to the client request, determining that an EFB application request is encrypted and performing a decrypt procedure of the EFB application request based on private key data of a private key; and encrypting an EFB application response based on public key data of a public key from the config file.