Manual Interlock Switch for Aircraft Maintenance Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional aircraft maintenance systems lack effective measures to prevent unauthorized access and activation of critical systems, posing hazards to personnel and flight safety due to the risk of malicious or accidental network attacks.

Innovation Solution

A manual interlock switch, accessible only to authorized personnel, is implemented to block unauthorized activation of maintenance functions, ensuring that only enabled states allow system responses, and generates fault messages for invalid requests to investigate security breaches.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If physical security controls and procedures are used to ensure hazard mitigation, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces complex physical security controls and procedures with a digital interlock mechanism. The interlock switch provides a simple mechanical input that triggers electronic logic to prevent unauthorized maintenance function activation, eliminating the need for complex physical security systems while maintaining security effectiveness.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The interlock switch acts as an intermediary element between authorized personnel and the maintenance functions. It provides a simple interface that, when combined with electronic interlock logic, prevents unauthorized access without requiring complex authentication systems or physical security measures.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If networked maintenance tools are used to improve ease of operation, then ease of operation is improved, but object-affected harmful factors increase

Engineering Contradiction:
Improveease of operationVSAvoidmalicious or accidental attack risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The interlock mechanism is configured to prevent harmful actions before they can occur. When the interlock is in the inhibited state, the system proactively blocks maintenance function activation, preventing both malicious and accidental attacks before they can affect the aircraft systems.

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

The system incorporates feedback through fault message generation. When an unauthorized maintenance function activation attempt is detected, the system generates fault messages that provide feedback about the security breach, enabling investigation and response while maintaining the blocked state.

Inventive Principle:
Principle #23Feedback

3Productivity

If automated maintenance functions are activated without interlock controls, then productivity is improved, but reliability deteriorates

Engineering Contradiction:
Improvemaintenance function activation speedVSAvoidunauthorized activation risk
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The interlock switch is set to a default inhibited state before maintenance operations begin. This preliminary action ensures that maintenance functions cannot be activated unless the interlock is first enabled by authorized personnel, preventing unauthorized activation while maintaining efficient automated operation when properly authorized.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP1999931B1System and method for detecting security violation
Publication Date: 2018.03.07 THE BOEING CO
  • EP1999931B1 patent drawingFigure 1
  • EP1999931B1 patent drawingFigure 2

AI summary

A system and a method for ensuring that the initiation of mobile platform operations using maintenance terminals or other tools is prohibited when maintenance activities are not intended to be performed. The solution involves the incorporation of a manual interlock switch (accessible only to authorized personnel) that blocks activation of certain functions during times when such activation would be hazardous and when no properly authorized person has authorized such activation. No system for performing such a function will respond to a request unless the interlock is enabled. Should such a request be received, the system is required to report a fault, so that an investigation can be made as to the cause of the invalid request.