MIL-STD-1553 Data Guard for Latency and Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
MIL-STD-1553 data bus systems lack a data guard solution that can be initialized and deactivated dynamically, causing latency issues when always active and being too restrictive for normal operations, necessitating a configurable data guard for monitoring and validating data traffic.
Innovation Solution
A data guard system with two switches, three couplers, a transparent bus, and a data guard device that can toggle between passive and active modes, using 1553 controllers and a microprocessor to evaluate messages against pre-defined data rule sets for validation and deep inspection, allowing for flexible operation and threat-level configuration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a data guard is always active for a remote terminal, then security validation is improved, but latency increases and the system becomes too restrictive for normal operations
Solution Approach 1:
The patent implements a dynamically configurable data guard system where the guard status (active/passive) can be changed in real-time based on operational requirements. The system transitions from a static always-active guard to a dynamic configuration that allows operators to activate or deactivate the data guard as needed, resolving the contradiction between security validation and operational latency.
Solution Approach 2:
The system changes the operational parameter of the data guard from a fixed state to a variable state that can be adjusted between active and passive modes. This parameter change allows the system to optimize between security (active mode) and performance/latency (passive mode) based on current operational context.
2Reliability
If a data guard is always active for a remote terminal, then security validation is improved, but the system becomes too restrictive for normal operations
Solution Approach 1:
The system enables dynamic switching between operational modes, allowing the data guard to be activated only when security concerns arise rather than being permanently active. This dynamic approach maintains ease of operation during normal conditions while providing security validation when needed.
Solution Approach 2:
The operational parameter of the data guard is made configurable, allowing operators to adjust the security level based on operational requirements. This parameter change resolves the contradiction by enabling the system to be permissive during normal operations and restrictive when security threats are detected.
3Adaptability or versatility
If a configurable data guard is implemented to allow dynamic activation and deactivation, then operational flexibility is improved, but device complexity increases
Solution Approach 1:
The data guard system is designed to perform multiple functions: it can operate in active mode for security validation, passive mode for monitoring without interference, and can be configured through standard 1553 bus commands. This multi-functionality justifies the increased complexity by providing versatile operational capabilities.
Solution Approach 2:
The system introduces a configurable intermediary layer between the remote terminal and the bus controller. This intermediary (the configurable data guard) adds complexity but enables flexible operation by mediating between security requirements and operational needs, allowing dynamic adjustment of security levels.
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
A system and method for monitoring data traffic on a MIL-STD-1553 data bus system with a data guard. The monitoring system includes a data guard, which may be toggled between a passive mode and an active mode using two switches. In the active mode, using a first switch, data traffic from remote terminals on the MIL-STD-1553 data bus system are placed on a guarded bus of the data guard system and sent to the data guard by way of a coupler for filtering data messages through a plurality of pre-generated data set rules. If the data traffic is validated, it is returned to the MIL-STD-1553 data bus system through a second coupler. In the passive mode, the data traffic is directed to a transparent bus by way of a third coupler using a second switch, thus allowing the MIL-STD-1553 data bus system to operate without latency concerns.