Multi-domain Computing System with KVM Switch

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In multi-domain computing systems, especially on aircraft, the need for separate physical devices for each domain due to security requirements leads to inefficient use of space, increased weight, and higher power and thermal loads, limiting the effectiveness of existing solutions.

Innovation Solution

A rack-mountable multi-domain computing device that integrates two electrically isolated computing domains with a shared display and power source, allowing independent operation and network isolation, while using a KVM switch to manage input/output devices and maintain data separation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If separate physical computing devices are used for each domain, then network security and data isolation are ensured, but space utilization becomes inefficient and weight increases

Engineering Contradiction:

Improvenetwork securityVSAvoidsystem weight

Core Design Contradiction:

ReliabilityVSWeight of stationary object

Solution Approach 1:

The patent combines multiple computing domains into a single physical computing device, integrating separate domain-specific devices and shared devices into one unified system. This merging maintains network security through logical isolation while reducing the overall physical footprint and weight compared to using entirely separate devices for each domain.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The computing device is designed with multi-functionality to support multiple computing domains simultaneously. The system can operate different domains independently while sharing common hardware resources such as power supply, display, and processing units, thereby reducing weight while maintaining security isolation.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Reliability

If separate physical computing devices are used for each domain, then network security is ensured, but the physical footprint and space utilization become inefficient

Engineering Contradiction:

Improvenetwork securityVSAvoidphysical footprint

Core Design Contradiction:

ReliabilityVSArea of stationary object

Solution Approach 1:

The patent consolidates multiple domain-specific computing devices and shared devices into a single integrated computing device, significantly reducing the physical footprint. The separate domain-specific devices (first set and second set) and shared devices coexist within one physical chassis, maintaining security isolation while optimizing space utilization.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The system employs a nested structure where domain-specific devices are logically separated but physically nested within the same computing device housing. This allows multiple independent computing environments to reside within a single physical footprint, similar to nested dolls, maintaining security boundaries while saving space.

Inventive Principle:

Principle #7Nested doll (Nesting)

3Reliability

If separate physical computing devices are used for each domain, then data isolation is maintained, but power consumption and thermal load increase

Engineering Contradiction:

Improvedata isolationVSAvoidpower consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent merges multiple computing domains into a single device with a shared power supply and common hardware resources. This consolidation reduces redundant power consumption that would occur if separate devices were used for each domain, while maintaining data isolation through logical separation and network isolation mechanisms.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The system recovers and shares common resources such as power supply, display devices, and processing units across multiple domains. Instead of each domain having dedicated redundant resources that consume unnecessary power, the system allows these resources to be shared and recovered for use by multiple domains, reducing overall power consumption while maintaining security.

Inventive Principle:

Principle #34Discarding and recovering

4Reliability

If separate physical computing devices are used for each domain, then security is ensured, but device complexity and resource utilization efficiency worsen

Engineering Contradiction:

ImprovesecurityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the computing device into distinct functional components: domain-specific devices (first set and second set) and shared devices. This segmentation allows each domain to maintain its security boundaries while sharing common resources, reducing overall system complexity compared to having entirely separate physical devices for each domain.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS11768528B2Multi-domain computing system

Publication Date: 2023.09.26 THE BOEING CO

AI summary

Examples provide a method and apparatus for a multi-domain computing device providing physical separation of computing domains and network isolation. The multi-domain computing device includes a user facing panel with a shared display device and a keyboard, video mouse (KVM) switch. A set of domain-specific devices which are not shared between domains may include one or more processors, card readers, network devices, headset jacks, and power switches. The devices shared by the different domains include a display screen, power supply, the KVM switch and/or touchscreen. Each domain is configured to power up, boot and operate independently within a single physical unit.