PHY-Switched Data Loader for Isolated Computer Unit Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data loading systems face challenges in ensuring secure and reliable data transfer to isolated computer units, particularly in environments like aircraft, where Ethernet communication protocols can be bypassed, leading to unauthorized data transmission between units.
Innovation Solution
A data loading device that utilizes PHY components to identify and connect computer units without needing MAC addresses, employing selection modules and control units to ensure secure, isolated data transfer by preventing direct connections between units, and includes a remote control unit for managing updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If Ethernet protocol is used for data transmission, then data can be transmitted between computer units, but computer units can communicate with each other which compromises security
Solution Approach 1:
The network interface is segmented into two independent physical connections: a first physical connection for receiving data from the data source, and a second physical connection for transmitting data to the computer unit. This segmentation prevents direct communication between computer units while maintaining data transmission capability through controlled physical pathways.
Solution Approach 2:
The loading device acts as an intermediary between the data source and computer units. It receives data from the data source via the first physical connection, processes and validates it, then transmits it to the target computer unit via the second physical connection. This intermediary role prevents direct peer-to-peer communication that would compromise security.
2Reliability
If direct connection between data source and each computer unit is implemented, then data security is maintained, but system complexity increases and accessibility decreases
Solution Approach 1:
Multiple connection functions are merged into a single loading device. The device consolidates the first physical connection to the data source and multiple second physical connections to various computer units, eliminating the need for separate direct connections from the data source to each computer unit while maintaining security through controlled physical pathways.
Solution Approach 2:
The loading device is designed with multi-functionality to serve multiple computer units through a single interface. It can selectively connect to different computer units via the second physical connections while maintaining a single controlled connection point to the data source, reducing overall system complexity while preserving security.
3Adaptability or versatility
If MAC address decoding is used for data routing, then data can be routed to specific computer units, but data integrity is compromised due to multiple transformations
Solution Approach 1:
The software-based MAC address decoding and protocol transformation system is replaced with a hardware-based physical connection system. Data routing is achieved through physical switching between predetermined second physical connections rather than through multiple layers of software transformation, thereby maintaining data integrity while preserving routing capability.
Solution Approach 2:
Physical connections are predetermined and configured in advance between the loading device and computer units. This preliminary configuration eliminates the need for runtime MAC address decoding and protocol transformations, allowing data to be transmitted directly through pre-established secure pathways, thus preserving data integrity.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
Device for loading data into computer processing units from a data source, comprising at least one first connector intended to be connected to the data source and provided with a PHY component, and a plurality of second connectors intended to be connected to the computer processing units, each provided with a PHY component, the first connector being connected to the second connectors by a first selection module to define a single downlink so as to transmit data from the first connector to each of the second connectors alternately and by a second selection module to define a single uplink so as to transmit data in the reverse direction,the selection modules being arranged so that only one of the second connectors can be connected to the first connector simultaneously, and the device comprising a control unit for the selection modules to select the second connector to be connected to the first connector.