Redundant Network Frame Verification for Cyberattack Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing redundant communication networks in avionics systems, such as those described in document FR 2,864,393 B1, are not robust enough to detect cyberattacks effectively and are sensitive to potential compromises of one of the elementary networks.

Innovation Solution

An electronic receiving device configured to connect to multiple independent elementary networks, which includes a receiving module to receive data frames and a verification module to calculate and compare frame check codes across networks, ensuring consistency and detecting inconsistencies or cyberattacks, thereby enhancing cybersecurity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If frame check codes are calculated and compared across elementary networks, then cybersecurity robustness is improved, but device complexity increases

Engineering Contradiction:

Improvecybersecurity robustnessVSAvoidverification module complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The verification module pre-calculates expected frame check codes for each elementary network before receiving frames. When frames are received, the module simply compares the received frame check codes against these pre-calculated values, eliminating the need for complex real-time verification algorithms and reducing operational complexity while maintaining high cybersecurity robustness

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The invention creates a virtual copy of the frame check code verification process by calculating what the frame check codes should be for each elementary network. This virtual reference allows the system to detect cyberattacks by comparing actual received codes against the calculated expected codes, providing robust security without requiring complex real-time analysis of incoming traffic patterns

Inventive Principle:

Principle #26Copying

2Measurement precision

If all received frames are stored for verification, then measurement precision is improved, but memory requirements increase

Engineering Contradiction:

Improveframe consistency verification accuracyVSAvoidmemory storage requirements

Core Design Contradiction:

Measurement precisionVSVolume of stationary object

Solution Approach 1:

The invention extracts only the essential verification information (frame check codes) from the complete frame data. By calculating and comparing only these condensed check codes rather than storing entire frames, the system maintains precise verification capability while dramatically reducing memory storage requirements from full frame buffers to minimal check code tables

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The system transforms the verification approach by changing from storing complete frame parameters (high memory usage) to storing and comparing only frame check code parameters (low memory usage). This parameter transformation maintains verification precision because the check codes are mathematically derived from the complete frame data, preserving all necessary verification information in a compressed form

Inventive Principle:

Principle #35Parameter changes

3Reliability

If frame check codes are compared for each received frame identifier, then cybersecurity detection capability is improved, but processing time increases

Engineering Contradiction:

Improvecyberattack detection capabilityVSAvoidframe verification processing time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The verification module pre-calculates and stores the expected frame check codes for all elementary networks before frame reception. During operation, it performs only simple comparison operations between received check codes and pre-calculated values, dramatically reducing processing time while maintaining comprehensive cyberattack detection capability across all frames

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system performs verification on a selective basis by comparing frame check codes only for frames that require verification against the pre-calculated reference values. This partial verification approach, focused on critical check code comparison rather than complete frame analysis, reduces overall processing time while maintaining high detection capability for actual cyberattacks

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS10756848B2Electronic device and method for receiving data via a redundant communication network, related communication system and computer program

Publication Date: 2020.08.25 THALES SA

AI summary

This electronic device for receiving data via a redundant communication network including at least two independent elementary networks, is configured to be connected to each elementary network, including a receiving module configured to receive, via the redundant communication network, at least one data frame, each frame including a frame identifier and a data field, each frame being transmitted over each of the elementary networks; and a verification module configured, for at least one received frame identifier, to calculate a frame check code for each of the elementary networks, then to compare the frame check codes between the elementary networks, each frame check code depending on the data field of the frame received via the respective elementary network.