Secure Enclave for Satellite Payload Command Privacy

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current payload operations in commercial satellites lack resource allocation privacy, with all switching and control managed by a single satellite controller without secure resource allocation.

Innovation Solution

A secure enclave system is implemented in the host satellite operation center to generate and encrypt commands for both host and hosted users, using separate communication security varieties for each user, allowing private and dynamic allocation of resources on the satellite payload.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a single satellite controller manages all payload switching and control, then the system structure is simple and ease of operation is improved, but resource allocation privacy and security are lost

Engineering Contradiction:
Improvepayload control operationVSAvoidresource allocation privacy
Core Design Contradiction:
Ease of operationVSLoss of information

Solution Approach 1:

The satellite controller is segmented into multiple independent controllers, each managing specific payload functions. This segmentation enables private resource allocation among multiple users while maintaining operational simplicity through modular architecture.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A secure enclave acts as an intermediary between the satellite controller and external users, enabling private resource allocation decisions without exposing sensitive payload control information. The secure enclave mediates command generation and encryption to protect resource allocation privacy.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If multiple users share satellite payload resources, then resource utilization efficiency is improved, but system complexity and security management difficulty increase

Engineering Contradiction:
Improveresource utilization efficiencyVSAvoidcontrol system complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The secure enclave provides universal security services to multiple users through a common interface, enabling resource sharing without proportionally increasing system complexity. Each user benefits from the same encrypted command and control infrastructure.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system changes the security parameter from centralized unencrypted control to distributed encrypted control with individual key pairs for each user. This parameter change enables multi-user resource sharing while maintaining manageable complexity through standardized cryptographic protocols.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If encrypted commands are transmitted for each user, then security and privacy are improved, but communication bandwidth requirements and system complexity increase

Engineering Contradiction:
Improvecommand securityVSAvoidcommunication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Public and private key pairs are pre-generated and distributed to users before actual payload operations. This preliminary cryptographic setup enables secure encrypted communication without adding complexity during real-time command transmission, as the encryption/decryption infrastructure is already in place.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3761523B1Commercial satellite operations with secure enclave for payload operations
Publication Date: 2022.03.23 THE BOEING CO
  • EP3761523B1 patent drawingFigure 1
  • EP3761523B1 patent drawingFigure 2
  • EP3761523B1 patent drawingFigure 3A

AI summary

Systems, methods, and apparatus for commercial satellite operations with secure enclave for payload operations are disclosed. In one or more embodiments, the disclosed method comprises generating, by a secure enclave of a host satellite operation center (SOC), hosted commands according to service specifications for at least one hosted user. The method further comprises generating, by a SOC operation portion of the host SOC, host commands according to service specifications for a host user. Also, the method comprises transmitting, by the host SOC, the host commands and the hosted commands to a vehicle. In addition, the method comprises reconfiguring a host/hosted payload on the vehicle according to the host commands and the hosted commands. Additionally, the method comprises generating, by the host/hosted payload, host telemetry and hosted telemetry. Also, the method comprises transmitting, by the vehicle, the host telemetry and the hosted telemetry to the host SOC.