Secure USB Device for Aircraft Data Loading

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current data loading techniques in industries like aircraft and industrial control systems face challenges in securing data against malicious content, often requiring complex processes with high operational overhead.

Innovation Solution

A USB device capable of switching between mass storage and non-mass storage modes, equipped with a processor, memory, and security checks, which performs cryptographic verifications and deletes potentially dangerous files before allowing data transfer to system components.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If complex security processes are used to secure data loads, then data security is improved, but device complexity and operational overhead increase

Engineering Contradiction:
Improvedata securityVSAvoidcomplexity of security processes
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the security verification function from the host system and places it in a separate USB device. This USB device independently performs security checks on data loads before they are transferred to the host, removing the burden of complex security processes from the main system while maintaining high security standards.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The USB device performs security verification in advance, before data loads are transferred to the host system. By checking the integrity and authenticity of data loads beforehand, the system prevents potentially harmful data from entering the host, thereby improving security without requiring complex ongoing security processes.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If comprehensive security checks are performed on data loads, then data security is improved, but operational time and efficiency decrease

Engineering Contradiction:
Improvedata securityVSAvoidoperational overhead
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The USB device autonomously performs security verification without requiring intervention from the host system or user. The device independently checks data loads, manages its own security protocols, and automatically transfers verified data, thereby reducing operational overhead and time loss while maintaining comprehensive security checks.

Inventive Principle:
Principle #25Self-service

3Reliability

If specialized data loading workstations are used, then data security is improved, but device complexity and cost increase

Engineering Contradiction:
Improvedata securityVSAvoidcomplexity of data loading system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The USB device is designed as a multi-functional unit that combines data storage, security verification, and data transfer capabilities in a single device. This universal approach eliminates the need for specialized data loading workstations while maintaining security standards, thereby reducing system complexity and cost.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent uses a standard USB interface, which is a widely adopted copy of existing technology. By implementing security verification through a familiar USB device rather than a specialized workstation, the system leverages existing infrastructure and protocols, reducing complexity while maintaining security effectiveness.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS10409991B2Technique for secure data loading to a system component
Publication Date: 2019.09.10 AIRBUS CYBERSECURITY GMBH
  • US10409991B2 patent drawing
  • US10409991B2 patent drawing

AI summary

A USB device for secure data loading to a system component, such as of an aircraft. The USB device is operable in a mass storage mode and in a non-mass storage mode. The USB device initially operates in the non-mass storage mode upon startup and comprises a storage for storing data to be loaded to the system component, a processor and a memory, wherein the memory contains instructions executable by the processor such that the USB device is operable to perform a security check on the data to be loaded to the system component, and switch, upon the security check, from the non-mass storage mode to the mass storage mode to provide the data for loading to the system component.