UAS Identity Management via Dynamic Broadcast and Network RID Fallback
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems lack an accurate and efficient method for managing and identifying aircraft, including manned and unmanned systems, within a particular airspace, leading to safety and privacy concerns, as well as challenges in air traffic control coordination and law enforcement access to aircraft information.
Innovation Solution
The proposed system, known as the Flight Portal ID (FPID) system, provides a secure, scalable, and extensible identity management system that enables remote identification of unmanned aircraft systems (UAS) through mediated access policies, utilizing blockchain technology for secure data sharing and authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If broadcast RID is used for UAS identification, then local identification capability is improved, but network connectivity requirement is reduced
Solution Approach 1:
The system dynamically adjusts identification methods based on network availability. When network connectivity is available, Network RID is used for comprehensive identification. When network is unavailable, the system falls back to Broadcast RID for local identification, creating a dynamic adaptive system that maintains functionality across varying connectivity conditions.
Solution Approach 2:
The system introduces an intermediary layer that bridges Broadcast RID and Network RID. This intermediary enables UAS to maintain identification capability by first attempting Network RID and falling back to Broadcast RID when network is unavailable, thus mediating between the two identification methods to ensure continuous operation.
2Loss of information
If Network RID is used for UAS identification, then comprehensive identification information is improved, but dependency on internet connectivity is increased
Solution Approach 1:
The system performs preliminary action by first attempting Network RID to obtain comprehensive identification information. However, it prepares for network failure by having Broadcast RID pre-configured as a fallback mechanism. This preliminary setup ensures that even if network connectivity is lost, identification capability is maintained through the pre-prepared broadcast system.
Solution Approach 2:
The system implements beforehand cushioning by establishing Broadcast RID as a backup identification mechanism. This cushioning protects against network connectivity failures, ensuring that comprehensive identification information remains available even when Network RID cannot be used, thus cushioning the system against network-dependent risks.
3Object-affected harmful factors
If access policies are implemented for flight data, then privacy protection is improved, but data access complexity is increased
Solution Approach 1:
The system introduces an intermediary access control layer that mediates between data holders and data requesters. This intermediary manages access policies by evaluating authentication credentials and authorization levels, thereby protecting privacy while providing controlled access to flight data. The intermediary handles the complexity of access control logic centrally, shielding users from direct complexity.
Solution Approach 2:
The system implements self-service by allowing users to authenticate and authorize their own data access requests. Users can manage their own privacy settings and control what information is shared, reducing the need for complex centralized management while maintaining strong privacy protection through user-driven access control.
4Reliability
If Session IDs are used for flight tracking, then flight plan verification is improved, but system scalability requirement is increased
Solution Approach 1:
The system segments the flight tracking function into independent components: Session ID generation, flight plan verification, and data access control. This segmentation allows each component to be optimized independently, with Session IDs handling verification reliability while the modular architecture supports scalability through distributed processing and parallel operations.
Solution Approach 2:
The system adds a dimensional layer of abstraction by introducing Session IDs as a separate verification dimension. Rather than directly managing complex flight tracking data, the system uses Session IDs as a simplified verification token, adding a new dimension to the verification process that improves reliability while keeping the underlying data structures manageable for scaling.
Data Source
AI summary
Embodiments of the present disclosure describe a secure, scalable and extensible aircraft and other system and device identity management (IdM) system that enables services for identity provisioning (idP), and identity validation, verification and authentication (idVV&A). The identity and management system uses dual-mode local broadcast and network connected device communication elements across a wide area network. The system serves as a Source System of Record (SSoR) that securely ingests private registration data, system/device identity verification and authentication requests and returns validated identity and activity information.