Voltage-Based Mode Switching for Secure Network Nodes

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing data networks in transportation, such as aircraft systems, face challenges in securely switching between operating modes without unintended changes, which can compromise safety and reliability, particularly due to the need for additional hardware and costly cabling for encryption and key handling.

Innovation Solution

A method that utilizes a communication and supply line to establish a connection for a network node, where changes in supply voltage determine the operating mode, allowing for secure switching between normal and configuration modes without additional hardware, using existing infrastructure like Ethernet cables that combine data communication and supply voltage, and employing predefined voltage changes and data patterns for secure mode transitions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If additional encryption hardware and key handling infrastructure are deployed to secure mode switching, then security is improved, but device complexity and cost increase

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the security function from complex encryption hardware and key management systems, isolating it to a simple voltage change detection mechanism. The processing unit detects mode switching intentions through voltage changes on the supply line and responds by enabling/disabling configuration mode, eliminating the need for dedicated encryption hardware while maintaining security.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces a voltage change on the supply line as an intermediary signal to convey mode switching intentions. This voltage intermediary replaces complex encryption protocols and key exchange mechanisms, providing a simple yet secure communication channel between network nodes for mode switching control.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If dedicated key lines are added for mode selection, then security is improved, but weight and installation cost increase

Engineering Contradiction:
ImprovesecurityVSAvoidweight
Core Design Contradiction:
ReliabilityVSWeight of moving object

Solution Approach 1:

The patent makes the supply line multi-functional by using it both for power delivery and for conveying mode switching signals. The same communication and supply line that provides electrical power to the network node also carries the voltage change signals that indicate mode switching intentions, eliminating the need for dedicated key lines and reducing overall system weight.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If local administration access is required for device configuration, then security is improved, but ease of operation deteriorates when devices are installed behind panels

Engineering Contradiction:
ImprovesecurityVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent enables the network node to autonomously detect voltage changes on its supply line and automatically switch between operational and configuration modes without requiring physical access or manual intervention. The processing unit monitors the supply line voltage and autonomously responds to mode switching signals, allowing remote configuration while maintaining security through controlled voltage-based authentication.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS9948508B2Inherent power-over-data bus signaling for secure operating mode switching
Publication Date: 2018.04.17 AIRBUS OPERATIONS GMBH
  • US9948508B2 patent drawing
  • US9948508B2 patent drawing
  • US9948508B2 patent drawing

AI summary

A method for changing an operating mode of a processing unit of a network node is described. The processing unit is connected to a communication and supply line for providing data communication and for providing a supply voltage. The method includes an establishing of a communication connection of the processing unit of the network node via the communication and supply line, a determination of a change of the supply voltage of the communication and supply line by the processing unit, and a setting of an operation mode of the processing unit based on the determined change of the supply voltage.