Methods and systems for network failure reporting

• US 7,581,002 B2
• Filed: 10/06/2006
• Issued: 08/25/2009
• Est. Priority Date: 10/06/2006
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Royalty, Charles D.
• Primary Examiner(s): Meky; Moustafa M
• Application Number:
  US11/539,512
• Publication Number:
  US 20080086554A1
• Time in Patent Office: 1,054 Days
• Field of Search: 709200-203, 709217-227, 244/121, 340/945
• US Class Current: 709/224
• CPC Class Codes: B64D 45/0059 by communicating emergency situations to ground control or between crew members
• CPC Class Codes: B64D 45/0063 by avoiding the use of electronic equipment during flight, e.g. of mobile phones or laptops
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

Methods and systems for alerting airline personnel to potential aircraft data network security breaches is provided. The airline personnel includes at least one of flight crew personnel and maintenance crew personnel. The method includes detecting and categorizing potential aircraft data network security breaches, and recording said potential aircraft data network security breaches within an aircraft'"'"'s existing crew alerting and maintenance data storage and reporting system.

Claims

1. A method for alerting airline personnel to potential aircraft data network security breaches wherein the airline personnel includes at least one of flight crew personnel and maintenance crew personnel, said method comprising:

detecting and categorizing potential aircraft data network security breaches;

notifying at least one of flight deck and cabin crew members as to a correct course of action with respect to the security breaches via alerts and messages provided in a familiar format; and

recording said potential aircraft data network security breaches within an aircraft'"'"'s existing maintenance data storage and reporting system.

2. A method in accordance with claim 1 wherein said detecting and categorizing potential aircraft data network security breaches comprises categorizing a detected aircraft data network security fault or failure that affects the dispatch of an associated aircraft using a message, said notifying comprises sending a status message is readable by the aircraft maintenance crew, said status message does not require action by a flight crew operating the aircraft.

3. A method in accordance with claim 1 wherein said detecting and categorizing potential aircraft data network security breaches comprises categorizing a detected anomaly indicative of a successful aircraft data network attack, said notifying comprises using an advisory message, said advisory message informing the flight crew of specific passenger activities in flight.

4. A method in accordance with claim 3 wherein said categorizing a detected anomaly indicative of a successful aircraft data network attack comprises locating a specific connection to the aircraft data network where the attack originated and disabling the specific connection.

5. A method in accordance with claim 4 wherein said locating a specific connection to the aircraft data network where the attack originated comprises alerting law enforcement personnel of potential criminal activity.

6. A method in accordance with claim 1 wherein said detecting and categorizing potential aircraft data network security breaches comprises categorizing a detected anomaly indicative of a degradation in safety-related systems or functions using a message, said notifying comprises sending a caution message informing the flight crew of alternate procedures and potentially diversion of the aircraft.

7. A method in accordance with claim 1 wherein said detecting and categorizing potential aircraft data network security breaches comprises categorizing a detected event that requires immediate flight crew action to ensure the safety of the aircraft as a warning, said notifying comprises sending a warning message informing the flight crew of emergency procedures up to an immediate landing of the aircraft.

8. A method of operating a data network of an aircraft wherein the data network includes at least an aircraft control portion, an airline operational services portion, a passenger entertainment portion, and a passenger owned devices portion, at least one portion including an interface to a ground based network, said method comprising:

detecting potential network attacks on the aircraft data network;

categorizing the attacks based on an incrementally more severe compromise of the safety of the aircraft from the detected attack;

determining a flight crew response to the attack based on the category of the attack; and

alerting the flight crew to the attack and the determined response though the aircraft'"'"'s existing crew alerting system.

9. A method in accordance with claim 8 further comprising displaying maintenance diagnostic and recovery response information on the existing maintenance data storage and reporting system.

10. A method in accordance with claim 8 wherein said determining a flight crew response comprises determining whether shutting down a specific service at a specific port will isolate the attack.

11. A method in accordance with claim 8 wherein said determining a flight crew response comprises determining whether shutting down a specific service to a portion of the network will isolate the attack.

12. A method in accordance with claim 8 wherein said determining a flight crew response comprises determining whether completely shutting down a physical port will isolate the attack.

13. A method in accordance with claim 8 wherein said determining a flight crew response comprises determining whether completely shutting down a portion of the network will isolate the attack.

14. A method in accordance with claim 8 wherein said determining a flight crew response comprises permitting access to the aircraft data network by off-board service personnel for recovery services.

15. A method in accordance with claim 8 further comprising determining an object of the attack.

16. An aircraft data network system communicatively coupled to an existing crew alerting and a maintenance data storage and reporting system of an aircraft, said aircraft data network comprising:

a plurality of network portions, each portion comprising an associated network security level;

a module communicatively coupled to said aircraft data network, said module adapted to;

detect potential network attacks on the aircraft data network;

categorize the attacks based on an incrementally more severe compromise of the safety of the aircraft from the detected attack;

determine a flight crew response to the attack based on the category of the attack and the location of the source of the attack; and

alert the flight crew to the attack and the determined response through the aircraft'"'"'s existing crew alerting system.

17. A system in accordance with claim 16 wherein said module is further configured to display maintenance diagnostic and recovery response information on the existing maintenance data storage and reporting system.

18. A system in accordance with claim 16 wherein said aircraft data network includes at least an aircraft control portion, an aircraft service portion, and a passenger owned devices portion, at least one portion including an interface to a ground based network.

19. A system in accordance with claim 16 wherein said module is further adapted to determine whether shutting down a specific service at a specific port will isolate the attack.

20. A system in accordance with claim 16 wherein said module is further adapted to determine whether shutting down a specific service to a portion of the network will isolate the attack.

21. A system in accordance with claim 16 wherein said module is adapted to categorize the attacks based on an incrementally more severe comprise of the safety of the aircraft from the detected attack.

22. A system in accordance with claim 16 wherein said module is adapted to locate a specific connection to the aircraft data network where the attack originated and disable the specific connection.