Onboard access control system for communication from the open domain to the avionics domain

• US 8,856,508 B2
• Filed: 06/03/2008
• Issued: 10/07/2014
• Est. Priority Date: 06/06/2007
• Status: Active Grant

• Current Assignee: Airbus Operations (European Aeronautic Defence and Space Company EADS NV)
• Original Assignee: Airbus Operations SAS (Airbus SE)
• Inventors: Genissel, Jean-Paul
• Primary Examiner(s): Zele, Krista
• Assistant Examiner(s): VOSTAL, ONDREJ C
• Application Number:
  US12/601,830
• Publication Number:
  US 20100199083A1
• Time in Patent Office: 2,317 Days
• Field of Search: 713/150
• US Class Current: 713/150
• CPC Class Codes: G06F 11/0739 in a data processing system embedded in automotive or aircraft systems
• CPC Class Codes: G06F 11/3013 where the computing system is an embedded system, i.e. a combination of hardware and software dedicated to perform a certain function in mobile devices, printers, automotive or aircraft systems testing or monitoring of control systems or parts thereof G05B23/02
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 30/15 Vehicle, aircraft or watercraft design
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/064 Hierarchical key distribution, e.g. by multi-tier trusted parties
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04N 21/2146 located in mass transportation means, e.g. aircraft, train or bus flight-deck installations for entertainment or communications B64D11/0015; arrangements specially adapted for transportation systems in broadcast systems H04H20/62; moving wireless networks H04W84/005
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

An onboard access control system to an information system onboard an aircraft, for communication from the open domain to the avionics domain, the open end avionics domains being connected to each other through a single-directional link from the avionics domain to the open domain. The system includes: a security device including: access switches controlling access to the avionics and open domains, a controller, a module for acquisition putting data into buffer memory and transmission to the avionics domain, a data control module, an acquisition module from the open domain and putting into buffer memory, and an operator'"'"'s authentication mechanism.

Claims

1. An onboard access control system to an information system onboard an aircraft, including an avionics domain satisfying clearly defined certification rules, and an open domain based on general public components accessible to all operators, the open domain operating according to a first communication protocol and the avionics domain operating according to a second communication protocol that is different from the first communication protocol, the system comprising:

a single-directional link that allows communication from the avionics domain to the open domain; and

a secure link for communication from the open domain to the avionics domain, the secure link including

an operator authentication section obtaining an operator'"'"'s profile, and

a security device comprising

first and second hardware access switches operating as an electronic lock preventing a permanent communication link from the open domain to the avionics domain, the first hardware access switch connected between the open domain and a first access module and the second hardware access switch connected between a second access module and the avionics domain,

a controller that receives the operator'"'"'s profile and controls opening of the first and second hardware access switches for durations that depend on the operator'"'"'s profile,

the first access module including a first buffer memory, the first access control module being configured to receive data from the open domain through the first hardware access switch according to the first communication protocol and store the data originating from the open domain in the first buffer memory,

the second access module including a second buffer memory, the second access module being configured to put the data from the first buffer memory into the second buffer memory for subsequent transmission through the second hardware access switch to the avionics domain according to the second communication protocol,

a data control module situated between the first and second access modules and configured to define filter criteria applicable to all exchanges between the first and second buffer memories, and

the controller is further configured to erase the first buffer memory before closing the second hardware access switch to allow the data from the second buffer memory to be transmitted through the second hardware access switch to the avionics domain according to the second communication protocol.

2. A system according to claim 1, in which the authentication section comprises an electronic reader, a biometric sensor, or a code reader.

3. A system according to claim 1, in which the operation authentication section comprises a secure link between the aircraft and ground to allow an operator on the ground to identify himself/herself to thereby obtain the operator'"'"'s profile.

4. A system according to claim 1, in which the data control module includes protection mechanisms in a network, and transport and application layers of an OSI model.

5. A system according to claim 1, in which the data control module includes an encryption unit.

6. A system according to claim 1, in which the data control module is configured by a data filtering table.

7. A system according to claim 1, in which the first and second communication protocols used in each of the avionics and open domains are different and participate in increasing security of data exchanges between the avionics and open domains.

8. A system according to claim 1, in which the aircraft is a plane.

9. An aircraft using a system according to claim 1.