System and method to prevent misuse of aircraft messages

• US 9,544,047 B2
• Filed: 05/01/2013
• Issued: 01/10/2017
• Est. Priority Date: 05/01/2013
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Sampigethaya, Radhakrishna G
• Primary Examiner(s): Nguyen, John Q
• Assistant Examiner(s): KERRIGAN, MICHAEL V
• Application Number:
  US13/874,862
• Publication Number:
  US 20140327564A1
• Time in Patent Office: 1,350 Days
• US Class Current: 1/1
• CPC Class Codes: G08G 5/0008 with other aircraft
• CPC Class Codes: G08G 5/0013 with a ground station
• CPC Class Codes: H04B 7/18506 Communications with or from aircraft, i.e. aeronautical mobile service
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18

Abstract

An avionics system allows aircraft to introduce bogus “ADS-B Out” messages that are recognized as false only by authorized users. The system enables aircrafts flying at low altitudes to prevent misuse of their ADS-B Out information by maliciously operated cyber and physical attack tools. Aspects of the illustrative embodiment include the system architecture, including an Airborne ATC Processor and Ground ATM System Processor; a process employed by aircraft for generating authorized bogus ADS-B Out messages; a process employed by aircraft for transmitting authorized bogus ADS-B Out messages; and a process employed by air traffic control and other aircraft for decoding the authorized bogus ADS-B Out messages.

Claims

1. A method to prevent malicious misuse of automatic dependent surveillance-broadcast (ADS-B) messages transmitted by a first aircraft, comprising:

inserting false aircraft position and movement information into an ADS-B Out signal to be transmitted by the first aircraft, and broadcasting from the first aircraft the ADS-B Out signal comprising true aircraft position and movement information for the first aircraft and false aircraft position and movement information for the first aircraft; and

receiving the ADS-B Out signal broadcast by the first aircraft, comparing the received information to known flight paths and sensor data, determining the true aircraft position and movement information of the first aircraft, and determining the false aircraft position and movement information of the first aircraft.

2. The method of aircraft signal transmission of claim 1, further comprising:

determining position and movement information of a neighboring aircraft in proximity to the first aircraft; and

computing false movement information for the first aircraft, wherein the false movement information of the first aircraft does not overlap with a flight trajectory of the neighboring aircraft.

3. The method of claim 2, wherein the computing is performed at least partially by an off-board system not located on the first aircraft.

4. The method of claim 1, wherein the comparing and determining are performed by at least one of the first aircraft, a neighboring aircraft, or ground based systems.

5. The method of claim 1, further comprising inserting the false information into the signal transmission in each of a plurality of time periods, wherein the false information of a first time period is used for computing the false information for inserting in a second time period.

6. An avionics system for preventing misuse of automatic dependent surveillance-broadcast (ADS-B) messages transmitted by an aircraft, comprising:

an ADS-B transponder configured to generate “

ADS-B Out”

messages to be broadcast for reception by other aircraft and an authorized ADS-B ground system equipped with “

ADS-B In”

technology, wherein the ADS-B Out messages include an identity code and position, velocity, and time information; and

an airborne processor operatively coupled to the ADS-B transponder and configured to cause the ADS-B transponder to transmit authorized bogus ADS-B Out messages containing bogus position information;

wherein the authorized bogus ADS-B Out messages are configured to be received by another system, compared to known flight paths and sensor data, and used to determine true and false aircraft position and movement information of the aircraft.

7. The avionics system of claim 6, further comprising a ground-based air traffic management (ATM) system processor configured to enable the authorized ADS-B ground station to recognize as false the bogus position information.

8. The avionics system of claim 7, wherein the ground-based ATM system processor is further configured to use a radar feed or multilateration data feed to identify authorized bogus ADS-B Out messages.

9. The avionics system of claim 6, wherein the airborne processor is further configured to employ a first algorithm for causing the ADS-B transponder to generate the authorized bogus ADS-B message so as to ensure that a computed bogus flight trajectory of the aircraft is non-overlapping with actual trajectories of other aircraft in the vicinity of the aircraft.

10. The avionics system of claim 6, wherein the airborne processor is further configured to employ a second algorithm for transmitting authorized bogus ADS-B Out messages, the second algorithm comprising the following steps:

(1) transmitting a first ADS-B Out message (A1_1) containing an actual position of the aircraft at a first time (t_1);

(2) transmitting a second ADS-B Out message (A1_2) containing a bogus position of the aircraft (BogusA1_position1_t1) within a first transmission period after the first time (t_1); and

(3) repeating step (2) a number of times (m) so as to transmit m bogus messages within said first transmission period.

11. The avionics system of claim 6, wherein the airborne processor comprises a software application running on a flight management system (FMS).

12. The avionics system of claim 6, wherein the airborne processor is further configured to decode and detect maliciously spoofed ADS-B Out messages received by the aircraft.

13. A non-transitory computer readable medium comprising instructions to be executed by a processor, comprising:

instructions for inserting false aircraft position and movement information into a signal to be transmitted by a first aircraft; and

instructions for broadcasting from the first aircraft a signal transmission comprising true aircraft position and movement information for the first aircraft and false aircraft position and movement information for the first aircraft;

wherein the signal broadcast by the first aircraft is configured to be received by another system, compared to known flight paths and sensor data, and used to determine the true and false aircraft position and movement information of the first aircraft.

14. The computer readable medium of claim 13, further comprising:

instructions for determining position and movement information of a neighboring aircraft in proximity to the first aircraft; and

instructions for computing false movement information for the first aircraft, wherein the false movement information of the first aircraft does not overlap a flight trajectory of the neighboring aircraft.

15. The computer readable medium of claim 14, wherein the instructions are configured for execution by a processor on the first aircraft.

16. The computer readable medium of claim 14, wherein the instructions are configured for execution by a processor remote from the first aircraft.

17. The computer readable medium of claim 13, further comprising:

instructions for comparing the transmitted data of the first aircraft to known flight paths and received sensor data;

instructions for determining the true aircraft position and movement information of the first aircraft; and

instructions for determining the false aircraft position and movement information of the first aircraft.

18. The computer readable medium of claim 17, wherein the instructions for comparing and instructions for determining are executed by at least one of the first aircraft, a neighboring aircraft in proximity to the first aircraft, or ground based systems.

19. The computer readable medium of claim 13, further comprising instructions for inserting the false information into the signal transmission in each of a plurality of time periods, wherein the false information of a first time period is used for computing the false information for inserting in a second time period.