Method and system for controlling access to an aircraft-based wireless network

• US 8,495,722 B1
• Filed: 09/25/2009
• Issued: 07/23/2013
• Est. Priority Date: 09/25/2009
• Status: Active Grant

• Current Assignee: Rockwell Collins, Inc. (Raytheon Technologies Corporation d/b/a RTX)
• Original Assignee: Rockwell Collins, Inc. (Raytheon Technologies Corporation d/b/a RTX)
• Inventors: McCusker, Patrick D.
• Primary Examiner(s): Zee, Edward
• Assistant Examiner(s): To, Baotran N
• Application Number:
  US12/567,529
• Time in Patent Office: 1,397 Days
• Field of Search: 726/4, 726/9, 726/10, 726/2, 726/5, 244/118.5, 701/3, 701/32.6
• US Class Current: 726/10
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A system for controlling access to an aircraft system by a portable electronic device attempting to connect to the aircraft system via an aircraft-based wireless network includes a reader configured to read first identification information from a first device. The system further includes communications electronics for the aircraft-based wireless network configured to receive second identification information from the portable electronic device. The system yet further includes a processing circuit configured to receive the first identification information from the reader and the second identification information from the communications electronics and to compare the first and second identification information. The processing circuit is configured to grant access to the aircraft system when the comparison indicates a match between the first and second identification information.

Claims

1. A system for controlling access to an aircraft system by a portable electronic device attempting to connect to the aircraft system via an aircraft-based wireless network, the system comprising:

a reader configured to read first identification information from a first device, the first device and the first identification information associated with a user of the portable electronic device;

communications electronics for the aircraft-based wireless network configured to receive a digital certificate associated with second identification information from the portable electronic device, the second identification information identifying the portable electronic device; and

a processing circuit configured to receive the first identification information from the reader and the second identification information from the portable electronic device via the communications electronics and to compare the first and second identification information;

wherein the processing circuit is configured to grant access to the aircraft system in response to a match of the first and second identification information, wherein the portable electronic device requires a user name and password for provision of the digital certificate, wherein the portable electronic device provides the digital certificate to the communications electronics, the processing circuit performing decryption using the digital certificate to obtain the second identification information.

2. The system of claim 1, wherein the user causes the second identification information is transmitted to the communications electronics from the portable electronic device in an encrypted message;

and

wherein the processing circuit is further configured to decrypt the encrypted message to obtain the second identification information.

3. The system of claim 2, wherein the encrypted message is a digital certificate.

4. The system of claim 3, wherein the communications electronics are configured to check credentials received from the portable electronic device before accepting and decrypting the digital certificate.

5. The system of claim 1, wherein the processing circuit does not communicate with another authentication system to determine whether the portable electronic device should be allowed to access the aircraft system.

6. The system of claim 1, wherein the reader is configured to communicate with the first device via at least one of radio-frequency identification (RFID) and near field communication (NFC) technology.

7. The system of claim 1, wherein the reader is in communication with airport security system, wherein the airport security system receives a key from the first device and provides the first identification information to the reader in response to the key.

8. The system of claim 1, wherein the processing circuit is integrated with at least one of the aircraft system, the communications electronics, and circuitry associated with the reader and the reader is at least one of a card or badge reader and wherein the first device is at least one of a card and badge with passive or active circuitry.

9. The system of claim 1, wherein the communications electronics comprise a wireless access point for the aircraft-based wireless network and are configured to communicate via an IEEE 802.11 compatible protocol and the portable electronic device is at least one of a laptop computer, a mobile phone, and a personal digital assistant.

10. The system of claim 1, wherein the first information includes a token recognized by an airport aircraft security system associated with the processing circuit.

11. A method for controlling access to an aircraft system by a portable electronic device attempting to connect to the aircraft system via an aircraft-based wireless network, the method comprising:

receiving, at the processing circuit, first identification information from a reader configured to read the first identification information from a first device, the first device and the first identification information associated with a user of the portable electronic device;

receiving, at a processing circuit, second identification information from communications electronics configured to receive a digital certificate associated with the second identification information from the portable electronic device, the second identification information associated with the portable electronic device;

using the processing circuit to compare the first and second identification information; and

granting access to the aircraft system in response to a match of the first and second identification information, wherein the portable electronic device requires a user name and password for provision of the digital certificate, wherein the portable electronic device provides the digital certificate to the communications electronics, the processing circuit performing decryption using the digital certificate to obtain the second identification information.

12. The method of claim 11, wherein the second identification information is transmitted to the communications electronics from the portable electronics device in an encrypted message;

and

wherein the method further comprises decrypting the encrypted message to obtain the second identification information.

13. The method of claim 12, wherein the encrypted message is a digital certificate.

14. The method of claim 13, wherein the communications electronics are configured to check credentials received from the portable electronic device before at least one of accepting and decrypting the digital certificate.

15. The method of claim 11, further comprising:

at the portable electronic device, requesting a credential from a user via a graphical user interface.

16. The method of claim 15, further comprising:

checking the credential at the portable electronic device prior to allowing the user to further access the portable electronic device.

17. The method of claim 16, further comprising:

checking the credential at the processing circuit prior to comparing the first identification information to the second identification information.

18. The method of claim 17, further comprising:

at the processing circuit, receiving a digital certificate from the portable electronic device via the communications electronics; and

at the processing circuit, decrypting the digital certificate using the credential.

19. The method of claim 15, wherein the credential comprises at least a password for the user, a password for the aircraft-based wireless network, and a password for the aircraft system.

20. An apparatus for controlling access to an aircraft system by a portable electronic device attempting to connect to the aircraft system via an aircraft-based wireless network, the apparatus comprising:

means for receiving first identification information from a reader configured to read the first identification information from a first device, the first device and the first identification information associated with a user of the portable electronic device;

means for receiving second identification information from communication electronics configured to receive a digital certificate associated with the second identification information from the portable electronic device, the second identification information associated with the portable electronic device;

means for comparing the first and second identification information; and

means for granting access to the aircraft system when the comparison indicates a match between the first and second identification information, wherein the portable electronic device requires a user name and password for provision of the digital certificate, wherein the portable electronic device provides the digital certificate to the communications electronics, the processing circuit performing decryption using the digital certificate to obtain the second identification information.