SYSTEMS AND METHODS FOR RELATING NETWORK INTRUSIONS TO PASSENGER-OWNED DEVICES

    公开(公告)号:US20200092308A1

    公开(公告)日:2020-03-19

    申请号:US16134882

    申请日:2018-09-18

    Abstract: A vehicle network system is configured to detect unauthorized intrusions by a passenger-owned device, and to identify the passenger-owned device based at least in part on stored information representative of network communications. The vehicle network system can be further configured to determine a position of the intruding passenger-owned device within a passenger area of the vehicle and to obtain a name and/or camera image of a passenger associated with the device. The position of the intruding device can be identified based at least in part on communications between the intruding device and one or more network-access devices distributed throughout the passenger area.

    METHOD FOR ANALYZING SUSPICIOUS ACTIVITY ON AN AIRCRAFT NETWORK
    2.
    发明申请
    METHOD FOR ANALYZING SUSPICIOUS ACTIVITY ON AN AIRCRAFT NETWORK 有权
    用于分析飞机网络上的可疑​​活动的方法

    公开(公告)号:US20170054752A1

    公开(公告)日:2017-02-23

    申请号:US14829889

    申请日:2015-08-19

    CPC classification number: H04L63/1491 H04L63/1433 H04L2463/146

    Abstract: An aircraft includes an aircraft network having nodes and links and a sandbox network in communication with the aircraft network. The sandbox network simulates the aircraft network and includes sandbox nodes corresponding to the nodes of the aircraft network, a first set of sandbox links corresponding to the links of the aircraft network, and a second set of sandbox links providing communication between sandbox nodes not in communication via the first set of sandbox links. Computer executable instructions, when executed, perform the steps of: generating network traffic over the sandbox network such that the sandbox network models a behavior of the aircraft network; identifying a suspicious activity on the aircraft network; routing the suspicious activity from the aircraft network to the sandbox network; and analyzing the suspicious activity as the suspicious activity traverses through the sandbox network.

    Abstract translation: 飞机包括具有节点和链路的飞行器网络和与飞行器网络通信的沙箱网络。 沙箱网络模拟飞机网络并且包括对应于飞行器网络的节点的沙箱节点,对应于飞行器网络的链路的第一组沙箱链路,以及提供不在通信中的沙箱节点之间的通信的第二组沙箱链路 通过第一套沙箱链接。 计算机可执行指令在执行时执行以下步骤:在沙箱网络上产生网络流量,使得沙箱网络模拟飞行器网络的行为; 识别飞机网络上的可疑​​活动; 将可疑活动从飞机网络路由到沙箱网络; 并在可疑活动通过沙箱网络时分析可疑活动。

    AERONAUTICAL MESSAGE MONITOR
    3.
    发明申请
    AERONAUTICAL MESSAGE MONITOR 有权
    航空消息监控

    公开(公告)号:US20170054740A1

    公开(公告)日:2017-02-23

    申请号:US14829093

    申请日:2015-08-18

    Abstract: A system includes a transmitting line replaceable unit (TLRU) configured to receive messages including instructions for avionics receiving line replaceable units (RLRUs). The system further includes a memory configured to store validation data including a set of expected messages. A monitor is further included and is configured to monitor messages received at the TLRU and further configured to determine whether received messages are valid based on at least a portion of the set of expected messages stored in the memory. A plurality of RLRUs are further included and configured to receive message from the TLRU and to execute the instructions included in the received messages.

    Abstract translation: 系统包括被配置为接收消息的传输线路可替换单元(TLRU),其包括用于航空电子设备接收线路可替换单元(RLRU)的指令。 该系统还包括被配置为存储包括一组预期消息的验证数据的存储器。 还包括监视器,并且被配置为监视在TLRU处接收到的消息,并进一步被配置为基于存储在存储器中的预期消息集合的至少一部分来确定接收到的消息是否有效。 还包括多个RLRU并配置为从TLRU接收消息并执行包括在接收到的消息中的指令。

    System and Method for Evaluating Cyber-Attacks on Aircraft
    4.
    发明申请
    System and Method for Evaluating Cyber-Attacks on Aircraft 有权
    评估飞机上网络攻击的系统和方法

    公开(公告)号:US20160358497A1

    公开(公告)日:2016-12-08

    申请号:US14570848

    申请日:2014-12-15

    CPC classification number: G09B9/085 G09B9/16 H04L63/1433 H04L63/1441 H04L67/12

    Abstract: A system for evaluating a cyber-attack on an aircraft may include a display associated with the aircraft, a sensor system configured to generate sensor data for a pilot, and a data processing system configured to: (1) generate simulation data, (2) generate a flight simulation from the simulation data, (3) simulate the cyber-attack on at least one aircraft system during the flight simulation, (4) generate virtual flight data during the flight simulation, and (5) present the sensor data and the virtual flight data.

    Abstract translation: 用于评估飞行器上的网络攻击的系统可以包括与飞行器相关联的显示器,被配置为生成用于导频的传感器数据的传感器系统,以及被配置为:(1)生成模拟数据的数据处理系统,(2) (3)模拟飞行模拟过程中至少一架飞机系统的网络攻击,(4)在飞行模拟过程中生成虚拟飞行数据,(5)提供传感器数据和 虚拟飞行数据。

    MULTIBAND WIRELESS DATA TRANSMISSION BETWEEN AIRCRAFT AND GROUND SYSTEMS
    5.
    发明申请
    MULTIBAND WIRELESS DATA TRANSMISSION BETWEEN AIRCRAFT AND GROUND SYSTEMS 有权
    飞机与地面系统之间的多重无线数据传输

    公开(公告)号:US20160344467A1

    公开(公告)日:2016-11-24

    申请号:US14516668

    申请日:2014-10-17

    CPC classification number: H04B7/18506 H01Q1/286 H01Q5/00

    Abstract: Provided are methods and systems for multiband wireless data transmission between aircraft and ground systems. The transmission uses different wavelength ranges, each wavelength range corresponding to a different data domain and establishing a different communication channel. This wavelength differentiation provides physical separation between different data domains and, as a result, improves data security. Furthermore, a single broadband antenna is used on the exterior of the aircraft for transmitting data sets from different data domains. The single antenna configuration reduces drag and weight and improves structural integrity of the aircraft in comparison to multi-antenna configurations. Different aircraft communication modules, which are connected to different aircraft systems, handle different data domains and operate at different wavelength ranges. These modules are connected to the same antenna using a multiplexer. This connection may be controlled using gate devices and may be conditioned on verification of communication channel availability, security status, and other factors.

    Abstract translation: 提供了用于飞机和地面系统之间的多频带无线数据传输的方法和系统。 传输使用不同的波长范围,每个波长范围对应于不同的数据域,并建立不同的通信信道。 这种波长差异提供了不同数据域之间的物理分离,从而提高了数据安全性。 此外,在飞机的外部使用单个宽带天线从不同数据域传输数据集。 与多天线配置相比,单天线配置减小了拖曳和重量并提高了飞机的结构完整性。 连接到不同飞机系统的不同飞机通信模块处理不同的数据域并在不同的波长范围内工作。 这些模块使用多路复用器连接到同一个天线。 可以使用门设备来控制该连接,并且可以对通信信道可用性,安全状态和其他因素的验证进行调节。

    Vehicle vulnerability testing
    6.
    发明授权

    公开(公告)号:US11727118B2

    公开(公告)日:2023-08-15

    申请号:US16678743

    申请日:2019-11-08

    CPC classification number: G06F21/577 G06F9/54 G06F2221/034

    Abstract: A testing device includes a first interface device configured to enable communication with a first component of a vehicle and a second interface device configured to enable communication with a second component of the vehicle. The testing device includes a test module storage configured to store one or more test modules and also includes a user interface and a test controller. The test controller is responsive to the user interface to select a test module from the test module storage and to cause the first interface device to communicate first test data to the first component of the vehicle and to cause the second interface device to communicate second test data to the second component of the vehicle to perform a vulnerability test associated with the selected test module.

    Multiband wireless data transmission between aircraft and ground systems based on availability of the ground systems

    公开(公告)号:US09847796B2

    公开(公告)日:2017-12-19

    申请号:US14516659

    申请日:2014-10-17

    CPC classification number: H04B1/0057 H04B1/3822

    Abstract: Provided are methods and systems for multiband wireless data transmission between aircraft and ground systems. The transmission uses different wavelength ranges, each wavelength range corresponding to a different data domain and establishing a different communication channel. This wavelength differentiation provides physical separation between different data domains and, as a result, improves data security. Furthermore, a single broadband antenna is used on the exterior of the aircraft for transmitting data sets from different data domains. The single antenna configuration reduces drag and weight and improves structural integrity of the aircraft in comparison to multi-antenna configurations. Different aircraft communication modules, which are connected to different aircraft systems, handle different data domains and operate at different wavelength ranges. These modules are connected to the same antenna using a multiplexer. This connection may be controlled using gate devices and may be conditioned on verification of communication channel availability, security status, and other factors.

    Inline arinc data authenticity inspection module, method and computer program product

    公开(公告)号:US09699200B2

    公开(公告)日:2017-07-04

    申请号:US14706427

    申请日:2015-05-07

    CPC classification number: H04L63/1408 H04L63/1425

    Abstract: An inline ARINC data authenticity inspection module, method and computer program product are provided. In the context of a method, ARINC data that is transmitted via an ARINC bus is received into a buffer partition. The method also includes inspecting the ARINC data from the buffer partition within an inspection partition. The method further includes determining, as a result of having inspected the ARINC data within the inspection partition, whether the ARINC data is authentic. In an instance in which the ARINC data is determined to not be authentic, the method logs receipt of the ARINC data that is determined to not be authentic. However, in an instance in which the ARINC data is determined to be authentic, the method permits data corresponding to the ARINC data to be transmitted to an intended destination.

    AIRCRAFT CONTROL DOMAIN COMMUNICATION FRAMEWORK
    10.
    发明申请
    AIRCRAFT CONTROL DOMAIN COMMUNICATION FRAMEWORK 审中-公开
    飞机控制域通信框架

    公开(公告)号:US20160197857A1

    公开(公告)日:2016-07-07

    申请号:US14590128

    申请日:2015-01-06

    CPC classification number: H04L49/35 G06F21/572 H04L67/12

    Abstract: This disclosure relates to updating information in devices of remote systems over a network. A method includes receiving, via a first switch, a first selection. The method also includes activating, based on the first selection, a data partition in a storage device corresponding to the first device. The method further includes deactivating based on the first selection, data partitions in the storage device corresponding to non-selected devices. Additionally, the method includes storing information in the data partition corresponding to the first device. Moreover, the method includes receiving, via a second switch, a second selection. The method also includes determining that the first selection matches the second selection. The method further includes retrieving, based on the determining, the information from said activated data partition. Additionally, the method includes providing the retrieved information to a first device that corresponds to the first selection and the second selection.

    Abstract translation: 本公开涉及通过网络更新远程系统的设备中的信息。 一种方法包括经由第一开关接收第一选择。 该方法还包括基于第一选择激活对应于第一设备的存储设备中的数据分区。 该方法还包括基于第一选择去激活对应于未选择的设备的存储设备中的数据分区。 另外,该方法包括将信息存储在与第一设备相对应的数据分区中。 此外,该方法包括经由第二开关接收第二选择。 该方法还包括确定第一选择与第二选择匹配。 该方法还包括基于确定来自所述激活的数据分区的信息来检索。 另外,该方法包括将检索到的信息提供给对应于第一选择和第二选择的第一设备。

Patent Agency Ranking