Airbus Operations (s.a.s.)

Airbus Operations Gmbh

Airbus Defence and Space Gmbh

Eads Deutschland Gmbh

Bertrand Leconte

Michael Paulitsch

Benoît Triquet

Cristina Simache

Kevin Mueller

Bertrand Deleris

Olaf Bischof

Stephan Marwedel

Raphael Migliasso

Thierry Planche

Romain Pochet

Pierre Attal

Kevin Müller

A communication system for an aircraft comprises a communication interface with the outside of the aircraft and an avionics domain of which the security level is the highest of the communication system. It also comprises a communication domain to which is connected the communication interface and of which the security level is lower than the security level of the avionics domain. A barrier of a first type is arranged to filter the information coming from the communication interface so as to allow the information to pass into the communication domain only if the information corresponds to an authenticated communication. A barrier of a second type is arranged to filter information transmitted from the communication domain to the avionics domain, carrying out at least a syntactic filtering of the information.

Communication system and method for an aircraft

A gateway having an architecture authorizing bidirectional communication between applications located in different domains and presenting a high assurance level of protection. The gateway interconnects a first and second domain. The gateway comprises an internal protocol, first and second protocol adapters hosted within the first and second domains and configured to make a conversion between application data formatted according to an applicative protocol relative to the two domains and gateway data formatted according to the gateway internal protocol, and a security module hosted on a separate platform to communicate with the first and second protocol adapters via first and second data links according to the gateway internal protocol. The first and second protocol adapters and security module are each physically segregated and the security module comprises functional blocs configured to authorize secure bidirectional flow of gateway data along two different and separate unidirectional paths between the two protocol adapters.

High assurance segregated gateway interconnecting different domains

A gateway having an architecture authorizing a bidirectional communication between applications located in different domains and presenting a high assurance level of protection. The gateway uses a virtualization platform and comprises a set of functional blocs configured to authorize secure bidirectional flow of data along two different paths between first and second domains, said set of functional blocs being decomposed into a plurality of elementarily evaluable components each one of which having a specified function and being adapted to communicate with other predefined elementarily evaluable components.

High assurance security gateway interconnecting different domains

A virtualization platform that provides a systematic, transparent and local testing of components hosted by the virtualization platform in their integrated context. The virtualization platform comprises integrated interceptor modules connected to the components via communication channels, each interceptor module being interposed in the communication channel connecting two components, and an integrated analyzing device connected to the interceptor modules and comprising a control device and a testing device. The control device is configured to put each interceptor module in an operational mode selected out of a set of predetermined operational modes including a testing mode. The testing device is configured to locally test the components connected to the interceptor modules being put in the testing mode.

Testing integrated independent levels of security components hosted on a virtualization platform

A system and method for writing, updating and reading the static and dynamic identification data for an aeronautical appliance, which is secure, of low weight and simple to implement. The system for writing, updating and reading the static and dynamic identification data includes a data collection device for collecting and storing static and dynamic identification data for an aeronautical appliance, the collection device integrated into the aeronautical appliance and coupled to a computing unit of the aeronautical appliance according to a master-slave communication model, the computing unit always being master of the communication with the collection device, and a reading device for remotely reading at least part of the identification data stored on the collection device.

Method and system for writing, updating and reading static and dynamic identification data for an aeronautical appliance

In the method of accessing an information system of an aircraft the system receives an authenticator request from a connector of the aircraft; the system determines whether the connector presents a predetermined characteristic; and in the event that the system determines that the connector does indeed present the predetermined characteristic, the system sends an authenticator to the connector. Provision is also made for: the system receives an authenticator the system determines whether the authenticator is valid; and in the event that the system determines that the authenticator is indeed valid, the system authorizes access to the system from a connector of the aircraft from which the authenticator was sent.

Secure method of accessing an information system of an aircraft

The invention in particular has as an object methods and devices for management of events linked to the security of aircraft computer systems. After having received at least one information item relating to the detection () of at least one event, the latter is characterized () according to at least one rule of a plurality of predetermined rules, that can be updated, to allow the establishment of a security report according to the said characterization of the said at least one detected event. The said at least one event advantageously is detected according to a set of predetermined events, the said set of predetermined events being updated according to a previously detected event.

Growing community of inventors

Toulouse, France

Bertrand Leconte