The Boeing Company

Charles D Royalty

Chris B Kettering

Jeffery L Toolson

Greg A Kimberly

Todd William Gould

Jack D Lawson

Christopher B Kettering

Launa B Molsberry

Freelon F Hunter

Michael N Jacobs

Daniel B Moore

Methods, apparatus and computer program products are provided to authenticate and determine the integrity a software part. In this regard, a software part is authenticated and its integrity is determined by determining a first hash of the digital data that comprises the software part. If the air vehicle lacks data communications connectivity with an off-board security system, the method determines the authenticity and integrity of the software part by decrypting an encrypted hash of a software part in accordance with a public-private key pair to create a decrypted hash, comparing the first hash with the decrypted hash and transmitting the first hash to the off-board security system once data communications connectivity is established. Conversely, if the air vehicle has data communications connectivity with the off-board security system, the method determines the integrity of the software part by transmitting the first hash to the off-board security system for comparison with a whitelist.

Methods, apparatus and computer program products for authenticating and determining integrity of a software part of an air vehicle

IP-based messages composed by distributed applications on-board an aircraft are routed to ground destinations through non-IP based communication interfaces that use packet data transmission. Addressable routing daemons resident in on-board computers are used to route messages from an on-board TCP/IP network to a selected communication interface. A communications management controller routes the messages to the communication interfaces by addressing the routing daemon associated with the communication interface selected to transmit the message.

Distributed application communication routing system for internet protocol networks

Methods and systems for establishing a secure access to a proprietary network is provided. The method includes establishing a communication link between a first device and the proprietary network using a first level of secure access to the network, requesting an access code by the first device. The method further includes generating an access code by the proprietary network in response to the request, receiving the access code by the first device, and entering the access code into a second device communicatively coupled to the proprietary network, wherein the second device is positioned in a secure location physically accessible only to an authorized user. The method also includes comparing the entered access code to the generated access code by the proprietary network, and enabling a second level of secure access between the first device and the proprietary network.

Methods and systems for securing a computer network

A system and a method for ensuring that the initiation of mobile platform operations using maintenance terminals or other tools is prohibited when maintenance activities are not intended to be performed. The solution involves the incorporation of a manual interlock switch (accessible only to authorized personnel) that blocks activation of certain functions during times when such activation would be hazardous and when no properly authorized person has authorized such activation. No system for performing such a function will respond to a request unless the interlock is enabled. Should such a request be received, the system is required to report a fault, so that an investigation can be made as to the cause of the invalid request.

System and method for detecting security violation

A network architecture for implementation in a vehicle is described that comprises an Ethernet gateway module (EGM) and network interface module (NIM). The EGM comprises an Ethernet switch and router therein and is configured to provide an open data network (ODN) connection to the network architecture for a plurality of open data network devices. The NIM is configured to provide an isolated data network and comprises an Ethernet switch to connect a plurality of secure devices to an isolated data network (IDN), the secure devices related to operation and navigation of the vehicle, a router and a gateway/router. The router is configured to interface the IDN to the open data network connections and comprises a packet filtering function to determine which, if any, data from the ODN may be passed through to the IDN and applied to operation and navigation of the vehicle via the secures devices connected to the IDN. The gateway/router provides network address and protocol translation to connect the IDN to a secure common data network associated with vehicle operation. The architecture provides segregation between network devices in the IDN and CDN related to operation and navigation of the vehicle, and network devices in the ODN.

Methods and apparatus providing an airborne e-enabled architecture as a system of systems

Methods and systems for alerting airline personnel to potential aircraft data network security breaches is provided. The airline personnel includes at least one of flight crew personnel and maintenance crew personnel. The method includes detecting and categorizing potential aircraft data network security breaches, and recording said potential aircraft data network security breaches within an aircraft's existing crew alerting and maintenance data storage and reporting system.

Methods and systems for network failure reporting

A method to detect application spoofing in a mixed use avionics display by indicating when a mixed use avionics display is displaying information from a non-certified source. The method comprises providing an avionics display having a display area that is capable of displaying information from a non-certified source. A data connection is established between the non-certified source and the avionics display. Information is provided from the non-certified source to the avionics display through the data connection. The information from the non-certified source is then displayed on the display area so that less than the entire display area is used in displaying the information. The displaying of information from the non-certified source on less than the entire display area gives a visual indication that the information being displayed on the avionics display is from a non-certified source and susceptible to interference by a remote party and possible application spoofing.

Method to detect application spoofing in mixed use avionics display

A modular aircraft information system is provided for communicating information onboard an aircraft. The modular aircraft information system includes a backplane and a network router module, and may include an avionics interface module. The backplane is capable of receiving at least one COTS device such that the COTS devices can be electrically coupled and/or decoupled to the backplane. The network router module can interface with at least one avionics device. The network router module is in electrical communication with the backplane and the avionics interface module such that the network router module is capable of passing communications between the COTS devices and the avionics devices when the COTS devices are electrically coupled to the backplane. The network router is also capable of isolating the backplane from the avionics devices such that the COTS devices, when electrically coupled to the backplane, are at least partially isolated from the avionics devices.

Growing community of inventors

Bellevue, WA, United States of America

Charles D Royalty