Rockwell Collins, Inc.

Cheryl L Killham

Greg L Shelton

Branden H Sletteland

Michael J Frerking

Jeffrey B McNamara

Brian S Cain

Brandon L Tomlinson

Kevin R Priest

A method including initializing the processing platform, wherein initializing the processing platform includes performing a power on self-test (POST) configured to determine an operational state of one or more hardware sub-components of the processing platform, the POST further configured to determine an error detection state of one or more monitoring functions of the processing platform, initializing a safety monitoring function of the processing platform, analyzing one or more results of the POST utilizing the safety monitoring function of the processing platform in order to determine compliance of the processing platform with operational requirements, configuring the safety monitoring function of the processing platform utilizing one or more sets of safety monitoring configuration data, initializing and configuring a security monitoring function of the processing platform, and initializing and configuring one or more security functions.

Establishing secure initial state in a processing platform containing both high assurance security and safety-critical functions

Systems and methods for providing safety and security functions are disclosed. The system includes a computing device that provides at least a first partition and a second partition. The computing device implements time and space partitioning to isolate resources available to the first partition and the second partition. The system also includes a safety module that operates in the first partition for providing safety functions for the system. The system further includes a security module that operates in the second partition for providing security functions for the system. A predefined communication interface is utilized to facilitate communications between the safety module and the security module. The communication interface defines a set of communications allowable between the safety module and the security module, wherein information sharing between the safety module and the security module is restricted to only the set of communications allowed through the communication interface.

Method and system for reconciling safety-critical and high assurance security functional requirements between safety and security domains

Growing community of inventors

Marion, IA, United States of America

Cheryl L Killham