The Boeing Company

Jason Wayne Shelton

Timothy McNally Mitchell

Daniel D Nguyen

Jonathan Nicholas Hotra

Jack D Lawson

John E Bush

Matthew Lee Benson

Patrick G Cordell

David H Floyd

The present disclosure is directed to emulating special-purpose hardware devices using virtual hardware. A process in accordance with various implementations consistent with the present disclosure includes emulating hardware devices using virtual devices of a virtualization system configured to emulate the hardware devices. The process also includes installing in a physical system, instances of the virtualization system including the virtual devices. The process further includes emulating the hardware devices of the physical system using the virtual devices. Additionally, the process includes communicating with equipment of the physical system using the virtual devices.

Virtualized avionics systems for operational environments

Method and apparatus for ensuring safety controls for a network-connected autonomous vehicle. The method and apparatus monitor a respective state of each of one or more data communication connections one or more data communication networks. One of a plurality of operational modes for the autonomous vehicle is selected based on the monitored states. Each of the plurality of operational modes defines a respective level of autonomous control for the autonomous vehicle. The method and apparatus transition operation of the autonomous vehicle to the selected operational mode.

Safety controls for network connected autonomous vehicle

This disclosure relates to updating information in devices of remote systems over a network. A method includes receiving, via a first switch, a first selection. The method also includes activating, based on the first selection, a data partition in a storage device corresponding to the first device. The method further includes deactivating based on the first selection, data partitions in the storage device corresponding to non-selected devices. Additionally, the method includes storing information in the data partition corresponding to the first device. Moreover, the method includes receiving, via a second switch, a second selection. The method also includes determining that the first selection matches the second selection. The method further includes retrieving, based on the determining, the information from said activated data partition. Additionally, the method includes providing the retrieved information to a first device that corresponds to the first selection and the second selection.

Aircraft control domain communication framework

Systems and methods consistent with this disclosure provide for high fidelity emulation of special-purpose hardware devices systems by virtual hardware. The systems and methods can emulate a physical hardware system in a virtual machine by performing operations including constructing the virtual machine from the physical hardware system. The operations can also include emulating hardware components of the physical hardware system in the virtual machine. The operations can further include emulating operation the physical hardware system using the virtual machine based on a memory map that reproduces memory locations used by the physical hardware system to exchange information. Additionally, the operations can include performing testing of the physical hardware system via operation of the virtual machine.

Emulation of hardware components based on interrupt design

A system and method for performing a simulation of aircraft networks. Characteristics of components of the aircraft networks are identified. The aircraft networks include a first set of networks within a plurality of aircraft and a second set of networks configured for communication between the plurality of aircraft. Virtual implementations of the components are generated based on the characteristics of the components. A simulation of the aircraft networks is performed that includes the virtual implementations of the components processing virtual flight test data generated by the virtual implementations of the components. The virtual flight test data for the components in the aircraft networks is compared to actual flight test data from the components in the aircraft networks to form a comparison. The characteristics of the components are then modified based on the comparison.

Virtual aircraft network

A method and system for providing medical assistance onboard an aircraft is provided. A number of secure wireless connections are established between an onboard device located on the aircraft and a remote device located remotely with respect to the aircraft, to enable communications between a device operator using the onboard device and a medical professional using the remote device. Information about a medical event that occurs onboard the aircraft is sent from the onboard device to the remote device using the number of secure wireless connections. A medical assessment of the medical event by the medical professional is received at the onboard device from the remote device over the number of secure wireless connections.

Aircraft medical management system

A network system of an aircraft implements a target system to attract, detect, log, and mitigate a potential breach by the malicious entities. The target system simulates the systems of the aircraft in order to attract a potential breach. The target system simulates the data, file structure, communications, etc., of the systems of the aircraft. The target system includes little, or no security or access controls in order to attract a potential breach and allow the malicious entity to gain access. Once a breach occurs, the target system can be configured to log, report, and/or mitigate the potential breach.

Systems and methods for detecting a security breach in an aircraft network

Provided are methods and systems for multiband wireless data transmission between aircraft and ground systems. The transmission uses different wavelength ranges, each wavelength range corresponding to a different data domain and establishing a different communication channel. This wavelength differentiation provides physical separation between different data domains and, as a result, improves data security. Furthermore, a single broadband antenna is used on the exterior of the aircraft for transmitting data sets from different data domains. The single antenna configuration reduces drag and weight and improves structural integrity of the aircraft in comparison to multi-antenna configurations. Different aircraft communication modules, which are connected to different aircraft systems, handle different data domains and operate at different wavelength ranges. These modules are connected to the same antenna using a multiplexer. This connection may be controlled using gate devices and may be conditioned on verification of communication channel availability, security status, and other factors.

Multiband wireless data transmission between aircraft and ground systems based on availability of the ground systems

A system for evaluating a cyber-attack on an aircraft may include a display associated with the aircraft, a sensor system configured to generate sensor data for a pilot, and a data processing system configured to: (1) generate simulation data, (2) generate a flight simulation from the simulation data, (3) simulate the cyber-attack on at least one aircraft system during the flight simulation, (4) generate virtual flight data during the flight simulation, and (5) present the sensor data and the virtual flight data.

System and method for evaluating cyber-attacks on aircraft

A system includes a transmitting line replaceable unit (TLRU) configured to receive messages including instructions for avionics receiving line replaceable units (RLRUs). The system further includes a memory configured to store validation data including a set of expected messages. A monitor is further included and is configured to monitor messages received at the TLRU and further configured to determine whether received messages are valid based on at least a portion of the set of expected messages stored in the memory. A plurality of RLRUs are further included and configured to receive message from the TLRU and to execute the instructions included in the received messages.

Aeronautical message monitor

A cyber-attack scenario simulation system and method may include an aircraft simulator operable to generate an aircraft simulation, a cyber-attack generator operable to generate a cyber-attack simulation, a cyber defense generator operable to generate a cyber defense simulation, a scenario generator operable to generate a cyber-attack scenario including the cyber attack simulation and the cyber defense simulation and launch the cyber-attack scenario against the aircraft simulation, and a cyber-attack scenario analysis tool operable to assess an impact of the cyber-attack scenario on the aircraft simulation.

System and method for developing a cyber-attack scenario

An inline ARINC data authenticity inspection module, method and computer program product are provided. In the context of a method, ARINC data that is transmitted via an ARINC bus is received into a buffer partition. The method also includes inspecting the ARINC data from the buffer partition within an inspection partition. The method further includes determining, as a result of having inspected the ARINC data within the inspection partition, whether the ARINC data is authentic. In an instance in which the ARINC data is determined to not be authentic, the method logs receipt of the ARINC data that is determined to not be authentic. However, in an instance in which the ARINC data is determined to be authentic, the method permits data corresponding to the ARINC data to be transmitted to an intended destination.

Inline arinc data authenticity inspection module, method and computer program product

Multiband wireless data transmission between aircraft and ground systems

A method and system for securely wirelessly communicating between a vehicle and a source are provided. Information regarding a vehicle or a source is provided with at least one information device. Wireless communications of data between a first wireless communication device of the vehicle and a second wireless communication device of the source are only allowed when security parameters are met based on the information provided by the at least one information device.

Growing community of inventors

Edgewood, WA, United States of America

Jason Wayne Shelton