General Electric Company

Bae Systems Controls Inc.

Jeffrey Scott Gilton

Matthew B Pfenninger

Douglas Robert Nichols

Mark E Hingsbergen

Andrew William Berner

Andrea Marie Schmitz

Brian T Clark

Vasanth Ganapathy

Adam Joseph Reese

David Leo Hart

Serge Rosine

Russell Seidel

A method comprises a server generating a server nonce and transmitting a server public key, a key signature and the server nonce to a device, the device verifying the server public key, signing the server nonce with a device private key, generating a device nonce, and transmitting the server nonce, the server nonce signature, a device public key, a device key signature, and the device nonce to the server, the server verifying the server nonce and the device public key, generating a session key, encrypting the session key with the device public key, signing the device nonce and the session key with a server private key, and transmitting the device nonce, the signed device nonce and session key, and the encrypted session key to the device, and the device verifying the device nonce, decrypting the encrypted session key with the device private key, and verifying the decrypted session key.

Communicating securely with devices in a distributed control system

A distributed control system includes an electronic control unit to establish secure communication with a distributed control module. Upon determination that a previously negotiated session key is stored on the electronic control unit, the electronic control unit transmits encrypted communications with the distributed control module using the previously negotiated session key, negotiates a new session key with the distributed control module, and stores the new session key. Upon determination that the previously negotiated session key is not stored on the electronic control unit, the electronic control unit negotiates the new session key with the distributed control module. After negotiating the new session key with the distributed control module, the electronic control unit ceases transmission of unencrypted communications with the distributed control module, transmits encrypted communications with the distributed control module using the new session key, and stores the new session key.

Methods and systems for starting secure communication in systems with high availability

A method is disclosed and includes authenticating a first stage boot loader and authenticating a second stage boot loader in response to authentication of the first stage boot loader. The method also includes executing the second stage boot loader in response to authentication of the second stage boot loader. Executing the second stage boot loader includes loading an operating system, a first set of machine-readable instructions, and first configuration information associated with the first set of machine-readable instructions onto a non-transitory computer-readable medium, wherein the first set of machine-readable instructions and the first configuration information are associated with one or more priority partitions. Executing the second stage boot loader includes authenticating the operating system and the first set of machine-readable instructions. Executing the second stage boot loader includes executing the first set of machine-readable instructions in response to authentication of the operating system and the first set of machine-readable instructions.

Devices, systems, and methods for securely initializing an embedded system

Devices, systems, and methods for providing software to aircraft using a distributed ledger are disclosed. A software delivery system includes aircraft having an engine control system configured to verify and install software utilized by components of the aircraft, an electronic distribution system coupled to the aircraft, an edge manager coupled to the electronic distribution system, and computing devices acting as nodes in a distributed ledger base maintaining a distributed ledger. The electronic distribution system verifies a request for software, requests software, and initiates an installation protocol with the engine control system. The edge manager maintains software. The distributed ledger base is coupled to the aircraft, the electronic distribution system, and the edge manager. The distributed ledger provides a record including information pertaining to a request for software, verifications of the request by the electronic distribution system, the edge manager, and the engine control system, and an installation of the software.

Devices, systems, and methods for providing on-demand engine software using a distributed ledger

A method to be performed by a processor includes determining whether an application software has called an application programming interface, upon determination that the application software has called the application programming interface, determining whether one or more floating-point errors are recorded in a floating-point status register, and upon determination that one or more floating-point errors are recorded in the floating-point status register, performing a predefined action for each type of floating-point error recorded in the floating-point status register.

Systems and methods for handling invalid floating-point operations without exceptions

A method for handling a simultaneous failure of all channels of a multi-channel engine controller configured to control operation of a gas turbine engine is provided. The method includes obtaining, by a first processor associated with a first channel of the engine controller, data indicative of the simultaneous failure of all channels of the engine controller. The method further includes providing, by the first processor, one or more control signals associated with resetting at least a second processor associated with a second channel of the multi-channel engine controller based, at least in part, on the data. Furthermore, the method includes controlling, by the first processor, operation of the gas turbine engine while at least the second processor is resetting.

Method for handling a simultaneous failure of all channels of a multi-channel engine controller for a gas turbine engine

Devices, systems, and methods for providing an engine control system configured with a two-part test equipment monitor where at least one part is selectively removable are disclosed. An engine control system for an aircraft includes an electronic control unit (ECU). The ECU is configured to implement a production support equipment module and a selectively removable test support equipment module. The production support equipment module enables restricted data monitoring of the engine control system. The test support equipment module enables a comprehensive interface with the engine control system when installed with the ECU.

Test equipment interface add-on having a production support equipment module and a selectively removable test support equipment module

A system and method determines a unique performance benchmark for specific computer object code for a particular microprocessor. By generating multiple unique benchmarks for a single, same code module on multiple different processors, the method determines which processor is optimal for the code module. By generating for a single designated processor a performance benchmark for each code modules of multiple modules, where the multiple modules have a same/similar functionality but variations in detailed code or algorithms, the system and method identifies code variation(s) which is/are optimal for the single designated processor. The system and method may entail first extracting selected features of object code (as actually executed) into a code profile, and then generating the performance benchmark based on the code profile and in machine-level timing data for the selected microprocessor. In this way, code security is achieved by fire-walling the object code from the second stage of the method.

Growing community of inventors

Cincinnati, OH, United States of America

Jeffrey Scott Gilton