Raytheon Technologies Corporation

Rtx Corporation

Paul A Adamski

Jason E Posniak

Jayashree Rajagopalan

Douglas E Sansom

David Howland

Eli Cole Warren

Paul Raymond Scheid

An embedded processing system includes processing circuitry configured to execute a plurality of computer executable instructions. The embedded processing system also includes a memory system configured to store a plurality of configuration items, where at least one of the configuration items includes a sequence of the computer executable instructions. The embedded processing system also includes an authentication control configured to authenticate an immutable anchor associated with the embedded processing system, authenticate integrity of a reconfigurable entity map associated with the memory system, authenticate the configuration items based on the reconfigurable entity map, and perform an accommodation measure based on an authentication failure of at least one of the configuration items.

Embedded processing system with multi-stage authentication

A cyber monitored control system includes a controller with a first processing resource operable to execute a control application for a controlled system. The cyber monitored control system also includes a cyber monitor with a second processing resource isolated from the first processing resource. The cyber monitor is operable to evaluate a plurality of inputs to the cyber monitored control system with respect to a cyber threat model, verify one or more update rates of the controller, apply trending using the cyber threat model to distinguish between a fault and a cyber attack, and isolate one or more subsystems of the cyber monitored control system based on identifying the cyber attack.

Cyber monitor segmented processing for control systems

A wireless sensor system of a gas turbine engine of an aircraft can include a plurality of wireless sensors distributed within an engine core of the gas turbine engine and an energy harvesting system including one or more energy harvesting devices configured to convert mechanical or thermal energy within the gas turbine engine into electric power and provide the electric power to the wireless sensors. The wireless sensor system can also include a data concentrator coupled to the gas turbine engine. The data concentrator can be configured to receive a plurality of wireless sensor data from the wireless sensors and transmit the wireless sensor data to a communication adapter of the gas turbine engine.

Engine wireless sensor system with energy harvesting

A control assembly for an aircraft system according to an example of the present disclosure includes a multi-core processor that has a plurality of cores coupled to a communications module and to an arbitration module. The communications module is operable to communicate information between the plurality of cores and one or more aircraft modules. The plurality of cores include first and second cores operable to concurrently execute a first discrete set of software instructions to generate respective instances of an output. The arbitration module is operable to communicate each and every one of the respective instances to control the one or more aircraft modules. A method of operating an aircraft system is also disclosed.

Vehicle control with functional redundancy

An embedded processing system includes processing circuitry, a memory system, and a reprogramming control. The reprogramming control is configured to receive a transaction indicator and user credentials from a reprogramming system, the transaction indicator identifying a type of configuration item to program in the memory system. The reprogramming control is further configured to access user authentication data to authenticate authority of a user to program the memory system based on the transaction indicator and user credentials and receive an encrypted configuration item. The reprogramming control is further configured to decrypt and authenticate the encrypted configuration item as a decrypted and authenticated configuration item responsive to authenticating the authority of the user, and store the decrypted and authenticated configuration item in the memory system.

Secure reprogramming of embedded processing system

A redundant control system includes a plurality of channels each including a processing system configured to execute a control application for a controlled system. The redundant control system also includes a switchover artificial intelligence control operable to evaluate a state of the channels of the redundant control system, monitor a plurality of input/output data and communication data of the channels, and apply a fault model to determine one or more component faults and system faults of the channels based on the state, the input/output data, and the communication data. The switchover artificial intelligence control is further operable to command a switchover of a control function from one of the channels having a lower health status to one of the channels having a higher health status based on the component faults and system faults of the channels.

Switchover for redundant control systems

An embedded processing system includes processing circuitry, a memory system, and a reprogramming control. The reprogramming control is configured to authenticate a user associated with a reprogramming operation of the embedded processing system and receive an encrypted configuration item. The reprogramming control is further configured to decrypt and authenticate the encrypted configuration item either for storage of the configuration item in the embedded processing system or for transmission externally as an encrypted and signed entity. These operations are performed only after the user requesting such an operation has been authenticated to have the permission to perform the requested operation.

A cyber monitored control system includes a controller with a first processing resource operable to execute a control application for a controlled system. The cyber monitored control system also includes a cyber monitor with a second processing resource isolated from the first processing resource. The cyber monitor is operable to evaluate a plurality of inputs to the cyber monitored control system with respect to a cyber threat model, apply trending using the cyber threat model to distinguish between a fault and a cyber attack, and isolate one or more subsystems of the cyber monitored control system based on identifying the cyber attack.

Growing community of inventors

Westfield, MA, United States of America

Paul A Adamski