Abstract:
The present invention relates to a system and method for automatically protecting flight data in response to a variety of kinds of cyber terror that paralyze control service in a flight data system by enhancing the availability, reliability, and integrity of the flight data system when damage due to external or internal viruses or hacking, such as the alteration or modification of flight data, occurs. The flight data protection system has an advantage in that it can manage a system safely by providing an embedded system, using an Enhanced Write Filter (EWF), and protecting an Operating System (OS).

Description:
RELATED APPLICATION(S)  
       [0001]    This application claims the benefit of Korean Patent Application No. 10-2013-0022113, filed on Feb. 28, 2013, which is hereby incorporated by references as if fully set forth herein. 
       FIELD OF THE INVENTION  
       [0002]    The present invention relates to flight data protection technology and, more particularly, to a flight data protecting apparatus and method for detecting the forgery and alternation of flight data and automatically providing disaster recovery in response to a variety of kinds of cyber terror that interfere with the operation of a flight data processing system by increasing the availability, reliability, and integrity of a system in providing control service, such as the transmission of the flight data internally or externally. 
       BACKGROUND OF THE INVENTION 
       [0003]    The amount of data processed by a flight data processing system, which is the essence of flight control, is huge because a multitude of countries and a variety of kinds of flight data related to the flight data processing system have to be handled. Furthermore, the flight data processing system is used by a number of specific persons, whereby external and internal attacks against the flight data processing system are diverse and increasingly sophisticated, thereby increasing the threat to an application layer, that is, the entire data processing system. 
         [0004]    In particular, although defense is provided at the network layer using a firewall, a Secure Socket Layer (SSL), an Intrusion Detection System (IDS)/Intrusion Prevention System (IPS), a Virtual Private Network (VPN), and a secure Operating System (OS), which are existing systems, the flight data processing system is vulnerable to the forgery and alteration of flight data by an internal attacker. Furthermore, even in the security of this network layer, threats to the application layer still remain. 
         [0005]    Such threats can result in extensive damage, such as the interruption of control service, harm to humans attributable to a flight accident, the loss of public confidence and national reputation, and economic loss resulting from damage recovery, due to the paralysis of the entre flight data processing system. 
         [0006]    In the prior art, the flight data processing system cannot be protected against a variety of kinds of cyber terror, such as hacking, or from internal attackers, due to the weak system. Furthermore, not all countries have the same security level, even though the flight network is currently a closed network, and thus the flight data processing system is vulnerable to internal attackers and external hacking, even though all countries have the same security level. 
       SUMMARY OF THE INVENTION 
       [0007]    An embodiment of the present invention provides flight data protection technology in which a flight data processing system installed in a network can monitor a variety of kinds of hacking and cyber terror in real time, and can provide seamless control service by automatically recovering from a disaster when the flight data processing system is forged or modified. 
         [0008]    In accordance with an aspect of the present invention, there is provided an apparatus for protecting flight data, including a flight data verification module for classifying original flight data for each field and verifying the classified data in order to protect the flight data against an external attack, a flight data database for storing the verified flight data for each field, a flight data monitoring module for hooking messages for the original flight data input to and output from the flight data verification module and monitoring the hooked messages, a host message monitoring module for generating flight data for recovery in response to a monitoring result message provided by the flight data monitoring module, and a flight data restoration management module for restoring the original flight data by using the generated flight data for recovery. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0009]    The objects and features of the present invention will become apparent from the following description of embodiments given in conjunction with the accompanying drawings, in which: 
           [0010]      FIG. 1  is a block diagram of a flight data protection system including an apparatus for protecting flight data in accordance with an embodiment of the present invention; 
           [0011]      FIG. 2  is a flowchart illustrating a flight data protection process in accordance with an embodiment of the present invention; 
           [0012]      FIG. 3  is a flowchart illustrating the process of implementing automatic real-time disaster recovery by obtaining a flight data dictionary in a method for protecting flight data in accordance with an embodiment of the present; 
           [0013]      FIG. 4  is a flowchart illustrating the process of generating a flight data dictionary and keeping the original flight data in the method for protecting flight data in accordance with an embodiment of the present invention; 
           [0014]      FIG. 5  is a flowchart illustrating the processing performed by a flight data monitoring module  112  in the method for protecting flight data in accordance with an embodiment of the present invention; and 
           [0015]      FIG. 6  is a flowchart illustrating the process of restoring flight data in the method for protecting flight data in accordance with an embodiment of the present invention. 
       
    
    
     DETAILED DESCRIPTION OF THE EMBODIMENTS 
       [0016]    Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings which form a part hereof. 
         [0017]      FIG. 1  is a block diagram of a flight data protection system including an apparatus for protecting flight data in accordance with an embodiment of the present invention. The flight data protection system can include a flight data verification module  100 , an embedded system module  102 , a flight data dictionary module  104 , a flight data restoration management module  106 , a host message monitoring module  108 , a flight data database (DB)  110 , and a flight data monitoring module  112 . 
         [0018]    The flight data verification module  100  can function to classify the original flight data into fields and verify the classified flight data in order to protect the original flight data against malicious attacks. For example, the flight data verification module  100  can divide received flight data into data that must be secured and data that do not need to be secured, subdivide the data that must be secured for each field, and verify the subdivided data. The flight data verified by the flight data verification module  100  can be classified into fields and stored in the flight data DB  110 . 
         [0019]    The embedded system module  102  stores a proper embedded system so that the flight data can be classified into fields and combined by the flight data verification module  100 . 
         [0020]    The flight data dictionary module  104  can store the original flight data and reproduce the stored original flight data. 
         [0021]    The flight data restoration management module  106  can function to restore the original flight data depending on the situation, and can store an event log. 
         [0022]    The host message monitoring module  108  can provide the flight data restoration management module  106  with flight data for recovery in response to a monitoring result message provided by the flight data monitoring module  112 . The host message monitoring module  108  can become a mediator for the transmission of the flight data for recovery depending on the situation, and for connection with the flight data monitoring module  112 . 
         [0023]    The flight data DB  110  can store the flight data, which has been classified into fields and provided by the flight data verification module  100 . 
         [0024]    The flight data monitoring module  112  can monitor the original flight data using a filter driver. For example, the flight data monitoring module  112  can hook pieces of input/output request information delivered to a file system driver or a disk driver and supplement functions provided by an existing driver or add a new function to the functions using the hooked information. The flight data monitoring module  112  can exist in a daemon form and monitor whether flight data is abnormal or not. 
         [0025]    The flight data protection apparatus sends a monitoring result message over an external network and becomes a mediator for the transmission of flight data for recovery depending on the situation and for connection with the daemon and agent of the system (alternatively called a host). 
         [0026]    From among the elements of the flight data protection apparatus, the embedded system module  102 , the flight data DB  110 , an OS depository module (not shown), and the flight data dictionary module  104  protect the system by means of write prevention using an Enhanced Write Filter (EWF), thereby being capable of increasing the availability, reliability, and integrity of the system. 
         [0027]    A method for protecting flight data in accordance with an embodiment of the present invention is described in detail below with reference to the aforementioned elements and  FIGS. 2 to 6 . 
         [0028]    First,  FIG. 2  is a flowchart illustrating a flight data protection process in accordance with an embodiment of the present invention. 
         [0029]    This process can be performed when flight data is input to the flight data verification module  100 . All flight messages are subject to a classification task depending on their histories. The classification task is performed on verified data, and the classified data is used when the data is analyzed and an accident occurs. 
         [0030]    As shown in  FIG. 2 , when the flight data is received at step S 100 , the flight data can be classified for each category at step S 102  and divided into data that must be secured and data that does not need to be secured at step S 104 . Here, the data that does not need to be secured can be bypassed, that is, processed externally, at step S 106 . 
         [0031]    A separation task for classifying the data that must be secured into detailed fields can be performed at step S 108 . 
         [0032]    A verification process can be performed on the separated detailed fields at step S 110 . The verification process can include, for example, priority verification, aircraft ID verification, wake turbulence verification, departure airport verification, flight route verification, and destination airport verification. 
         [0033]    After all the fields are verified, the fields can be stored at step S 112 . 
         [0034]      FIG. 3  is a flowchart illustrating the process of implementing automatic real-time disaster recovery by obtaining a flight data dictionary in a method for protecting flight data in accordance with an embodiment of the present. 
         [0035]    As shown in  FIG. 3 , in the method for protecting flight data, first, a flight data dictionary is obtained from a host at step S 200 . The host message monitoring module  108  of the host monitors flight data at step S 202 . As a result of hooking the flight data when a system event occurs, if the flight data has been deleted, forged, and/or altered at step S 204 , or if new flight data has been generated in the system, the flight data is transferred to the host message monitoring module  108  at steps S 206  and S 208 . The restoration module is driven at step S 210 , the flight data is processed depending on the situation, an event log is stored at step S 212 , and a restoration manager can be informed of the processing situation at step S 214 . Here, the restoration manager can be informed of the processing situation via e-mail or SMS. 
         [0036]      FIG. 4  is a flowchart illustrating the process of generating a flight data dictionary and keeping the original flight data in the method for protecting flight data in accordance with an embodiment of the present invention. 
         [0037]    As shown in  FIG. 4 , this process of generating a flight data dictionary serves to keep the original flight data. 
         [0038]    Flight data is received over an Aeronautical Fixed Telecommunication Network (AFTN) at step S 300 , and is then stored at step S 302 . 
         [0039]    Here, a manager only has permission to store the flight data, and the stored flight data can be reproduced or copied to the flight data DB  110  of the flight data protection apparatus at steps S 304  and S 306 . 
         [0040]      FIG. 5  is a flowchart illustrating the processing performed by the flight data monitoring module  112  in the method for protecting flight data in accordance with an embodiment of the present invention. 
         [0041]    As shown in  FIG. 5 , the flight data monitoring module  112  monitors I/O request packets at step S 400 . 
         [0042]    The flight data monitoring module  112  basically uses a filter driver. The filter driver can hook I/O requests transferred to a driver, such as a file system driver or a disk driver at step S 400 , and can either supplement functions provided by an existing driver or add a new function to the functions. 
         [0043]    When a request for flight data is transmitted, or when processed flight data is transmitted in response to a request for the processed flight data, the flight data monitoring module  112  can hook the request and the processed flight data in order to check whether or not the request and the processed flight data are a legitimate request and a legitimate processing result at step S 402 . 
         [0044]    The flight data monitoring module  112  checks whether or not the flight data has been forged, altered, or deleted as a result of the hooking at step S 404 . If, as a result of the check, the flight data has been forged, altered, or deleted, the flight data monitoring module  112  sends a system message (i.e., a monitoring result message) to the host message monitoring module  108  at step S 406  so that the host message monitoring module  108  can make an appropriate response depending on the situation. 
         [0045]    Here, the executed process complies with the following procedure. 
         [0046]    The host message monitoring module  108  can reside in a daemon form in the flight data protection apparatus, analyze messages received from the host and the agent of the flight data processing apparatus at step S 414 , and take a suitable response for each situation. 
         [0047]    Next, the flight data dictionary module  104  can compare the forged or altered flight data with the original flight data at step S 408 . If, as a result of the comparison, the forged or altered flight data is not identical with the original flight data, a recovery type depending on the situation can be determined and recovery can be performed at step S 412 . 
         [0048]      FIG. 6  is a flowchart illustrating a process of restoring flight data in the method for protecting flight data in accordance with an embodiment of the present invention. 
         [0049]    The process of  FIG. 6  is performed by the flight data restoration management module  106 . If an abnormality is present in the flight data, the flight data restoration management module  106  can compare the abnormal flight data with the original flight data stored in a flight data dictionary at step S 500 . 
         [0050]    If flight data has been deleted at step S 502 , the flight data restoration management module  106  searches the flight data DB  110  for the original flight data corresponding to the deleted flight data and restores the system to a point in time prior to the point in time at which the flight data was deleted. If invalid flight data has been added, the flight data restoration management module  106  can delete the invalid flight data at step S 504 . 
         [0051]    If the flight data has been modified or altered at step S 506 , the flight data restoration management module  106  can restore the system by deleting the modified or altered flight data and sending the original flight data at step S 508 . 
         [0052]    If the flight data has been forged or altered at step S 510 , the flight data restoration management module  106  can respond to each situation (e.g., normal behavior or abnormal behavior) at step S 512 , and can store corresponding flight data in a quarantine station so that future problems having the same pattern can be processed at step S 514 . 
         [0053]    In accordance with the embodiments of the present invention, the flight data processing system installed in a network monitors various kinds of hacking and cyber terror in real time and automatically restores modified or altered flight data if the flight data has been modified or altered. Accordingly, seamless control service can be provided. 
         [0054]    In accordance with the present invention, the availability of a flight data processing system against cyber terror or malicious changes occurring in the flight data processing system can be maximized, and control service can be stably provided while the operation of the flight data processing system is stopped. Furthermore, flight data can be processed and restored in relation to various kinds of attacks (e.g. cyber terror, attacks by internal attackers, the forgery/alteration of a file), and the same type of attack can be prevented by analyzing an event log. Furthermore, forged flight data is not manually restored, and is not suddenly restored to an initial state, but is automatically restored in real time. Accordingly, there is an advantage in terms of recovery cost, and the loss of public confidence and harm to humans can be prevented. 
         [0055]    While the invention has been shown and described with respect to the preferred embodiments, the present invention is not limited thereto. It will be understood by those skilled in the art that various changes and modifications may be made without departing from the scope of the invention as defined in the following claims.