Patent Description:
Communication between components in a system, such as between a master control and various mechanisms (e.g., sensors, actuators, valves, etc.), is generally performed via communication wires that extend between the components. Such wires are heavy, take up precious space, are time consuming to install, and are prone to damage that can cause interference to the communication. While systems that use wireless communication reduce the need to use communication wires, these systems are prone to cyber-attacks and thus their use is avoided within certain systems, such as communication systems on sensitive vehicles (e.g., aircraft and military vehicles) or automated assembly lines.

<CIT> and <CIT> each disclose a system for securing a Wi-Fi network.

According to an aspect, there is provided a system for securing a Wi-Fi network as recited in claim <NUM>.

Further, optional, features are recited in each of claims <NUM> to <NUM>.

According to an aspect, there is provided a method for securing a Wi-Fi network as recited in claim <NUM>.

A system for securing a Wi-Fi network includes a power source that transmits an electric current along at least one power line, a power line communication (PLC) module in electrical communication with the power source via the at least one power line with the PLC module being configured to modulate the electric current to include a power line communication that contains a Wi-Fi network authentication key, a control module in electrical communication with and electrically downstream from the PLC module via the at least one power line with the control module being configured to extract the power line communication from the electric current and utilize the Wi-Fi network authentication key to access the Wi-Fi network, a master module in communication with the control module, the master module being configured to communicate instructions to the control module via the Wi-Fi network, and a first mechanism, the first mechanism being in communication with the control module, wherein the control module instructs the first mechanism to perform a function depending on the instructions from the master module, wherein the first mechanism is connected to the control module by a wired communication line and wherein extracting the power line communication from the electric current includes demodulating the electric current to separate the power line communication containing the Wi-Fi network authentication key from the electric current, and wherein the PLC module and the master module are separate components, which are distant from one another.

A method of securing a Wi-Fi network includes modulating an electric current using a PLC module to include a power line communication that contains a Wi-Fi network authentication key, conveying the electric current with the power line communication along a power line, demodulating the electric current using a control module to extract the power line communication that contains the Wi-Fi network authentication key, utilizing the Wi-Fi network authentication key to access the Wi-Fi network, communicating instructions to the control module via the Wi-Fi network; and instructing a first mechanism to perform a function, depending on the instructions, wherein the first mechanism is connected to the control module by a wired communication line, and wherein the PLC module and the master module are separate components, which are distant from one another.

A system for securing a Wi-Fi network on a vehicle is disclosed herein that utilizes a power line communication (hereinafter, "PLC") to transmit a Wi-Fi network authentication key along a power line to be extracted and utilized to connect to the Wi-Fi network. The PLC is transmitted as signal modulation (e.g., frequency or pulse) of an electric current. The electric current is modulated to include the PLC (which in turn contains the Wi-Fi network authentication key) by a PLC module in electrical communication with the power source via the power line, while the PLC containing the Wi-Fi network authentication key can be extracted by a control module in electrical communication with the PLC module via the power line. The control module utilizes the Wi-Fi network authentication key to access the Wi-Fi network to send and receive data and/or instructions from a master module and/or other components. The control module can be part of or in communication with one or a number of mechanisms, such as actuators and sensors, that perform the instructions sent to the control module by the master module and/or record data that is then transmitted via the Wi-Fi network by the control module to the master control.

Because the Wi-Fi network authentication key is only transmitted via the PLC in the electric current along the power line, only components in electrical communication with the PLC module (components along the power line downstream from the PLC module) are able to receive and extract the Wi-Fi network authentication key to gain access to the Wi-Fi network, thus providing a secure network accessible only by components on the power line (i.e., by components on the power grid). The PLC can be periodically altered to update the Wi-Fi network authentication key such that access to the Wi-Fi network is regularly changed for additional security, such as generating a new Wi-Fi authentication key periodically and requiring the control module to reestablish authentication to the Wi-Fi network at regular intervals.

The present disclosure describes the system for securing the Wi-Fi network that can be utilized on a vehicle, such as an aircraft, or within a ground-based system, such as to secure a Wi-Fi network utilized for communication between components (e.g., robots) on an assembly line (or in another configuration) or to secure communication between computers and/or mobile devices in a large system.

<FIG> is a schematic of a system using power line communication to secure a Wi-Fi network, and <FIG> is an enlarged schematic of a portion of the system showing mechanisms in communication with control modules. System <NUM> includes power source <NUM>, power conditioner <NUM>, power distributor <NUM>, PLC module <NUM>, control modules <NUM> (first control module 20A, second control module 20B, and third control module 20C), master module <NUM>, power lines <NUM>, wireless communication lines 26A, wired communication lines 26B, and mechanisms <NUM> (first mechanism 28A, second mechanism 28B, third mechanism 28C, fourth mechanism 28D, fifth mechanism 28E, and sixth mechanism 28F).

System <NUM> can be located on a vehicle, such as an aircraft, and includes various components needed to ensure the vehicle is able to function for the vehicle's intended purpose. Within system <NUM> is power source <NUM>, which provides power to the components of system <NUM> via power lines <NUM>. Power source <NUM> can be a battery, an engine, or any other type or combination of power generation and/or storage system configured to provide an electric current along power lines <NUM> to drive the components of system <NUM>. Power source <NUM>, power conditioner <NUM>, power distributor <NUM>, PLC module <NUM>, and/or master module <NUM> can all be one component configured to perform the various tasks or multiple components in electrical communication with power source <NUM> (i.e., along power lines <NUM> as shown in the disclosed embodiment). Power lines <NUM> are electrical wires configured to transmit the electric current between components. Depending on the electrical needs of system <NUM>, power lines <NUM> can be any type of cables/wires/lines configured to transmit any type of current, voltage, amperes, etc..

Power conditioner <NUM> is in electrical communication with power source <NUM> via power lines <NUM>. Power conditioner <NUM> is configured to condition the electric current to be the necessary current (i.e., alternating or direct), voltage, etc. that are suitable for use by the other components of system <NUM>.

Power distributor <NUM> is in electrical communication with power source <NUM> via power lines <NUM> downstream from power source <NUM>. Power distributor <NUM> distributes/directs the electric current to the necessary components of system <NUM>. Power distributor <NUM> can direct the electric current to one or multiple components of system <NUM>, including components that do not require the Wi-Fi authentication key (or components in which access to the Wi-Fi network would not be desirable, such as electrical outlets within a passenger cabin of an aircraft). However, power distributor <NUM> should direct at least a portion of the electric current to PLC module <NUM> and then on to control modules <NUM> (which receive the electric current and extract the PLC containing the Wi-Fi authentication key that is added to the electric current by PLC module <NUM>). The electric current directed to PLC module <NUM> and control modules <NUM> also provides power to drive those components.

PLC module <NUM> is in electrical communication with power source <NUM> via power lines <NUM> downstream from power source <NUM>. PLC module is configured to modulate the electric current to include the PLC, which contains the Wi-Fi network authentication key, to communicate data along power lines <NUM>. The PLC can consist entirely of the Wi-Fi network authentication key or can include other data. The PLC transmitted along the power lines <NUM> to control modules <NUM> can be any type of PLC, including narrowband or broadband PLC. Additionally, the electric current that is modulated by PLC module <NUM> to include the PLC can be alternating current or direct current. PLC module <NUM> can use a variety of modulation schemes to add the PLC to the electric current, such as Orthogonal Frequency Division Multiplexing, Binary Phase Shift Keying, Frequency Shift Keying, Spread Frequency Shift Keying, Differential Code Shift Keying, or another type of scheme. Additionally, the PLC can be configured to function at a variety of frequencies suitable to communicate the Wi-Fi authentication key along power lines <NUM>. PLC module <NUM> can be in communication with master module <NUM> via wireless communication lines 26A or wireless communication lines 26B, with master module <NUM> communicating information about the Wi-Fi authentication key so that PLC module <NUM> can include that data in the PLC. Alternately, PLC module <NUM> can periodically create a different Wi-Fi authentication key that is included in the PLC and communicate that information (i.e., the Wi-Fi authentication key) to master module <NUM>, with master module <NUM> utilizing the Wi-Fi authentication key to access the Wi-Fi network and communicate with control modules <NUM>. In the disclosed embodiment, PLC module <NUM> and master module <NUM> communicate via wired communication line 26B.

Control modules <NUM> (first control module 20A, second control module 20B, and third control module 20C) are in electrical communication with power source <NUM> via power lines <NUM> (control modules <NUM> may be along the same power line <NUM> or different power lines <NUM>) and are downstream from power source <NUM> and PLC module <NUM>. System <NUM> can include any number of control modules <NUM>, including one, two, or more than three. Control modules <NUM> are each configured to extract the PLC from the electric current flowing through power lines <NUM> and utilize the Wi-Fi network authentication key (that is contained in the PLC) to access the Wi-Fi network. After gaining access to the Wi-Fi network, control modules <NUM> can send and receive instructions, data, and other communications to and from other components with access to the Wi-Fi network, such as master module <NUM>. As described below, control modules <NUM> are configured to receive instructions from master module <NUM> and convey those instructions to mechanisms <NUM> while also receiving data and other information from mechanisms <NUM> and conveying that information to master module <NUM>. Control modules <NUM> can be configured to continuously demodulate the PLC to extract and utilize different Wi-Fi authentication keys that are periodically updated/created to access the Wi-Fi network to provide additional security to the Wi-Fi network.

Master module <NUM> is in communication with control modules <NUM> and PLC module <NUM> via wireless communication lines 26A and/or wired communication lines 26B. Master module <NUM> can be configured to communicate instructions and other information to control modules <NUM> via the Wi-Fi network. Master module <NUM> can be configured to communicate information about the Wi-Fi authentication key so that PLC module <NUM> can include that data in the PLC, which is then transmitted to control modules <NUM> via power lines <NUM>. Master module <NUM> can also be configured to receive data and other information from control modules <NUM> and/or convey that information to other components in system <NUM>, such as a display panel. PLC module <NUM> and master module <NUM> can be one component configured to perform the various tasks or two or more components distant from one another. Additionally, PLC module <NUM> and/or master module <NUM> can be part of a vehicle engine control unit (ECU), full authority digital engine/electronics control (FADEC), or another vehicle electronics unit.

Wireless communication lines 26A allow for some components of system <NUM> to communicate with one another without the need for wired communication lines 26B. In the disclosed embodiment, wireless communication lines 26A are the Wi-Fi network that is utilized for wireless communication and are not "lines" (i.e., wires) that transfer electric current for power and/or communication. Thus, master module <NUM> communicates with control modules <NUM> wirelessly via the Wi-Fi network.

Wired communication lines 26B allow for some components of system <NUM> to communicate with one another via the use of wires. Wired communication lines 26B do not require the components communicating via wired communication lines 26B to have access to the Wi-Fi network (and thus do not require the ability to receive and demodulate the PLC to obtain and utilize the Wi-Fi network authentication key). In the disclosed embodiment, PLC module <NUM> and master module <NUM> communicate with one another via wired communication lines 26B (alternately, the two components can be adjacent to one another or can be one component that is configured to perform all of the tasks of both PLC module <NUM> and master module <NUM>). Further, in the disclosed embodiment, control modules <NUM> and mechanisms <NUM> communicate with one another via wired communication lines 26B (alternatively, the two components can be adjacent to one another or can be one component that is configured to perform all of the tasks of both control modules <NUM> and mechanisms <NUM>).

Mechanisms <NUM> (first mechanism 28A, second mechanism 28B, third mechanism 28C, fourth mechanism 28D, fifth mechanism 28E, and sixth mechanism 28F) are in electrical communication with power source <NUM> via power lines <NUM> and are in communication with at least one of first control module 20A, second control module 20B, and third control module 20C. Mechanisms <NUM> are in communication with control modules <NUM> via wired communication lines 26B. Mechanisms <NUM> can be along power lines <NUM> that include the PLC or, because mechanisms <NUM> do not communicate with other components via the Wi-Fi network (but rather use control modules <NUM> to communicate via the Wi-Fi network), mechanisms <NUM> can be along different power lines <NUM> that do not first extend through PLC module <NUM>.

Mechanisms <NUM> can be various actuators, sensors, or other moving or nonmoving devices of the vehicle that can be configured to perform a function depending on the instructions sent by master module <NUM> to control modules <NUM> and conveyed to that particular mechanism <NUM> via wired communication lines 26B. Mechanisms <NUM> can also be configured to collect data/information and convey that information to control modules <NUM>, which in turn relays that information to master module <NUM> or another component of system <NUM> via the Wi-Fi network (such as another control module <NUM> that then conveys the information to another mechanism <NUM>, such as a display panel). If system <NUM> is located on is an aircraft, mechanisms <NUM> can be any avionics equipment configured to control the aircraft and/or monitor the functionality of the components on the aircraft. While each mechanism <NUM> is shown as communicating with one control module <NUM>, system <NUM> can have a configuration in which one mechanism <NUM> is in communication with multiple control modules <NUM>. Additionally, while control module <NUM> is shown as being in communication with two mechanisms <NUM>, control module <NUM> can be in communication with only one or more than two mechanisms <NUM>.

As discussed above, the Wi-Fi network is secured by first modulating the electric current by the PLC module <NUM> to include the PLC that contains the Wi-Fi authentication key. The electric current with the PLC is then conveyed along power lines <NUM> to control modules <NUM>. Control modules <NUM> demodulate the electric current to extract the PLC that contains the Wi-Fi network authentication key. Once control modules <NUM> have the Wi-Fi network authentication key, control modules <NUM> utilize that Wi-Fi network authentication key to access the Wi-Fi network to send and receive information from other components with access to the Wi-Fi network. For example, master module <NUM> communicates instructions to control modules <NUM> via the Wi-Fi network, causing mechanisms <NUM> to perform a task depending on the instruction communicated to control modules <NUM> (which convey those instructions to mechanisms <NUM>). Additionally, data that is collected by mechanisms <NUM> and/or control modules <NUM> can be transmitted to master control <NUM> via the Wi-Fi network. To provide additional security, the Wi-Fi network authentication key can be periodically changed. First, the electric current is remodulated to change the PLC to contain a different Wi-Fi network authentication key. Then, the electric current with the PLC is conveyed along power lines <NUM> to control modules <NUM>. After that, control modules <NUM> demodulate the electric current to extract the PLC that contains the new Wi-Fi network authentication key. Finally, control modules <NUM> utilize the new Wi-Fi network authentication key to access the Wi-Fi network. When periodically updating the Wi-Fi network authentication key, the new Wi-Fi network authentication key should be known by master module <NUM> so that master module <NUM> can identify the components that are using the new Wi-Fi network authentication key to access the Wi-Fi network and grant that access.

The use of the Wi-Fi network to communicate between control modules <NUM> and the other components of system <NUM>, including master module <NUM>, eliminates the need for wired communication lines 26B to extend between all of the components of system <NUM>. The use of the Wi-Fi network is made possible by requiring control modules <NUM> to first utilize the Wi-Fi network authentication key before gaining access to the Wi-Fi network. To ensure that only components within the system are able to get and utilize the Wi-Fi network authentication key, the electric current flowing along power lines <NUM> is used to transmit the PLC that contains the Wi-Fi network authentication key. Thus, only components along power lines <NUM> are able to gain access to the Wi-Fi network. Utilizing PLC to transmit the Wi-Fi network authentication key along power lines <NUM> of system <NUM> provides heightened security to the Wi-Fi network and limits the risk of cyber-attacks, making the use of a Wi-Fi network to communicate information between components within the system more desirable.

A system for securing a Wi-Fi network includes a power source that transmits an electric current along at least one power line, a power line communication (PLC) module in electrical communication with the power source via the at least one power line with the PLC module being configured to modulate the electric current to include a power line communication that contains a Wi-Fi network authentication key, and a control module in electrical communication with and downstream from the PLC module via the at least one power line with the control module being configured to extract the power line communication from the electric current and utilize the Wi-Fi network authentication key to access the Wi-Fi network.

The system of the preceding paragraph can optionally include, additionally and/or alternatively, any one or more of the following features, configurations, steps, and/or additional components:
A master module in communication with the PLC with the master module being configured to communicate the Wi-Fi network authentication key to the PLC module.

A master module in communication with the control module with the master module being configured to communicate instructions to the control module via the Wi-Fi network.

A first mechanism in communication with the control module, wherein the control module instructs the first mechanism to perform a function depending on the instructions from the master module.

The first mechanism is an actuator and the control module instructs the first mechanism to actuate when instructed by the master module.

The first mechanism is connected to the control module by a wired communication line.

The first mechanism is in electrical communication with and downstream from the control module via the at least one power line.

The control module is adjacent to the first mechanism.

A second mechanism in communication with the control module, wherein the control module instructs the second mechanism to perform a function depending on the instructions from the master module.

The control module transmits data to the master module via the Wi-Fi network.

The PLC module is configured to modulate the electric current to periodically alter the power line communication to contain a different Wi-Fi network authentication key and the control module is configured to utilize the different Wi-Fi network authentication key to access the Wi-Fi network.

The power line communication is updated to contain the different network authentication key at least once every <NUM> minutes.

Extracting the power line communication from the electric current includes demodulating the electric current to separate the power line communication containing the Wi-Fi network authentication key from the electric current.

A method of securing a Wi-Fi network includes modulating an electric current using a PLC module to include a power line communication that contains a Wi-Fi network authentication key, conveying the electric current with the power line communication along a power line, demodulating the electric current using a control module to extract the power line communication that contains the Wi-Fi network authentication key, and utilizing the Wi-Fi network authentication key to access the Wi-Fi network.

The method of the preceding paragraph can optionally include, additionally and/or alternatively, any one or more of the following features, configurations, steps, and/or additional components:
Communicating instructions to the control module via the Wi-Fi network.

Performing a task by a first mechanism in communication with the control module depending on the instruction communicated to the control module.

Transmitting data to a master control via the Wi-Fi network.

Claim 1:
A system (<NUM>) for securing a wireless communication, Wi-Fi, network, the system (<NUM>) comprising:
a power source (<NUM>) that transmits an electric current along at least one power line (<NUM>);
a power line communication, PLC, module (<NUM>) in electrical communication with the power source (<NUM>) via the at least one power line (<NUM>), the PLC module (<NUM>) configured to modulate the electric current to include a power line communication that contains a Wi-Fi network authentication key; and
a control module (<NUM>) in electrical communication with and electrically downstream from the PLC module (<NUM>) via the at least one power line (<NUM>), the control module (<NUM>) configured to extract the power line communication from the electric current and utilize the Wi-Fi network authentication key to access the Wi-Fi network; wherein the system further comprises:
a master module (<NUM>) in communication with the control module (<NUM>), the master module (<NUM>) configured to communicate instructions to the control module (<NUM>) via the Wi-Fi network; and
a first mechanism (28A) in communication with the control module (<NUM>),
wherein the control module (<NUM>) instructs the first mechanism (28A) to perform a function depending on the instructions from the master module (<NUM>),
wherein the first mechanism (28A) is connected to the control module (<NUM>) by a wired communication line (26B)
wherein extracting the power line communication from the electric current includes demodulating the electric current to separate the power line communication containing the Wi-Fi network authentication key from the electric current, and
wherein the PLC module (<NUM>) and the master module (<NUM>) are separate components, which are distant from one another.