Patent application EP20175380A (EP), filed 2020-05-19
Publication number: EP3751825A1
Title: AIRCRAFT NETWORK CYBERSECURITY APPARATUS AND METHODS
Abstract: A method of obfuscating mapping of an avionic network is disclosed, including operatively coupling a network module between an external-access node and an avionics bus, with all communications between the external-access node and the avionics bus passing through the network module. The method further includes generating a first network map identifying network addresses for a first set of components on at least a first portion of the avionics bus, loading the first network map on the network module, and making the first network map accessible to the external access node. The method further includes generating at least a second network map different from the first network map and loading the second network map on the network module. The method further includes changing the network map accessible to the external-access node from the first network map to the second network map.
IPC codes: H04L  29/    06            A I
H04L  29/    08            A I
H04L  29/    12            A I
H04B   7/   185            A I
H04W  84/    00            A I
H04L  67/    12            A I
H04L   9/    40            A I
Claims: number: 1
text: A method (600) of obfuscating mapping of an avionic network (410), comprising:
number: 2
text: The method (600) of claim 1, further comprising:
number: 3
text: The method (600) of claim 2, further comprising limiting (628) communication between the avionics bus (412) and the external-access node (430) to communication through the first virtual environment (540).
number: 4
text: The method (600) of claim 3, wherein changing (630) the network map accessible to the external-access node (430) from the first network map (542) to the second network map (546) includes removing (632) communication of the external-access node with the first virtual environment (540), and establishing (636) communication of the external-access node with the second virtual environment (544).
number: 5
text: The method (600) of any of claims 1-4, wherein changing (630) the network map accessible to the external-access node (430) includes changing the network map accessible to the external-access node in response to meeting at least a first predetermined criterion (524, 526, 528).
number: 6
text: The method (600) of claim 5, wherein the at least a first predetermined criterion (524, 526, 528) for changing the network map accessible to the external-access node (430) includes at least one of a fixed basis for changing the network map accessible to the external-access node or a randomized basis for changing the network maps accessible to the external-access node.
number: 7
text: A network module (510) for obfuscating mapping of an avionic network (410) performing the method of any of claims 1-6, wherein the network module is operatively coupled to the avionic network and configured to:
number: 8
text: The network module (510) of claim 7, wherein the network module is configured to:
number: 9
text: The network module (510) of claim 8, comprising a first partition (556) and a second partition (558), wherein:
number: 10
text: The network module (510) of claim 8, comprising a first partition (556) and a second partition (558), wherein the first partition is operatively coupled to the avionic network (410) and configured to load the first virtual environment (540) storing the first network map (542) from the first partition onto the second partition, the second partition is configured to be operatively interposed between the avionics bus (412) and the external node (430), and the network module is configured to restrict data flow between the first partition and the second partition to unidirectional data flow from the first partition to the second partition.
number: 11
text: The network module (510) of claim 10, further comprising a data diode (518) restricting data flow between the first partition (556) and the second partition (558) to unidirectional data flow from the first partition to the second partition.
number: 12
text: A system for obfuscating network mapping of an avionic network (410) of an aircraft (120) by performing the method of any of claims 1-6, the system comprising:
number: 13
text: The system of claim 12, wherein the switching device has a first mode (524) of operating and a second mode of operating (526) different than the first mode, the first and second modes being configured to provide different levels of security.
number: 14
text: The system of any of claims 12 or 13, wherein the system includes a container manager (536) operating on a host machine (510) and running the first and second containers (540, 544).
number: 15
text: The system of claim 14, wherein the host machine (510) has a secure partition (556) including the switching device (520) and an external partition (558) including the container manager (536).
number: 16
text: The system of any of claims 12-15, wherein each container (540, 544) is configured as a network gateway.
Office action: search_report, dated 2020-12-16
Rejection reasons: novelty_epc_54
Prior art cited: ref_id: US2009010200A1
ref_type: patent
severity: background
ref_id: US2008181169A1
ref_type: patent
severity: background
ref_id: US2009129301A1
ref_type: patent
severity: background
ref_id: US2008181169
ref_type: patent
severity: novelty_destroying
ref_id: US2009010200
ref_type: patent
severity: novelty_destroying
ref_id: US2009129301
ref_type: patent
severity: novelty_destroying
Final disposition: pending (2020-12-16)