METHODS AND SYSTEMS FOR STARTING SECURE COMMUNICATION IN SYSTEMS WITH HIGH AVAILABILITY

    公开(公告)号:US20240113867A1

    公开(公告)日:2024-04-04

    申请号:US17956939

    申请日:2022-09-30

    IPC分类号: H04L9/08

    摘要: A distributed control system includes an electronic control unit to establish secure communication with a distributed control module. Upon determination that a previously negotiated session key is stored on the electronic control unit, the electronic control unit transmits encrypted communications with the distributed control module using the previously negotiated session key, negotiates a new session key with the distributed control module, and stores the new session key. Upon determination that the previously negotiated session key is not stored on the electronic control unit, the electronic control unit negotiates the new session key with the distributed control module. After negotiating the new session key with the distributed control module, the electronic control unit ceases transmission of unencrypted communications with the distributed control module, transmits encrypted communications with the distributed control module using the new session key, and stores the new session key.

    DEVICES, SYSTEMS, AND METHODS FOR SECURELY LOADING EMBEDDED SOFTWARE USING A MANIFEST

    公开(公告)号:US20240111872A1

    公开(公告)日:2024-04-04

    申请号:US17956940

    申请日:2022-09-30

    IPC分类号: G06F21/57 G06F21/44

    摘要: A method for initializing an engine control system of an aircraft may include authenticating a boot loader, authenticating a manifest in response to authentication of the boot loader wherein the manifest contains hashes of one or more software components, and in response to authentication of the manifest, loading a first set of software components from among the one or more software components onto a non-transitory computer-readable medium, calculating a hash of each software component of the first set of software components, authenticating the first set of software components by comparing the calculated hash of each software component of the first set of software components to the hash of a corresponding software component in the manifest, and executing the first set of software components in response to authentication of the one or more software components. Devices and systems are also provided for initializing an engine control system of an aircraft.

    DEVICES, SYSTEMS, AND METHODS FOR SECURELY INITIALIZING AN EMBEDDED SYSTEM

    公开(公告)号:US20210097185A1

    公开(公告)日:2021-04-01

    申请号:US17030624

    申请日:2020-09-24

    摘要: A method is disclosed and includes authenticating a first stage boot loader and authenticating a second stage boot loader in response to authentication of the first stage boot loader. The method also includes executing the second stage boot loader in response to authentication of the second stage boot loader. Executing the second stage boot loader includes loading an operating system, a first set of machine-readable instructions, and first configuration information associated with the first set of machine-readable instructions onto a non-transitory computer-readable medium, wherein the first set of machine-readable instructions and the first configuration information are associated with one or more priority partitions. Executing the second stage boot loader includes authenticating the operating system and the first set of machine-readable instructions. Executing the second stage boot loader includes executing the first set of machine-readable instructions in response to authentication of the operating system and the first set of machine-readable instructions.

    TEST EQUIPMENT INTERFACE ADD-ON
    4.
    发明申请

    公开(公告)号:US20210096970A1

    公开(公告)日:2021-04-01

    申请号:US17030824

    申请日:2020-09-24

    摘要: Devices, systems, and methods for providing an engine control system configured with a two-part test equipment monitor where at least one part is selectively removable are disclosed. An engine control system for an aircraft includes an electronic control unit (ECU). The ECU is configured to implement a production support equipment module and a selectively removable test support equipment module. The production support equipment module enables restricted data monitoring of the engine control system. The test support equipment module enables a comprehensive interface with the engine control system when installed with the ECU.

    Communicating securely with devices in a distributed control system

    公开(公告)号:US11711206B2

    公开(公告)日:2023-07-25

    申请号:US17030682

    申请日:2020-09-24

    IPC分类号: H04L9/08 H04L9/32

    摘要: A method comprises a server generating a server nonce and transmitting a server public key, a key signature and the server nonce to a device, the device verifying the server public key, signing the server nonce with a device private key, generating a device nonce, and transmitting the server nonce, the server nonce signature, a device public key, a device key signature, and the device nonce to the server, the server verifying the server nonce and the device public key, generating a session key, encrypting the session key with the device public key, signing the device nonce and the session key with a server private key, and transmitting the device nonce, the signed device nonce and session key, and the encrypted session key to the device, and the device verifying the device nonce, decrypting the encrypted session key with the device private key, and verifying the decrypted session key.

    Performance benchmarking for real-time software and hardware

    公开(公告)号:US11429507B2

    公开(公告)日:2022-08-30

    申请号:US16898351

    申请日:2020-06-10

    摘要: A system and method determines a unique performance benchmark for specific computer object code for a particular microprocessor. By generating multiple unique benchmarks for a single, same code module on multiple different processors, the method determines which processor is optimal for the code module. By generating for a single designated processor a performance benchmark for each code modules of multiple modules, where the multiple modules have a same/similar functionality but variations in detailed code or algorithms, the system and method identifies code variation(s) which is/are optimal for the single designated processor. The system and method may entail first extracting selected features of object code (as actually executed) into a code profile, and then generating the performance benchmark based on the code profile and in machine-level timing data for the selected microprocessor. In this way, code security is achieved by fire-walling the object code from the second stage of the method.

    PERFORMANCE BENCHMARKING FOR REAL-TIME SOFTWARE AND HARDWARE

    公开(公告)号:US20210390028A1

    公开(公告)日:2021-12-16

    申请号:US16898351

    申请日:2020-06-10

    IPC分类号: G06F11/34 G06F11/36 G06F7/544

    摘要: A system and method determines a unique performance benchmark for specific computer object code for a particular microprocessor. By generating multiple unique benchmarks for a single, same code module on multiple different processors, the method determines which processor is optimal for the code module. By generating for a single designated processor a performance benchmark for each code modules of multiple modules, where the multiple modules have a same/similar functionality but variations in detailed code or algorithms, the system and method identifies code variation(s) which is/are optimal for the single designated processor. The system and method may entail first extracting selected features of object code (as actually executed) into a code profile, and then generating the performance benchmark based on the code profile and in machine-level timing data for the selected microprocessor. In this way, code security is achieved by fire-walling the object code from the second stage of the method.