# US 10,375,087 B2 · Security architecture for the connected aircraft > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,375,087 B2 - Document ID: US10375087B2 - Status: Granted - Kind: B2 - Application number: 14/336,230 - Filed: 2014-07-21 - Published: 2017-10-19 - Granted: 2019-08-06 - Earliest claimed: 2014-07-21 - Assignees: Honeywell International Inc. - Applicants: Honeywell International Inc. - Inventors: James C. Kirk; Daniel P. Johnson; Joseph J. Palovick, III; Dewey Mann; Derick Lucas Gerlock - Web page: https://patentgrep.com/patent/US10375087B2 ## CPC - H04L 63/1416: {Event detection, e.g. attack signature detection} - H04L 63/101: {Access control lists [ACL]} - H04L 63/105: {Multiple levels of security} - H04W 12/086: using security domains - G06F 2221/2113: Multi-level security, e.g. mandatory access control - H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)} - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Systems and methods of a security architecture for a connected aircraft are disclosed. In at least one embodiment, an avionics server comprises a plurality of device ports, wherein each of the plurality of device ports is coupled to a respective one of a plurality of device network interface cards and dedicated to a respective one of a plurality of avionics domains which corresponds to the respective device network interface card. Further, at least one processing device is configured to identify one or more signals from a respective user received at one or more of the plurality of device ports and to verify whether the user has access to the respective avionics domains that are dedicated to the one or more device ports over which the one or more signals are received. ## Claims ### Claim 1 An avionics server comprising: a plurality of domains, wherein each one of the plurality of domains comprises a separate dedicated firewall restricting access to a plurality of applications and/or services on each one of the plurality of domains; a plurality of device ports, wherein each one of the plurality of device ports is dedicated to a single respective one of the plurality of domains; a plurality of device network interface cards, wherein each one of the plurality of device network interface cards is coupled to a single respective one of the plurality of device ports; and at least one processing device configured to identify one or more signals from a respective user device received, via the respective plurality of device network interface cards, at one or more of the plurality of device ports and to verify, by the respective dedicated firewall, whether the user has access to the respective domains that are dedicated to the one or more device ports over which the one or more signals are received. ### Claim 2 (depends on 1) The avionics server of claim 1, wherein the plurality of domains includes one or more of the following domains: an aircraft control domain, an airline information services domain, a passenger information and entertainment service domain, or a passenger owned devices domain. ### Claim 3 (depends on 1) The avionics server of claim 1, wherein the at least one processing device is further configured to monitor the one or more signals for suspicious, unsafe, or malicious activity. ### Claim 4 (depends on 1) The avionics server of claim 1, wherein the at least one processing device is further configured to compare the one or more signals being received from the user with one or more signals being received from a second user. ### Claim 5 (depends on 1) The avionics server of claim 1, wherein the at least one processing device is further configured to: compare the user with a list of prohibited users and deny the user access to the avionics server when the user is included in the list of prohibited users. ### Claim 6 (depends on 1) The avionics server of claim 1, further comprising a datalink port and a datalink network interface card for receiving signals via a datalink and wherein the at least one processing device is configured to direct the signals from the datalink port to a corresponding domain. ### Claim 7 (depends on 1) The avionics server of claim 1, wherein the avionics server includes the plurality of device network interface cards. ### Claim 8 (depends on 1) The avionics server of claim 1, wherein the avionics server is an application computing platform including one or more virtual machines hosting the plurality of applications and/or services. ### Claim 9 A method comprising: receiving one or more signals from a device at one or more of a plurality of device ports, via a respective plurality of device network interface cards, wherein each one of the plurality of device ports is coupled to a single respective one of the plurality of device network interface cards, and wherein each one of the plurality of device ports is dedicated to a single respective one of a plurality of domains; identifying the one or more device ports that are receiving the one or more signals from the device; verifying, by a separate respective dedicated firewall on each one of the plurality of domains, whether the device has access to the respective one or more domains that are dedicated to the one or more identified device ports; and forwarding the one or more signals to the one or more domains that the device has access to. ### Claim 10 (depends on 9) The method of claim 9, wherein the plurality of domains include one or more of the following domains: an aircraft control domain, an airline information services domain, a passenger information and entertainment service domain, or a passenger owned devices domain. ### Claim 11 (depends on 9) The method of claim 9, further comprising monitoring the one or more signals for suspicious, unsafe, or malicious activity. ### Claim 12 (depends on 9) The method of claim 9, further comprising comparing the one or more signals being received by the device with one or more signals being received by a second device. ### Claim 13 (depends on 9) The method of claim 9, further comprising comparing the device with a list of prohibited devices. ### Claim 14 (depends on 13) The method of claim 13, further comprising denying the device access to the plurality of domains when the device is included in the list of prohibited devices. ### Claim 15 A system comprising: a plurality of device network interface cards; and an avionics server comprising: a plurality of domains, wherein each one of the plurality of domains comprises a separate dedicated firewall restricting access to a plurality of applications and/or services on each one of the plurality of domains; and a plurality of device ports, wherein each one of the plurality of device ports is dedicated to a single respective one of the plurality of domains; wherein each one of the plurality of device ports is coupled to a single respective one of the plurality of device network interface cards, which corresponds to the respective domain, and wherein the avionics server is configured to identify one or more signals from a respective user device received, via the respective plurality of device network interface cards, at one or more of the plurality of device ports, and to verify, by the respective dedicated firewall, whether the user has access to the respective domains that are dedicated to the one or more device ports over which the one or more signals are received. ### Claim 16 (depends on 15) The system of claim 15, wherein the plurality of domains includes one or more of the following domains: an aircraft control domain, an airline information services domain, a passenger information and entertainment service domain, or a passenger owned devices domain. ### Claim 17 (depends on 15) The system of claim 15, wherein the avionics server is further configured to monitor the one or more signals for suspicious, unsafe, or malicious activity. ### Claim 18 (depends on 15) The system of claim 15, wherein the avionics server is further configured to compare the one or more signals being received from the user with one or more signals being received from a second user. ### Claim 19 (depends on 15) The system of claim 15, wherein the avionics server is further configured to compare the user with a list of prohibited users. ### Claim 20 (depends on 19) The system of claim 19, wherein the avionics server is further configured to deny the user access to the avionics server when the user is included in the list of prohibited users.