Back to results
US 12,592,940 B2Granted
ATM integrity monitor (AIM) system and method for detecting cyber attacks on ATMs networks
AssigneeRaytheon Systems Limited
InventorStephen Gilbert Wilson
Life of this patent
Estimating the term…
Abstract
An air traffic management system monitor is provided, wherein the monitor comprises a first sub-monitor configured to monitor a data packet within the ATMS, and provide a first alert if the data packet in the ATMS is at least one of: altered; delayed; and absent. This allows detection of a compromised data packed in the ATMS.
Claims20
An air traffic management system (ATMS) monitor, the ATMS monitor comprising:
- at least one processor;
- a first sub-monitor implemented within the at least one processor and configured to:
- monitor for a data packet within an ATMS;
- and
- monitor for an alteration to the data packet;
- wherein, to monitor for the alteration to the data packet, the first sub-monitor is configured to:
- obtain the data packet from a first site of the ATMS;
- hash the data packet obtained from the first site to obtain a first value;
- obtain the data packet from a second site of the ATMS;
- hash the data packet obtained from the second site to obtain a second value;
- compare the first and second values;
- determine the data packet has been altered in response to determining the first and second values do not match;
- and
- provide a first alert in response to the alteration of the data packet;
- and
- a second sub-monitor configured to:
- monitor a router within the ATMS;
- and
- provide a second alert in response to determining that the router has been altered.
16 more elements
A computer-implemented method for monitoring an air traffic management system (ATMS), the method comprising:
- performing a first sub-monitoring process to monitor a data packet within the ATMS, wherein performing the first sub-monitoring process comprises monitoring for an alteration to the data packet by:
- obtaining the data packet from a first site of the ATMS;
- hashing the data packet obtained from the first site to obtain a first value;
- obtaining the data packet from a second site of the ATMS;
- hashing the data packet obtained from the second site to obtain a second value;
- comparing the first and second values;
- determining the data packet has been altered in response to determining the first and second values do not match;
- and
- providing a first alert in response to the alteration of the data packet;
- and
- performing a second sub-monitoring process to monitor a router within the ATMS and providing a second alert in response to determining that the router has been altered.
8 more elements
A non-transitory computer readable medium comprising instructions that, when executed by at least one processor, cause the at least one processor to:
- perform a first sub-monitoring process to monitor a data packet within an air traffic management system (ATMS), wherein:
- the instructions that when executed cause the at least one processor to perform the first sub-monitoring process comprise instructions that when executed cause the at least one processor to monitor for an alteration to the data packet;
- and
- the instructions that when executed cause the at least one processor to monitor for the alteration to the data packet comprise instructions that when executed cause the at least one processor to:
- obtain the data packet from a first site of the ATMS;
- hash the data packet obtained from the first site to obtain a first value;
- obtain the data packet from a second site of the ATMS;
- hash the data packet obtained from the second site to obtain a second value;
- compare the first and second values;
- determine the data packet has been altered in response to
- determining the first and second values do not match;
- and
- provide a first alert in response to the alteration of the data packet;
- and
- perform a second sub-monitoring process to monitor a router within the ATMS and provide a second alert in response to determining that the router has been altered.
12 more elements
Dependencies are inferred from the claim text.