# US 2019/0319786 A1 · Network security framework for wireless aircraft communication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0319786 A1
- Document ID: US20190319786A1
- Status: Published application
- Kind: A1
- Application number: 16/002,146
- Filed: 2018-06-07
- Published: 2019-10-17
- Earliest claimed: 2018-04-12
- Assignees: Simmonds Precision Products, Inc.
- Applicants: Simmonds Precision Products, Inc.
- Inventors: Subhra Kanti Das; Adishesha Chinknyakanhalli Sivaramasastry; Michael A. Lynch; Kiran Thupakula
- Web page: https://patentgrep.com/patent/US20190319786A1

## CPC

- H04L 9/0819: {Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062)}
- H04L 9/0833: {involving conference or group key (network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065)}
- H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords}
- H04L 9/0869: {involving random numbers or seeds}
- H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying}
- H04L 9/321: {involving a third party or a trusted authority}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)}
- H04L 63/068: {using time-dependent keys, e.g. periodically changing keys (cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088)}
- H04W 4/40: for vehicles, e.g. vehicle-to-pedestrians [V2P]
- H04W 4/48: for in-vehicle communication
- H04W 12/009: {specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks}
- H04W 12/03: Protecting confidentiality, e.g. by encryption
- H04W 12/043: using a trusted network node as an anchor
- H04W 84/06: Airborne or Satellite Networks (space-based or airborne stations H04B7/185)
- H04L 2209/805: Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
- H04L 2209/84: Vehicles
- H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA]
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Embodiments of the invention include techniques for implementing a network security framework for wireless aircraft communication, where the techniques include receiving a key index sequence over a first communication link, and transmitting a subset of the key index to one or more nodes. The techniques also include generating a random encryption key based at least in part on the subset of the key index sequence, encrypting data using the random encryption key, and transmitting the encrypted data over a second communication link.

## Claims

### Claim 1

A method for implementing a network security framework for wireless aircraft communication, comprising:
receiving a key index sequence over a first communication link;
transmitting a subset of the key index to one or more nodes;
generating a random encryption key based at least in part on the subset of the key index sequence;
encrypting data using the random encryption key; and
transmitting the encrypted data over a second communication link.

### Claim 2 (depends on 1)

The method of claim 1, wherein the first communication link is a wired communication link.

### Claim 3 (depends on 1)

The method of claim 1, wherein the second communication link is a wireless communication link.

### Claim 4 (depends on 1)

The method of claim 1, further comprising: detecting an expiry of encryption keys; and
responsive to the detection, renewing the encryption keys for a particular wireless data controller.

### Claim 5 (depends on 1)

The method of claim 1, further comprising: detecting a tampering of sensor nodes; and
responsive to the detection, transmitting new encryption key indices for each wireless data controller in a network.

### Claim 6 (depends on 1)

The method of claim 1, further comprising updating the encryption keys and allocating the keys are based on a Fibonacci series.

### Claim 7 (depends on 1)

The method of claim 1, further comprising storing a key index matrix.

### Claim 8

A system for implementing a network security framework for wireless aircraft communication, comprising:
a first node;
one or more second nodes, wherein the first node is connected to the one or more second nodes over a first communication link, wherein the first node transmits a key index sequence to the one or more second nodes; and
one or more third nodes, wherein the one or more second nodes are connected to the one or more third node over a second communication link, wherein the one or more second nodes transmits a subset of the key index sequence to the one or more third nodes to generate random encryption keys based at least in part on the subset of the key index sequence.

### Claim 9 (depends on 8)

The system of claim 8, wherein the key index is transmitted sequentially to the one or more second nodes.

### Claim 10 (depends on 8)

The system of claim 8, wherein the first communication link is a wired connection.

### Claim 11 (depends on 8)

The system of claim 8, wherein the second communication link is a wireless connection.

### Claim 12 (depends on 8)

The system of claim 8, wherein the first node comprises a key index matrix for storing the key index sequence.

### Claim 13 (depends on 8)

The system of claim 8, wherein the one or more second nodes and the one or more third nodes comprise encryption key generator modules for generating encryption keys from the key index sequence.

### Claim 14 (depends on 8)

The system of claim 8, wherein the first node is an aircraft interface device comprising a key index renewal and revocation module to renew or revoke the key index sequence.

### Claim 15 (depends on 8)

The system of claim 8, wherein the first node is a network manager to aggregate received data and communicates with external systems.

### Claim 16 (depends on 8)

The system of claim 8, wherein the one or more second nodes are wireless data controllers.

### Claim 17 (depends on 8)

The system of claim 8, wherein the one or more third nodes are sensor nodes.

### Claim 18

A device for implementing a network security framework for wireless aircraft communication, comprising:
a first interface configured to receive a first message from the aircraft interface device over a first communication link, wherein the first message includes a key index;
a second interface configured to transmit a second message to one or more sensors, wherein the second message includes a subset of the key index;
an encryption key generator module configured to generate an encryption key based on the second message and encrypt a message using the encryption key; and
transmitting encrypted messages over a second communication link.

### Claim 19 (depends on 18)

The device of claim 18, wherein the first interface is a wired interface and the second interface is a wireless interface.

### Claim 20 (depends on 18)

The device of claim 18, wherein the first interface is configured to receive updated key indices based on detecting an expiry of an encryption key or tampering of any sensor node.