Secure removable storage for aircraft systems

Patent metadata

Field	Value
Publication number	US-10083325-B2
Application number	US-201514942680-A
Country	US
Kind code	B2
Filing date	Nov 16, 2015
Priority date	Nov 16, 2015
Publication date	Sep 25, 2018
Grant date	Sep 25, 2018

Abstract

Techniques are disclosed for securing backup operational data (e.g., of an aircraft) maintained by a line-replaceable unit (LRU) in a removable storage media device. The LRU generates a first encryption key. The LRU encrypts the operational data using the first encryption key. The LRU generates a second encryption key based on key data of at least a second LRU. The LRU encrypts the first encryption key using the second encryption key.

First claim

What is claimed is:

1. A method, comprising:
generating, by a first line-replaceable unit (LRU) of a plurality of LRUs, a first encryption key;
encrypting specified data using the first encryption key, wherein the encrypted specified data is stored as backup data in a storage media device removably attached to the first LRU;
generating, by the first LRU, a second encryption key by combining key data for each of at least two other LRUs of the plurality of LRUs, the at least two other LRUs including a second LRU and a third LRU; and
encrypting the first encryption key using the second encryption key.

2. The method of claim 1 , further comprising:
storing the encrypted specified data and the encrypted first encryption key in the storage media device.

3. The method of claim 2 , further comprising:
generating, by a replacement LRU for the first LRU, the second encryption key based on the key data of at least the second LRU;
decrypting the encrypted first encryption key stored in the storage media device;
decrypting the encrypted specified data; and
restoring the specified data to the replacement LRU.

4. The method of claim 1 , further comprising, prior to encrypting the first encryption key using the second encryption key:
generating a message authentication code (MAC) for one or more data sets maintained in the storage media device, wherein the MAC is generated using the first encryption key as a signing key.

5. The method of claim 1 , further comprising, prior to generating the second encryption key:
initiating a Transport Layer Security (TLS) connection with at least the second LRU; and
retrieving, via the TLS connection, the key data from the second LRU.

6. A non-transitory computer-readable medium having instructions, which, when executed, perform an operation comprising:
generating, by a first line-replaceable unit (LRU) in a plurality of LRUs, a first encryption key;
encrypting specified data using the first encryption key, wherein the encrypted specified data is stored as backup data in a storage media device removably attached to the first LRU;
generating, by the first LRU, a second encryption key by combining key data for each of at least two other LRUs of the plurality of LRUs, the at least two other LRUs including a second LRU and a third LRU; and
encrypting the first encryption key using the second encryption key.

7. The non-transitory computer-readable medium of claim 6 , wherein the operation further comprises:
storing the encrypted specified data and the encrypted first encryption key in the storage media device.

8. The non-transitory computer-readable medium of claim 7 , wherein the operation further comprises:
generating, by a replacement LRU for the first LRU, the second encryption key based on the key data of at least the second LRU;
decrypting the encrypted first encryption key stored in the storage media device;
decrypting the encrypted specified data; and
restoring the specified data to the replacement LRU.

9. The non-transitory computer-readable medium of claim 6 , wherein the operation further comprises, prior to encrypting the first encryption key using the second encryption key:
generating a message authentication code (MAC) for one or more data sets maintained in the storage media device, wherein the MAC is generated using the first encryption key as a signing key.

10. The non-transitory computer-readable medium of claim 6 , wherein the operation further comprises, prior to generating the second encryption key:
initiating a Transport Layer Security (TLS) connection with at least the second LRU; and
retrieving, via the TLS connection, the key data from the second LRU.

11. A system representing a first line-replaceable unit (LRU) of a plurality of LRUs, the system comprising:
a processor; and
a memory storing program code, which, when executed on the processor, performs an operation comprising:
generating a first encryption key;
encrypting specified data using the first encryption key, wherein the encrypted specified data is stored as backup data in a storage media device removably attached to the system;
generating a second encryption key by combining key data for each of at least two other LRUs of the plurality of LRUs, the at least two other LRUs including a second LRU and a third LRU; and
encrypting the first encryption key using the second encryption key.

12. The system of claim 11 , wherein the operation further comprises:
storing the encrypted specified data and the encrypted first encryption key in the storage media device.

13. The system of claim 11 , wherein the operation further comprises, prior to encrypting the first encryption key using the second encryption key:
generating a message authentication code (MAC) for one or more data sets maintained in the storage media device, wherein the MAC is generated using the first encryption key as a signing key.

14. The system of claim 11 , wherein the operation further comprises, prior to generating the second encryption key:
initiating a Transport Layer Security (TLS) connection with at least the second LRU; and
retrieving, via the TLS connection, the key data from the second LRU.

15. The method of claim 1 , wherein the key data for each of the two or more LRUs comprises a portion of a respective public key on the respective LRU.

16. The method of claim 1 , wherein the first encryption key is encrypted using the second encryption key in order to safeguard the specified data from unauthorized access in an event that the storage media device is removed from the first LRU, wherein the specified data is safeguarded provided that fewer than all of the at least two other LRUs is compromised, wherein the specified data is safeguarded in a manner that also permits the specified data to be recovered by attaching the storage media device to a replacement LRU for the first LRU subsequent to failure of the first LRU.

17. The method of claim 16 , wherein the storage media device includes an encrypted partition and an unencrypted partition, wherein the encrypted specified data is stored in the encrypted partition of the storage media device;
wherein the plurality of LRUs operate in an airplane, wherein the specified data comprises operational data of the airplane, wherein the operational data includes information to identify the airplane to ground systems and maintenance systems;
wherein the first encryption key is encrypted by operation of one or more computer processors of the first LRU in order to generate a wrapped encryption key, wherein the wrapped encrypted key is stored on the unencrypted portion of the storage media device.

18. The method of claim 17 , wherein the key data for each of the two or more other LRUs comprises at least a portion of a respective public key of the respective LRU, wherein the plurality of LRUs include a network file server (NFS) of the airplane, a network extension device (NED) of the airplane, a terminal wireless local area network (LAN) unit (TWLU) of the airplane, and a cabin wireless LAN unit (CWLU) of the airplane, wherein the second encryption key is not generated based on any key data for the first LRU, wherein the method comprises a computer-implemented method.

19. The method of claim 18 , wherein the NFS performs a plurality of functions including operational-data storage, Ethernet conversion, multicast routing, firewall protection, data loading, application hosting, and communication gateway functions;
wherein the NED provides network routing functions between one or more av

Assignees

• Boeing Co

Inventors

• Angus Ian Gareth
• Santiago Rodolfo Acuna

Classifications

• G06F21/602

  Providing cryptographic facilities or services · CPC title

• H04L9/0861

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title

• H04L9/0894

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title

• G06F2221/2131

  Lost password, e.g. recovery of lost or forgotten passwords · CPC title

• G06F21/64

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title