Application and product realization of darpa lads capabilities to legacy avionics

Patent metadata

Field	Value
Publication number	US-10935587-B2
Application number	US-201916518051-A
Country	US
Kind code	B2
Filing date	Jul 22, 2019
Priority date	Jul 22, 2019
Publication date	Mar 2, 2021
Grant date	Mar 2, 2021

Abstract

A system and related method for determining whether an electrical circuit has been compromised. The system includes a circuit probe positioned relative to the electrical circuit that detects electromagnetic circuit emissions therefrom and an analysis device electrically coupled to the circuit probe and receiving electromagnetic emissions detection signals therefrom, where the analysis device identifies constituent frequencies and their magnitudes in the detection signals. The system also includes a comparison processor responsive to the constituent frequencies and magnitudes from the analysis device, where the comparison processor compares the constituent frequencies and magnitudes to previously stored constituent frequencies and magnitudes obtained from an equivalent test circuit to the electrical circuit to determine whether the electrical circuit has been compromised. A background probe can be provided to obtain background emissions that can be subtracted from the circuit emissions.

First claim

What is claimed is:

1. A detection system for determining whether at least one electrical circuit has been compromised, said system comprising:
at least one circuit probe positioned relative to the at least one electrical circuit and detecting electromagnetic emissions therefrom;
a first analysis device electrically coupled to the at least one circuit probe and receiving electromagnetic emissions detection signals therefrom, said first analysis device identifying constituent frequencies and their magnitudes in the detection signals; and
a comparison processor responsive to the constituent frequencies and magnitudes from the first analysis device, said comparison processor comparing the constituent frequencies and magnitudes to previously stored constituent frequencies and magnitudes obtained from an equivalent circuit to the at least one electrical circuit to determine whether the at least one electrical circuit has been compromised.

2. The system according to claim 1 wherein the first analysis device includes a spectrum analysis device that provides voltage/time data and frequency/time data in the detection signals that are converted to the constituent frequencies and magnitudes.

3. The system according to claim 2 wherein the first analysis device includes a data characterization processor that provides data characterization and signature feature extraction of the voltage/time data and frequency/time data.

4. The system according to claim 2 further comprising a software defined radio that converts the detections signals from the analog domain to the digital domain before being sent to the first analysis device.

5. The system according to claim 1 further comprising a background probe positioned to detect background electromagnetic emissions therefrom and a second analysis device electrically coupled to the background probe and receiving electromagnetic emissions detection signals therefrom, said second analysis device identifying constituent frequencies and their magnitudes in the detection signals from the background probe, said comparator subtracting the constituent frequencies and their magnitudes in the detection signals from the background probe from the constituent frequencies and their magnitudes in the detection signals from the circuit probe before comparing the constituent frequencies and magnitudes to the previously stored constituent frequencies and magnitudes.

6. The system according to claim 1 wherein the at least one electrical circuit is a plurality of electrical circuits, the at least one circuit probe is a plurality of circuit probes for the plurality of circuits and the first analysis device is a multi-channel analysis device electrically coupled to all of the probes, said comparison processor determining whether any of the plurality of circuits has been compromised.

7. The system according to claim 6 wherein the plurality of circuits are provided within a single chassis.

8. The system according to claim 7 wherein the plurality of circuits are provided on electronic cards and wherein the first analysis device is provided within a slot in one of the cards.

9. The system according to claim 7 wherein the chassis is an avionics chassis.

10. The system according to claim 1 wherein the first analysis device is a multi-channel RF processor software defined radio.

11. The system according to claim 1 wherein the first analysis device monitors the detection signals during a boot-up sequence of the at least electrical circuit.

12. A detection system for determining whether a computer has been compromised, said system comprising:
a circuit probe positioned relative to the computer and detecting electromagnetic computer emissions therefrom;
a first software defined radio for converting computer emissions signals from the circuit probe from the analog domain to the digital domain;
a first spectrum analysis device for identifying computer voltage/time and frequency/time constituents in the digital computer emissions signals;
a first real time data characterization processor for providing data characterization and feature extraction of the computer voltage/time and frequency/time constituents and providing computer data characterization signature files;
a background probe positioned to detect electromagnetic background emissions;
a second software defined radio for converting background emissions signals from the background probe from the analog domain to the digital domain;
a second spectrum analysis device for identifying background voltage/time and frequency/time constituents in the digital background emissions signals;
a second real time data characterization processor for providing data characterization and feature extraction of the background voltage/time and frequency/time constituents and providing background data characterization signature files; and
a comparison processor responsive to the computer data characterization signature files and the background data characterization signature files, said comparison processor subtracting the background data characterization signature files from the computer data characterization signature files and comparing the subtracted computer data characterization signature files to previously stored test data characterization signature files obtained from an equivalent computer to determine whether the computer has been compromised.

13. The system according to claim 12 wherein the computer is provided within a component chassis.

14. The system according to claim 13 wherein the background probe is secured to an underside of a lid of the chassis.

15. The system according to claim 13 wherein the chassis is an avionics chassis.

16. A method for determining whether at least one electrical circuit has been compromised, said method comprising:
detecting electromagnetic emissions by at least one circuit probe positioned relative to the at least one electrical circuit;
identifying constituent frequencies and their magnitudes in the detected electromagnetic emissions by an analysis device; and
comparing the constituent frequencies and magnitudes to previously stored constituent frequencies and magnitudes obtained from an equivalent circuit to the at least one electrical circuit in a processor to determine whether the at least one electrical circuit has been compromised.

17. The method according to claim 16 wherein identifying constituent frequencies and their magnitudes includes providing voltage/time data and frequency/time data in the detected electromagnetic emissions that are converted to the constituent frequencies and magnitudes.

18. The method according to claim 17 wherein identifying constituent frequencies and their magnitudes includes providing data characterization and signature feature extraction of the voltage/time data and frequency/time data.

19. The method according to claim 16 further comprising detecting background electromagnetic emissions and identifying constituent frequencies and their magnitudes in the background electromagnetic emissions, wherein comparing the constituent frequencies and magnitudes includes subtracting the constituent frequencies and their magnitudes in the background electromagnetic emissions from the constituent frequencies and their magnitudes in the detected electromagnetic emissions before comparing the constituent frequencies and magnitudes to the previously stored constituent frequencies and magnitudes.

20. The method according to claim 16 wherein the at least one circuit probe detects the electromagnetic emission

Assignees

• Northrop Grumman Systems Corp

Inventors

• Mckinney Kenneth F
• Weidele Kenneth R
• Janjua Geoffrey R
• Hilchie Allan T
• Haderlie Kirk L

Classifications

• G06F21/87 Primary

  by means of encapsulation, e.g. for integrated circuits · CPC title

• G01R31/008 Primary

  on air- or spacecraft, railway rolling stock or sea-going vessels · CPC title

• G01R31/002 Primary

  where the device under test is an electronic circuit · CPC title

• G01R29/0892

  Details related to signal analysis or treatment; presenting results, e.g. displays; measuring specific signal features other than field strength, e.g. polarisation, field modes, phase, envelope, maximum value · CPC title

• G01R29/0814

  Field measurements related to measuring influence on or from apparatus, components or humans (EMC, EMI and similar testing in general G01R31/001), e.g. in ESD, EMI, EMC, EMP testing, measuring radiation leakage; detecting presence of micro- or radiowave emitters; dosimetry; testing shielding; measurements related to lightning · CPC title