一种航电安全网关软件设计  

Design of Avionics Security Gateway Software

作　　者：郑涛 刘文学[1] 赵一煊 张双[1] 王元勋 周翔宇 ZHENG Tao;LIU Wen-xue;ZHAO Yi-Xuan;ZHANG Shuang;WANG Yuan-xun;ZHOU Xian-yu(Xi′an Aeronautics Computing Technique Research Institute,AVIC,Xi′an 710068,China)

机构地区：[1]航空工业西安航空计算技术研究所,陕西西安710068

出　　处：《航空计算技术》2020年第6期82-85,100,共5页Aeronautical Computing Technique

基　　金：国家某重点科研项目资助(MJ-2018-S-34)。

摘　　要：民用大型飞机网络被划分为不同安全等级,飞机控制域(ACD)的安全等级最高,航空公司信息服务域(AISD)的安全等级较低。ACD和AISD间大多采用AFDX总线和协议来传输数据,而AISD是开放互联网络并且通过TCP/IP协议与其他网络间通信,而其他网络域通过AISD向飞机ACD传输的数据可能存在安全隐患。为了实现对ACD与其他网络域的安全隔离防护和数据安全交换,设计了一种驻留在AISD的航电安全网关软件,负责对通信和数据交换提供安全访问控制,进而提高ACD信息交互的安全性。Network domains of civil aircraft are classified into different security levels,and the aircraft control domain has the highest security level,but the airline information service domain has the lower security level.AFDX bus and protocols are mostly used between aircraft control domain and airline information service domain,but airline information service domain is open to the Internet and communication with other networks through TCP/IP protocols.On the other hand,the data transmitted from other network domains to the aircraft control domain through the airline information service domain may have security risks.In order to realize security isolation and data security exchange between aircraft control domain and other network domains,this paper designs a kind of avionics security gateway software which resides in the airline information service domain,which is responsible for providing security access control for communication and data exchange,and then improves the security of information interaction in the aircraft control domain.

关 键 词：航电系统 安全网关 软件架构 信息交互 

分 类 号：TP311.1[自动化与计算机技术—计算机软件与理论] V243[自动化与计算机技术—计算机科学与技术]