Entity-identity based security procurement of computer files that are downloadable to an aircraft, method of authentication, and associated system and aircraft
View Patent ↗A method and system for processing or authenticating an operating computer file of an equipment item installed on board an aircraft. The method includes generating a first private key according to a scheme based on an identity of a first entity, the first private key being unique to the first entity. The method also includes signing the computer file using the first private key and transmitting the signed computer file to the aircraft through a network without a digital certificate that certifies the identity of the first entity. The method further includes verifying the signature of the signed computer file from a first public key determined according to a scheme based on the identity of the first entity, without using the digital certificate that certifies the identity of the first entity.
1. A method for processing an operating computer file of an equipment item installed on board an aircraft, the method comprising:
generating, by at least one processor, at least one first private key according to a scheme based on an identity of a first entity, the at least one first private key being unique to the first entity;
digitally signing the computer file using the at least one first private key; and
transmitting the digitally signed computer file to the aircraft through a network without a digital certificate that certifies the identity of the first entity.
2. The processing method according to claim 1 , further comprising:
digitally signing the computer file by at least one second private key, the at least one second private key being generated according to a scheme based on a second identity of a second entity.
3. The processing method according to claim 1 , wherein the at least one processor includes a first processor and a second processor, the processing method further comprising:
generating, by the first processor, a first partial key according to a scheme based on the identity of the first entity;
generating, by the second processor, a second partial key according to a scheme based on the identity of the first entity, wherein
the generating of the at least one first private key of the first entity includes combining the first partial key and the second partial key.
4. The processing method according to claim 1 , wherein the generating of the at least one first private key of the first entity includes bringing the identity of the first entity into conformity with a convention.
5. The processing method according to claim 4 , wherein the convention includes an addition, to the identity, of an information item decorrelated from the identity.
6. The processing method according to claim 1 , further comprising:
storing the digitally signed computer file in a data loader on board the aircraft; and
sending the digitally signed computer file to the equipment item.
7. A method for authenticating an operating computer file of an equipment item installed on board an aircraft, the computer file being signed by a first entity, the method comprising:
verifying, by a processor on board the aircraft, a signature of the signed computer file from a first public key determined according to a scheme based on an identity of the first entity, without using a digital certificate that certifies the identity of the first entity.
8. The authentication method according to claim 7 , further comprising:
determining the first public key, effected on board the aircraft.
9. The authentication method according to claim 7 , wherein the computer file is signed by a plurality of private keys generated according to a scheme based on identities of a plurality of entities, and the first public key is formed from public keys determined according to a scheme based on the identities of the plurality of entities.
10. The authentication method according to claim 7 , further comprising:
receiving the signed computer file on board the aircraft through a network;
storing the signed computer file in a data loader on board the aircraft; and
sending the verified signed computer file to the equipment item.
11. A system for authenticating an operating computer file of an equipment item installed on board an aircraft, the computer file being signed by a first entity, the system comprising:
a verification unit on board the aircraft configured to verify, using a processor, a signature of the signed computer file from a first public key determined according to a scheme based on the identity of the first entity, without using a digital certificate that certifies the identity of the first entity.
12. The system according to claim 11 , further comprising:
a data loader configured to receive the signed computer file on board the aircraft through a network, configured to store the signed computer file, and configured to send the verified signed computer file to the equipment item.
13. An aircraft comprising:
an authentication system that authenticates an operating computer file of an equipment item installed on board an aircraft, the computer file being signed by a first entity, the system including
a verification unit on board the aircraft configured to verify, using a processor, a signature of the signed computer file from a first public key determined according to a scheme based on the identity of the first entity, without using a digital certificate that certifies the identity of the first entity.
14. The aircraft according to claim 13 , wherein the authentication system further includes
a data loader configured to receive the signed computer file on board the aircraft through a network, configured to store the signed computer file, and configured to send the verified signed computer file to the equipment item.