Secure file transfer method
View Patent ↗An on-board telecommunication system, partitioned into a secure area and a non secure area, including at least a first telecommunication equipment unit in the secure area, a second telecommunication equipment unit in the non secure area, and a first one-way link from the first to the second equipment. The first equipment unit is configured to transmit data on the first link according to a first protocol. The system further includes a second link from the second to the first equipment unit, in accordance with a second protocol, the first two layers of which are distinct of those of the first protocol, the second equipment configured to transmit data on the second link as messages in accordance with the first protocol and encapsulated in frames in accordance with the second protocol.
1. An on-board telecommunication system, partitioned into a secure area and a non secure area, comprising:
a first telecommunication equipment unit in the secure area;
a second telecommunication equipment unit in the non secure area;
a first one-way link from the first equipment unit to the second equipment unit, the first equipment unit configured to transmit data on the first link according to a first protocol;
a second link from the second equipment unit to the first equipment unit, the second equipment unit configured to transmit data on the second link in accordance with a second protocol, the physical layer and data link layer of which are distinct from those of the first protocol,
the second equipment unit configured to transmit data on the second link as messages in accordance with the first protocol and encapsulated in frames in accordance with the second protocol.
2. The on-board telecommunication system according to claim 1 , wherein a physical layer and data link layer of the first protocol are Ethernet layers.
3. The on-board telecommunication system according to claim 2 , wherein a stack of the first protocol is TFTP/UDP/IP/Ethernet.
4. The on-board telecommunication system according to claim 1 , wherein the physical layer and data link layer of the second protocol are ARINC 429 layers.
5. The on-board telecommunication system according to claim 1 , wherein the physical layer and data link layer of the second protocol are CAN layers.
6. An on-board telecommunication system, partitioned into a secure area and a non secure area, comprising:
a first telecommunication equipment unit in the secure area;
a second telecommunication equipment unit in the non secure area;
a first one-way link from the first equipment unit to the second equipment unit, the first equipment unit configured to transmit data on the first link according to a first protocol;
a second link from the second equipment unit to the first equipment unit, the second equipment unit configured to transmit data on the second link in accordance with a second protocol, the physical layer and data link layer of which are distinct from those of the first protocol,
the second equipment unit configured to transmit data on the second link as messages in accordance with the first protocol and encapsulated in frames in accordance with the second protocol,
wherein a stack of the first protocol is TFTP/UDP/IP/Ethernet, and
the second equipment unit includes an encapsulation module configured to encapsulate a message of TFTP protocol, including ACK, ERROR, DATA, in ARINC 429 frames.
7. The on-board telecommunication system according to claim 6 , wherein the encapsulation module is configured to concatenate with the TFTP message UDP ports used for transferring data between the first and second equipment units.
8. The on-board telecommunication system according to claim 6 , wherein the encapsulation module is configured to concatenate with the TFTP message an IP address of the destination equipment of the TFTP message and/or an IP address of source equipment of the message.
9. An aircraft comprising:
an on-board telecommunication system according to claim 1 .