Cybersecurity for configuration and software updates of vehicle hardware and software based on fleet level information
A method, implemented by a ground-based computing system, identifies cybersecurity threats originating from proposed updates to software, firmware or configuration file instructions resident in hardware components in a fleet of vehicles. In a proposed update, a valid encrypted signature block of the developer must be present. The proposed update is contained as a last file of a series of linked sequential blockchain files of prior updates. Upon a determination that the proposed update contains a valid signature block and is the last file in a validated series of linked blockchain files, the update is analyzed for any cybersecurity threats. If no cybersecurity threats are found, the update is transmitted to the vehicles in the fleet for implementation in the respective hardware components.
1. A method, implemented by a computing system not on-board a vehicle, identifies cybersecurity threats originating from proposed updates to firmware, software and/or configuration file instructions resident in hardware components in a fleet of vehicles, the method comprising the steps of:
receiving by the computing system, prior to the proposed update being sent to the vehicles, the proposed update to the firmware, software and/or configuration file instructions resident in hardware components of the vehicles;
determining whether the proposed update contains a valid signature block, where the signature block includes an encrypted digital signature of a developer of the proposed update;
determining if the proposed update is contained in a last file of a validated series of linked blockchain files where each file in the series of blockchain files contains one previous update in a series of sequentially implemented updates;
upon a determination that the proposed update contains a valid signature block and upon a determination that the proposed update is contained in the last file in a validated series of linked blockchain files, analyzing the proposed update to determine if any cybersecurity threats are present including comparing the proposed update with stored data defining known cybersecurity threats; and
transmitting the proposed update to the vehicles in the fleet for implementation in the respective hardware components only if no cybersecurity threats are determined to be present in the proposed updates.
2. The method of claim 1 further comprising;
embedding in each file in the series of block chain files a different specified data access rate that defines a data rate at which information contained in the corresponding file is to be read,
monitoring the data rate at which each file in the series of block chain files is read, and
terminating access to the files in the series of block chain files upon a determination that the data rate at which one file in the series of block chain files is being read is not at the specified data access rate for that one file.
3. The method of claim 1 wherein the vehicles are airplanes and the fleet contains only airplanes with the same hardware components.
4. The method of claim 3 further comprising receiving post flight aircraft flight data from a plurality of airplanes in the fleet, and upon identifying similar cybersecurity anomaly parameters in the post flight aircraft flight data for a plurality of airplanes, updating a model of the anomaly based on the cybersecurity anomaly parameters.
5. The method of claim 1 further comprising comparing a current mission profile to be carried out by a vehicle with stored approved mission profiles in order to display to a mission operator any deviations of the current mission profile from the approved mission profiles.
6. A computer program product, comprising a computer usable tangible non-transitory medium having a computer readable program code embodied therein, said computer readable program code adapted to be executed to implement a method, implemented by a computing system not on-board a vehicle, to identify cybersecurity threats originating from proposed updates to firmware, software and/or configuration file instructions resident in hardware components in a fleet of vehicles, the method comprising the steps of:
receiving by the computing system, prior to the proposed update being sent to the vehicles, the proposed update to the firmware, software and/or configuration file instructions resident in hardware components of the vehicles;
determining whether the proposed update contains a valid signature block, where the signature block includes an encrypted digital signature of a developer of the proposed updates;
determining if the proposed update is contained in a last file of a validated series of linked blockchain files where each file in the series of blockchain files contains one update in a series of sequentially implemented firmware and/or software updates;
upon a determination that the proposed update contains a valid signature block and upon a determination that the proposed update is contained in the last file in a validated series of linked blockchain files, analyzing the proposed update to determine if any cybersecurity threats are present including comparing the proposed update with stored data defining known cybersecurity threats; and
transmitting the proposed update to the vehicles in the fleet for implementation in the respective hardware components only if no cybersecurity threats are determined to be present in the proposed updates.
7. The computer program product of claim 6 , the method comprising embedding in each file in the series of block chain files a different specified data access rate that defines a data rate at which information contained in the corresponding file is to be read,
monitoring the data rate at which each file in the series of block chain files is read, and
terminating access to the files in the series of block chain files upon a determination that the data rate at which one file in the series of block chain files is being read is not at the specified data access rate for that one file.
8. The computer program product of claim 6 wherein the vehicles are airplanes and the fleet contains only airplanes with the same hardware components.
9. The computer program product of claim 8 wherein the method comprises receiving post flight aircraft flight data from a plurality of airplanes in the fleet, and upon identifying similar cybersecurity anomaly parameters in the post flight aircraft flight data for a plurality of airplanes, updating a model of the anomaly based on the cybersecurity anomaly parameters.
10. The computer program product of claim 6 wherein the method comprises comparing a current mission profile to be carried out by a vehicle with stored approved mission profiles in order to display to a mission operator any deviations of the current mission profile from the approved mission profiles.