Method of configuring a network of tire monitoring devices
A method of configuring a network of tire monitoring devices using an untrusted device is provided. An untrusted device transmits first configuration data to a first tire monitoring device, and then receives a first input verifying that the first configuration data has been loaded to the first tire monitoring device and matches expected first configuration data. The untrusted device transmits second configuration data to a second tire monitoring device, and receives a second input verifying that the second configuration data has been loaded to the second tire monitoring device and matches expected second configuration data. The untrusted device transmits a command initializing generation of a cryptographic parameter by the first tire monitoring device, and causes the cryptographic parameter to be exchanged with the second tire monitoring device such that secure future communication is established between the first and second tire monitoring devices.
1 . A method of configuring a network of tire monitoring devices using an untrusted device, the method comprising:
transmitting, by the untrusted device, first configuration data to a first tire monitoring device;
receiving, by the untrusted device, a first input verifying that the first configuration data has been loaded to the first tire monitoring device and matches expected first configuration data;
transmitting, by the untrusted device, second configuration data to a second tire monitoring device;
receiving, by the untrusted device, a second input verifying that the second configuration data has been loaded to the second tire monitoring device and matches expected second configuration data; and
after receipt of both the first input and the second input, transmitting, by the untrusted device, a command initializing generation of a cryptographic parameter by the first tire monitoring device, and causing the cryptographic parameter to be exchanged with the second tire monitoring device such that secure future communication is established between the first and second tire monitoring devices.
2 . A method according to claim 1 , wherein verifying that the first configuration data loaded to the first tire monitoring device matches expected first configuration data comprises transmitting, by the first tire monitoring device, a configuration data signal which encodes the first configuration data, wherein the configuration data signal is configured to be received and understood by a human, and receiving, by the untrusted device, the first input via a human interaction with the untrusted device.
3 . A method according to claim 2 , wherein the configuration data signal comprises a visual signal, and the visual signal is transmitted using a visual indicator of the first tire monitoring device.
4 . A method according to claim 3 , wherein the visual indicator comprises a light source, and the method comprises selectively illuminating the light source to transmit the configuration data signal.
5 . A method according to claim 4 , wherein the configuration data signal comprises a number, and the selective illumination of the light source comprises encoding the number into an illumination sequence representing individual digits of the number.
6 . The method according to claim 1 , comprising, when the first input is not received, and prior to transmitting, by the untrusted device, the second configuration data to the second tire monitoring device, re-attempting verification of the first configuration data, and indicating a fault condition if the first input continues not to be received.
7 . The method according to claim 6 , comprising, when the first input continues not to be received after re-attempting verification of the first configuration data, re-transmitting, by the untrusted device, the first configuration data to the first tire monitoring device, re-attempting verification of the first configuration data after the re-transmitting, and indicating a further fault condition if the first input still continues not to be received.
8 . The method according to claim 1 , wherein the method comprises transmitting, via the untrusted device, a further command waking the first tire monitoring device prior to transmission of the first configuration data to the first tire monitoring device.
9 . The method according to claim 8 , wherein the command is transmitted using a relatively long-range communication protocol, and the further command is transmitted using a relatively short-range communication protocol.
10 . A tire monitoring network comprising first and second tire monitoring devices configured by a method according to claim 1 .
11 . An aircraft comprising the tire monitoring network according to claim 10 .
12 . The method according to claim 1 , wherein the first and/or second configuration data comprises any of an aircraft wheel location at which the tire monitoring device is intended to be located, and a reference pressure for a tire of a wheel to which the tire monitoring device corresponds.
13 . The method according to claim 1 , wherein the method comprises receiving, at the untrusted device, the first configuration data prior to transmitting the first configuration data to the first tire monitoring device.
14 . The method according to claim 1 , wherein the method comprises initiating, via the untrusted device, a tire check once secure future communication is established between the first and second tire monitoring devices.
15 . The method according to claim 1 , wherein the method comprises:
transmitting, by the untrusted device, third configuration data to a third tire monitoring device;
receiving, by the untrusted device, a third input verifying that the third configuration data has been loaded to the third tire monitoring device and matches expected third configuration data; and
after receipt of the first, second and third inputs, transmitting, by the untrusted device, the command initializing generation of the cryptographic parameter by the first tire monitoring device, and causing the cryptographic parameter to be exchanged with the second and third tire monitoring devices such that secure future communication is established between the first, second and third tire monitoring devices.
16 . The method according to claim 1 , wherein the tire monitoring devices comprise tire pressure monitoring devices.
17 . A method of configuring a network of tire pressure monitoring devices using an untrusted device, the method comprising:
transmitting, by the untrusted device, respective configuration data to the tire pressure monitoring devices;
receiving, by the untrusted device, respective inputs verifying that installed configuration data matches expected configuration data; and
after receiving the respective inputs, transmitting, by the untrusted device, a command initializing generation of a cryptographic parameter by at least one of the tire pressure monitoring devices, and causing the cryptographic parameter to be exchanged with the other tire pressure monitoring devices such that secure future communication is established between the tire pressure monitoring devices,
wherein the tire pressure monitoring devices are installed with the respective configuration data, and respective inputs verifying that the installed configuration data matches expected configuration data are received by the untrusted device, sequentially prior to transmission of the command, with configuration data transmitted to a tire pressure monitoring device and verified via the respective input prior to transmission of configuration data to a next sequential tire pressure monitoring device.
18 . A tire monitoring network comprising first and second tire monitoring devices configured by a method according to claim 17 .
19 . An aircraft comprising the tire monitoring network according to claim 18 .