Abstract: The gateway, which connects a low-trust domain (12) and a high-trust domain (13) of an avionics computing infrastructure, provides a plurality of security functions, each function being performed by a data processing node. The gateway comprises, connected in series along a filtering chain of a data flow received from the low-trust domain: a firewall data processing node (4); a protocol break data processing node (5); a master data processing node (1) and an inverse protocol break data processing node (6), the gateway further including a security data processing node (2) connected to each of the data processing nodes of the filtering chain, the different data processing nodes being physically segregated.

Abstract: A communication gateway, on-board an aircraft and connected between electronic devices of an open domain and avionics systems of an avionics domain, includes a module for acquiring, from an electronic device, at least one data message intended for an avionics system, a module for filtering each respective acquired message, according to a set of filtering criteria which is selected, from a set of filtering criteria, depending upon a type of the message, and a transmission module for transmitting each validated message to the corresponding avionics system. At least one filtering criterion of the set is parameterized via a respective filter parameter, and at least one filter parameter is dependent on the recipient avionics system, being variable from one avionics system to another.

Abstract: An avionics communication gateway including a module for acquiring at least one data message, each message being according to a communication protocol and including a header and a payload including a plurality of successive fields, a module for filtering each acquired message, validating the message if it complies with a set of filter criteria, and blocking it otherwise, and a module for transmitting, to a corresponding recipient, each validated message. The filter module includes a unit for generating a main table for each message, representing a tree of the fields of the payload of the message according to a set of levels related to the communication protocol, and a unit for calculating, for each message, a dictionary table and at least one auxiliary table from among first, second and third auxiliary tables, the filter module using the at least one auxiliary table for filtering the message.

Abstract: The gateway, which connects a low-trust domain (12) and a high-trust domain (13) of an avionics computing infrastructure, provides a plurality of security functions, each function being performed by a data processing node. The gateway comprises, connected in series along a filtering chain of a data flow received from the low-trust domain: a firewall data processing node (4); a protocol break data processing node (5); a master data processing node (1) and an inverse protocol break data processing node (6), the gateway further including a security data processing node (2) connected to each of the data processing nodes of the filtering chain, the different data processing nodes being physically segregated.