Abstract: A high availability aircraft network architecture incorporating smart points of presence (SPoP) is disclosed. In embodiments, the network architecture divides the aircraft into districts, or physical subdivisions. Each district includes one or more mission systems (MS) smart network access point (SNAP) devices for connecting MS components and devices located within its district to the MS network. Similarly, each district includes one or more air vehicle systems (AVS) SNAP devices for connecting AVS components and devices within the district to the AVS network. The AVS network may remain in a star or hub-and-spoke topology, while the MS network may be configured in a ring or mesh topology. Selected MS and AVS SNAP devices may be connected to each other via guarded network bridges to securely interconnect the MS and AVS networks.

Abstract: A smart network access point (SNAP) device is disclosed. In embodiments, the SNAP device includes trunk ports for accepting a network trunk cable (e.g., fiber optic trunk) and thereby connecting the SNAP device to an aircraft-based network of SNAP devices. The SNAP device includes switch ports for incorporating physical connections to mission systems (MS) or air vehicle systems (AVS) components and devices, providing a local smart point of presence (SPoP) throughout a physical subdivision (e.g., network district) of an aircraft. The SNAP device is configured for monitoring data exchanges between local MS/AVS components and the aircraft network. The SNAP device includes a cybersecurity module for connecting to local security components (e.g., data guards and multiple levels of security (MLS) encryption/decryption) or for providing built-in data guard and encryption/decryption services. The SNAP device includes power control components for managing power distribution to the connected local network components.

Abstract: A high availability aircraft network architecture incorporating smart points of presence (SPoP) is disclosed. In embodiments, the network architecture divides the aircraft into districts, or physical subdivisions. Each district includes one or more mission systems (MS) smart network access point (SNAP) devices for connecting MS components and devices located within its district to the MS network. Similarly, each district includes one or more air vehicle systems (AVS) SNAP devices for connecting AVS components and devices within the district to the AVS network. The AVS network may remain in a star or hub-and-spoke topology, while the MS network may be configured in a ring or mesh topology. Selected MS and AVS SNAP devices may be connected to each other via guarded network bridges to securely interconnect the MS and AVS networks.

Abstract: A smart network access point (SNAP) device is disclosed. In embodiments, the SNAP device includes trunk ports for accepting a network trunk cable (e.g., fiber optic trunk) and thereby connecting the SNAP device to an aircraft-based network of SNAP devices. The SNAP device includes switch ports for incorporating physical connections to mission systems (MS) or air vehicle systems (AVS) components and devices, providing a local smart point of presence (SPoP) throughout a physical subdivision (e.g., network district) of an aircraft. The SNAP device is configured for monitoring data exchanges between local MS/AVS components and the aircraft network. The SNAP device includes a cybersecurity module for connecting to local security components (e.g., data guards and multiple levels of security (MLS) encryption/decryption) or for providing built-in data guard and encryption/decryption services. The SNAP device includes power control components for managing power distribution to the connected local network components.

Abstract: A Secure Deterministic Fabric (SDF) switch architecture and design may provide a cost effective reconfigurable Multiple Single Levels (MSL) of Security implementation that is low risk to certify and may not require recertification after an initial certification evaluation. The SDF switch enables assignment of processing resources and attached payloads to a specific security level fabric for use by an operational system. The assignment of defined security levels is commanded by a SDF control and status module without changing certification, aircraft wiring, or revising hardware. The processing resources are statically assigned during power up on a per mission basis or dynamically reassigned between security levels during a mission as processing requirements may change as a result of mission stage. The SDF switch supports mission defined security configurations for individual security level operational payload processing.