Abstract: A system for secure transfer of digital aircraft data comprising redundant data producer systems includes a first data producer, capable of producing first data, at successive moments, and a second data producer, redundant to the first system. The second data producer is capable of producing an integrity check result relating at least to second data which it produces in a manner redundant to the first data, the integrity check result being transmitted to a data consumer. The data consumer is capable of retrieving the first data and the integrity check result produced by the second system, to produce a new integrity check result from the first data and compare the new integrity check result with the integrity check result produced by the second system.

Abstract: A system for secure transfer of digital aircraft data comprising redundant data producer systems includes a first data producer, capable of producing first data, at successive moments, and a second data producer, redundant to the first system. The second data producer is capable of producing an integrity check result relating at least to second data which it produces in a manner redundant to the first data, the integrity check result being transmitted to a data consumer. The data consumer is capable of retrieving the first data and the integrity check result produced by the second system, to produce a new integrity check result from the first data and compare the new integrity check result with the integrity check result produced by the second system.

Abstract: A secure transfer system for digital aircraft data includes a data producer system configured to generate a data capsule at each data production and a data consumer system. The consumer system is configured to retrieve each capsule to extract an identifier, a refresh indicator, a functional data packet, and an integrity control result. It is configured to check the integrity of the data in the capsule by establishing a new integrity check result from the identifier, the refresh indicator, and the functional data packet retrieved from the capsule and comparing the new integrity check result to the integrity check result of the capsule. The data capsule is in an integrity state when the new integrity check result matches the integrity check result retrieved from the capsule.