KR102275967B1 - Launch control system and operation method of the same - Google Patents

Abstract

The present invention is to provide a launch control system capable of enhancing security by independently processing a control network interlocked with a launch device and a security network interlocked with a military command device, and a method of operating the same. According to an embodiment of the present invention, a launch control system comprises: a first network interlocked with a plurality of launch devices, and for exchanging mission performance information and launch device status information; a second network interlocked with a command device and configured to exchange command information; and a fire control device for receiving a first interrupt from the first network and a second interrupt from the second network, and independently processing the first interrupt and the second interrupt for each network.

Description

LAUNCH CONTROL SYSTEM AND OPERATION METHOD OF THE SAME

An embodiment of the present invention is a launch control system for security data processing of a launch control equipment for controlling a guided weapon projectile and an operating method thereof, particularly when processing data requiring information security, such as a defense communication network, supported by the ARM processor. It relates to a launch control system that supports data protection at a low level that cannot be kept at the existing security application level by using the TrustZone function, and a method for operating the same.

The conventional fire control system was equipment used for only one weapon system operation in a closed network environment. Therefore, in the launch control system, only the operating conditions of the closed network were reflected in the design, and low-level hardware security functions such as TrustZone were not used.

As network technology developed, the launch control system was connected to various networks to exchange data. However, when the launch control system is connected to various networks, a security problem may occur if the security sensitive network is not separated from the general network.

The ARM® trust zone is a function provided by the ARM processor, and can enable a normal operating system and a secure operating system to operate simultaneously on a single piece of hardware.

In order to use the trust zone, it is necessary to modify the firmware called the security monitor, and a separate design is required to separate and process the communication coming from the general network equipment and the security network equipment.

Korean Patent Application Laid-Open No. 2015-0145996 'Device sharing system and method in trust zone virtual environment' (published on December 31, 2015) Korean Patent Application Laid-Open No. 2018-0102439 'Method and device for creating a secure execution environment on a mobile device that guarantees versatility and interlocking trust zone functions' Korea Patent Publication No. 2019-0047115 'ARM® TRUSTZONE?? Firmware-based Trusted Platform Module for Implementation' (2015.12.31. Released)

An object of the present invention is to provide a launch control system capable of enhancing security by independently processing a general network for control interlocked with a launch device and a security network interlocked with a military command device, and a method for operating the same.

Another object of the present invention relates to a launch control system capable of improving processing speed and independence by using FIQ of IRQ (Interrupt ReQuest) and FIQ (Fast Interrupt reQuest) exclusively for a defense communication network, and a method of operating the same.

A launch control system according to an embodiment of the present invention is interlocked with a plurality of launch devices, the first network for exchanging mission performance information and launch device status information; a second network interlocked with the command device and configured to exchange command information; and a fire control device for receiving a first interrupt from the first network and a second interrupt from the second network, and independently processing the first interrupt and the second interrupt for each network.

In the present invention, the fire control device is configured to be processed through a first format when receiving the first interrupt from the first network, and uses a second format when receiving the second interrupt from the second network. Security monitor to set up to be processed through; a general operating unit for executing a general operating system and for processing the first interrupt in the first format; and a security operation unit configured to execute a security operating system having a higher security level than the general operating system, and to process the second interrupt in the second format.

In the present invention, the first format is IRQ (Interrupt ReQuest), and the second format is FIQ (Fast Interrupt ReQuest).

In the present invention, the security monitor may include: a control unit configured to set the first interrupt to a first format and to set the second interrupt to a second format; and a processing unit configured to activate the general operation unit when the first interrupt is received and activate the security operation unit when the second interrupt is received.

In the present invention, the first network is linked to the plurality of launch devices according to at least one of Ethernet technology and serial communication technology, which are general communication standards.

In the present invention, the second network is interlocked with the command device according to KVMF (Korean Variable Message Format), a military communication standard.

In the present invention, the command device is a Battalion Tactical Command System (BTCS).

In the present invention, the plurality of launch devices includes at least one of a projectile, a launch pad, a power supply, and a user interface device.

In the present invention, the plurality of launch devices includes at least one of a projectile simulator, a launch pad controller simulator, a navigation simulator, and a weapon control simulator.

A launch control system according to an embodiment of the present invention includes a general network interworking with a plurality of launch devices; a secure network interlocking with the command device; and a fire control device for independently processing interrupts for each network, wherein the operating method of the fire control system includes: receiving an interrupt; determining whether the interrupt has been received from the secure network; when the interrupt is received from the secure network, setting the interrupt to a fast interrupt request (FIQ); and processing the interrupt set as the FIQ in a secure operating system.

In the present invention, when the interrupt is received from the general network, setting the interrupt to an IRQ (Interrupt Request); and processing the interrupt set as the IRQ in a general operating system.

The launch control system of the present invention and its operating method have the effect of enhancing security by independently processing the general network for control linked to the launch device and the security network linked to the military command device.

In addition, the launch control system and the operating method thereof of the present invention have the effect of improving the processing speed and independence by using the FIQ of the IRQ and the FIQ exclusively for the defense communication network.

1 is a view showing a launch control system according to an embodiment of the present invention.
2 is a view showing a fire control device according to an embodiment of the present invention.
3 is a diagram illustrating a security monitor according to an embodiment of the present invention.
4 is a diagram illustrating a method of operating a fire control system according to an embodiment of the present invention.

The present invention will be described in more detail.

Hereinafter, embodiments of the present invention and other matters necessary for those skilled in the art to easily understand the contents of the present invention will be described in detail with reference to the accompanying drawings. However, since the present invention can be embodied in various different forms within the scope of the claims, the embodiments described below are merely exemplary regardless of whether they are expressed or not.

Like reference numerals refer to like elements. In addition, in the drawings, thicknesses, ratios, and dimensions of components are exaggerated for effective description of technical content. “And/or” may include any combination of one or more that the associated configurations may define.

Terms such as first, second, etc. may be used to describe various elements, but the elements should not be limited by the terms. The above terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, a first component may be referred to as a second component, and similarly, a second component may also be referred to as a first component. The singular expression may include the plural expression unless the context clearly dictates otherwise.

In addition, terms such as "below", "below", "above", "upper" and the like are used to describe the relationship between the components shown in the drawings. The above terms are relative concepts, and are described based on directions indicated in the drawings.

Terms such as “comprise” or “have” are intended to designate that a feature, number, step, action, component, part, or combination thereof described in the specification is present, and includes one or more other features, number, or step. , it should be understood that it does not preclude the possibility of the existence or addition of , operation, components, parts, or combinations thereof.

That is, the present invention is not limited to the embodiments disclosed below, but may be implemented in a variety of different forms, and in the following description, when a part is connected to another part, it is directly connected In addition, it may include a case in which another element is electrically connected therebetween. In addition, it should be noted that the same elements in the drawings are denoted by the same reference numbers and symbols as much as possible even though they are indicated in different drawings.

1 is a diagram illustrating a launch control system 10 according to an embodiment of the present invention. Referring to FIG. 1 , the launch control system 10 may be composed of an application program for performing a mission for operating a guided weapon system and a single board computer (SBC) that is a basis for executing the application program. To this end, the launch control system 10 may include a first network 100 , a second network 200 , a launch control device 300 , a plurality of launch devices 400 , and a command device 500 . have.

The first network 100 may be linked to a plurality of launch devices 400 . The first network 100 may exchange mission performance information and launch device status information with the plurality of launch devices 400 . The mission performance information may be information on the operation of the launch devices 400 for performing a mission, and the launch device status information may be information on the status of the launch devices 400 . For example, the first network 100 may be implemented as a general network card. According to an embodiment, the first network 100 may be linked to the plurality of launch devices 400 according to at least one of Ethernet technology and serial communication technology, which are general communication standards.

The second network 200 may be linked to the command device 500 . The second network 200 may exchange command information with the command device 500 using undisclosed military communication technology. The command information may be information about a command order for performing a mission. For example, the second network 200 may be implemented as a secure network card. According to an embodiment, the second network 200 may be linked to the command device 500 according to the terrestrial tactical data link system, that is, the Korean Variable Message Format (KVMF), which is a military communication standard.

The launch control device 300 may receive a first interrupt from the first network 100 and a second interrupt from the second network 200 . The launch control device 300 may independently process the first interrupt and the second interrupt for each network.

That is, the launch control device 300 of the present invention independently processes interrupts for each network so that access through the first network 100 cannot access information processed through the second network 200 to improve security. can be strengthened

The plurality of launch devices 400 are equipment for operating a guided weapon system, and may include at least one of a projectile, a launch pad, a power supply, and a user interface device.

According to an embodiment, the plurality of launch devices 400 may include at least one of a projectile simulator, a launch pad controller simulator, a navigation simulator, and a weapon control simulator.

The command device 500 may be implemented as higher command equipment used for military operations. According to an embodiment, the command device 500 may represent an artillery battalion firing command system, that is, a Battalion Tactical Command System (BTCS). However, the present invention is not limited thereto.

According to an embodiment, the fire control system 10 may be implemented as a simulated tactical fire control system.

In this case, the first network 100 may be connected to a projectile simulator, a launch pad controller simulator, a navigation device simulator, and a weapon control simulator for simulating anti-communication networks. The second network 200 is done, and the network card 2 may be connected to a BTCS simulator that simulates a military communication network. The first network 100 may transmit/receive control and status information messages conforming to communication standards with interworking devices for weapon system operation. In addition, the second network 200 may transmit and receive a mission command of the BTCS in accordance with the KVMF format, which is a military communication standard.

2 is a view showing a fire control device 300 according to an embodiment of the present invention. Referring to FIG. 2 , the launch control device 300 may operate based on a single board computer (SBC) composed of an ARM processor. In this case, the launch control device 300 may use a trustZone function.

To this end, the launch control device 300 may include a security monitor 310 , a general operation unit 320 , and a security operation unit 330 .

When the security monitor 310 receives the first interrupt and the second interrupt, it may be set to a different format to be independently processed. That is, when the security monitor 310 receives the first interrupt from the first network 100 , it may be set to be processed through the first format. In addition, when receiving the second interrupt from the second network 200 , the security monitor 310 may be set to be processed through the second format. For example, the security monitor 310 may control an interrupt controller and a central processing unit (CPU) core in the SBC.

The general operating unit 320 may execute a general operating system (OS). The general operation unit 320 may process the first interrupt of the first format received from the security monitor 310 .

The security operation unit 330 may execute a security operating system having a higher security level than that of a general operating system. The security operation unit 330 may process the second interrupt of the second format received from the security monitor 310 .

Here, the first format may represent an interrupt request (IRQ), and the second format may represent a fast interrupt request (FIQ).

That is, the present invention modifies the interrupt processing logic of the security monitor 310 so that an interrupt coming through the second network 200 is unconditionally processed as an FIQ, and an interrupt coming through the first network 100 is processed as an IRQ. can make it happen ARM processor, when using Trustzone, can support the function of making IRQ used by general operating system and FIQ used by secure operating system, so that OS selection according to each network communication can be made independent of each other. can

3 is a diagram illustrating a security monitor 310 according to an embodiment of the present invention.

Referring to FIG. 3 , the security monitor 310 may include a control unit 311 and a processing unit 312 .

The controller 311 may set the first interrupt IR1 as the first format and set the second interrupt IR2 as the second format. For example, the control unit 311 may be implemented as an interrupt controller in the SBC.

The processing unit 312 may activate the general operation unit 320 when the first interrupt IR1 is received, and activate the security operation unit 330 when the second interrupt IR2 is received.

According to an embodiment, upon receiving the second interrupt IR2 , the controller 311 may set the corresponding interrupt as an FIQ interrupt and transmit it to the processor 312 in order to deliver the second interrupt IR2 to the KVMF processing OS that processes the security message. Then, the processing unit 312 recognizes that the FIQ has been received, is switched to the security mode, and the KVMF processing OS running in the security mode can use the CPU.

4 is a diagram illustrating a method of operating a fire control system according to an embodiment of the present invention.

1 to 4 , the launch control device 300 may receive an interrupt from any one of the first network 100 and the second network 200 ( S10 ). In this specification, the first network 100 may be denoted as a general network, and the second network 200 may be denoted as a security network.

The launch control device 300 may determine whether the received interrupt is received from the security network 200 (S20).

When the interrupt is received from the security network 200 (YES in S20), the fire control device 300 may set the interrupt to the FIQ (S30).

The launch control device 300 may process the interrupt set to the FIQ in the security operating system (S40).

On the other hand, when the interrupt is received from the general network 100 (NO in S20), the fire control device 300 may set the interrupt as an IRQ (S50).

The launch control device 300 may process an interrupt set as an IRQ in a general operating system (S60).

Through the above-described method, the launch control system and the method of operation thereof of the present invention have the effect of enhancing security by independently processing the general network for control interlocked with the launch device and the security network interlocked with the military command device.

The functional operations described herein and the embodiments related to the present subject matter are implemented in digital electronic circuits or computer software, firmware or hardware, including the structures disclosed herein and structural equivalents thereof, or in a combination of one or more of these It is possible.

Embodiments of the subject matter described herein relate to one or more computer program products, ie one or more computer program instructions encoded on a tangible program medium for execution by or for controlling the operation of a data processing device. It can be implemented as a module. A tangible program medium may be a radio wave signal or a computer-readable medium. A radio wave signal is an artificially generated signal, eg, a machine-generated electrical, optical or electromagnetic signal, that is generated to encode information for transmission to an appropriate receiver device for execution by a computer. The computer-readable medium may be a machine-readable storage device, a machine-readable storage substrate, a memory device, a combination of materials that affect a machine-readable radio wave signal, or a combination of one or more of these.

A computer program (also known as a program, software, software application, script or code) may be written in any form of any programming language, including compiled or interpreted language or a priori or procedural language, as a stand-alone program or module; It can be deployed in any form, including components, subroutines, or other units suitable for use in a computer environment.

A computer program does not necessarily correspond to a file on a file device. A program may be in a single file provided to the requested program, or in multiple interacting files (eg, files storing one or more modules, subprograms, or portions of code), or in files holding other programs or data. It may be stored within some (eg, one or more scripts stored within a markup language document).

The computer program may be deployed to be executed on a single computer or multiple computers located at one site or distributed over a plurality of sites and interconnected by a communication network.

Additionally, the logic flows and structural block diagrams described in this patent document describe corresponding acts and/or specific methods supported by corresponding functions and steps supported by the disclosed structural means, and corresponding It can also be used to build software structures and algorithms and their equivalents.

The processes and logic flows described herein may be performed by one or more programmable processors executing one or more computer programs to perform functions by operating on input data and generating outputs.

Processors suitable for the execution of computer programs include, for example, both general and special purpose microprocessors and any one or more processors of any form of digital computer. Typically, the processor will receive instructions and data from read-only memory or random access memory or both.

A key component of a computer is one or more memory devices for storing instructions and data and a processor for executing instructions. In addition, a computer is generally configured to be operable to receive data from, transfer data to, or perform both operations on one or more mass storage devices for storing data, such as, for example, magnetic, magneto-optical disks or optical disks. combined or will include. However, the computer need not have such a device.

The present description sets forth the best mode of the invention, and provides examples to illustrate the invention, and to enable any person skilled in the art to make or use the invention. This written specification does not limit the present invention to the specific terms presented.

Although the above has been described with reference to the preferred embodiment of the present invention, those skilled in the art or those having ordinary knowledge in the technical field will not depart from the spirit and technical scope of the present invention described in the claims to be described later. It will be understood that various modifications and variations of the present invention can be made without departing from the scope of the present invention.

Accordingly, the technical scope of the present invention should not be limited to the contents described in the detailed description of the specification, but should be defined by the claims.

10: launch control system 100: first network
200: second network 300: launch control device
310: security monitor 320: general operations department
330: security operations unit 400: a plurality of launch devices
500: command device

Claims (11)

a first network interlocked with a plurality of launch devices, the first network for exchanging mission performance information and launch device status information;
a second network interlocked with the command device and configured to exchange command information; and
a fire control device for receiving a first interrupt from the first network and a second interrupt from the second network, and independently processing the first interrupt and the second interrupt for each network;
the fire control device,
a security monitor configured to be processed through a first format when receiving the first interrupt from the first network, and configured to be processed through a second format when receiving the second interrupt from the second network;
a general operating unit for executing a general operating system and for processing the first interrupt in the first format; and
It executes a security operating system with a higher security level than the general operating system, characterized in that it comprises a security operation unit for processing the second interrupt of the second format,
launch control system. delete According to claim 1,
The first format is IRQ (Interrupt ReQuest),
The second format, characterized in that the FIQ (Fast Interrupt request),
launch control system. 4. The method of claim 3,
The security monitor,
a control unit configured to set the first interrupt to a first format and to set the second interrupt to a second format; and
and a processing unit for activating the general operation unit when the first interrupt is received, and activating the security operation unit when the second interrupt is received,
launch control system. According to claim 1,
The first network is characterized in that it is linked to the plurality of launch devices according to at least one of Ethernet technology and serial communication technology, which are general communication standards,
launch control system. According to claim 1,
The second network is characterized in that it is linked to the command device according to KVMF (Korean Variable Message Format), a military communication standard,
launch control system. 7. The method of claim 6,
The command device, characterized in that the Battalion Tactical Command System (BTCS),
launch control system. According to claim 1,
The plurality of launch devices,
comprising at least one of a projectile, a launch pad, a power supply, and a user interface device,
launch control system. According to claim 1,
The plurality of launch devices,
Characterized in that it comprises at least one of a projectile simulator, a launch pad controller simulator, a navigation simulator, and a weapon control simulator,
launch control system. a general network interworking with a plurality of launch devices; a secure network interlocking with the command device; and a launch control device for independently processing interrupts for each network, comprising:
receiving an interrupt;
determining whether the interrupt has been received from the secure network;
when the interrupt is received from the secure network, setting the interrupt to a Fast Interrupt request (FIQ); and
characterized in that it comprises the step of processing the interrupt set to the FIQ in a secure operating system,
How the fire control system works. 11. The method of claim 10,
when the interrupt is received from the general network, setting the interrupt to an Interrupt Request (IRQ); and
Characterized in that it comprises the step of processing the interrupt set as the IRQ in a general operating system,
How the fire control system works.

Images