260 likes | 419 Views
Secure Communications in Civil Aviation. Paul Wells A presentation to ATN 2002 25 September 2002. Contents. 1 Introduction 2 Communications security overview 3 Secure communications applications 4 Conclusions. Introduction. Section 1. Introduction.
E N D
Secure Communications in Civil Aviation Paul Wells A presentation to ATN 2002 25 September 2002
Contents 1 Introduction 2 Communications security overview 3 Secure communications applications 4 Conclusions
Introduction Section 1
Introduction • Comms security is not just about protection of the data but is protection of the whole end to end system • You are as vulnerable as your weakest link • Security in aviation applies to: • voice and data links (air/ground) • command & control • passenger communications • airport communications
Communications security overview Section 2
Communications security overview • Confidentiality • threat: eavesdropping • Integrity • threat: alteration of data • Authentication • threat: impersonation of originator, receiver • Non-repudiation • threat: source subsequently denies originating information • Denial • Wireless bearers are notoriously flakey
Public KEY Cryptography (PKC)Asymmetric Cryptography No shared secret Invented by Whitfield Diffie and Martin Hellman (1976)Invented by Ellis, Cox & Williamson (around 1970, see www.cesg.gov.uk)
Security between networks Crypto Crypto UDP UDP IP IP IP IP IP PPP PPP GPRS L2 PPP PPP Dial up V. Serial Series TE MS BTS SGSN GGSN ISP TE Internet DHCP
Secure comms applications Section 3
Secure communications applications • VIP, business and airline operations • Airline operations • Remote video from airframe • Secure voice from helicopters • QinetiQ Intruder Protection Systems (QIPS) • Wireless access for passengers (ground & air) • ATN applications
VIP, business and airline operations Communications via Inmarsat Aero Global connectivity Voice, data & video Protocol enhancement for maximum data throughput Scalable architecture
Airline operations • Use of Iridium for low-rate voice or secure data • Demonstrated airborne polar to land mobile direct links • Secure messaging via Iridium paging
Streamed IP video from airframe on demand • Also can stream TV to the airframe - suitable for live news update
Crypto Crypto Example of secure voice from helicopters
QinetiQ Intruder Protection Systems (QIPS) • Based upon intelligent control of UAV’s • QIPS is remote control of airframes via highly secure comms links and EFIS • Dual secure encrypted bearers provide redundancy for fail safe system control • Allows remote switching of airframe into emergency flight mode to reach auto land phase • Authentication and integrity of encrypted link enables this
Wireless access for passengers • Wireless LAN access at Airports • Desire for Wireless LAN onboard! • Wireless LAN security is weak • Recent press activity showing ease of access to corporate information via low cost WLAN intercept • Authentication of users to bill for service is required • Must use widely available WLAN implementations • Solution is a security overlay for privacy and billing
ATN applications • Air to ground security study for Eurocontrol • Analogue VHF DSB - AM voice • VDL mode 2 supporting ATN • ACARS • Key management is an issue • Broadcast needs to be supported
Conclusions Section 4
Conclusions • Wireless security is now emerging for other aviation applications as well as for ATN • A wireless security overlay can provide privacy of data, authentication of users and prevent alteration of data • Wireless security has to be implemented carefully to enable fully secured solutions - it must also be reasonably transparent to the user • Any solution must taken into account errored bearers • The technology is available today - implementation is the ‘secret sauce’