secure communications in civil aviation paul wells a presentation to atn 2002 25 september 2002

Secure Communications in Civil AviationPaul WellsA presentation to ATN 200225 September 2002

3

© Copyright QinetiQ Ltd 2002

Contents

1 Introduction

2 Communications security overview

3 Secure communications applications

4 Conclusions

IntroductionSection 1

5


Introduction

• Comms security is not just about protection of the data but is protection of the whole end to end system

• You are as vulnerable as your weakest link

• Security in aviation applies to: – voice and data links (air/ground)

– command & control

– passenger communications

– airport communications

Communications security overviewSection 2

7


Communications security overview

• Confidentiality – threat: eavesdropping

• Integrity– threat: alteration of data

• Authentication– threat: impersonation of originator, receiver

• Non-repudiation– threat: source subsequently denies originating information

• Denial

• Wireless bearers are notoriously flakey

8


Secure wireless - link issues

High bandwidth

IP network

Switched

64kbit/s6kbit/s9.6kbit/s

Z ZEncrypted Voice

Low bandwidthIP

GPRS LANPSTN

9


Public KEY Cryptography (PKC)Asymmetric Cryptography

No shared secret

EncryptAlgorithm

KEY Pair

SE

CR

ET

KE

Y

M essage Com m unication Channel

Pu

blic

KE

Y

DecryptAlgorithm

M essage

Pu

blic

KE

Y

Invented by Whitfield Diffie and Martin Hellman (1976)Invented by Ellis, Cox & Williamson (around 1970, see www.cesg.gov.uk)

10


Security between networks

GPRS L2 PPP

IP IP IP

UDP

IP

UDP

PPP

IP

CryptoCrypto

SGSN GGSN

DHCP

InternetMSTE ISP TE

PPP

Serial

PPP

Dial up V.Series

BTS

Secure comms applicationsSection 3

12


Secure communications applications

• VIP, business and airline operations

• Airline operations

• Remote video from airframe

• Secure voice from helicopters

• QinetiQ Intruder Protection Systems (QIPS)

• Wireless access for passengers (ground & air)

• ATN applications

13


Airborne secure comms

14


VIP, business and airline operations

Communications via Inmarsat AeroGlobal connectivityVoice, data & videoProtocol enhancement for maximum data throughputScalable architecture

15


Airline operations• Use of Iridium for low-

rate voice or secure data

• Demonstrated airborne polar to land mobile direct links

• Secure messaging via Iridium paging

16


Remote video from airframe

17


• Streamed IP video from airframe on demand

• Also can stream TV to the airframe - suitable for live news update

18


Crypto Crypto

Example of secure voice from helicopters

19


QinetiQ Intruder Protection Systems (QIPS)• Based upon intelligent control of UAV’s

• QIPS is remote control of airframes via highly secure comms links and EFIS

• Dual secure encrypted bearers provide redundancy for fail safe system control

• Allows remote switching of airframe into emergency flight mode to reach auto land phase

• Authentication and integrity of encrypted link enables this

20


21


Wireless access for passengers

• Wireless LAN access at Airports

• Desire for Wireless LAN onboard!

• Wireless LAN security is weak– Recent press activity showing ease of access to corporate

information via low cost WLAN intercept

– Authentication of users to bill for service is required

• Must use widely available WLAN implementations

• Solution is a security overlay for privacy and billing

22


Wireless access for passengers

23


ATN applications

• Air to ground security study for Eurocontrol– Analogue VHF DSB - AM voice

– VDL mode 2 supporting ATN

– ACARS

• Key management is an issue

• Broadcast needs to be supported

ConclusionsSection 4

25


Conclusions

• Wireless security is now emerging for other aviation applications as well as for ATN

• A wireless security overlay can provide privacy of data, authentication of users and prevent alteration of data

• Wireless security has to be implemented carefully to enable fully secured solutions - it must also be reasonably transparent to the user

• Any solution must taken into account errored bearers

• The technology is available today - implementation is the ‘secret sauce’

Microsoft PowerPoint Presentation

secure communications in civil aviation paul wells a presentation to atn 2002 25 september 2002

Documents

airframe copyright qinetiq

flakey copyright qinetiq

billing copyright qinetiq

helicopters copyright

wireless lan security

example of secure voice

secure comms links

security overlay