Presentation on theme: "PKI Trust Root Concepts ACP Working Group – I April 2009."— Presentation transcript:
PKI Trust Root Concepts ACP Working Group – I April 2009
Root Concepts The "global trust root" concept for the NextGEN that has been developed from piece parts of several groups and that it has been conceptually validated with PKI industry leaders. The concept is to create three unique individually signed digital components as follows that taken together should provide an internationally acceptable authentication and identification for the next generation of global air traffic management systems.
Trust Root Construction 1.Aircraft manufacturer creates the aircraft digital identity similar to that proposed in the Aircraft Digital Identity paper and signs the "aircraft digital identity" modules as conceptually presented in the Airbus ARTIST presentation.
Trust Root Construction 2.ICAO assign the aircraft it's 24 bit ID (maybe its ATN DNS name) and its network addresses then digitally signs across the ADI and the manufacturer signature and their own designators.
Trust Root Construction 3The airline assigns the aircraft it tail numbers and other designators (maybe DNS names) then digitally signs across manufacturers ADI and signature and the ICAO's designators and signatures and its own designators. This completes the construction of the three part trust root. To compromise the aircrafts digital identity, the three digital signatures from completely independent entities must all be comprised simultaneously.
Trust Root Use The airline then applies to the various NSPs through whose airspace they will operate the aircraft. The NSPs could then accept the aircraft trust root as it exists or may individually sign across all the above identities and designators as the final step. If each NSP requires their signature on the aircraft, it then ends up with the aircraft carrying a digital key ring" of certificates with one for each NSP in whose airspace they will operate.
Airline/Operator Digital Signature Airline/Operator Aircraft Designations ICAO Digital Signature ICAO Aircraft Designators Manufacturers Signature Root Construction Aircraft Digital ID