2. Secure Communications in Civil Aviation Paul Wells A presentation to ATN 2002 25 September 2002

3. © Copyright QinetiQ Ltd 2002 3 Contents 1Introduction 2Communications security overview 3Secure communications applications 4Conclusions

4. Introduction Section 1

5. © Copyright QinetiQ Ltd 2002 5 Introduction Comms security is not just about protection of the data but is protection of the whole end to end system You are as vulnerable as your weakest link Security in aviation applies to: –voice and data links (air/ground) –command & control –passenger communications –airport communications

6. Communications security overview Section 2

7. © Copyright QinetiQ Ltd 2002 7 Communications security overview Confidentiality –threat: eavesdropping Integrity –threat: alteration of data Authentication –threat: impersonation of originator, receiver Non-repudiation –threat: source subsequently denies originating information Denial Wireless bearers are notoriously flakey

8. © Copyright QinetiQ Ltd 2002 8 Secure wireless - link issues

9. © Copyright QinetiQ Ltd 2002 9 Public KEY Cryptography (PKC) Asymmetric Cryptography No shared secret Invented by Whitfield Diffie and Martin Hellman (1976) Invented by Ellis, Cox & Williamson (around 1970, see www.cesg.gov.uk)

10. © Copyright QinetiQ Ltd 2002 10 Security between networks GPRSL2PPP IP UDP IP UDP PPP IP Crypto SGSNGGSN DHCP Internet MSTEISPTE PPP Serial PPP Dial up V. Series BTS

11. Secure comms applications Section 3

12. © Copyright QinetiQ Ltd 2002 12 Secure communications applications VIP, business and airline operations Airline operations Remote video from airframe Secure voice from helicopters QinetiQ Intruder Protection Systems (QIPS) Wireless access for passengers (ground & air) ATN applications

13. © Copyright QinetiQ Ltd 2002 13 Airborne secure comms

14. © Copyright QinetiQ Ltd 2002 14 VIP, business and airline operations Communications via Inmarsat Aero Global connectivity Voice, data & video Protocol enhancement for maximum data throughput Scalable architecture

15. © Copyright QinetiQ Ltd 2002 15 Airline operations Use of Iridium for low-rate voice or secure data Demonstrated airborne polar to land mobile direct links Secure messaging via Iridium paging

16. © Copyright QinetiQ Ltd 2002 16 Remote video from airframe

17. © Copyright QinetiQ Ltd 2002 17 Streamed IP video from airframe on demand Also can stream TV to the airframe - suitable for live news update

18. © Copyright QinetiQ Ltd 2002 18 Crypto Example of secure voice from helicopters

19. © Copyright QinetiQ Ltd 2002 19 QinetiQ Intruder Protection Systems (QIPS) Based upon intelligent control of UAV’s QIPS is remote control of airframes via highly secure comms links and EFIS Dual secure encrypted bearers provide redundancy for fail safe system control Allows remote switching of airframe into emergency flight mode to reach auto land phase Authentication and integrity of encrypted link enables this

20. © Copyright QinetiQ Ltd 2002 20

21. © Copyright QinetiQ Ltd 2002 21 Wireless access for passengers Wireless LAN access at Airports Desire for Wireless LAN onboard! Wireless LAN security is weak –Recent press activity showing ease of access to corporate information via low cost WLAN intercept –Authentication of users to bill for service is required Must use widely available WLAN implementations Solution is a security overlay for privacy and billing

22. © Copyright QinetiQ Ltd 2002 22 Wireless access for passengers

23. © Copyright QinetiQ Ltd 2002 23 ATN applications Air to ground security study for Eurocontrol –Analogue VHF DSB - AM voice –VDL mode 2 supporting ATN –ACARS Key management is an issue Broadcast needs to be supported

24. Conclusions Section 4

25. © Copyright QinetiQ Ltd 2002 25 Conclusions Wireless security is now emerging for other aviation applications as well as for ATN A wireless security overlay can provide privacy of data, authentication of users and prevent alteration of data Wireless security has to be implemented carefully to enable fully secured solutions - it must also be reasonably transparent to the user Any solution must taken into account errored bearers The technology is available today - implementation is the ‘secret sauce’

27. © Copyright QinetiQ Ltd 2002 27 Inmarsat Aero coverage