TCP IP over Aeronautical Data Links 2006 Integrated Military

TCP/IP over Aeronautical Data Links 2006 Integrated Military and Civil CNS/ATM Will Ivancic NASA Glenn Research Center wivancic@grc. nasa. gov 216 -433 -3494 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM 1

Network Design Triangle Maturity Policy Security Qo. S $$$ Cost $$$ Protocols Architecture Mobility SYZYGY Engineering Scalability Bandwidth 2 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM © 2004 Syzygy Engineering – Will Ivancic

NASA’s Request for Comments on the Global Air Space System Requirements 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM 3

Current View of the Global Airspace System n Current Global and National Airspace System n n n FAA - Bringing Safety to America’s Skies n n n Stove-piped communication systems Disjoint set of networks n Currently not globally network centric Evolved over time with limited concern for network security n Security by obscurity n Closed systems n Insufficient bandwidth to support security measures Safe and Secure n Air Traffic Control methods have evolved in reaction to changes in technology, capacity and use n Current methods are reaching limit of scalability Mission is to provide the safest, most efficient aerospace system in the world. Responsible National Airspace System, not funded to address global issues. Movement toward Network Centric Operations n n n Cross network security Authentication, Authorization, Accounting and Encryption Required changes in Policy! 4 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Issues n Systems and solutions being proposed for National System only n n Divided and conquer design approach being performed prior to understanding of global issues n n Global Security issues being ignored or at least not emphasized. Global system has not been a requirement (An important issue when considering security implications) Ultimately Who Pays? n n Airlines and stock holders End users via a combination of taxes and airfare 5 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Global Airspace System Requirements 1. 2. 3. 4. 5. 6. 7. 8. Must be value added n Cannot add cost without a return on investment that meets or exceeds those costs. Must be capable of seamless global operation. Must be capable of operating independently of available communications link. Must support critical Air Traffic Management (ATM) functions over low-bandwidth links with required performance. Must use same security mechanisms for Air Mobile and Ground Infrastructure (surface, terminal, en router, oceanic and space) n Critical ATM messages must be authenticated. n Must be capable of encryption when deemed necessary n Security mechanisms must be usable globally n Must not violate International Traffic in Arms Regulations Must operate across networks owned and operated by various entities n Must be able to share network infrastructure Must make maximum use of standard commercial technologies (i. e. core networking hardware and protocols) Must enable sharing of information with proper security, authentication, and authorization n Situational Awareness n Passenger Lists n Aircraft Maintenance Same network must accommodate both commercial, military and general aviation. 6 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Design Concepts n n n Must be IPv 6 based. Must be capable of a prioritized mixing of traffic over a single RF link (e. g. ATM, maintenance, onboard security, weather and entertainment). Must utilize IPsec-based security with Security Associations (SAs) bound to permanent host identities (e. g. certificates) and not ephemeral host locators (e. g. IP addresses). Must be capable of accommodating mobile networks. Must be capable of multicasting Must be scalable to tens of thousands of aircraft 7 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Consensus n n n IPv 6 is *the* way to go, virtually everyone agrees. There seems to be consensus that links should be shared, and the system should be providerindependent, and this makes Qo. S a requirement. There is a need for some type of mobile networking (mobile-IP, NEMO, ad hoc) n n Placement of home for mobile-IP or NEMO is being addressed, but needs further study. Everyone agrees that some work is still to be done cleaning up IPsec multicast, envisioning the certificate architecture, and figuring out how exactly to do Qo. S. 8 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Value Added n n Lower Telecommunication Costs of IP-based networks as compared to dedicated point-to-point links Competition among information providers Economies of scale Lower development costs for new applications and maintenance due to standardization of interfaces 9 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Link Independence n n Most important considerations for this is not technical, but related to cost, safety, and politics Facilitates globalization and supports positive ROI Requires change in policy Change in use of spectrum n n World Radio Conference to allow use of other frequencies for air traffic control messages Air Traffic Controller is now networked. These are some very different modes of operation from what the aeronautics community is comfortable with. 10 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Security Mechanisms n n Encryption mechanisms should be limited to those that are free of ITAR restrictions Other counties also have regulations restricting the exportation of cryptography technology n n n These regulations may limit the ability to realize cost and schedule advantages that could be gained by using a single set of proven security infrastructure software throughout the world. Multicast and current IPSec implementations do not necessarily work well together. Support for IPSec-base security with Security Associations bound to permanent host (multicast group) identities (e. g. certificates) n Location, control, and responsiveness of the authentication authority servers is critical. 11 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Further Studies and Investigation n n Qo. S related to mixing ATM traffic with other information Much research is needed regarding network mobility Networking ATM traffic for use over multiple links and service providers Mobile-IP, NEMO and Ad Hoc networking n Route Optimization n n n Placement of Location Manager (Home Agent) Ping-pong routing Qo. S and delay issues Multi-homing (use of best available link) To load balance or not to load balance? Make before break or not? Application of Ad Hoc type networking for Oceanic to extend networks (MANETs or Mobile-IPv 6) 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM 12

Internet Protocol Performance over VDL-3 This work was performed by Jim Griner, Brian Frantz and Russ Jirberg Under the Weather Information Communications project 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM 13

System Diagram This work was performed by Jim Griner, Brian Frantz and Russ Jirberg Under the Weather Information Communications project 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM 14

Data Link Layer Mapping 15 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Application Protocol Data Unit Delivery Time 16 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Messages Received vs. Signal Quality Parameter (SQP) 17 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Message Delivery Time (Qo. S) 18 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Message Reliability Flt. #2 Flt. #3 Flt. #4 Flt. #5 TTMs Sent 136 122 217 444 TTMs Rec’d. 136 122 217 444 0 0 TTMs Lost at the TCP layer 5 6 20 at the DLS layer 55 32 49 Table 6. TCP and DSL of the turbulence messages. Retransmissions: 34 93 19 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Modular Cost-Effective Extensible Onboard Architecture for Secure Mobile Communications 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM 20

Typical ACARS Onboard Network ARINC 741 SATCOM AERO-1 System ARINC 761 SATCOM AERO-H/H+ System ARINC 716 VHF Voice/DATA System Gate. Link Ethernet File Server Subsystem (Optional) Communication Management Unit (CMU) ARINC 750 Terminal ARINC 719 Printer ARINC 753 ARINC 740/744 HF Voice/DATA System 21 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Typical ACARS Onboard Network 22 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

ATN Island Routing Domain Confederation Mobile RD Another ATN Island ATN Backbone RDC ATN TRD Mobile RD ATN TRD ATN ERD ATN Island RDC ERD – End Routing Domain RD – Routing Domain RDC – Routing Domain Confederation TRD – Transit Routing Domain 23

SATCOM AERO-1 Traditional Avionics Communication Management Unit (CMU) SATCOM AERO-HH Cryptography and Firewall VHF Voice/DATA Mobile Router Display HF Voice/DATA INMARSAT Swift 64 Connexion by Boeing Passenger Services Wi. Fi Max Gate. Link IP-Based Transitional Architecture Cellular Future Links 24

SATCOM AERO-1 Communication and Display Air Traffic Management LAN Operations LAN (Avionics) SATCOM AERO-HH Cryptography and Firewall VHF Voice/DATA Mobile Router Cryptography and Firewall Sensor Controller (Optional Display) HF Voice/DATA INMARSAT Swift 64 Connexion by Boeing Wi. Fi Max Gate. Link Passenger Services IP-Based Architecture with ATC and AOC Separate Cellular Future Links 25

IP-Based Architecture with ATC and AOC Combined Air Traffic Management LAN Operations LAN (Avionics) Radio Link 1 Mobile Router Cryptography and Firewall Radio Link 2 Radio Link 3 Radio Link 4 Communications Sensor Controller and Display Radio Link N Passenger Services IP-Based Architecture with ATC and AOC Combined 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM 26

Policy-Based Routing, All Links Active P-DATA High speed link P-DATA AOC Home Agent int 1 Low latency link ATC AOC ATC int 2 P-DATA int 3 P-DATA Reliable link ATC Routing Policy ATC AOC Routing Policy 27 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Policy-Based Routing, Critical Link Active P-DATA High speed link P-DATA AOC Home Agent int 1 Low latency link ATC AOC ATC int 2 P-DATA int 3 Reliable link ATC Routing Policy 28 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Policy-Based Routing, Passengers Link Active P-DATA High speed link P-DATA AOC int 1 Low latency link ATC P-DATA ATC Home Agent AOC int 2 P-DATA int 3 P-DATA Reliable link Routing Policy ATC Routing Policy 29 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM

Secure Mobile Networking Emergency Communications Over Disparate Radios Cessna 152! You are violating national airspace! Respond immediately and follow me to the nearest airport! Generic F 15 E Interceptor Generic (unmodified) Cessna 152 Civilian UHF Voice Communications Land Mobile Radio Connection to tower radio base station Do. D VHF Voice Communications The Internet Network Centric FAA Control Tower Network Centric Do. D Control Tower Twisted Pair Solutions WAVE™Server Cisco IP Interoperability and Collaboration System (IPICS) The WAVE server can be used to tie together disparate radio systems for emergency communications 2006 CNS/ATM Conference - Integrating Military and Civil CNS/ATM 30