131 research outputs found
Investigating Regulative Implications for User-generated Content and a Design Proposal
The rapid increase of the Internet connectivity and the data publishing activity, like user-generated content, has lead Internet Service Providers (ISPs) to establish more efficient mechanisms for content delivery, such as caching. Mechanisms such as content-aware-networks and in-network caching reduce network load, server load, and user response time, thus, manage the network. However, caching of content also raises major implications in terms of legal acts and bills (e.g., data privacy, copyright), dealing with access control, validation scheme, and regulations (e.g., contractual obligation, legal restrictions). In general, user-generated content is linked with sensitive information, such as geographical information, medical and financial information, personal identifiable data, photos, videos, and contact information. Therefore, it is essential to secure data and regulate access. The latter, is gained by including access control mechanisms in the data exchange process, where a user requesting data must prove his access rights. Therefore, a user has to show an access ticket, which includes his rights based on legal and regulative implications. In order to secure any kind of data exchange, authentication of each participating communication entity (e.g., content owner, server, and end-user) is essential, which is part of the proposed two-way authentication handshake in this paper that is performed to generate a secure communication channel. The main contribution of this paper is to show that transmission, storage, and usage of user-generated data in caches within the network is manageable within the legal laws on sensitivity, copyright, and privacy. The scope of studying these laws, acts, and policies is restricted to Switzerland (CH), the European Union (EU), and the United States of America (USA). Finally, a solution is presented including access ticketing and two-way authentication mechanisms based oncommonstandards from IP network
L-band Digital Aeronautical Communications System (LDACS) draft-ietf-raw-ldacs-03
This document provides an overview of the architecture of the L-band Digital Aeronautical Communications System (LDACS), which provides a secure, scalable and spectrum efficient terrestrial data link for civil aviation. LDACS is a scheduled, reliable multi-application cellular broadband system with support for IPv6. LDACS shall provide a data link for IP network-based aircraft guidance. High reliability and availability for IP connectivity over LDACS are therefore essential
L-band Digital Aeronautical Communications System (LDACS) draft-maeurer-raw-ldacs-04
This document provides an overview of the architecture of the L-band Digital Aeronautical Communications System (LDACS), which provides a secure, scalable and spectrum efficient terrestrial data link for civil aviation. LDACS is a scheduled, reliable multi-application cellular broadband system with support for IPv6. LDACS shall provide a data link for IP network-based aircraft guidance. High reliability and availability for IP connectivity over LDACS are therefore essential
L-band Digital Aeronautical Communications System (LDACS) draft-maeurer-raw-ldacs-06
This document provides an overview of the architecture of the L-band Digital Aeronautical Communications System (LDACS), which provides a secure, scalable and spectrum efficient terrestrial data link for civil aviation.
LDACS is a scheduled, reliable multi-application cellular broadband system with support for IPv6.
LDACS shall provide a data link for IP network-based aircraft guidance. High reliability and availability for IP connectivity over LDACS are therefore essential
A secure broadcast service for LDACS with an application to secure GBAS
The VHF Data Broadcast (VDB) data link is responsible for transmitting Ground Based Augmentation System (GBAS) corrections from the GBAS ground station to the aircraft. Thus, it is a major bottleneck for the evolution and security of GBAS. It provides limited bandwidth, range, only line-of-sight capabilities, and no cyber-security protections for the transmitted data. Overcoming these constraints is required for the future and calls for an alternative data link for GBAS. A promising candidate is the L-band Digital Aeronautical Communications System (LDACS). First demonstrations of secure GBAS over LDACS used the Timed Efficient Stream Loss-tolerant Authentication (TESLA) for broadcast authentication of GBAS data. In flight trials, the concept and support of TESLA secured GBAS via LDACS for GBAS services, supporting category II/III precision approach capabilities, were proven. In this paper, different ways are investigated to further optimize latency and security data overhead for an optimized transmission of TESLA secured GBAS packets via LDACS. Initial evaluations show how promising the different options are, especially in respect of a reduced latency of 55.45 ms compared to previous 632.98 ms. Further, it is shown how the developed concept for secure GBAS can also be applied to secure general broadcast applications over LDACS.Postprint (published version
L-band Digital Aeronautical Communications System (LDACS) draft-ietf-raw-ldacs-07
This document provides an overview of the architecture of the L-band Digital Aeronautical Communications System (LDACS), which provides a secure, scalable and spectrum efficient terrestrial data link for civil aviation. LDACS is a scheduled, reliable multi-application cellular broadband system with support for IPv6. LDACS shall provide a data link for IP network-based aircraft guidance. High reliability and availability for IP connectivity over LDACS are therefore essential
L-band Digital Aeronautical Communications System (LDACS) draft-ietf-raw-ldacs-10
This document gives an overview of the architecture of the L-band Digital Aeronautical Communications System (LDACS), which provides a secure, scalable and spectrum efficient terrestrial data link for civil aviation. LDACS is a scheduled, reliable multi-application cellular broadband system with support for IPv6. LDACS provides a data link for IPv6 network-based aircraft guidance. High reliability and availability for IP connectivity over LDACS, as well as security, are therefore essential
L-band Digital Aeronautical Communications System (LDACS) draft-ietf-raw-ldacs-04
This document provides an overview of the architecture of the L-band Digital Aeronautical Communications System (LDACS), which provides a secure, scalable and spectrum efficient terrestrial data link for civil aviation. LDACS is a scheduled, reliable multi-application cellular broadband system with support for IPv6. LDACS shall provide a data link for IP network-based aircraft guidance. High reliability and availability for IP connectivity over LDACS are therefore essential
Cybersecurity for the L-band Digital Aeronautical Communications System (LDACS)
Today's analog voice-based air-ground communication system for tactical aircraft guidance is suffering from the VHF band's increasing saturation in high-density areas. The air-ground communication infrastructure is therefore undergoing digitisation to ensure the sustainable growth of the air transportation system in the coming decades.
As safety and security are strongly interrelated in aviation, strong cybersecurity is the foundation and enabler for digitalization in aviation.
One of the new air-ground datalinks that shall enable this transformation is the L-band Digital Aeronautical Communication System (LDACS).
It will be the primary long-range terrestrial datalink of the future IP-based aeronautical telecommunications network.
In this chapter we describe the design process, draft, and the state-of-the-art cybersecurity architecture for LDACS
Efficient Control-Channel Security for the Aeronautical Communications System LDACS
Since Air Traffic Management (ATM) is still conducted largely via analogue voice communications, the digitization of data transmission is crucial to automate and secure ATM in civil aviation. For that purpose, several new digital data links are developed.
The continental, terrestrial long-range candidate is the L-band Digital Aeronautical Communications System (LDACS), which is a cellular, ground-based digital communications system for flight guidance and communications related to the safety and regularity of flight.
The security of LDACS has been the focus of recent works, however, the problem to secure data on its small control-channels remains unsolved.
The objective of this work is to propose slim and efficient security measures to protect data on the LDACS control-channels and evaluate their security and performance impact.
First, via a 3-pass adaptation of the ISO/IEC 11770-3:2021 ``Key agreement mechanism 7'' protocol, keys to secure LDACS control-channels are established between air and ground radios.
Second, via these point-to-point keys and point-to-multipoint group keys, the control-channels are secured. Thereby the limitations set by the limited bandwidth are respected and cryptographic overhead optimized.
Finally, the security of our proposal is validated using a symbolic model with the Tamarin proof system. Also, via computer simulations, the LDACS performance impact of the control-channel security solutions is evaluated
- …