# Presentation: 367803

## Phillip E. Paulsen
Space Communications Office
NASA Glenn Research Center
Cleveland, Ohio

May 2005

- Space Communications Office
- NASA Glenn Research Center
- Cleveland, Ohio
- May 2005

- First Responders Brief:Secure Mobile Networking

## The purpose of today’s demonstration is to expose the external community to the latest information technology that has been collaboratively developed between NASA Glenn Research Center and a variety of vendors
Space Act Agreements
NASA: unique facilities and expertise
Vendors: state-of-the-art equipment and technologies

The U.S. Government does not endorse vendors or their products, but we are interested in maximizing the transfer of all technologies that are developed with our help

- Space Act Agreements
- NASA: unique facilities and expertise
- Vendors: state-of-the-art equipment and technologies
- The U.S. Government does not endorse vendors or their products, but we are interested in maximizing the transfer of all technologies that are developed with our help

**Secure Mobile Networking**Purpose of Today’s** **Presentation

## Since the mid-1990’s, GRC has developed a comprehensive network centric research program which has conducting the following research:
Spacecraft network simulation (OPNET, Berkeley NS)
Internet Protocol characterization, development, test, & evaluation for space
ACTS / TDRSS / commercial satellite consortium
Space and Missile Systems Center (SMC) time correlation testing
Spacecraft network emulation
SSTL UK-DMC “flat sat”
Mobile routing development, test, & evaluation
GRC mobile network test bed
USCGC Neah Bay
SSTL UK-DMC CLEO Satellite Experiment
GRC “virtual” mission operations test bed
International Space Station (ISS) secure remote operations experiments
General Dynamics VMOC experiment
Spacecraft hardware (NIC, LAN, Router) development
Blue Streams miniature space router
Cisco’s miniature 3251 router
SSTL UK-DMC CLEO experiment
Rad hardness testing
General Dynamics (Spectrum Astro) rad hard NIC/Hub/Router
ISS router evaluation
ISS 802.11b EMI evaluation
ISS Voice Over IP (VOIP) using modified Cisco Call Manager
Secure aircraft network development, test, & evaluation
In conjunction with the FAA and Federal Air Marshals

- Spacecraft network simulation (OPNET, Berkeley NS)
- Internet Protocol characterization, development, test, & evaluation for space
- ACTS / TDRSS / commercial satellite consortium
- Space and Missile Systems Center (SMC) time correlation testing
- Spacecraft network emulation
- SSTL UK-DMC “flat sat”
- Mobile routing development, test, & evaluation
- GRC mobile network test bed
- USCGC Neah Bay
- SSTL UK-DMC CLEO Satellite Experiment
- GRC “virtual” mission operations test bed
- International Space Station (ISS) secure remote operations experiments
- General Dynamics VMOC experiment
- Spacecraft hardware (NIC, LAN, Router) development
- Blue Streams miniature space router
- Cisco’s miniature 3251 router
- SSTL UK-DMC CLEO experiment
- Rad hardness testing
- General Dynamics (Spectrum Astro) rad hard NIC/Hub/Router
- ISS router evaluation
- ISS 802.11b EMI evaluation
- ISS Voice Over IP (VOIP) using modified Cisco Call Manager
- Secure aircraft network development, test, & evaluation
- In conjunction with the FAA and Federal Air Marshals

**Secure Mobile Networking**
- GRC’s Network Centric Research

**ACTS Experimental Ka Band Satellite**

**TDRSS Operational S/Ku/Ka Band Satellite**

**SSTL UK-DMC Operational Imaging Satellite**

## Secure Mobile NetworkingThe Logical Progression of Communications

**Secure Mobile Networking**The Logical Progression of Communications

- Police Call Box (1910)      Fire Alarm Telegraph (1852)

- Radio (1933)

- Networked (2005)

## Secure Mobile NetworkingBackground: Justification  

- Need for an unprecedented level of data integration across a wide variety of platforms (network centric operations)
- Seamless integration of terrestrial, shipboard, airborne, and space-based assets
- Need for secure, autonomous, shared, distributed data handling
- “Bits are Bits”: voice and video are data too
- On-the-fly response to real-time events
- Desire to allow field access to sophisticated systems by “unsophisticated” users
- Strong desire to spend less on infrastructure
- Push for common interfaces and open standards
- Push for use of low cost, commercial devices /  shared infrastructure to collect and disseminate data
- Push to improve platform flexibility to accommodate future changes in the state-of-the-art
- Push to reduce the need for extensive system training
- Push to reduce the need for “people in the loop” to configure and maintain systems

**Secure Mobile Networking**Background: Justification

## Secure Mobile NetworkingFirst Responder’s Information Access Problem Set  

- Integrated voice, video, and data communication between
- Numerous local police, fire, EMS, rescue, service departments, and haz-mat teams
- State police and highway patrols
- SWAT Teams
- Hospital triage areas
- Mobile command posts
- Local, regional, and command centers
- National databases (NCIC, LEIN, DHS, FBI, FEMA, NIMA, NIH, CDC, ...)
- Weather information
- Media centers
- Key Questions:
- How do you securely extend communications access to multiple, unrelated, mobile field elements in real time?
- How do you take advantage of local communications infrastructure?
- How do you all this without requiring responders to have extensive IT system knowledge or expertise?

**Secure Mobile Networking**First Responder’s Information Access Problem Set

## Applications
Voice communications
Communicating from responder locations to each other and command centers using Voice over IP (VoIP)
Video
Live pictures of the incident scene (including infrared)
Live pictures to and from responder locations
Data
Patient health status & telemetry enroute to trauma center
GPS position information from deployed units
Microsoft NetMeeting (short messages between participants)
Building layouts & chemical hazard classes / storage information
Information from national databases
Sensor data (seismic, magnetic, chemical, biological, etc...)

- Voice communications
- Communicating from responder locations to each other and command centers using Voice over IP (VoIP)
- Video
- Live pictures of the incident scene (including infrared)
- Live pictures to and from responder locations
- Data
- Patient health status & telemetry enroute to trauma center
- GPS position information from deployed units
- Microsoft NetMeeting (short messages between participants)
- Building layouts & chemical hazard classes / storage information
- Information from national databases
- Sensor data (seismic, magnetic, chemical, biological, etc...)

**Secure Mobile Networking**
- What Can be Accommodated?

## Links
To ensure communications survivability during major events, a diverse combination of links is highly recommended:

Wireless 802.11 technologies
High data rates (11 Mbps or 54 Mbps)
Low availability (hot spots are gradually being introduced)
Intel has approached Cleveland about wiring the entire city
4.9 GHz public safety only band is being rolled out in New York

Cellular systems: 1xRTT, EVDO, GPRS, GSM, EDGE, UMTS...
Low to moderate data rates (9.6 to 153 kbps for legacy systems, 256 kbps to 2.5 Mbps for 3G systems) 
High availability (3G systems expected in Cleveland by the end of the calendar year)
Emergency response team preemption possible with some carriers (CDMA systems only)
Mobile (can be used enroute)

Satellite link
Low to moderate data rates on the move (9.6 to 430 kbps), high data rates at rest (2 Mbps+)
Always available
High cost ($1 per minute or more)
Mobile / transportable (fairly large antenna typically required for system at rest)

- To ensure communications survivability during major events, a diverse combination of links is highly recommended:
- Wireless 802.11 technologies
- High data rates (11 Mbps or 54 Mbps)
- Low availability (hot spots are gradually being introduced)
- Intel has approached Cleveland about wiring the entire city
- 4.9 GHz public safety only band is being rolled out in New York
- Cellular systems: 1xRTT, EVDO, GPRS, GSM, EDGE, UMTS...
- Low to moderate data rates (9.6 to 153 kbps for legacy systems, 256 kbps to 2.5 Mbps for 3G systems)
- High availability (3G systems expected in Cleveland by the end of the calendar year)
- Emergency response team preemption possible with some carriers (CDMA systems only)
- Mobile (can be used enroute)
- Satellite link
- Low to moderate data rates on the move (9.6 to 430 kbps), high data rates at rest (2 Mbps+)
- Always available
- High cost ($1 per minute or more)
- Mobile / transportable (fairly large antenna typically required for system at rest)

**Secure Mobile Networking**
- Survivable Communications Data Paths

## All proposed network centric solutions should be evaluated relative to:

Interoperability
Is the new network fully interoperable with existing open standards (IETF)? 
Scalability
Will the technology that works on a single vehicle also work on many?
Survivability
Can I still maintain network connectivity, even if a primary data path fails?
Mobility
Can I maintain network contact with something in motion without the need for manual reconfiguration?
Transparency
Can I field a mobile network that is truly “set and forget”?
Security
Can I securely cross multiple domains (i.e. open, closed, government, etc...)?
Use of Shared Infrastructure
Can I take advantage of low cost (open) network infrastructure?

**Interoperability**
- Is the new network fully interoperable with existing open standards (IETF)?
**Scalability**
- Will the technology that works on a single vehicle also work on many?
**Survivability**
- Can I still maintain network connectivity, even if a primary data path fails?
**Mobility**
- Can I maintain network contact with something in motion without the need for manual reconfiguration?
**Transparency**
- Can I field a mobile network that is truly “set and forget”?
**Security**
- Can I securely cross multiple domains (i.e. open, closed, government, etc...)?
**Use of Shared Infrastructure**
- Can I take advantage of low cost (open) network infrastructure?

**Secure Mobile Networking**
- Key Issues

## Since the 1930’s the radio has been used to coordinate activities among first responders
Although a “radio is a radio”, not every radio system is fully interoperable with every other radio system
Frequency issues
Proprietary system issues
Encryption issues
Raytheon’s ACU 1000 (already being purchased by the first responder community) allows multiple radio systems to communicate with one another, mobile phones, cell phones, SATCOM, and the Internet using VoIP

- Since the 1930’s the radio has been used to coordinate activities among first responders
- Although a “radio is a radio”, not every radio system is fully interoperable with every other radio system
- Frequency issues
- Proprietary system issues
- Encryption issues
- Raytheon’s ACU 1000 (already being purchased by the first responder community) allows multiple radio systems to communicate with one another, mobile phones, cell phones, SATCOM, and the Internet using VoIP

**Secure Mobile Networking**
- Interoperability

**ACU 1000**

- Cleveland

- Parma

- Mentor

- Avon

- Parma Fire

- Mentor Police

**The Internet**

**Analog Phone**

- Local

## The ACU1000 can provide up to 6 connections (separate systems or frequencies) on each of 3 separate nets
Primary
Tactical 1
Tactical 2

ACU1000 caveats:
RF is line-of-sight
Each individual system (base station and antenna) will need to be co-located and connected locally to the ACU1000 during the actual event
These devices can be pre-positioned in response vehicles
Pneumatically elevated antennas can improve radio range

“Push to talk” systems can accommodate large numbers of people, but only one person can speak at a time
Unfortunately, for a major emergency, upwards of 100 first responders are expected to need connectivity
Police coordination (cordoning off areas, providing physical security, etc...)
Fire coordination
Resupply
EMS / triage / medical center coordination
Federal agencies
Radio discipline can only go so far...

- Primary
- Tactical 1
- Tactical 2
- ACU1000 caveats:
- RF is line-of-sight
- Each individual system (base station and antenna) will need to be co-located and connected locally to the ACU1000 during the actual event
- These devices can be pre-positioned in response vehicles
- Pneumatically elevated antennas can improve radio range
- “Push to talk” systems can accommodate large numbers of people, but only one person can speak at a time
- Unfortunately, for a major emergency, upwards of 100 first responders are expected to need connectivity
- Police coordination (cordoning off areas, providing physical security, etc...)
- Fire coordination
- Resupply
- EMS / triage / medical center coordination
- Federal agencies
**Radio discipline can only go so far...**

**Secure Mobile Networking**
- Scalability

## A WAVE server is a VoIP-based Wide Area Voice Environment software solution that creates massively scalable group communications among all types of communication devices
Already in use in theater providing SOF ground communications support
As a “virtual” device it can be located anywhere that has Internet connectivity
For “survivability”, multiple units can be mirrored and deployed in geographically distributed areas
Can easily be integrated with encryption systems for secure communications & communications isolation

- Already in use in theater providing SOF ground communications support
- As a “virtual” device it can be located anywhere that has Internet connectivity
- For “survivability”, multiple units can be mirrored and deployed in geographically distributed areas
- Can easily be integrated with encryption systems for secure communications & communications isolation

- Secure Mobile Networking
- Managing VOIP Service in Real Time

**If it’s voice, it can easily be routed and managed by using a Wave server**

## A WAVE server treats a cell phone like a virtual radio (# sign = “push to talk”)
Unlike existing cell phone services, multiple cell phone users can individually call the WAVE server to get connected together (not limited to just one or two users)

A WAVE server also accommodates inputs from a wide variety of systems
Allowing connectivity between existing radio systems, wired phones, and cell phones
Radio systems can be accommodated via the ACU1000 or through generic network devices (routers) offering “Land Mobile Radio” (LMR) service
Note: RF is still line of sight.  Each individual system (base station and antenna) will still need to be co-located and connected locally to either an ACU1000 or a LMR enabled router during the actual event

A WAVE server allows system managers to create “Communities of Interest” (COI) to segregate users by common mission or theme.  For example:
COI #1 would be the firemen providing direct fire suppression 
COI #2 would be the policemen providing crowd control and redirecting traffic
COI #3 would be the EMS providers
COI #4 would be the local hospital triage centers
COI #5 would FEMA
COI #6 would be the DHS

- Unlike existing cell phone services, multiple cell phone users can individually call the WAVE server to get connected together (not limited to just one or two users)
- A WAVE server also accommodates inputs from a wide variety of systems
- Allowing connectivity between existing radio systems, wired phones, and cell phones
- Radio systems can be accommodated via the ACU1000 or through generic network devices (routers) offering “Land Mobile Radio” (LMR) service
- Note: RF is still line of sight.  Each individual system (base station and antenna) will still need to be co-located and connected locally to either an ACU1000 or a LMR enabled router during the actual event
- A WAVE server allows system managers to create “Communities of Interest” (COI) to segregate users by common mission or theme.  For example:
- COI #1 would be the firemen providing direct fire suppression
- COI #2 would be the policemen providing crowd control and redirecting traffic
- COI #3 would be the EMS providers
- COI #4 would be the local hospital triage centers
- COI #5 would FEMA
- COI #6 would be the DHS

**Secure Mobile Networking**
- WAVE Server

- COI
- 1

- COI
- 2

- COI
- 3

- COI
- 6

- COI
- 5

- COI
- 4

- W

- versus

- Fire

- Police

- EMS

- Triage

- FEMA

- DHS

- _ACU1000 Approach_

- _WAVE Approach_

## Cisco’s Land Mobile Radio (LMR) allows any radio to be connected to the Internet using VOIP technology

The WAVE server allows the two disparate radio systems to be connected together “virtually”

- Cisco’s Land Mobile Radio (LMR) allows any radio to be connected to the Internet using VOIP technology
- The WAVE server allows the two disparate radio systems to be connected together “virtually”

**     **

- WAVE Server

**Secure Mobile Networking**
- Tying Together Disparate Radio Systems Virtually

- The Internet

- Land Mobile Radio Connection

- Generic Radio Base Station A

- M-lead (Cor)

- E-lead (PTT)

- Generic Radio Base Station B

- M-lead (Cor)

- E-lead (PTT)

- UHF Radio

- VHF Radio

## The WAVE server can be used to tie together disparate radio systems for emergency communications

- Generic (unmodified) Cessna 152

- Network Centric FAA Control Tower

- Generic F15E Interceptor

- Network Centric DoD Control Tower

**     **

- WAVE Server

**Secure Mobile Networking**
- Emergency Communications Over Disparate Radios

- The Internet

- Land Mobile Radio Connection to tower radio base station

- Civilian UHF Voice Communications

- DoD VHF Voice Communications

- Cessna 152! You are violating national airspace! Respond immediately and follow me to the nearest airport!

## Secure Mobile Networking

- Police Units

**     ****The Internet**

**Secure Mobile Networking**
- Integrated Solution

**ACU 1000**

- Cleveland

- Parma

- Parma Fire

- Router with LMR

- WAVE Server

**Analog Phone**

- Cleveland EMS

- Fire

- EMS

- Triage

- Police

- FEMA

- DHS

**WaveLAN COIs**

- Cell Phone Systems

- IP Phone

- Dispatch Center controls bridging of agencies

- Euclid

- Solon

- Shaker

- Bedford

- Reuse existing gear

## Secure Mobile Networking

- Network Mobility: Neah Bay Video

## Secure Mobile Networking

- IETF’s Mobile Router Technology

**Wireless Mobile Agent**

**Wireless Mobile Unit in Motion**

**Mobile Unit**

**Tactical Command Center**

**Strategic Command Center**

**Cell Service**

**802.11 Service**

## Cisco’s 3251 Mobile Access Router :

- Two or three 4” x 4” PC-104 compliant cards
- 1 router card, up to 2 I/O cards
- 5 VDC, 10W
- 1 powered aux (GPS type RX)
- Commercially available

- Dual 100BaseT Fast Ethernet ports on main router card (one exclusively for the PCI backplane)
- PCI backplane connects to a maximum of 2 four port 10/100 Ethernet switch or four port serial cards in any combination
- Maximum of 100 Mbps integrated, duplex throughput
- Generic IPSEC encryption

**Secure Mobile Networking**Miniaturized Network Hardware

## Continuous connectivity without a need for manual reconfiguration (set and forget)
Eliminates the need for extensive systems training
Allows pre-positioning of equipment and rapid deployment

Cost savings
Commercial, off-the-shelf equipment built to open, commercial standards
Allows use of common, shared infrastructure
Can be maintained using remote (central) IT support

Enables link diversity and survivability
802.11, cellular, and satellite networks

- Eliminates the need for extensive systems training
- Allows pre-positioning of equipment and rapid deployment
- Cost savings
- Commercial, off-the-shelf equipment built to open, commercial standards
- Allows use of common, shared infrastructure
- Can be maintained using remote (central) IT support
- Enables link diversity and survivability
- 802.11, cellular, and satellite networks

**Secure Mobile Networking**
- Mobile Router Advantages

## Secure Mobile Networking

**SATCOM**

**Commercial **
**Cell Phone**
**1xRTT**
**EV-DO**

**Router**
**   **

**Mission Critical Services**
**(Secure Voice, Video, & Data)**

**802.11 a/b/g**

**Wired WAN**

**L1**

**W1**

**W2**

**W3**

**W4**

**Secure Mobile Networking**
- Link Diversity / Communications Survivability

**Commercial **
**SATCOM**

**Commercial **
**Cell Phone**
**1xRTT**
**EV-DO**

**802.11a/b/g**

**Router**
**   **

**Mission Critical Services**
**(Secure Voice, Video, & Data)**

**L1**

**W1**

**Wired WAN**

- Responder

- Headquarters

## Does a first responder need encryption?  

Yes, with a few caveats:

Pros: Prevents eavesdropping and allows users to communicate with secure systems fielded by DHS and others
Hard requirement for anyone wishing access to secure databases or DoD organizations
Health Insurance Portability and Accountability Act (HIPPA) requirements (patient information)
Likely to be required by DHS / NSA in the future (federal / state / local)

Cons: 
Adds complexity (help with initial configuration and system maintenance will likely be required)
Units responding to large incidents from remote locations (or other states) may not have compatible equipment

- Yes, with a few caveats:
- Pros: Prevents eavesdropping and allows users to communicate with secure systems fielded by DHS and others
- Hard requirement for anyone wishing access to secure databases or DoD organizations
- Health Insurance Portability and Accountability Act (HIPPA) requirements (patient information)
- Likely to be required by DHS / NSA in the future (federal / state / local)
- Cons:
- Adds complexity (help with initial configuration and system maintenance will likely be required)
- Units responding to large incidents from remote locations (or other states) may not have compatible equipment

**Secure Mobile Networking**
- Security: Encryption Issues

## Generic 802.11 is vulnerable to hacking
Wireless Encryption Protocol (WEP) is not effective
Flawed encryption scheme
40 bit keys
Fixed (default) keys more likely to be compromised
Weak authentication
Eavesdroppers can derive the encryption code from a mutual authentication interaction
Eavesdropping, replay attacks, man-in-the-middle attacks, distributed denial of service attacks (DDOS)
Unauthorized network access
Identity theft (SSID, MAC)

New 802.11i encryption standard (release date: TBD) should help with future systems

Neither cell phone nor satellite systems provide encryption as a part of their services

- Wireless Encryption Protocol (WEP) is not effective
- Flawed encryption scheme
- 40 bit keys
- Fixed (default) keys more likely to be compromised
- Weak authentication
- Eavesdroppers can derive the encryption code from a mutual authentication interaction
- Eavesdropping, replay attacks, man-in-the-middle attacks, distributed denial of service attacks (DDOS)
- Unauthorized network access
- Identity theft (SSID, MAC)
- New 802.11i encryption standard (release date: TBD) should help with future systems
- Neither cell phone nor satellite systems provide encryption as a part of their services

**Secure Mobile Networking**
- Security: Encryption Issues

## Future systems will likely employ 1 of 3 fully interoperable schemes:
IPSec (generic IP security)
NSA’s Suite B (AES: used by coalition forces)
NSA’s Suite A (Type 1: used by the DoD) 

What if some of the radio systems from units that are joining an operation are without encryption?
Radio-to-radio		No interoperability
Radio-to-ACU1000		Full interoperability (possible system compromise)
Radio-to-LMR/WAVE		Full interoperability (possible system compromise) 

- IPSec (generic IP security)
- NSA’s Suite B (AES: used by coalition forces)
- NSA’s Suite A (Type 1: used by the DoD)
- What if some of the radio systems from units that are joining an operation are _without_ encryption?
- Radio-to-radio		No interoperability
- Radio-to-ACU1000		Full interoperability (possible system compromise)
- Radio-to-LMR/WAVE		Full interoperability (possible system compromise)

**Secure Mobile Networking**
- Security: Encryption Interoperability

- Encrypted

- Unencrypted

## Secure Mobile Networking

**Secure Mobile Networking**
- The “Black Core”: Neah Bay Communications Path

**Home Agent (Cleveland)**

- ENB

**        ****Globalstar           Ground Station    (Smith Falls, Ontario, Canada)**

**Globalstar Satellite**

- USCG   Closed Intranet (.mil)

- Data Routed over a Commercial Satellite

- Data Touches Down in a Foreign Country

- Data Routed Over the Open Internet

**Mobile Router (Neah Bay)**

- ENB

**The Internet**

## Secure Mobile Networking

**Secure Mobile Networking**
- Research: Policy-Based (Quasi-Deterministic) Routing

**Critical Link**

- Cisco has developed policy-based router code for IPv4
- Allows routers to preferentially route individual packets to specific, prioritized communications paths
- For example: safety critical data can be segregated from other data and restricted to a high reliability communications path or given priority on redundant, survivable paths
- The WAN side of the router will be able to support simultaneous communications over multiple, independent, prioritized paths

- © 2003 Cisco Systems, Inc. All rights reserved.

## Secure Mobile Networking

**Secure Mobile Networking**
- Research: Policy-Based (Quasi-Deterministic) Routing

- Routing policy can be applied at both the home agent and the mobile router
- Traffic classification can based on multiple parameters:
- Applications type
- Protocol
- Port number
- DSCP value, etc.
- Path/link selection can based on multiple parameters:
- Link bandwidth
- End-to-end conditions such as throughput, latency, reliability, etc.

**High speed link**

**int2**

**FA1**

**FA2**

**int3**

**C**

**D**

**C**

**Vi**

**Vo**

**D**

**Vo**

**Routing ****Policy**

**Vi**

**Routing ****Policy**

**Vi**

**C**

**D**

**Vo**

**HA**

**int1**

**Low latency link**

**Reliable link**

**FA3**

**C**

- © 2003 Cisco Systems, Inc. All rights reserved.

## Existing vehicles utilize non-network centric data standards for onboard system monitoring and control
Example: MIL-STD-1553b (routinely used on large transports, aerial refuelers, bombers, tactical fighters, and helicopters)
Cisco / LogiSync have developed a prototype device to extract vehicle bus data and convert it into IP packets for transmission and display on a web page
Enables remote display of aircraft systems and logistics status in real time
“Red Line” monitor can annunciate out-of-family conditions

- Example: MIL-STD-1553b (routinely used on large transports, aerial refuelers, bombers, tactical fighters, and helicopters)
- Cisco / LogiSync have developed a prototype device to extract vehicle bus data and convert it into IP packets for transmission and display on a web page
- Enables remote display of aircraft systems and logistics status in real time
- “Red Line” monitor can annunciate out-of-family conditions

**Secure Mobile Networking**
- Integration of Legacy Aircraft Data Systems

***Mission Control Center***

**The Internet**

**Generic Web Browser**

**Vehicle Logistics Data**

**Existing Aircraft Data Bus**

**LogiSync IP Conversion Device**

**Fuel State    Weapons State Aircraft Parameters**

**Can Accommodate: MIL-STD-1553b**
**J1939**
**RS422**
**RS485**
**RS232**
**Mod Bus**

## It depends on your applications...
Example: UAV virtual black box with continuous 20 Hz, 16 bit data (1553-to-IP): ~6 kbps
Aircraft position information
Aircraft fuel state
Aircraft weapons state
Aircraft altitude
Aircraft attitude
Aircraft heading
Aircraft velocity vector
Aircraft roll, pitch, and yaw rate	
Aircraft angle of attack
Aircraft angle of side slip
Atmospheric static pressure
Atmospheric dynamic pressure
Atmospheric static temperature
Aircraft control surface positions
Aircraft control commands
Aircraft throttle commands
Aircraft engine parameters
Aircraft control system parameters
Aircraft temperature indications

As needed
Voice communications (VOIP): ~11 kbps per channel
Web surfing, picture phone: 10 Kbps to 100 Kbps
Single, color photo (1 Mp camera): 600 Kb to 24 Mb
Low Definition TV: 100 Kbps to 1 Mbps
High Definition TV: 1 Mbps to 10 Mbps 

**Example: UAV virtual black box with continuous 20 Hz, 16 bit data (1553-to-IP): ~6 kbps**
**Aircraft position information**
**Aircraft fuel state**
**Aircraft weapons state**
**Aircraft altitude**
**Aircraft attitude**
**Aircraft heading**
**Aircraft velocity vector**
**Aircraft roll, pitch, and yaw rate****	**
**Aircraft angle of attack**
**Aircraft angle of side slip**
**Atmospheric static pressure**
**Atmospheric dynamic pressure**
**Atmospheric static temperature**
**Aircraft control surface positions**
**Aircraft control commands**
**Aircraft throttle commands**
**Aircraft engine parameters**
**Aircraft control system parameters**
**Aircraft temperature indications**
**As needed**
**Voice communications (VOIP): ~11 kbps per channel**
**Web surfing, picture phone: 10 Kbps to 100 Kbps**
**Single, color photo (1 Mp camera): 600 Kb to 24 Mb**
**Low Definition TV: 100 Kbps to 1 Mbps**
**High Definition TV: 1 Mbps to 10 Mbps **

**Secure Mobile Networking**
- How Much Bandwidth is Really Needed?

**100 Kbps **_**per platform**_** for now, with a path to 1 Mbps (or better) in the future?**

## Secure Mobile Networking

- Miniaturized Encryption Hardware

- Western DataCom’s IPE-10M encryption device
- Two 4” x 4” PC-104 compliant cards
- 1 encryption card
- 1 I/O card
- 5 VDC, 10W
- Commercially available
- 10 Mbps throughput
- FIPS 140-2 (path to HAIPE)
- AES, 256 bit key
- HAIPE packet formats
- Pre-placed encryption keys and X.509v3-based certificates
- Can accommodate “protected data in rest”
- Can accommodate unpowered zeroization

## Fits PC104 Plus boards
Tempest Approved
Quadrant Protection
Unpowered Zeroization
Data Protection at Rest
Western DataCom encryptor currently FIPS-140-2 (HAIPE upon NSA certification)
MIL-STD-180F 
Shock
Vibration
Water Resistance
Currently being integrated into the Predator (by General Atomics) and the Marine’s Expeditionary Fighting Vehicle (EFV)

- Tempest Approved
- Quadrant Protection
- Unpowered Zeroization
- Data Protection at Rest
- Western DataCom encryptor currently FIPS-140-2 (HAIPE upon NSA certification)
- MIL-STD-180F
- Shock
- Vibration
- Water Resistance
- Currently being integrated into the Predator (by General Atomics) and the Marine’s Expeditionary Fighting Vehicle (EFV)

**Secure Mobile Networking**
- Type 1 Mobile Router Housing

- Cisco’s “Grizzly”

## Secure Mobile Networking

**Exploded View**

**End Cap-Back**

**Mobile Router Stack**

**Wiring Board**

**I/O Interface**
**Board**

**End Cap- Front**

**Chassis (Extrusion) **

**O-Ring Seal (Waterproof)**

**Secure Mobile Networking**
- Rugged Field Packaging: Cisco’s “Grizzly”

**Heat Sink Clamshell (Thermal Management) **

## Secure Mobile Networking

**Cabling Example**

- Grizzly

- Local Serial Connection

- Local FE Connection

- Modem

- Camera

- Connector Fan-Out Box

- Ganged Connector Cable

**Secure Mobile Networking**
- Systems Integration

##  Wireless network hardware:

- Bridges			802.11b/g 	11/54Mbps
- Router-to-Router wireless communication
- Access Points   		802.11b/g 	11/54Mbps
- Client-to-Router wireless communication
- Wireless IP phones
- Wireless instruments
- Wireless PDAs
- Client Cards   		802.11b/g	11/54Mbps
- Laptop / PDA to Access Point communication

**Secure Mobile Networking**Creating a Wireless Network “Bubble”

## Secure Mobile Networking Integrated Transit Case Hardware

- Western Datacom’s Mobile IP Transit Case (MIPTAC)
- Portable, rugged, self contained wireless network containing:
- Cisco’s Mobile Router (MAR3251)
- Western DataCom’s IPE-10M encryptor
- On board Wireless LAN & WAN (802.11a / b / g)
- Cisco Bridge (router to router)
- Cisco Access Point (client to router)
- Laptops & PDAs
- VOIP phones
- Wireless sensors
- Wireless video
- Auto configuration access with RJ-45 Con & Aux. Jacks
- On board GPS
- Operates from 100-240 VAC or 9-32 VDC
- Rugged, vehicle mount omni antenna
- Bi-directional amplifier (1-10 watts)
- Pre-configured (set and forget)

## Secure Mobile Networking

- OSHP Network Overview

## Permanently installed cruiser / fire truck / ambulance system
Grizzly
Cisco Mobile Router (MAR 3251)
Western DataCom’s IPE-10M Encryptor
Power supply
Cell phone modem
GPS
Roof mounted antenna
External camera(s) / microphone(s) / computer

- Grizzly
- Cisco Mobile Router (MAR 3251)
- Western DataCom’s IPE-10M Encryptor
- Power supply
- Cell phone modem
- GPS
- Roof mounted antenna
- External camera(s) / microphone(s) / computer

**Secure Mobile Networking**
- Possible Design Solutions: Permanent Mobile Systems

- Grizzly

- Antenna

## Incident site: mobile IP transit case (for emergency use in communities without permanently wired vehicles)
Cisco’s Mobile Router (MAR3251)
Western DataCom’s IPE-10M encryptor
Cell phone modem
On board Wireless LAN & WAN (802.11a / b / g)
Cisco 350 bridge (router to router)
Cisco 350 access point
GPS
4 disaster kits per major metropolitan area, preconfigured and ready for rapid deployment

- Cisco’s Mobile Router (MAR3251)
- Western DataCom’s IPE-10M encryptor
- Cell phone modem
- On board Wireless LAN & WAN (802.11a / b / g)
- Cisco 350 bridge (router to router)
- Cisco 350 access point
- GPS
- 4 disaster kits per major metropolitan area, preconfigured and ready for rapid deployment

**Secure Mobile Networking**
- Transportable Wireless Communications

- MIPTC

- Wireless Network Coverage Area:  i.e. the “Bubble”

**PDA**

**IP Phone**

## Provides communications when local infrastructure has been damaged or destroyed
Incident site: additional high performance network connectivity (one required per major metropolitan area)
Satellite backhaul connection
SATCOM modem / antenna
On board Wireless LAN & WAN (local area 802.11a / b / g)
Cisco 350 bridge (router to router)
Cisco 350 access point
Space & power for individual responder base stations & LMR enabled routers
Individual, pneumatically deployed antenna(s)
Pneumatically deployed camera platform
GPS
Emergency power (external generator / UPS)

- Incident site: additional high performance network connectivity (one required per major metropolitan area)
- Satellite backhaul connection
- SATCOM modem / antenna
- On board Wireless LAN & WAN (local area 802.11a / b / g)
- Cisco 350 bridge (router to router)
- Cisco 350 access point
- Space & power for individual responder base stations & LMR enabled routers
- Individual, pneumatically deployed antenna(s)
- Pneumatically deployed camera platform
- GPS
- Emergency power (external generator / UPS)

**Secure Mobile Networking**
- Transportable Satellite Backhaul Connection

- Segovia

- IDirect

- Pneumatic Antenna Mast

## WAVE server
Mirrored, redundant, geographically disbursed units are recommended for survivability
Units should be pre-configured for immediate use in times of emergency
Dispatch Center will provide a shared capability

- WAVE server
- Mirrored, redundant, geographically disbursed units are recommended for survivability
- Units should be pre-configured for immediate use in times of emergency
- Dispatch Center will provide a shared capability

**Secure Mobile Networking**
- Inter-Community Interoperability & Communities of Interest

- WAVE Server #1

**     ****The Internet**

- WAVE Server #2

- IP Phone

- IP Phone

- Dispatch Center

## Secure Mobile Networking

**Overhead Asset**

**Secure Mobile Networking**
- Putting it All Together

_**Emergency Communications Trailer (ECT)**_
- Satellite backhaul connection
- Individual responder base stations
- LMR enabled routers
- Portable generator / UPS
- Pneumatic antenna(s)
- Pneumatic camera platform
- Bridge / AP (MIPTC)

**WAVE Server (Primary)**

**MIPTC**

**MIPTC**

**MIPTC**

**New York**

**Toledo**

**Akron**

**WAVE Server (Backup)**

**The Internet**

## Secure Mobile Networking

- MIPTAC
- #1

- MIPTAC
- #2

- MIPTAC
- #3

- Auto
- Align
- Satellite
- Dish

- Router /
- Bridge / AP /
- EM Channel
- Bank / Radio
- Base Station /
- Cell Phone
- Enclosure

- X’ Pneumatically
- Deployed Antenna (must accommodate everyone’s base station antennas, 802.11, 802.16, & cell systems like EV-DO)
- Could accommodate Pan & Tilt HDTV, IR, or Thermal Camera

- Generator

- Fuel
- Tank

- A
- B
- T

- Locked Hold Down Strap

- Accommodates How Many Radio Base Stations? Fans?  HEPA Filters?

- External Power Line Storage Compartment (120/220 VAC)

- Cable & Manual Storage Compartment (spare cables for all popular radios)        plus 2 Gooseneck Lights

- WAVE Server Mirror (for complete loss of external Internet access)

- Tongue Weight? Weight Distribution?

- 1/2 Hour UPS

- Quick Release External Power Disconnect (powered in storage 24/7)

- Fold Down Table for Manuals & Toughbooks

- AC

- Air Compressor & Receiver

- Power Seeking Automatic Bus Transfer Switch

- Spare Tire

- TOC Tent

- Lockable, Alarmed  Access Door

- Wired Network Access (allows updates in storage)

- Leveler

- Danger! RF Hazard! Signs

- Safety Cones

- Erectable High Intensity Lamps

- 20 Amp GFI with 4 Outlets

- Fuel Transfer Pump

- Welded Cleats

- MIPTAC UPS (powered in storage 24/7)

- VOIP Phone Charger (20 phones)

**Secure Mobile Networking**
- Emergency Communications Trailer (ECT) Concept

## Sets policy

Establishes & maintains system accounts

Houses equipment

Remotely configures, maintains, & tests fielded equipment

- Establishes & maintains system accounts
- Houses equipment
- Remotely configures, maintains, & tests fielded equipment

**Secure Mobile Networking**
- Who Manages the Final System?

## NASA GRC:	Phil Paulsen	216-433-6507	phillip.e.paulsen@nasa.gov
NASA GRC:	Will Ivancic	216-433-3494	william.d.ivancic@nasa.gov
WDC: 		Jeff Sweitzer 	440-835-1510 	jeff@western-data.com

Publications
http://ctd.lerc.nasa.gov/5610/relpubs.html
http://roland.grc.nasa.gov/~ivancic/papers_presentations/papers.html
http://siw.gsfc.nasa.gov/agenda.html

- NASA GRC:	Will Ivancic	216-433-3494	william.d.ivancic@nasa.gov
- WDC: 		Jeff Sweitzer 	440-835-1510 	jeff@western-data.com
- _Publications_
- http://ctd.lerc.nasa.gov/5610/relpubs.html
- http://roland.grc.nasa.gov/~ivancic/papers_presentations/papers.html
- http://siw.gsfc.nasa.gov/agenda.html

**Secure Mobile Networking**
- Contact Information