# Presentation: 934743

## TCP/IP over Aeronautical Data Links

- 2006 Integrated
- Military and Civil CNS/ATM
- Will Ivancic
- NASA Glenn Research Center
- _[wivancic@grc.nasa.gov](mailto:wivancic@grc.nasa.gov)_
- 216-433-3494

## Network Design Triangle

- © 2004 Syzygy Engineering  – Will Ivancic

## NASA’s Request for Comments on theGlobal Air Space System Requirements

## Current View of the Global Airspace System

- Current Global and National Airspace System
- Stove-piped communication systems
- Disjoint set of networks
- Currently not globally network centric
- Evolved over time with limited concern for network security
- Security by obscurity
- Closed systems
- Insufficient bandwidth to support security measures
- Safe and Secure
- Air Traffic Control methods have evolved in reaction to changes in technology, capacity and use
- Current methods are reaching limit of scalability
- FAA - Bringing Safety to America’s Skies
- Mission is to provide the safest, most efficient aerospace system in the world.
- Responsible National Airspace System, not funded to address global issues.
- Movement toward Network Centric Operations
- Cross network security
- Authentication, Authorization, Accounting and Encryption
- Required changes in Policy!

## Issues

- Systems and solutions being proposed for National System only
- Global Security issues being ignored or at least not emphasized.
- Divided and conquer design approach being performed prior to understanding of global issues
- Global system has not been a requirement (An important issue when considering security implications)
- Ultimately Who Pays?
- Airlines and stock holders
- End users via a combination of taxes and airfare

## Global Airspace System Requirements

- Must be value added
- Cannot add cost without a return on investment that meets or exceeds those costs.
- Must be capable of seamless global operation.
- Must be capable of operating independently of available communications link. Must support critical Air Traffic Management (ATM) functions over low-bandwidth links with required performance.
- Must use same security mechanisms for Air Mobile and Ground Infrastructure (surface, terminal, en router, oceanic and space)
- Critical ATM messages must be authenticated.
- Must be capable of encryption when deemed necessary
- Security mechanisms must be usable globally
- Must not violate International Traffic in Arms Regulations
- Must operate across networks owned and operated by various entities
- Must be able to share network infrastructure
- Must make maximum use of standard commercial technologies (i.e. core networking hardware and protocols)
- Must enable sharing of information with proper security, authentication, and authorization
- Situational Awareness
- Passenger Lists
- Aircraft Maintenance
- Same network must accommodate both commercial, military and general aviation.

## Design Concepts

- Must be IPv6 based.
- Must be capable of a prioritized mixing of traffic over a single RF link (e.g. ATM, maintenance, onboard security, weather and entertainment).
- Must utilize IPsec-based security with Security Associations (SAs) bound to permanent host identities (e.g. certificates) and not ephemeral host locators (e.g. IP addresses).
- Must be capable of accommodating mobile networks.
- Must be capable of multicasting
- Must be scalable to tens of thousands of aircraft

## Consensus

- IPv6 is *the* way to go, virtually everyone agrees.
- There seems to be consensus that links should be shared, and the system should be provider-independent, and this makes QoS a requirement.
- There is a need for some type of mobile networking (mobile-IP, NEMO, ad hoc)
- Placement of home for mobile-IP or NEMO is being addressed, but needs further study.
- Everyone agrees that some work is still to be done cleaning up IPsec multicast, envisioning the certificate architecture, and figuring out how exactly to do QoS.

## Value Added

- Lower Telecommunication Costs of IP-based networks as compared to dedicated point-to-point links
- Competition among information providers
- Economies of scale
- Lower development costs for new applications and maintenance due to standardization of interfaces

## Link Independence

- Most important considerations for this is not technical, but related to cost, safety, and politics
- Facilitates globalization and supports positive ROI
- Requires change in policy
- Change in use of spectrum
- World Radio Conference to allow use of other frequencies for air traffic control messages
- Air Traffic Controller is now networked.

- These are some very different modes of  operation from what the aeronautics community is comfortable with.

## Security Mechanisms

- Encryption mechanisms should be limited to those that are free of ITAR restrictions
- Other counties also have regulations restricting the exportation of cryptography technology
- These regulations may limit the ability to realize cost and schedule advantages that could be gained by using a single set of proven security infrastructure software throughout the world.
- Multicast and *current* IPSec implementations do not necessarily work well together.
- Support for IPSec-base security with Security Associations bound to permanent host (multicast group) identities (e.g. certificates)
- Location, control, and responsiveness of the authentication authority servers is critical.

## Further Studies and Investigation

- QoS related to mixing ATM traffic with other information
- Much research is needed regarding network mobility
- Networking ATM traffic for use over multiple links and service providers
- Mobile-IP, NEMO and Ad Hoc networking
- Route Optimization
- Placement of Location Manager (Home Agent)
- Ping-pong routing
- QoS and delay issues
- Multi-homing (use of best available link)
- To load balance or not to load balance?
- Make before break or not?
- Application of Ad Hoc type networking for Oceanic to extend networks (MANETs or Mobile-IPv6)

## Internet Protocol Performance over VDL-3

- This work was performed by Jim Griner, Brian Frantz and Russ Jirberg
- Under the Weather Information Communications project

## System Diagram

- This work was performed by Jim Griner, Brian Frantz and Russ Jirberg
- Under the Weather Information Communications project

## Data Link Layer Mapping

## Application Protocol Data Unit Delivery Time

## Messages Received vs. Signal Quality Parameter (SQP)

- Messages Received vs. Signal Quality Parameter (SQP)

## Message Delivery Time (QoS)

## Message Reliability

- Table 6.  TCP and DSL of the turbulence messages.

## Modular Cost-Effective                     Extensible Onboard Architecture for Secure Mobile Communications

## Typical ACARS Onboard Network

- SATCOM AERO-1 System

- SATCOM AERO-H/H+ System

- VHF Voice/DATA System

- HF Voice/DATA System

- GateLink

- File Server Subsystem

- Printer

- ARINC 741

- ARINC 761

- ARINC 740/744

- ARINC 719
- ARINC 753

- ARINC 716
- ARINC 750

- Terminal

- Ethernet
- (Optional)

## Typical ACARS Onboard Network

## ATN Island Routing Domain Confederation

**ATN TRD**

**ATN TRD**

**ATN Backbone RDC**

**ATN TRD**

**ATN  ERD**

**ATN  ERD**

**ATN Island RDC**

**Mobile RD**

**Mobile RD**

**Mobile RD**

**Another**
**ATN Island**

- ERD – End Routing Domain
- RD – Routing Domain
- RDC – Routing Domain Confederation
- TRD – Transit Routing Domain

##  IP-Based Transitional Architecture

- SATCOM AERO-1

- SATCOM AERO-HH

- VHF Voice/DATA

- HF Voice/DATA

- GateLink

- INMARSAT Swift 64

- Connexion by Boeing

- WiFi Max

- Cellular

- Future Links

**Mobile Router**

**Cryptography and Firewall**

- Display

-  IP-Based Transitional Architecture

##  IP-Based Architecture with ATC and AOC Separate 

- SATCOM AERO-HH

- VHF Voice/DATA

- HF Voice/DATA

- GateLink

- INMARSAT Swift 64

- Connexion by Boeing

- WiFi Max

- Cellular

- Future Links

**Mobile Router**

**Cryptography and Firewall**

**Cryptography and Firewall**

- Communication and Display

- Sensor Controller  (Optional Display)

-  IP-Based Architecture with ATC and AOC Separate

## IP-Based Architecture with ATC and AOC Combined 

**Mobile Router**

**Cryptography and Firewall**

- Communications Sensor Controller and Display

- Radio Link 1

- Radio Link 2

- Radio Link 3

- Radio Link 4

- Radio Link N

- IP-Based Architecture with ATC and AOC Combined

-  IP-Based Architecture with ATC and AOC Combined

## Policy-Based Routing, All Links Active

**High speed link**

**int2**

**int3**

**Routing ****Policy**

**Routing ****Policy**

**int1**

**Low latency link**

**Reliable link**

**ATC**

**ATC**

**ATC**

**ATC**

**AOC**

**AOC**

**AOC**

**AOC**

**P-DATA**

**P-DATA**

**P-DATA**

**P-DATA**

**P-DATA**

**P-DATA**

**HomeAgent**

- Policy-Based Routing, All Links Active

## Policy-Based Routing, Critical Link Active

**High speed link**

**int2**

**int3**

**Routing ****Policy**

**Routing ****Policy**

**int1**

**Low latency link**

**Reliable link**

**ATC**

**ATC**

**ATC**

**ATC**

**AOC**

**AOC**

**P-DATA**

**P-DATA**

**P-DATA**

**HomeAgent**

- Policy-Based Routing, Critical Link Active

## Policy-Based Routing, Passengers Link Active

**High speed link**

**int2**

**int3**

**Routing ****Policy**

**Routing ****Policy**

**HomeAgent**

**int1**

**Low latency link**

**Reliable link**

**ATC**

**ATC**

**ATC**

**AOC**

**AOC**

**AOC**

**P-DATA**

**P-DATA**

**P-DATA**

**P-DATA**

**P-DATA**

**P-DATA**

- Policy-Based Routing, Passengers Link Active

## The WAVE server can be used to tie together disparate radio systems for emergency communications

- Generic (unmodified) Cessna 152

- Network Centric FAA Control Tower

- Generic F15E Interceptor

- Network Centric DoD Control Tower

**     **

- Twisted Pair Solutions WAVETMServer                                                                                 Cisco IP Interoperability and Collaboration System (IPICS)

**Secure Mobile Networking**
- Emergency Communications Over Disparate Radios

- The Internet

- Land Mobile Radio Connection to tower radio base station

- Civilian UHF Voice Communications

- DoD VHF Voice Communications

- Cessna 152! You are violating national airspace! Respond immediately and follow me to the nearest airport!