Federal Register / Vol. 76, No. 38 / Friday, February 25, 2011 / Proposed Rules 10529 

risks potentially resulting in unsafe 

conditions for the airplane and its 

occupants. 

This potential exploitation of security 

vulnerabilities may result in intentional 

or unintentional destruction, disruption, 

degradation, or exploitation of data and 

systems critical to the safety and 

maintenance of the airplane. The 

existing regulations and guidance 

material did not anticipate these types 

of system architectures. Furthermore, 14 

CFR regulations and current system 

safety assessment policy and techniques 

do not address potential security 

vulnerabilities which could be exploited 

by unauthorized access to airplane 

networks and servers. Therefore, these 

special conditions and a means of 

compliance are proposed to ensure that 

the security (i.e., confidentiality, 

integrity, and availability) of airplane 

systems is not compromised by 

unauthorized wired or wireless 

electronic connections between airplane 

systems and networks and the passenger 

entertainment domain. 

Applicability 

As discussed above, these proposed 

special conditions are applicable to the 

GVI. Should Gulfstream apply at a later 

date for a change to the type certificate 

to include another model incorporating 

the same novel or unusual design 

features, these proposed special 

conditions would apply to that model as 

well. 

Conclusion 

This action affects only certain novel 

or unusual design features of the GVI. It 

is not a rule of general applicability. 

List of Subjects in 14 CFR Part 25 

Aircraft, Aviation safety, Reporting 

and recordkeeping requirements. 

The authority citation for these 

special conditions is as follows: 

Authority: 49 U.S.C. 106(g), 40113, 44701, 

44702, 44704. 

The Proposed Special Conditions 

Accordingly, the Federal Aviation 

Administration (FAA) proposes the 

following special condition as part of 

the type certification basis for the GVI 

airplanes. 

The design must isolate or provide 

protection from any inadvertent or 

malicious change to, and any adverse 

effect on any systems, software, or data 

in the aircraft control domain or airline 

information domain from any point 

within the passenger entertainment 

domain. 

Issued in Renton, Washington, on February 

15, 2011. 

KC Yanamura, 

Acting Manager, Transport Airplane 

Directorate, Aircraft Certification Service. 

[FR Doc. 2011–4231 Filed 2–24–11; 8:45 am] 

BILLING CODE 4910–13–P 

DEPARTMENT OF TRANSPORTATION 

Federal Aviation Administration 

14 CFR Part 25 

[Docket No. NM448 Special Conditions No. 

25–11–07–SC] 

Special Conditions: Gulfstream Model 

GVI Airplane; Electronic Systems 

Security Protection From Unauthorized 

External Access 

AGENCY: Federal Aviation 

Administration (FAA), DOT. 

ACTION: Notice of proposed special 

conditions. 

SUMMARY: This action proposes special 

conditions for the Gulfstream GVI 

airplane. This airplane will have novel 

or unusual design features associated 

with the architecture and connectivity 

capabilities of the airplane’s computer 

systems and networks, which may allow 

access by external computer systems 

and networks. Connectivity by external 

systems and networks may result in 

security vulnerabilities to the airplane’s 

systems. The applicable airworthiness 

regulations do not contain adequate or 

appropriate safety standards for these 

design features. These proposed special 

conditions contain the additional safety 

standards that the Administrator 

considers necessary to establish a level 

of safety equivalent to that established 

by the existing airworthiness standards. 

DATES: We must receive your comments 

by April 11, 2011. 

ADDRESSES: You must mail two copies 

of your comments to: Federal Aviation 

Administration, Transport Airplane 

Directorate, Attn: Rules Docket (ANM– 

113), Docket No. NM448, 1601 Lind 

Avenue, SW., Renton, Washington 

98057–3356. You may deliver two 

copies to the Transport Airplane 

Directorate at the above address. You 

must mark your comments: Docket No. 

NM448. You can inspect comments in 

the Rules Docket weekdays, except 

Federal holidays, between 7:30 a.m. and 

4 p.m. 

FOR FURTHER INFORMATION CONTACT: Will 

Struck, FAA, Airplane and Flight Crew 

Interface Branch, ANM–111, Transport 

Standards Staff, Transport Airplane 

Directorate, Aircraft Certification 

Service, 1601 Lind Avenue, SW., 

Renton, Washington 98057–3356; 

telephone (425) 227–2764; facsimile 

(425) 227–1320. 

SUPPLEMENTARY INFORMATION: 

Comments Invited 

We invite interested people to take 

part in this rulemaking by sending 

written comments, data, or views. The 

most helpful comments reference a 

specific portion of the special 

conditions, explain the reason for any 

recommended change, and include 

supporting data. We ask that you send 

us two copies of written comments. 

We will file in the docket all 

comments we receive, as well as a 

report summarizing each substantive 

public contact with FAA personnel 

concerning these special conditions. 

You can inspect the docket before and 

after the comment closing date. If you 

wish to review the docket in person, go 

to the address in the ADDRESSES section 

of this preamble between 7:30 a.m. and 

4 p.m., Monday through Friday, except 

Federal holidays. 

We will consider all comments we 

receive on or before the closing date for 

comments. We will consider comments 

filed late if it is possible to do so 

without incurring expense or delay. We 

may change these special conditions 

based on the comments we receive. 

If you want us to acknowledge receipt 

of your comments on this proposal, 

include with your comments a selfaddressed, stamped postcard on which 

you have written the docket number. 

We will stamp the date on the postcard 

and mail it back to you. 

Background 

On March 29, 2005, Gulfstream 

Aerospace Corporation (hereafter 

referred to as ‘‘Gulfstream’’) applied for 

an FAA type certificate for its new 

Gulfstream Model GVI passenger 

airplane. Gulfstream later applied for, 

and was granted, an extension of time 

for the type certificate, which changed 

the effective application date to 

September 28, 2006. The Gulfstream 

Model GVI airplane will be an all-new, 

two-engine jet transport airplane with 

an executive cabin interior. The 

maximum takeoff weight will be 99,600 

pounds, with a maximum passenger 

count of 19 passengers. 

Type Certification Basis 

Under provisions of Title 14, Code of 

Federal Regulations (14 CFR) 21.17, 

Gulfstream must show that the 

Gulfstream Model GVI airplane 

(hereafter referred to as ‘‘the GVI’’) meets 

the applicable provisions of 14 CFR part 

25, as amended by Amendments 25–1 

through 25–119, 25–122, and 25–124. If 


srobinson on DSKHWCL6B1PROD with PROPOSALS
10530 Federal Register / Vol. 76, No. 38 / Friday, February 25, 2011 / Proposed Rules 

the Administrator finds that the 

applicable airworthiness regulations 

(i.e., 14 CFR part 25) do not contain 

adequate or appropriate safety standards 

for the Gulfstream Model GVI because of 

a novel or unusual design feature, 

special conditions are prescribed under 

the provisions of § 21.16. 

Special conditions are initially 

applicable to the model for which they 

are issued. Should the type certificate 

for that model be amended later to 

include any other model that 

incorporates the same novel or unusual 

design features, the special conditions 

would also apply to the other model 

under provisions of § 21.101. 

In addition to complying with the 

applicable airworthiness regulations 

and special conditions, the GVI must 

comply with the fuel vent and exhaust 

emission requirements of 14 CFR part 

34 and the noise certification 

requirements of 14 CFR part 36. The 

FAA must also issue a finding of 

regulatory adequacy pursuant to section 

611 of Public Law 92–574, the ‘‘Noise 

Control Act of 1972.’’ 

The FAA issues special conditions, as 

defined in 14 CFR 11.19, in accordance 

with § 11.38, and they become part of 

the type certification basis under 

§ 21.17(a)(2). 

Novel or Unusual Design Features 

The GVI will incorporate the 

following novel or unusual design 

features: Digital systems architecture 

composed of several connected 

networks. The proposed architecture 

and network configuration may be used 

for, or interfaced with, a diverse set of 

functions, including: 

1. Flight-safety related control, 

communication, and navigation systems 

(aircraft control domain), 

2. Airline business and administrative 

support (airline information domain), 

3. Passenger information and 

entertainment systems (passenger 

entertainment domain), and 

4. The capability to allow access to or 

by external sources. 

Discussion of Proposed Special 

Conditions 

The proposed Model GVI architecture 

and network configuration may allow 

increased connectivity to and access by 

external airplane sources and airline 

operations and maintenance systems to 

the aircraft control domain and airline 

information domain. The aircraft control 

domain and airline information domain 

perform functions required for the safe 

operation and maintenance of the 

airplane. Previously these domains had 

very limited connectivity with external 

sources. 

The architecture and network 

configuration may allow the 

exploitation of network security 

vulnerabilities resulting in intentional 

or unintentional destruction, disruption, 

degradation, or exploitation of data, 

systems, and networks critical to the 

safety and maintenance of the airplane. 

The existing regulations and guidance 

material did not anticipate these types 

of airplane system architectures. 

Furthermore, 14 CFR regulations and 

current system safety assessment policy 

and techniques do not address potential 

security vulnerabilities, which could be 

exploited by unauthorized access to 

airplane systems, data buses, and 

servers. Therefore, these special 

conditions and a means of compliance 

are proposed to ensure that the security 

(i.e., confidentiality, integrity, and 

availability) of airplane systems is not 

compromised by unauthorized wired or 

wireless electronic connections. 

Applicability 

As discussed above, these proposed 

special conditions are applicable to the 

GVI. Should Gulfstream apply at a later 

date for a change to the type certificate 

to include another model incorporating 

the same novel or unusual design 

features, these proposed special 

conditions would apply to that model as 

well. 

Conclusion 

This action affects only certain novel 

or unusual design features of the GVI. It 

is not a rule of general applicability. 

List of Subjects in 14 CFR Part 25 

Aircraft, Aviation safety, Reporting 

and recordkeeping requirements. 

The authority citation for these 

special conditions is as follows: 

Authority: 49 U.S.C. 106(g), 40113, 44701, 

44702, 44704. 

The Proposed Special Conditions 

Accordingly, the Federal Aviation 

Administration (FAA) proposes the 

following special conditions as part of 

the type certification basis for the GVI 

airplanes. 

1. The applicant must ensure 

electronic system security protection for 

the aircraft control domain and airline 

information domain from access by 

unauthorized sources external to the 

airplane, including those possibly 

caused by maintenance activity. 

2. The applicant must ensure that 

electronic system security threats from 

external sources are identified and 

assessed, and that effective electronic 

system security protection strategies are 

implemented to protect the airplane 

from all adverse impacts on safety, 

functionality, and continued 

airworthiness. 

Issued in Renton, Washington, on February 

15, 2011. 

KC Yanamura, 

Acting Manager, Transport Airplane 

Directorate, Aircraft Certification Service. 

[FR Doc. 2011–4232 Filed 2–24–11; 8:45 am] 

BILLING CODE 4910–13–P 

ENVIRONMENTAL PROTECTION 

AGENCY 

40 CFR Part 49 

[EPA–R09–OAR–2010–0683; FRL–9269–4] 

Supplemental Proposed Rule of 

Source Specific Federal 

Implementation Plan for Implementing 

Best Available Retrofit Technology for 

Four Corners Power Plant: Navajo 

Nation 

AGENCY: Environmental Protection 

Agency (EPA). 

ACTION: Supplemental proposed rule. 

SUMMARY: On October 19, 2010, the 

Environmental Protection Agency (EPA) 

published a proposal to promulgate a 

source specific Federal Implementation 

Plan (FIP) requiring the Four Corners 

Power Plant (FCPP), located on the 

Navajo Nation, to achieve emissions 

reductions required by the Clean Air 

Act’s Best Available Retrofit Technology 

(BART) provision. On November 24, 

2010, Arizona Public Service (APS) 

acting on behalf of FCPP’s owners 

submitted a letter to EPA offering an 

alternative proposal to reduce visibilityimpairing pollution. In this action, EPA 

is supplementing our October 19, 2010 

BART proposal with our technical 

evaluation of APS’ alternative proposal. 

We are proposing to find that a different 

alternative emissions control strategy 

would achieve more progress than 

EPA’s BART proposal towards 

achieving visibility improvements in the 

surrounding Class I areas. 

DATES: Comments on this supplemental 

proposed rule must be submitted no 

later than May 2, 2011. 

Open houses and public hearings will 

be held on the following dates: 

Shiprock Chapter, Shiprock, New 

Mexico—March 29, 2011; 

Nenahnezad Chapter, Fruitland, New 

Mexico—March 30, 2011; 

Farmington, New Mexico—March 30, 

2011; 

Durango, Colorado—March 31, 2011. 

ADDRESSES: Submit comments, 

identified by docket number EPA–R09– 

OAR–2010–0683, by one of the 

following methods: 


srobinson on DSKHWCL6B1PROD with PROPOSALS