Data Link Security (DSEC) Subcommittee

Last Update: March 25, 2008

Chairman: Doug Murri - Southwest
APIM: ACARS Information Security

---

Goal: The goal of the DSEC Subcommittee is to develop a standard that can be used as the basis for design and implementation of basic ACARS security. The commission (APIM 05-009) of the DSEC Subcommittee is to develop security infrastructure provisions such that they are scalable and extensible to support security measures in an IP environment.

Scope: This project is to standardize information security for ACARS messages in the form of Project Paper 823. The initial task is to develop an overview of security that fits within the framework described by ARINC Specification 811. The second element will define the infrastructure and processes, such as the issue of certificates and delivery of public keys. The third element will be the specific definition of provisions applicable to establishing and utilizing an ACARS security system. It will include a protocol and processes for the application of information security services (authentication, integrity, and confidentiality) and data compression to ACARS messages. The definition of security protocol and processes will be of sufficient detail to enable data link service providers, avionics vendors, civil aviation authorities (CAA) and airline ground host developers to develop interoperable information security services for protecting ACARS messages.

Benefit: Currently, avionics vendors implement proprietary ACARS Message Security solutions, which are not interoperable and which may not offer all of the security services being identified as emerging needs. A standard, interoperable ACARS Message Security (AMS) solution benefits the industry by minimizing costs to airlines, avionics vendors, data link service providers, CAAs and airline ground host developers.

AEEC General Session (October 2006) Update:

AEEC endorsed the completion of the ongoing work to define ACARS Message Security. AEEC consensus was that IP network-based security definitions would be developed by the new Network Infrastructure and Security (NIS) Subcommittee. Greater participation by airline IT and Operations representatives is encouraged.

---

Current Drafts:

Working Papers:

Strawman, Version 4, of Project Paper 823, Part 2, Datalink Security - Key Management (pdf, 346K)

General Reference/Resources:

Key/Certificate Management Life Cycle (pdf, 338K)

Registration Authority Process of PKI
(Provided by Carillon Information Security - All files are PDF)
Basic process
Low assurance over the web
Higher assurance with a smartcard
For devices

The Mechanics of PKI
(Provided by Carillon Information Security - All files are PDF)
Encryption vs. Signature
Path Validation, or the Chain of Trust
Non-Repudiation
Gauging Assurance
Certificate Revocation
Certificate Management Lifecycle

Meeting Announcement:

Last Meeting Report:

DLK Security (DSEC) Subcommittee
October 16, 2007; Annapolis, Maryland

Teleconference 11, June 21, 2007 (pdf, 23K)
Teleconference 10, May 2, 2007 (pdf, 26K)
Teleconference 9, April 4, 2007 (pdf, 50K)

---