Airport information systems security

Airports are unique as no two airports are designed the same and, while each is a single facility, each is occupied by many different tenants who provide many different services. Each service may include one or more information systems, both automated and manual, running independently from all others. Because of high visibility events such as the bombing of Pan American Flight 103 in 1988, the explosion of TWA Flight 800 in 1996, and the most recent catastrophic events of September 11, 2001, increased security measures have been put in place to protect the flying public from terrorists. The need to share and exchange information effectively and in a timely manner between airport services and systems, with other airport facilities, outside organizations and government agencies, becomes greater each day. The increased requirements defined by previous policy, threat, vulnerability, and risk assessments can be used to derive security services for NAS Air Traffic Control (ATC) operations, as well as Airport Facility (AF) operations. However, conventional solutions may not be suited to the unique needs of an airport environment and may be operationally unacceptable in some cases. This discusses some of the ways that information systems security can help ensure that key security services, including access control and authentication, are available and implementable in all systems as needed in these unique airport environments.     

Satellite communication-a continuing revolution

SATCOM technology has revolutionized communications over the last 40 years. Initial SATCOM systems provided trunk telephony through large, fixed stations; current systems offer many services to smaller, fixed and mobile terminals. Personal Communications Systems, when fully implemented, will allow individuals to communicate with “anyone, anywhere, anytime,” and thus transform the world into a truly global village. New systems (currently being planned) will offer innovative services, such as computer networking and multimedia to the expanding mass market at an affordable cost. The rate of SATCOM progress shows no sign of slowing, and this revolution is expected to continue well into the future     

Telecommunications Technology in Metropolitan Areas

The electronic communication technology available today offers the possibility of changing many patterns of information transfer in urban areas. There are three major trends which are converging to make this change possible. These are: 1) the technology to permit wideband information transfer manifested in the existing 2300/CATV/Cable System and in modification of the Bell network for wideband services; 2) the potential demand for a vast range of new services to persons operating in the urban areas; 3) the increasing demands for meeting mobile information transfer needs in the urban areas through radio systems operating in the 100 to 1000 MHz part of the spectrum. The extent to which these trends are allowed to converge will be a function of the quality of telecommunication policy formulation and execution. In order to formulate policy, it is necessary to have a vision of the future toward which to work. This paper will discuss the types of services possible with the technology presently available, which will have impact on future policy decisions.     

面向互联飞机的空天地网络一体化融合研

随着数字化技术的发展，民用飞机会在飞行各阶段产生大量数据，这些数据的利用及处理将提升飞机运营的经济性、安全性与舒适性。为了适应未来互联飞机对海量数据交换与传输的迫切需求，满足民用飞机对无线通信服务质量(QoS)的要求，有必要充分利用并合理分配多种现有和未来的空天地无线通信链路资源。分析了互联飞机的概念、生态系统及其对空天地网络的网络需求，研究了地面异构移动互联网采用的紧耦合和松耦合两种融合方法，采用了网络体系融合、IP网络和非IP网络融合及终端融合等多种融合手段，提出了适应于多种通信链路与网络体系特点的一体化空天地无线通信链路的融合架构，并对网络协议栈、网络安全以及集成验证提出了初步考虑。     

Secure Flow: a totally integrated transportation security system

Secure Flow is a holistic, integrated methodology that addresses all security vectors (paths that a terrorist may take to enter a threat object into the transportation system), allowing people, baggage, and cargo to move via various transportation systems in a secure fashion, while maintaining an "ease of access" to these diverse systems through innovative technology, procedures, and training. Secure Flow is a totally integrated transportation security system. It is a strategic program with multiple integration projects each being a vector such as: checked baggage, checkpoint, cargo/mail, airport, aircraft, port terminal, and cruise ships. Secure Flow identifies requirements for the establishment of protocols, standards, communications, and development of technologies to link deployable security equipment into a totally integrated transportation security system. The objective of Secure Flow is to secure the flow of passengers, baggage, and cargo from origin to destination to meet the operationally viable needs of the future seamless US Transportation System for the traveling public.     

Speech variability in automatic speaker recognition systems for commercial and forensic purposes

Speaker recognition is a major task when security applications through speech input are needed. Nevertheless, speech variability is a main degradation factor in speaker recognition tasks. Both intra-speaker and external variability sources produce mismatch between training and testing phases. In this contribution, channel and inter-session variability are explored in order to accomplish real automatic systems for both commercial and forensic speaker recognition. Results are presented making use of "AHUMADA", a subset of "GAUDI" large speaker recognition-oriented database in Spanish.     

飞行器测控通信技术发展趋势与建议

在研究国内外测控通信技术现状与发展动态的基础上,梳理出未来测控通信发展趋势：将走向综合化网络、高精度和航天器自主导航,发展光学测控通信技术,提升跟踪与数据中继能力,建设天基靶场,加强安全防护,以及设备高度综合化、数字化、软件化和低成本等;结合我国测控通信技术发展遇到的技术“瓶颈”与挑战,探讨了当前我国测控通信发展面临的主要任务：制定顶层规划,继续提升技术水平,满足新平台新任务测控需求,探索新概念与前沿技术等;最后,提出了我国测控通信重点发展方向及其关键技术的建议.     

Satellite data collection & forwarding systems

A possible classification of satellites can be related to their capability to provide or not provide real-time services. Nonreal-time systems store the information, and forward it to destination later, usually by means of low Earth orbit (LEO) satellites. Nowadays the main application of these systems is small data exchange to/from remote sites where no other communication infrastructure is available, hence, covering a niche market. Low on-board memory storage capability and, moreover, low bit rate due to little bandwidth allocated for these systems do not allow us to collect and forward a considerable volume of data in the short visibility window of the satellite passage. New applications and services can be conceived through the deployment of new systems able to overcome the above-described limitations, while existing applications can be provided more cost-effectively. These aspects are addressed together with an experimental interactive system which allows huge data collection in W-band and for forwarding to the Internet.     

ATM and FIS data link services

The Federal Aviation Administration (FAA) currently has under development data link services for Air Traffic Management (ATM), Flight Information Service (FIS), and communications, navigation, and surveillance (CNS). These services will be provided over the Aeronautical Telecommunications Network (ATN), a worldwide data network intended to provide data communications connectivity among mobile aircraft, airlines, and civil aviation authorities. The ATM and FIS services currently under development are part of an evolutionary process that will begin, for the most part, with duplication of voice services. In the future, services will facilitate a common source of data for pilots, controllers, and flight planners, as well as computer-to-computer communications between ground based and airborne automation systems. These future services will provide benefits such as the use of optimum aircraft tracks and flight profiles     

Broadband integrated digital information exchange networks foravionics applications

This paper presents the design concept for Broadband Integrated Digital Avionics Information Exchange Networks (B-IDAIENs) for future aircraft applications. The use of B-IDAIENs can improve communication efficiency, flexibility, and capacity compared with using present avionics data buses. To implement B-IDAIENs the supporting techniques, such as wavelength-division multiplexing/wavelength-division multiple access and optical Benes network, are considered. Related optical components are also discussed. It is expected that the proposed B-IDAIENs can efficiently provide real-time video and voice communications, high/low speed data transmissions, parallel communications, and other time-critical services such as urgent signals from warning receivers     

通信导航融合定位技术发展综述

详细分析了蓝牙、Wi-Fi、超宽带、移动通信网络等多种无线网络通信导航融合定位技术的发展现状，并阐述了其面临的挑战，提出了多网融合方法可以提升室内无缝高精度位置服务的可靠性。利用5G移动通信网络，与北斗/GNSS卫星导航系统结合，可以实现相互增强。最后，从天地一体定位导航与授时体系和仿生通信定位导航两方面介绍了通信导航融合定位技术的未来发展趋势。     

通信导航融合定位技术发展综述

详细分析了蓝牙、Wi-Fi、超宽带、移动通信网络等多种无线网络通信导航融合定位技术的发展现状,并阐述了其面临的挑战,提出了多网融合方法可以提升室内无缝高精度位置服务的可靠性。利用5G移动通信网络,与北斗/GNSS卫星导航系统结合,可以实现相互增强。最后,从天地一体定位导航与授时体系和仿生通信定位导航两方面介绍了通信导航融合定位技术的未来发展趋势。     

基于5G的通导融合位置认证系统性能分析

随着无人化智能移动装备在工业、交通等安全敏感领域的普及应用,民用导航定位系统中的定位安全问题日益突出。位置认证是对终端的物理位置声明进行认证的过程,是导航定位安全技术的重要组成部分。基于第五代(5G)移动通信网络的通导融合位置认证系统具有覆盖范围广、认证精度高、用户容量大、建设运维成本低等多重优势。本文首先介绍了多基站位置认证系统的检测判决原理,提出了漏检平均距离的定义作为位置认证系统精度的量化评价指标。在此基础上,通过数值仿真分析了信号带宽、基站同步误差、信噪比对位置认证系统精度的影响,并利用5G信道模型评估了典型场景下的位置认证系统的性能。结果表明,在具备3个以上的视距基站时,基于5G的通导融合位置认证系统可以实现米级的位置认证精度。     

开源数据库在卫星控制中心的应用研究

实现信息系统的自主、安全、可控已成为测控中心系统的研究方向和建设目标。研究应用自主可控数据库是实现测控中心系统全面自主可控的重要环节。目前,卫星控制中心的数据存储系统大多以Oracle数据库为主,软件和技术服务费用昂贵,更新维护成本高,且可能带有信息安全和任务安全方面的风险。针对上述这些问题,研究分析了开源数据库MySQL在卫星控制中心系统中应用的可行性,对MySQL数据库做了全面测试,包括功能、性能、系统级的高可用测试,以及MySQL与Oracle数据库的性能对比测试。研究和测试结果表明,MySQL开源数据库可以用于卫星控制中心系统以及类似的测控中心应用系统,对今后测控中心系统应用自主可控数据库具有参考价值和借鉴意义。     

基于5G的通导融合位置认证系统性能分析

随着无人化智能移动装备在工业、交通等安全敏感领域的普及应用，民用导航定位系统中的定位安全问题日益突出。位置认证是对终端的物理位置声明进行认证的过程，是导航定位安全技术的重要组成部分。基于第五代(5G)移动通信网络的通导融合位置认证系统具有覆盖范围广、认证精度高、用户容量大、建设运维成本低等多重优势。本文首先介绍了多基站位置认证系统的检测判决原理，提出了漏检平均距离的定义作为位置认证系统精度的量化评价指标。在此基础上，通过数值仿真分析了信号带宽、基站同步误差、信噪比对位置认证系统精度的影响，并利用5G信道模型评估了典型场景下的位置认证系统的性能。结果表明，在具备3个以上的视距基站时，基于5G的通导融合位置认证系统可以实现米级的位置认证精度。     

An attack-immune trusted architecture for supervisory aircraft hardware

With the wide application of electronic hardware in aircraft such as air-to-ground communication, satellite communication, positioning system and so on, aircraft hardware is facing great secure pressure. Focusing on the secure problem of aircraft hardware, this paper proposes a supervisory control architecture based on secure System-on-a-Chip (SoC) system. The proposed architecture is attack-immune and trustworthy, which can support trusted escrow application and Dynamic Integrity Measurement (DIM) without interference. This architecture is characterized by a Trusted Monitoring System (TMS) hardware isolated from the Main Processor System (MPS), a secure access channel from TMS to the running memory of the MPS, and the channel is unidirectional. Based on this architecture, the DIM program running on TMS is used to measure and call the Lightweight Measurement Agent (LMA) program running on MPS. By this method, the Operating System (OS) kernel, key software and data of the MPS can be dynamically measured without disturbance, which makes it difficult for adversaries to attack through software. Besides, this architecture has been fully verified on FPGA prototype system. Compared with the existing systems, our architecture achieves higher security and is more efficient on DIM, which can fully supervise the running of application and aircraft hardware OS.     

Proposed airborne optical fiber asynchronous CDMA systems usingfully optical orthogonal codes for real-time avionic data distributionsand computer interconnects

We report the design of optical fiber asynchronous code-division multiple-access (CDMA) systems using fully optical orthogonal codes (FOOCs), which can be employed to support future airborne real-time communication services. The use of incoherent optical CDMA (IO-CDMA) can result in lower complexity and more reliable implementation than that of the coherent version, so this makes IO-CDMA more adequate for operation in the severe aircraft environment. When FOOCs are used in the IO-CDMA systems, the peaks of all the cross-correlation functions and all the sidelobes of any auto-correlation function are then limited to “1” (i.e., the minimum correlation constraint for incoherent optical processing) in fully asynchronous transmissions. Moreover, proposed systems can effectively support multi-rate and variable-rate data communications with no violation of the minimum correlation constraint and no change of IO-CDMA encoders/decoders. This characteristic can be used to improve the system flexibility and availability. A basic experiment is also demonstrated to verify the characteristics of FOOCs     

针对TCP/IP漏洞的航天测控通信网安全防护

航天测控通信网自建成以来,整体运行较为稳定,但在网络安全方面也暴露出了一些问题,为研究和解决目前航天测控通信网中存在的网络安全问题, 在分析TCP/IP (Transmission ControlProtocol/Internet Protocol,传输控制协议/互联网协议)分层协议基本原理的基础上,研究了IP网数据链路层、网络层和传输层的协议漏洞及常见攻击方法,详细介绍了当前航天测控通信网的网络安全部署情况,根据网络现状分别对航天测控通信网上数据链路层、网络层和传输层存在的安全问题进行了纵向分析,针对分析出的各类安全问题,进一步给出了有效的防御措施和防护方法。最后,探讨提出了一套航天测控通信网配置维护管理系统的设计方案,通过建立设备配置信息库、检查信息记录库及网络故障库等,实现了对航天测控通信网安全稳定运行的有效管理。     

导航通信融合定义、方式与典型系统

随着人们对定位安全和定位准确性要求的提升,仅仅依赖卫星导航系统已经不能满足用户在各种复杂环境下的个性化定位需求,在此背景下,通信导航一体化技术应运而生。移动通信网络具有覆盖广、用户数量大和安全保密性好等优点,将通信系统作为卫星导航系统的有效补充,可以有效提升导航系统的性能。导航通信融合技术已经成为导航领域未来发展的重要技术热点,但目前缺乏清晰的导通融合架构和导通融合方式。从导通融合的技术层面进行划分,提出了波形融合、信息融合、硬件融合三种导通融合方式,分析了通信系统的辅助信息对导航系统精度和抗干扰能力的影响,以及两种典型的导通融合系统的优缺点,并对其未来的发展进行了展望,补充了导航通信融合技术的基础理论,对导通融合技术的发展具有重大意义。     

基于微核结构的可二次开发语音平台

随着电子商务、客户服务等信息服务的普遍化,为了满足各种商业以及服务系统的需求,语音服务作为电信领域备受关注的一个热点,其应用领域也越来越广泛。本语音平台是基于语音技术,整合了网络资源,使用VoiceXML描述和控制语音逻辑的一种交互式服务系统。其特点是信息获取快速准确,以及客户服务多样化越来越明显。可广泛应用于证券电话委托、电话银行、信息查询、语音信箱、自动传呼系统、多功能小型用户交换机等领域。