Problem
Research questions and friction points this paper is trying to address.
TRDP
cryptographic protection
multicast traffic
onboard subsystems
SecDT: A Profile-Based Security Layer for TRDP Communications
🤖 AI Summary
本文提出了一种基于现代加密算法的安全层SecDT，通过车载密钥管理系统为TRDP通信提供从简单认证到AEAD的灵活安全保护。
📝 Abstract
The Train Real-time Data Protocol (TRDP) is widely used on rolling stock but it provides limited native support for cryptographic protection. Furthermore, the multicast traffic profile used in TRDP Process Data to exchange critical information between onboard subsystems makes the introduction of cryptographic protection a challenge. This paper presents a lightweight security layer for secure TRDP communication that implements a number of security profiles built around modern cryptographic algorithms. This additional layer relies on an On-board Key Management System (OKMS) for both security profile negotiation, dynamic key distribution and key lifecycle management. The security profiles allow for cryptographic agility and flexibility, ranging from simple authentication to Authenticated Encryption with Associated Data (AEAD) algorithms. The security profile negotiation procedure guarantees all TRDP End Devices (ED) on a common Communication ID (ComID) share the same security profile and can therefore process each other's messages. A prototype implementation based on mbedTLS and Arm Platform Security Architecture (PSA) was developed and evaluated. Experimental results demonstrate manageable overhead, suitable for the real-time and time-sensitive communication found on rolling stock.
Innovation
Methods, ideas, or system contributions that make the work stand out.
Profile-Based Security Layer
On-board Key Management System (OKMS)
Authenticated Encryption with Associated Data (AEAD)
🔎 Similar Papers
No similar papers found.
💼 Related Jobs
