The Consultative Committee for Space Data Systems (CCSDS) presents several standards and informational reports concerning the security of the space to ground data link, in particular through the specification of a Space Data Link Security (SDLS) Protocol, which enables authentication and encryption for missions utilising standard Space Data Link Protocols (SDLP). SDLS Extended Procedures (EP) specify services, procedures and data structures to manage, monitor and control associated security primitives. A flexible and representative test environment is required in order to assess the suitability of these protocols and also of standard terrestrial secure communication technologies in order to de-risk and promote their uptake for future missions. This paper presents work undertaken to design and implement a representative testbed laboratory for the testing of CCSDS secure protocols and the suitability of IP-based terrestrial network and security components for protection of the space datalink and improved communications flexibility. The developed Secure Communications Laboratory (SEC_LAB) is a virtual testbed which simulates a real space link based on ESA’s mission control (MICONYS) and test and validation (TEVALIS) software infrastructure. Several use cases, tests and scenarios have been explored and quantified test results provide insights and recommendations. The feasibility of utilising encapsulated terrestrial networking technologies including encapsulated IP/IPSec over CCSDS protocols, Virtual Private Networks (VPN), Software Defined Networking (SDN) and host fingerprinting is demonstrated. Several lightweight encryption and authentication algorithms are tested to measure overheads and performance impacts, identifying the symmetric block ciphers SPECK and Advanced Encryption Standard (AES) as suitable options. Optimization of on-board processors for particular algorithms is identified as a potentially important factor. Simulated disruption tests indicate that terrestrial protocols are susceptible to disruption, in particular those with handshake authentication operations. Throughput testing for implementations of Galois/Counter Mode (GCM) and Cipher-based Message Authentication (CMAC) indicate optimal sizes for Telecommand (TC) and Telemetry (TM) transfer frame throughput. SDLS EP procedures are validated and a number of risks and mitigation measures are discussed. The output of the activity supports de-risking and informed decision making for investments in adapting existing control systems and securing the data link, thereby addressing a key security threat for future space missions. Next steps and potential future work in the domain include maturation of the testbed and implementation and testing of secure protocols for the next generation of mission control software (European Ground Operations System–Common Core (EGS-CC)).


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    SEC_LAB: A Secure Communications Testbed for Space Missions


    Weitere Titelangaben:

    Springer Aerospace Techn.


    Beteiligte:
    Cruzen, Craig (Herausgeber:in) / Schmidhuber, Michael (Herausgeber:in) / Lee, Young H. (Herausgeber:in) / Wallum, Marcus (Autor:in) / Fischer, Daniel (Autor:in) / Nowotnik, Jadwiga (Autor:in) / Pieczonka, Łukasz (Autor:in) / Tkaczyk, Mariusz (Autor:in)

    Erschienen in:

    Space Operations ; Kapitel : 20 ; 447-469


    Erscheinungsdatum :

    16.03.2022


    Format / Umfang :

    23 pages





    Medientyp :

    Aufsatz/Kapitel (Buch)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch




    SEC_LAB: A Secure Communications Testbed for Space Missions

    Wallum, Marcus / Fischer, Daniel / Pieczonka, Lukasz et al. | TIBKAT | 2022


    SEC_LAB: A Secure Communications Testbed for Space Missions

    Wallum, Marcus / Fischer, Daniel / Nowotnik, Jadwiga et al. | TIBKAT | 2022


    Efficient and Secure Autonomous Communications for Deep Space Missions

    Adalier, Mehmet / Riffel, Andy / Galvan, Mark et al. | IEEE | 2020


    Plug and Play Testbed to Enable Responsive Space Missions

    Summers, J. / IEEE | British Library Conference Proceedings | 2005