The Consultative Committee for Space Data Systems (CCSDS) presents several standards and informational reports concerning the security of the space to ground data link, in particular through the specification of a Space Data Link Security (SDLS) Protocol, which enables authentication and encryption for missions utilising standard Space Data Link Protocols (SDLP). SDLS Extended Procedures (EP) specify services, procedures and data structures to manage, monitor and control associated security primitives. A flexible and representative test environment is required in order to assess the suitability of these protocols and also of standard terrestrial secure communication technologies in order to de-risk and promote their uptake for future missions. This paper presents work undertaken to design and implement a representative testbed laboratory for the testing of CCSDS secure protocols and the suitability of IP-based terrestrial network and security components for protection of the space datalink and improved communications flexibility. The developed Secure Communications Laboratory (SEC_LAB) is a virtual testbed which simulates a real space link based on ESA’s mission control (MICONYS) and test and validation (TEVALIS) software infrastructure. Several use cases, tests and scenarios have been explored and quantified test results provide insights and recommendations. The feasibility of utilising encapsulated terrestrial networking technologies including encapsulated IP/IPSec over CCSDS protocols, Virtual Private Networks (VPN), Software Defined Networking (SDN) and host fingerprinting is demonstrated. Several lightweight encryption and authentication algorithms are tested to measure overheads and performance impacts, identifying the symmetric block ciphers SPECK and Advanced Encryption Standard (AES) as suitable options. Optimization of on-board processors for particular algorithms is identified as a potentially important factor. Simulated disruption tests indicate that terrestrial protocols are susceptible to disruption, in particular those with handshake authentication operations. Throughput testing for implementations of Galois/Counter Mode (GCM) and Cipher-based Message Authentication (CMAC) indicate optimal sizes for Telecommand (TC) and Telemetry (TM) transfer frame throughput. SDLS EP procedures are validated and a number of risks and mitigation measures are discussed. The output of the activity supports de-risking and informed decision making for investments in adapting existing control systems and securing the data link, thereby addressing a key security threat for future space missions. Next steps and potential future work in the domain include maturation of the testbed and implementation and testing of secure protocols for the next generation of mission control software (European Ground Operations System–Common Core (EGS-CC)).
SEC_LAB: A Secure Communications Testbed for Space Missions
Springer Aerospace Techn.
16.03.2022
23 pages
Aufsatz/Kapitel (Buch)
Elektronische Ressource
Englisch
SEC_LAB: A Secure Communications Testbed for Space Missions
TIBKAT | 2022
|SEC_LAB: A Secure Communications Testbed for Space Missions
TIBKAT | 2022
|Plug and Play Testbed to Enable Responsive Space Missions
British Library Conference Proceedings | 2005
|