To protect a network of collaborating space assets from cybersecurity threats, it is crucial to provide authenticity, integrity, and confidentiality, in line with mutually agreed security policies and regulations. This can only be ensured if the deployed key management schemes are based on shared credentials. The IETF and CCSDS recognize this as a hard problem due to delay, disruptions, and limited on-board resources. In terrestrial networks, this is solved by using Public Key Infrastructures (PKIs). However, PKIs typically rely on a chain-of-trust of authorities that is rooted in a single trusted entity. Considering the space sector includes national space agencies and a growing count of commercial players, establishing a single trusted entity for all parties seems impractical. Further, verifying a public key at the given point in time remotely, which is a key aspect in PKI, becomes non-trivial in space. Thus, enabling PKI for spacecraft networks remains an open problem. In this work, we present TruSat, an extension for traditional PKIs that enables their use in collaborative spacecraft networks. We focus on two key aspects. (1) We propose a decentralized certificate authority scheme, which allows mutually distrusting parties to establish a common certificate authority. We leverage a distributed consensus protocol to allow the involved parties to collaborate in a secure manner, while avoiding single-points-of-failure as well as tolerating malicious behavior among the parties (e.g., due to compromise). (2) We consider several certificate validation schemes based on recent advances in the field to enable lightweight and delay-tolerant certificate validation. We compare and discuss the properties of these schemes and also demonstrate this with a deployed prototype on ESA's OPS-SAT in-orbit laboratory.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    TruSat: Building Cyber Trust in Collaborative Spacecraft Networks


    Contributors:


    Publication date :

    2022-03-05


    Size :

    582006 byte




    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English



    Spacecraft Embedded Cyber Defense- Prototypes & Experimentation

    Cohen, Nicholas / Wheeler, Wayne A. / Ewart, Roberta et al. | AIAA | 2016


    Cyber Resilient Flight Software for Spacecraft

    Wheeler, Wayne A. / Cohen, Nicholas / Betser, Joseph et al. | AIAA | 2018


    Cyber Resilient Flight Software for Spacecraft

    Wheeler, Wayne A. / Cohen, Nicholas / Betser, Joseph et al. | AIAA | 2017


    Interpersonal trust to enhance cyber crisis management

    Bollon, Florent / Marchand, Anne-Lise / Maille, Nicolas et al. | TIBKAT | 2020


    Collaborative Planning, Commitment, and Trust: Dealing with Uncertainty in Networks

    van Ark, R. G. H. / Edelenbos, J. / Association of Collegiate Schools of Planning (U.S.) et al. | British Library Conference Proceedings | 2005