Top Banner
First Responders Overview 5_2005.ppt Page 1 Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders Brief: Secure Mobile Networking
44

Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

Dec 23, 2015

Download

Documents

Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 1

Phillip E. PaulsenSpace Communications Office

NASA Glenn Research Center

Cleveland, Ohio

May 2005

First Responders Brief:

Secure Mobile Networking

Page 2: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 2

• The purpose of today’s demonstration is to expose the external community to the latest information technology that has been collaboratively developed between NASA Glenn Research Center and a variety of vendors– Space Act Agreements

• NASA: unique facilities and expertise

• Vendors: state-of-the-art equipment and technologies

• The U.S. Government does not endorse vendors or their products, but we are interested in maximizing the transfer of all technologies that are developed with our help

Secure Mobile NetworkingPurpose of Today’s Presentation

Page 3: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 3

• Since the mid-1990’s, GRC has developed a comprehensive network centric research program which has conducting the following research:

– Spacecraft network simulation (OPNET, Berkeley NS)– Internet Protocol characterization, development, test, & evaluation for space

• ACTS / TDRSS / commercial satellite consortium• Space and Missile Systems Center (SMC) time correlation testing

– Spacecraft network emulation• SSTL UK-DMC “flat sat”

– Mobile routing development, test, & evaluation• GRC mobile network test bed• USCGC Neah Bay• SSTL UK-DMC CLEO Satellite Experiment

– GRC “virtual” mission operations test bed• International Space Station (ISS) secure remote operations experiments• General Dynamics VMOC experiment

– Spacecraft hardware (NIC, LAN, Router) development• Blue Streams miniature space router• Cisco’s miniature 3251 router

– SSTL UK-DMC CLEO experiment– Rad hardness testing

• General Dynamics (Spectrum Astro) rad hard NIC/Hub/Router• ISS router evaluation• ISS 802.11b EMI evaluation• ISS Voice Over IP (VOIP) using modified Cisco Call Manager

– Secure aircraft network development, test, & evaluation• In conjunction with the FAA and Federal Air Marshals

Secure Mobile NetworkingGRC’s Network Centric Research

ACTS Experimental Ka Band Satellite

TDRSS Operational S/Ku/Ka Band Satellite

SSTL UK-DMC Operational Imaging Satellite

Page 4: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 4

Secure Mobile NetworkingThe Logical Progression of Communications

Police Call Box (1910) Fire Alarm Telegraph (1852)

Radio (1933) Networked (2005)

Page 5: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 5

• Through a series of workshops and technology forums, NASA and the Department of Defense (DOD) have identified the following trends for future integrated systems:

– Need for an unprecedented level of data integration across a wide variety of platforms (network centric operations)

• Seamless integration of terrestrial, shipboard, airborne, and space-based assets

– Need for secure, autonomous, shared, distributed data handling• “Bits are Bits”: voice and video are data too

• On-the-fly response to real-time events

• Desire to allow field access to sophisticated systems by “unsophisticated” users

– Strong desire to spend less on infrastructure• Push for common interfaces and open standards

• Push for use of low cost, commercial devices / shared infrastructure to collect and disseminate data

• Push to improve platform flexibility to accommodate future changes in the state-of-the-art

• Push to reduce the need for extensive system training

• Push to reduce the need for “people in the loop” to configure and maintain systems

Secure Mobile NetworkingBackground: Justification

Page 6: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 6

• To allow an integrated response to natural disasters, terrorist activities, or civil unrest, first responders require access to information:

– Integrated voice, video, and data communication between

• Numerous local police, fire, EMS, rescue, service departments, and haz-mat teams

• State police and highway patrols

• SWAT Teams

• Hospital triage areas

• Mobile command posts

• Local, regional, and command centers

– National databases (NCIC, LEIN, DHS, FBI, FEMA, NIMA, NIH, CDC, …)

– Weather information

– Media centers

• Key Questions: 1. How do you securely extend communications access to multiple, unrelated, mobile field

elements in real time?

2. How do you take advantage of local communications infrastructure?

3. How do you all this without requiring responders to have extensive IT system knowledge or expertise?

Secure Mobile NetworkingFirst Responder’s Information Access Problem Set

Page 7: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 7

Applications• Voice communications

– Communicating from responder locations to each other and command centers using Voice over IP (VoIP)

• Video– Live pictures of the incident scene (including infrared)– Live pictures to and from responder locations

• Data– Patient health status & telemetry enroute to trauma center– GPS position information from deployed units– Microsoft NetMeeting (short messages between participants)– Building layouts & chemical hazard classes / storage information– Information from national databases– Sensor data (seismic, magnetic, chemical, biological, etc…)

Secure Mobile NetworkingWhat Can be Accommodated?

Page 8: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 8

Links• To ensure communications survivability during major events, a diverse

combination of links is highly recommended:

– Wireless 802.11 technologies• High data rates (11 Mbps or 54 Mbps)• Low availability (hot spots are gradually being introduced)

– Intel has approached Cleveland about wiring the entire city• 4.9 GHz public safety only band is being rolled out in New York

– Cellular systems: 1xRTT, EVDO, GPRS, GSM, EDGE, UMTS…• Low to moderate data rates (9.6 to 153 kbps for legacy systems, 256 kbps to 2.5 Mbps for

3G systems) • High availability (3G systems expected in Cleveland by the end of the calendar year)• Emergency response team preemption possible with some carriers (CDMA systems only)• Mobile (can be used enroute)

– Satellite link• Low to moderate data rates on the move (9.6 to 430 kbps), high data rates at rest (2 Mbps+)• Always available• High cost ($1 per minute or more)• Mobile / transportable (fairly large antenna typically required for system at rest)

Secure Mobile NetworkingSurvivable Communications Data Paths

Page 9: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 9

• All proposed network centric solutions should be evaluated relative to:

– Interoperability• Is the new network fully interoperable with existing open standards (IETF)?

– Scalability• Will the technology that works on a single vehicle also work on many?

– Survivability• Can I still maintain network connectivity, even if a primary data path fails?

– Mobility• Can I maintain network contact with something in motion without the need for

manual reconfiguration?

– Transparency• Can I field a mobile network that is truly “set and forget”?

– Security• Can I securely cross multiple domains (i.e. open, closed, government, etc…)?

– Use of Shared Infrastructure• Can I take advantage of low cost (open) network infrastructure?

Secure Mobile NetworkingKey Issues

Page 10: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 10

• Since the 1930’s the radio has been used to coordinate activities among first responders

– Although a “radio is a radio”, not every radio system is fully interoperable with every other radio system

• Frequency issues• Proprietary system issues• Encryption issues

– Raytheon’s ACU 1000 (already being purchased by the first responder community) allows multiple radio systems to communicate with one another, mobile phones, cell phones, SATCOM, and the Internet using VoIP

Secure Mobile NetworkingInteroperability

ACU 1000

Cleveland

Parma

Mentor

AvonParma Fire

Mentor Police

The Internet

The Internet

Analog Phone

Local

Page 11: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 11

• The ACU1000 can provide up to 6 connections (separate systems or frequencies) on each of 3 separate nets

• Primary• Tactical 1• Tactical 2

• ACU1000 caveats:– RF is line-of-sight

• Each individual system (base station and antenna) will need to be co-located and connected locally to the ACU1000 during the actual event

• These devices can be pre-positioned in response vehicles• Pneumatically elevated antennas can improve radio range

– “Push to talk” systems can accommodate large numbers of people, but only one person can speak at a time

• Unfortunately, for a major emergency, upwards of 100 first responders are expected to need connectivity

– Police coordination (cordoning off areas, providing physical security, etc…)– Fire coordination– Resupply– EMS / triage / medical center coordination– Federal agencies

Radio discipline can only go so far…

Secure Mobile NetworkingScalability

Page 12: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 12

• A WAVE server is a VoIP-based Wide Area Voice Environment software solution that creates massively scalable group communications among all types of communication devices

– Already in use in theater providing SOF ground communications support

– As a “virtual” device it can be located anywhere that has Internet connectivity

– For “survivability”, multiple units can be mirrored and deployed in geographically distributed areas

– Can easily be integrated with encryption systems for secure communications & communications isolation

Secure Mobile NetworkingManaging VOIP Service in Real Time

If it’s voice, it can easily be routed and managed by

using a Wave server

Page 13: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 13

• A WAVE server treats a cell phone like a virtual radio (# sign = “push to talk”)– Unlike existing cell phone services, multiple cell phone users can individually call the WAVE server to

get connected together (not limited to just one or two users)

• A WAVE server also accommodates inputs from a wide variety of systems– Allowing connectivity between existing radio systems, wired phones, and cell phones– Radio systems can be accommodated via the ACU1000 or through generic network devices (routers)

offering “Land Mobile Radio” (LMR) service• Note: RF is still line of sight. Each individual system (base station and antenna) will still need to

be co-located and connected locally to either an ACU1000 or a LMR enabled router during the actual event

• A WAVE server allows system managers to create “Communities of Interest” (COI) to segregate users by common mission or theme. For example:

– COI #1 would be the firemen providing direct fire suppression – COI #2 would be the policemen providing crowd control and redirecting traffic– COI #3 would be the EMS providers– COI #4 would be the local hospital triage centers– COI #5 would FEMA– COI #6 would be the DHS

Secure Mobile NetworkingWAVE Server

COI

1 COI

2

COI

3

COI

6

COI

5 COI

4

Wversus

Fire

Police

EMSTriage

FEMA

DHS

ACU1000 Approach WAVE Approach

Page 14: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 14

• Cisco’s Land Mobile Radio (LMR) allows any radio to be connected to the Internet using VOIP technology

• The WAVE server allows the two disparate radio systems to be connected together “virtually”

WAVE Server

Secure Mobile NetworkingTying Together Disparate Radio Systems Virtually

The Internet

Land Mobile Radio Connection

Generic Radio Base Station A

M-lead (Cor)

E-lead (PTT)

Generic Radio Base Station B

M-lead (Cor)

E-lead (PTT)

UHF Radio

VHF Radio

Page 15: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 15

The WAVE server can be used to tie together disparate radio systems for emergency communications

Generic (unmodified) Cessna 152

Network Centric FAA Control Tower

Generic F15E Interceptor

Network Centric DoD Control Tower

WAVE Server

Secure Mobile NetworkingEmergency Communications Over Disparate Radios

The Internet

Land Mobile Radio Connection to tower radio base station

Civilian UHF Voice CommunicationsDoD VHF Voice Communications

Cessna 152! You are violating national airspace! Respond

immediately and follow me to the nearest airport!

Page 16: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 16

Police Units

The Internet The Internet

Secure Mobile NetworkingIntegrated Solution

ACU 1000

Cleveland

ParmaParma Fire

Router with LMR WAVE

Server

Analog Phone

Cleveland EMS

Fire EMS

TriagePolice

FEMA

DHS

WaveLAN COIs

Cell Phone Systems

IP Phone

Dispatch Center controls bridging of agencies

Euclid

Solon

Shaker

Bedford

Reuse existing gear

Page 17: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 17

Secure Mobile NetworkingNetwork Mobility: Neah Bay Video

Page 18: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 18

Secure Mobile NetworkingIETF’s Mobile Router Technology

Remote Users (DHS)

Home Agent

Foreign Agent

Foreign Agent

Foreign Agent

Wireless Mobile Agent

Wireless Mobile Unit in Motion

Mobile Unit

Tactical Command

Center

Strategic Command

Center

Cell Service

802.11 Service

Page 19: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 19

• Cisco’s 3251 Mobile Access Router :– Two or three 4” x 4” PC-104 compliant cards

• 1 router card, up to 2 I/O cards

– 5 VDC, 10W

– 1 powered aux (GPS type RX)

– Commercially available– Dual 100BaseT Fast Ethernet ports on main router card (one exclusively

for the PCI backplane)

– PCI backplane connects to a maximum of 2 four port 10/100 Ethernet switch or four port serial cards in any combination

– Maximum of 100 Mbps integrated, duplex throughput

– Generic IPSEC encryption

Secure Mobile NetworkingMiniaturized Network Hardware

Page 20: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 20

• Continuous connectivity without a need for manual reconfiguration (set and forget)– Eliminates the need for extensive systems training

– Allows pre-positioning of equipment and rapid deployment

• Cost savings– Commercial, off-the-shelf equipment built to open, commercial standards

• Allows use of common, shared infrastructure

– Can be maintained using remote (central) IT support

• Enables link diversity and survivability– 802.11, cellular, and satellite networks

Secure Mobile NetworkingMobile Router Advantages

Page 21: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 21

Commercial SATCOM

Commercial Cell Phone

1xRTTEV-DO

Router

Mission Critical

Services(Secure Voice,

Video, & Data)

802.11 a/b/g

Wired WAN

L1 W1 W2 W3 W4

Secure Mobile NetworkingLink Diversity / Communications Survivability

Encryption Device

Commercial SATCOM

Commercial Cell Phone

1xRTTEV-DO

802.11a/b/g

Router

Mission Critical

Services(Secure Voice,

Video, & Data)

L1

Encryption Device

W2W3W4 W1

Wired WAN

Responder Headquarters

Page 22: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 22

• Does a first responder need encryption?

– Yes, with a few caveats:

• Pros: Prevents eavesdropping and allows users to communicate with secure systems fielded by DHS and others

– Hard requirement for anyone wishing access to secure databases or DoD organizations

– Health Insurance Portability and Accountability Act (HIPPA) requirements (patient information)

– Likely to be required by DHS / NSA in the future (federal / state / local)

• Cons: – Adds complexity (help with initial configuration and system maintenance will

likely be required)– Units responding to large incidents from remote locations (or other states) may

not have compatible equipment

Secure Mobile NetworkingSecurity: Encryption Issues

Page 23: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 23

• Generic 802.11 is vulnerable to hacking– Wireless Encryption Protocol (WEP) is not effective– Flawed encryption scheme

• 40 bit keys• Fixed (default) keys more likely to be compromised

– Weak authentication• Eavesdroppers can derive the encryption code from a mutual authentication

interaction– Eavesdropping, replay attacks, man-in-the-middle attacks, distributed denial of service

attacks (DDOS)– Unauthorized network access– Identity theft (SSID, MAC)

• New 802.11i encryption standard (release date: TBD) should help with future systems

• Neither cell phone nor satellite systems provide encryption as a part of their services

Secure Mobile NetworkingSecurity: Encryption Issues

Page 24: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 24

• Future systems will likely employ 1 of 3 fully interoperable schemes:– IPSec (generic IP security)

– NSA’s Suite B (AES: used by coalition forces)

– NSA’s Suite A (Type 1: used by the DoD)

• What if some of the radio systems from units that are joining an operation are without encryption?

– Radio-to-radio No interoperability

– Radio-to-ACU1000 Full interoperability (possible system compromise)

– Radio-to-LMR/WAVE Full interoperability (possible system compromise)

Secure Mobile NetworkingSecurity: Encryption Interoperability

Encrypted Unencrypted

Page 25: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 25

Secure Mobile NetworkingThe “Black Core”: Neah Bay Communications Path

Home Agent (Cleveland) ENB

Globalstar Ground Station

(Smith Falls, Ontario, Canada)

Globalstar Satellite

USCG Closed Intranet

(.mil)

Data Routed over a Commercial Satellite

Data Touches Down in a Foreign Country

Data Routed Over the Open Internet

Mobile Router (Neah Bay)

ENB

The Internet

The Internet

Page 26: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 26

servers

Criticalapplication

Voice

Video

Data

C

D

Vi

CDMA 1xRTTnetworks

802.11 WiFinetworks

C0

V V1ViD

Intelligent MobileAccess Router and

Cisco IOSVo

C1

C2

Secure Mobile NetworkingResearch: Policy-Based (Quasi-Deterministic) Routing

Critical Link

• Cisco has developed policy-based router code for IPv4– Allows routers to preferentially route individual packets to specific, prioritized

communications paths• For example: safety critical data can be segregated from other data and restricted

to a high reliability communications path or given priority on redundant, survivable paths

– The WAN side of the router will be able to support simultaneous communications over multiple, independent, prioritized paths

© 2003 Cisco Systems, Inc. All rights reserved.

Page 27: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 27

Secure Mobile NetworkingResearch: Policy-Based (Quasi-Deterministic) Routing

• Routing policy can be applied at both the home agent and the mobile router

• Traffic classification can based on multiple parameters:

– Applications type

– Protocol

– Port number

– DSCP value, etc.

• Path/link selection can based on multiple parameters:

– Link bandwidth

– End-to-end conditions such as throughput, latency, reliability, etc.

High speed link

int2

FA1

FA2int3

C

D

C

Vi

Vo

D

Vo

Routing Policy

Vi

Routing Policy

Vi

C

D

Vo

HAint1Low latency link

Reliable link

FA3

C

© 2003 Cisco Systems, Inc. All rights reserved.

Page 28: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 28

• Existing vehicles utilize non-network centric data standards for onboard system monitoring and control

– Example: MIL-STD-1553b (routinely used on large transports, aerial refuelers, bombers, tactical fighters, and helicopters)

• Cisco / LogiSync have developed a prototype device to extract vehicle bus data and convert it into IP packets for transmission and display on a web page

– Enables remote display of aircraft systems and logistics status in real time– “Red Line” monitor can annunciate out-of-family conditions

Secure Mobile NetworkingIntegration of Legacy Aircraft Data Systems

Mission Control Center

The Internet

The Internet

Generic Web

Browser

Vehicle Logistics

Data

Existing Aircraft Data

Bus

LogiSync IP Conversion

Device

Fuel State Weapons State

Aircraft Parameters

Can Accommodate: MIL-STD-1553b

J1939RS422RS485RS232

Mod Bus

Page 29: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 29

• It depends on your applications…– Example: UAV virtual black box with continuous 20 Hz, 16 bit data (1553-to-IP): ~6 kbps

• Aircraft position information• Aircraft fuel state• Aircraft weapons state• Aircraft altitude• Aircraft attitude• Aircraft heading• Aircraft velocity vector• Aircraft roll, pitch, and yaw rate• Aircraft angle of attack• Aircraft angle of side slip• Atmospheric static pressure• Atmospheric dynamic pressure• Atmospheric static temperature• Aircraft control surface positions• Aircraft control commands• Aircraft throttle commands• Aircraft engine parameters• Aircraft control system parameters• Aircraft temperature indications

– As needed• Voice communications (VOIP): ~11 kbps per channel• Web surfing, picture phone: 10 Kbps to 100 Kbps• Single, color photo (1 Mp camera): 600 Kb to 24 Mb• Low Definition TV: 100 Kbps to 1 Mbps• High Definition TV: 1 Mbps to 10 Mbps

Secure Mobile NetworkingHow Much Bandwidth is Really Needed?

100 Kbps per platform for now, with a path to 1 Mbps (or better) in the future?

Page 30: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 30

Secure Mobile NetworkingMiniaturized Encryption Hardware

• Western DataCom’s IPE-10M encryption device− Two 4” x 4” PC-104 compliant cards

• 1 encryption card

• 1 I/O card

− 5 VDC, 10W

− Commercially available

− 10 Mbps throughput

− FIPS 140-2 (path to HAIPE)

• AES, 256 bit key

− HAIPE packet formats

− Pre-placed encryption keys and X.509v3-based certificates

− Can accommodate “protected data in rest”

− Can accommodate unpowered zeroization

Page 31: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 31

• Fits PC104 Plus boards

• Tempest Approved

• Quadrant Protection

• Unpowered Zeroization

• Data Protection at Rest

• Western DataCom encryptor currently FIPS-140-2 (HAIPE upon NSA certification)

• MIL-STD-180F – Shock

– Vibration

– Water Resistance

• Currently being integrated into the Predator (by General Atomics) and the Marine’s Expeditionary Fighting Vehicle (EFV)

Secure Mobile NetworkingType 1 Mobile Router Housing

Cisco’s “Grizzly”

Page 32: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 32

Exploded ViewEnd Cap-Back

Mobile Router Stack

Wiring Board

I/O InterfaceBoard

End Cap- Front

Chassis (Extrusion)

O-Ring Seal (Waterproof)

Secure Mobile NetworkingRugged Field Packaging: Cisco’s “Grizzly”

Heat Sink Clamshell (Thermal Management)

Page 33: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 33

Cabling Example Grizzly

Local Serial Connection

Local FE Connection

Modem

Camera

Connector Fan-Out Box

Ganged Connector Cable

Secure Mobile NetworkingSystems Integration

Page 34: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 34

• Wireless network hardware:

Bridges 802.11b/g 11/54Mbps− Router-to-Router wireless communication

Access Points 802.11b/g 11/54Mbps− Client-to-Router wireless communication

− Wireless IP phones

− Wireless instruments

− Wireless PDAs

Client Cards 802.11b/g 11/54Mbps− Laptop / PDA to Access Point communication

Secure Mobile NetworkingCreating a Wireless Network “Bubble”

Page 35: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 35

Secure Mobile Networking Integrated Transit Case Hardware

• Western Datacom’s Mobile IP Transit Case (MIPTAC) − Portable, rugged, self contained wireless network containing:

• Cisco’s Mobile Router (MAR3251)

• Western DataCom’s IPE-10M encryptor

• On board Wireless LAN & WAN (802.11a / b / g)

− Cisco Bridge (router to router)

− Cisco Access Point (client to router)

• Laptops & PDAs

• VOIP phones

• Wireless sensors

• Wireless video

• Auto configuration access with RJ-45 Con & Aux. Jacks

• On board GPS

• Operates from 100-240 VAC or 9-32 VDC

• Rugged, vehicle mount omni antenna

• Bi-directional amplifier (1-10 watts)

• Pre-configured (set and forget)

Page 36: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 36

Secure Mobile NetworkingOSHP Network Overview

Target of Interest

GPS

N

S

EW

PDA IP Phone

Mobile Command Center

Segovia Satellite

DishHome Agent & Encryptor

CDMA

Foreign Agent

Wireless Bridge

E

IP Phone

Primary Command Center

OpenInternet

DSL

Segovia Ground Station

Segovia Satellite

Commercial Cell Tower

National Databases

Wireless Bridge

E

IP Phone

First Responders

EMobile Router & Encryptor

LaptopPDA

Wireless Access Point

GPS

N

S

EW

CDMA

Wireless Bridge

IP Phone

Page 37: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 37

• Permanently installed cruiser / fire truck / ambulance system– Grizzly

• Cisco Mobile Router (MAR 3251)

• Western DataCom’s IPE-10M Encryptor

• Power supply

• Cell phone modem

• GPS

– Roof mounted antenna

– External camera(s) / microphone(s) / computer

Secure Mobile NetworkingPossible Design Solutions: Permanent Mobile Systems

Grizzly

Antenna

Page 38: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 38

• Incident site: mobile IP transit case (for emergency use in communities without permanently wired vehicles)– Cisco’s Mobile Router (MAR3251)– Western DataCom’s IPE-10M encryptor– Cell phone modem– On board Wireless LAN & WAN (802.11a / b / g)

• Cisco 350 bridge (router to router)• Cisco 350 access point

– GPS• 4 disaster kits per major metropolitan area, preconfigured and ready for rapid deployment

Secure Mobile NetworkingTransportable Wireless Communications

MIPTC

Wireless Network Coverage Area: i.e. the “Bubble”

PDA IP Phone

Page 39: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 39

• Provides communications when local infrastructure has been damaged or destroyed• Incident site: additional high performance network connectivity (one required per major

metropolitan area)– Satellite backhaul connection

• SATCOM modem / antenna– On board Wireless LAN & WAN (local area 802.11a / b / g)

• Cisco 350 bridge (router to router)• Cisco 350 access point

– Space & power for individual responder base stations & LMR enabled routers• Individual, pneumatically deployed antenna(s)

– Pneumatically deployed camera platform– GPS– Emergency power (external generator / UPS)

Secure Mobile NetworkingTransportable Satellite Backhaul Connection

Segovia IDirect

Pneumatic Antenna Mast

Page 40: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 40

• WAVE server– Mirrored, redundant, geographically disbursed units are recommended for survivability

– Units should be pre-configured for immediate use in times of emergency

• Dispatch Center will provide a shared capability

Secure Mobile NetworkingInter-Community Interoperability & Communities of Interest

WAVE Server #1

The Internet The Internet

WAVE Server #2

IP Phone

IP Phone

Dispatch Center

Page 41: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 41

Overhead Asset

Secure Mobile NetworkingPutting it All Together

Emergency Communications Trailer (ECT)

Satellite backhaul connection

Individual responder base stations

LMR enabled routers

Portable generator / UPS

Pneumatic antenna(s)

Pneumatic camera platform

Bridge / AP (MIPTC)

WAVE Server

(Primary)

MIPTC

MIPTC

MIPTC

Cell Systems

New York

ToledoAkron

WAVE Server

(Backup)

The Internet

Page 42: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 42

MIPTAC#1

MIPTAC#2

MIPTAC#3

AutoAlign

SatelliteDish

Router / Bridge / AP /EM ChannelBank / Radio

Base Station / Cell PhoneEnclosure

X’ PneumaticallyDeployed Antenna (must

accommodate everyone’s base station antennas, 802.11, 802.16,

& cell systems like EV-DO)Could accommodate Pan & Tilt HDTV, IR, or Thermal Camera

Generator

FuelTank

ABT

Locked Hold Down Strap

Accommodates How Many Radio Base Stations? Fans? HEPA Filters?

External Power Line Storage Compartment

(120/220 VAC)

Cable & Manual Storage Compartment (spare cables for all popular radios) plus 2 Gooseneck Lights

WAVE Server Mirror (for complete loss of external

Internet access)

Tongue Weight? Weight Distribution?

1/2 Hour UPS

Quick Release External Power Disconnect (powered

in storage 24/7)

Fold Down Table for Manuals & Toughbooks

AC

Air Compressor & Receiver

Power Seeking Automatic Bus Transfer Switch

Spare Tire

TOC Tent

Lockable, Alarmed Access Door

Wired Network Access (allows updates in storage)

Leveler

Danger! RF Hazard! Signs

Safety Cones

Erectable High Intensity Lamps

20 Amp GFI with 4 Outlets

Fuel Transfer Pump

Welded Cleats

MIPTAC UPS (powered in storage 24/7)

VOIP Phone Charger (20 phones)

Secure Mobile NetworkingEmergency Communications Trailer (ECT) Concept

Page 43: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 43

• Sets policy

• Establishes & maintains system accounts

• Houses equipment

• Remotely configures, maintains, & tests fielded equipment

Secure Mobile NetworkingWho Manages the Final System?

Page 44: Page 1 First Responders Overview 5_2005.ppt Phillip E. Paulsen Space Communications Office NASA Glenn Research Center Cleveland, Ohio May 2005 First Responders.

First Responders Overview 5_2005.ppt Page 44

NASA GRC: Phil Paulsen 216-433-6507 [email protected] GRC: Will Ivancic 216-433-3494 [email protected]: Jeff Sweitzer 440-835-1510 [email protected]

Publicationshttp://ctd.lerc.nasa.gov/5610/relpubs.html

http://roland.grc.nasa.gov/~ivancic/papers_presentations/papers.htmlhttp://siw.gsfc.nasa.gov/agenda.html

Secure Mobile NetworkingContact Information