Towards a Baltic Sea Region Strategy in Critical ... - Helsinki.fi

CHAPTER III: INFORMATION AND COMMUNICATION TECHNOLOGY
Table III—12 TETRA network security measures addressed in Modules 7-9 of the ITU-T X.805
security architecture.
Module
Module 7:
Application layer,
management plane
Module 8:
Application layer,
control plane
Module 9:
Application layer,
end-user plane
Security Measures
• Rights to administer and manage applications restricted to
authorized personnel, application providers and terminals.
• Protect files used in the execution and creation of applications
(e.g., executable files).
• Protect identity of users, user groups and terminals (e.g., TEI,
ITSI, GTSI etc.) utilizing an application.
• Maintain a database of applications accessed and utilized by
users, user groups and terminals.
• Encryption of application control information transported within
the network.
• Ensure application control information originates from
authorized source.
• Protect identity of users, user groups and terminals (e.g., TEI,
ITSI, GTSI etc.) utilizing an application.
• Encryption of user traffic (e.g., patient’s ECG trace) being
transported over the air interface and/or end-to-end.
• Protection of application files/data using conventional methods
(e.g., email and attachments using PGP, S/MIME etc.).
• Restrict access and use of applications (e.g. using passwords) to
authorized users, user groups and terminals.
Example TETRA traffic analysis
One of the key measures in ensuring service availability for critical missions in
TETRA networks is to consider some of the likely scenarios right from the
planning stage. As an example, we present some simplified traffic analysis that
could enable networks planners to make key decisions on how to manage limited
resources (channels) under various operating conditions.
The call setup time (or delay) is one of the important TETRA performance
parameters, particularly in moments during or immediately after a crisis, where the
requirement for split-second decisions and responses is high (Rantanen 2003). In
cases of extreme load because of many simultaneous callers the call setup time
tends to increase because of the higher contention for resources. At that point
dispatchers will start prioritizing calls by queuing, blocking or dropping low
priority calls and giving preference to high priority calls.
Consider a service area that has the following TETRA user groups:
• Police: twenty traffic police officers working in pairs and five groups of
security police each with of five members.
• Fire Brigade: four units each consisting of five fire fighters.
• Ambulance: six ambulance units of each with a crew of three (1 driver
and 2 paramedics).
NORDREGIO REPORT 2007:5 121