Download PDF - Department of Navy Chief Information Officer - U.S. ...

Navy Ship-to-Shore via Wireless ConnectionSPAWAR Systems Center Atlantic and Commander, Navy Installations Commandcollaborate with Joint Interoperability Test CommandBy Heather Meredith, Greg Blanche, Jackie Mastin and Chris WatsonFor many years, Navy ships pulling intoport had to drape fiber optic “umbilical”cables over the side from the ship deckbox to a pier riser for access to the shoreinfrastructure. Secure transport of shipboardvoice and data communicationsfrom Navy ships to the Network OperationsCenter occurs through these cables.But corrosion and mishandling of thecables and damage to pier risers havecaused communication outages and recurringmaintenance costs, and duringbad weather, ship communications couldbe delayed for hours if not days.But a solution to this problem is underway— the Wireless Pier Connection System.WPCS was developed by the Spaceand Naval Warfare Systems Center (SSC)Charleston (now realigned under SPAWARSystems Center Atlantic) and sponsoredby Commander, Navy Installations Command(CNIC).WPCS focuses on installation effectivenessand improvements in shore installationmanagement. This in turn reducesmanpower and support costs, as well asinstallation costs.Wireless TechnologyThe WPCS uses 802.11a and 802.11gtechnology to provide a reliable Wi-Fibridge between ships and shore networks.Wi-Fi provides a viable means ofextending communications betweenpoints where wired connections are restricteddue to costs, difficulty, or areaswhere wire deployment is just not feasible,for example, in locations near airfields,or across battlefields and expansesof water. Utilizing this wireless solution,WPCS allows Navy ships to initiate connectivityto the pier while still up to threemiles out at sea.The WPCS system includes three radioslocated on the ship: a dedicated bridgeradio, attached to an omnidirectional antennafor scanning, and two additionalradios for primary and secondary connectionsto shore. It uses auto-configurationmesh software that facilitates a reliableand continuous connection with theshore network.Shore-side equipment includes severalBelAir wireless nodes that provide connectivityinto the shore network architecture.Each WPCS system fits in a six-unithard case and requires one electrical outlet.The size and mobility are ideal for thelimited space onboard ships.The dockside unit is movable and easilymounted. Designed for all-weather conditions,BelAir wireless nodes are water anddust-proof and can withstand temperatureextremes from -40 to 122 F.Defense-in-DepthSecurity can be a problem with wirelesstechnology. Radio frequencies can beintercepted by anyone within range withthe right equipment. Because wirelessnodes can allow possible unauthorizedaccess to networks, network and data securitymust be incorporated into the wirelesssolution.The WPCS addresses this issue with acomprehensive defense-in-depth strategyutilizing wireless security solutionsthat include Air Fortress Gateway devicesand the AirDefense Wireless IntrusionPrevention System. Figure 1 illustrates theWPCS topology.Type I encryption, proprietary framestructures and a specific IP assignmentare used before applying 256-bit AdvancedEncryption Standards (AES) layer2 encryption. AES is the encryption standardfor the U.S. government and NationalSecurity Agency.Type 1 encryption refers to a deviceDuring the WPCSForum at Indian Head,Md., attendees discusstopics such as the use ofcommercial waveforms,military frequencies andbridging devices withinthe DoD. At the forum,subject matter expertsprovide a demonstrationof WPCS capabilitiesto Capt. Jon Kennedy,chief of the OSD WirelessDirectorate.or system certified by the NSA for use incryptographically securing classified U.S.government information. Type 1 certificationis a rigorous process that includestesting and formal analysis of cryptographicsecurity, functional security, tamperresistance, emissions security (EMSEC/TEMPEST) and security of the productmanufacturing and distribution process.Layer 2 encryption introduces virtually nolatency or overhead to the network.Network security considerations include:MAC filtering, fixed MAC addressscheme, Remote Authentication Dial InUser Service (RADIUS), BelAir proprietaryframe structure and WPA2 AES over-theairencryption using Wi-Fi Protected AccessPre-Shared Key (PSK) authentication.MAC, also known as Medium AccessControl, is a sublayer of the data linklayer specified in the seven-layer OpenSystem Interconnection model (layer 2).The MAC layer addressing mechanism iscalled physical address or MAC address.This is a unique serial number assigned toeach network adapter, making it possibleto deliver data packets to a destinationwithin a subnetwork.Network protection features includemonitoring and locating rouge nodes(rogue devices or data packets) and interferencesources within the WPCS airspace.The AirDefense Enterprise Wireless IntrusionDetection System provides intrusionscanning detection with continuousalarm notification.To comply with Defense Departmentpolicies, SSC Atlantic requested the assistanceof the Defense Information SystemsAgency's Joint Interoperability TestCommand to assess and certify WPCS.For more than two decades, SPAWAR haspartnered with JITC during the development,acceptance testing and subsequent58 CHIPS www.chips.navy.mil Dedicated to Sharing Information - Technology - Experience