System Architecture Design

More documents

Recommendations

Info

pSHIELDSystem Architecture DesignPUThe time isolation problem refers to the time at which a fault is injected. An attacker may be able tosynchronize exactly with the clock of the chip or may introduce the error in a random fashion. Thisgranularity is the only parameter of the time isolation problem. Clearly, the ability to inject a fault in a clockperiod granularity is desirable, but impractical in real world applications.4.2.3.3.2 Passive side channelsPassive side channels are not a new concept in cryptography and security. The information available fromthe now partially declassified TEMPEST project reveals helpful insights in how electromagnetic emissionsoccur and can be used to reconstruct signals for surveillance purposes. The new concept in this area isthe fact that such emissions can be also used to derive secret information from an otherwise securedevice.Researchers have been quite creative and have used many types of emissions or other physicalinteractions of the device with the environment it operates. A basic idea is the monitoring of executiontime of a cryptographic algorithm and tries to identify the secret keys used. The key concept in thisapproach is that an implementation of an algorithm may contain branches and other conditional executionor the implementation may follow different execution paths. If these variances are based on the bit valuesof a secret key, then a statistical analysis can reveal the secret key bit by bit. Power consumption can bealso correlated with key bits.4.3 ApplicationsNowadays railway is considered as one of the most important critical infrastructures due to its importancenot only in mass transport systems but also its usability in material and goods transport. In pSHIELDrailway infrastructures and operations had been chosen as the potential areas where the results ofpSHIELD can contribute to ensure its secure, dependable and reliable operations. More specifically,pSHIELD focuses on hazardous material transport scenario by railways system. Within this specificscenario, the following applications are planned which focus at pSHIELD core features such as embeddedsystems, SPD considerations, sensor integration and composability.MonitoringIn hazardous material transport, due to the nature of goods, continuous monitoring is crucial for safe anddependable operations of such transport scenario. For example, the following situations may threat safetyof the goods:• Some materials must not be collocated with inflammable substances• The on-carriage temperature should not rise above a certain level• The speed of the passing train should not be more than a certain limit as excess speed maycause higher vibration• Only authorized personnel should get access to the carriageTo monitor these situations, the carriage is expected to be equipped with various types of sensors tocollect e.g. temperature, pressure, vibration information. Besides, the carriage contains recoding cameraand position sensors. All the information can be stored on-board and can be transmitted to the controlcentre of the railway systems on-demand. In order to facilitate remote communication, the carriage isequipped with multiple communication systems. Above all, as contingency, such carriage carries extrapower source in case of un-availability of power from the grid.Interoperable Railway Information SystemIn such hazardous material transport scenario, different stakeholders are involved. For safety of theirinfrastructures or goods, the stakeholders are willing to get access to the data being transmitted from thePUD2.3.2Issue 5 Page 58 of 122
pSHIELDSystem Architecture DesignPUcarriage. However, while sharing the monitored data among them privacy of some critical data needs tobe ensured. The following scenario will further exemplify the privacy concerns:DHL Norway receives a booking from a chemical plant to transport hazardous material from its industrialplant. DHL then rents a cargo from a railway operator and puts the cargo into its carriage. Here thefollowing stakeholder are involved: a) the railway administration (operating the whole railway network), b)train operators (runs trains and freights), c) first party consumer (e.g. DHL Norway), and d) second partyconsumer (e.g. chemical plant).Due to nature of the cargo each of these stakeholders may want to monitor cargo being transported. Nowthe question is to what extent the data will be delivered to the concerned parties preserving privacy of thefreight and its owner information. For example, it is not necessary to inform the railway administrationabout the owner of the goods whereas the administration must know the content of the freight beingtransported.This application goes beyond the on-carriage monitoring situation and extends towards preservation ofprivacy of various information, within the hazardous material transport scenario.4.4 Preliminary Concept of pSHIELD Demonstrator Architecture4.4.1 System architecture for monitoringThe pSHIELD scenario is addressing rail transportation of dangerous goods by a wagon. The pSHIELDdemonstrator will exhibit the typical monitoring application such as monitoring of on-carriage temperatureremotely. This section introduces the preliminary system architecture of such monitoring applicationsusing the following figure where the prototypical railway wagon is called Intelligent Wagon (IW).Figure 14 – Intelligent Wagon Infrastructure.PUD2.3.2Issue 5 Page 59 of 122
Page 1 and 2:
Project no: 100204pSHIELDpilot embe
Page 3 and 4:
Contents1 Executive Summary .......
Page 5 and 6:
FiguresFigure 1 - A generic embedde
Page 7 and 8: Figure 45 - pSHIELD Security Agent
Page 9 and 10: MGFMIPSMLNeLNFMRFPNMPNMPSNoLNVMOLOS
Page 11 and 12: Issue 5Page xi
Page 13 and 14: pSHIELDSystem Architecture DesignPU
Page 19 and 20: pSHIELDSystem Architecture Design3.
Page 31 and 32: pSHIELDSystem Architecture Design
Page 39 and 40: pSHIELDSystem Architecture Design
Page 47 and 48: pSHIELDSystem Architecture Designen
Page 57: pSHIELDSystem Architecture DesignPU
Page 109 and 110:
pSHIELDSystem Architecture DesignPU
Page 111 and 112:
Page 113 and 114:
Page 115 and 116:
Page 117 and 118:
Page 119 and 120:
Page 121 and 122:
show all

System Architecture Design

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?