Executive Vice President, General Manager of Solution Business Division NTT Communications Corp. Cyberspace Security for Aviation Security

Transcription

1 Aviation Security and IT Technologies Masayuki Nomura Executive Vice President, General Manager of Solution Business Division NTT Communications Corporation Jun 30th, 2004 Agenda Company Overview Cyberspace Security for Aviation Security Key IT Technologies IPv6 Multi-Application Smartcards RF-Tags Next Generation IT Infrastructure for Aviation Security

2 Company Overview About the NTT Group Total number of NTT Group companies: approximately 430 (as of March 31, 2004) Consolidated Revenue $105 billion Local Telco Mobile SI 100% 100% 100% 61.57% 54.18% Company Name NTT Communications Corporation Established (As a 100% subsidiary of NTT) July 1, 1999 Employees 7,550 Subsidiaries and Affiliated Companies 85 Capital US $2,003 million * Operating Revenue US $10,470 million * * = US $1 as of March 31, 2004 Business (as of March 31, 2004) Domestic, long distance and international (voice/data) IP Services Systems integration

3 NTT Communications Business Domains Domestic/international telephone services Domestic/international data circuits: leased lines, FR, ATM,. Global optical fiber/satellite networking Internet services NTT America and VERIO in US IP/data communications market System integration and outsourcing services Smartcard authentication, billing, RFID networking,.. Intranet/extranet outsourcing Internet security services IPv6 solutions NTT Com s Affiliates & Subsidiaries London Paris Madrid Brussels Amsterdam Düsseldorf Frankfurt Geneva Milan NTT America, Inc. U.S. Office Locations New York, NY Boston, MA Sterling, VA Detroit, MI Chicago, IL Dallas, TX San Jose, CA Los Angeles, CA NTT Europe Verio, Inc. U.S. Office Locations San Francisco, CA Concord, CA Englewood, CO Boca Raton, FL Chicago, IL Livonia, MI Princeton, NJ New York, NY Rochester, NY Portland, OR Austin, TX Dallas, TX Houston, TX Orem, UT NTT Communications (Thailand) Co., Ltd. NTT Korea Co., Ltd. Beijing Telecom NTT Engineering Co., Ltd. Shanghai NTT Telecommunications Engineering Co., Ltd. HKNet Company Limited NTT Com Asia Ltd. NTT Com Asia Network Systems (Guangzhou) Co., Ltd. NTT MSC Sdn. Bhd. Beijing Bangkok Kuala Lumpur StarHub Pte. Ltd. Shanghai Hong Kong Singapore Jakarta Seoul Tokyo Taipei P.T. NTT Indonesia NTT Australia Pty. Ltd. NTT Taiwan Ltd. Manila Philippine Long Distance Telephone Company (PLDT) NTT Singapore Pte. Ltd. Sydney NTT NTT Australia IP Pty LTD (NTT Aust IP) Portland; San Francisco Los Angeles NTT America, Inc. Orem Chicago Detroit San Jose Verio Inc. Dallas Austin, Houston : NTT America Office Locations : NTT America Network Operation Center and Data Center locations : Verio,Inc. Locations NTT Communications Subsidiaries Boston New York Sterling Boca Raton NTT do Brazil Telecomunicações Ltda. Rio de Janeiro Sao Paulo NTT Communications Affiliates Current as of January 2004 ~

4 NTT Com s Global Backbone Network Tokyo Osaka Seoul Beijing Shanghai Okinawa Guangzhou Taipei San Jose Los Angeles Chicago New York London Paris Madrid Amsterdam Brussels Milan Dusseldorf Frankfurt Hong Kong Hanoi Bangkok Manila Kuala Lumpur Singapore Jakarta : ATM Backbone Node Sao Paulo : FR Node and/or IPLC Node : ATM Backbone : Frame Relay Sydney Current as of December 2003 Cyberspace Security for Aviation Security

5 Overall Security for Aviation A Secure IT Infrastructure is a Key Requirement for Aviation Security Information sharing among private/public sector organizations is essential for aviation security The following components need to be organized and operated under one coherent security policy Airplanes Airports Border security control Employees Secure IT infrastructure Requirements for Information Systems and Networks Information Sharing for Aviation Security Critical information must be exchanged between related private/public organizations through the Internet Network Requirements No data corruption Anytime and anywhere Protection from attacks, wire tapping etc. Guarantee of privacy and confidentiality Minimum transmission delay Usable only by authorized persons/connections Key Features are Mutual authentication Secure data transmission QoS (Quality of Service) control Traceability

6 Leading Edge IT Technologies for Cyber-Security IPv6 Infinite IP addresses QoS control Smartcards RF Tag Passenger/employee identification Difficulty of duplication OS/applications/data on one chip May be tracked anywhere in the airport or even on the airplane On cargo, carry-on luggage, and even attached to a ticket How to Realize Cyber Security for Aviation Security The Internet Seamlessly connects relevant organizations Smartcard IPv6 QoS control Secure data transmission Personal identification Desktop management Traceability RF Tag Inventory management Supply chain management

7 IPv6 Benefits of IPv6 Provides infinite IP addresses and QoS control Security enhancement Proven VPN technology, IPsec, is included in protocol design Protection against wire-tapping and tampering with data, etc., Cyber-attack detection by monitoring of globally unique IP addresses Real-time Peer-To-Peer communications Uniquely assigned communicating party Peer-to-Peer connections without intermediate servers Virtual Hotline Assign certain bandwidth for specific traffic dynamically Priority control for important information Mobility High speed handover even on an airplane or in a car Easily detect and identify the communicating party e.g. cellular phone

8 New Communication Model Created by IPv6 Global IP address Mobile equipment NAT IPv4 NW for mobile IPv6 Secure end-to to-end communication Real time data distribution Private address LAN Airport Government Office IPv4: one-way communication - Server-Client model IPv6: two-way communication - Peer-to-Peer model Trend in the United States IPv6 Deployment in DoD DoD had decided to deploy IPv6 as their NW infrastructure FY DoD s Procurement Requirements IPv4: Mandatory IPv6: Optional IPv4/IPv6: Both Mandatory IPv6: Mandatory DoD Network Architecture IPv4 IPv6

9 NTT/VERIO Global IPv6 Services Korea NTT Korea NSPIXP6 JPNAP6 PAIX EQUI6IX UK6X LINX AMS-IX Taiwan NTT Taiwan U.S.A NTT/VERIO Malaysia NTT MSC Hong Kong NTT Com Asia Australia NTT Australia JAPAN NTT Communications Europe NTT Europe Smartcards

10 Benefits of Smartcards (elwise) Personal identification for both real and virtual space Difficult to counterfeit High affinity with PKI (Public Key Infrastructure) Secure user authentication Biometrics information can be stored and be compared on it High performance and sophisticated capabilities Large memory size (1Mbyte) Fast CPU Quickest response time (e.g. 40 ms for transportation ticket) Applicable to digital signatures, Electronic Money (EDY),. Multiple applications can be installed on a single card Can work with a Network-based smartcard environment Firewalls between installed applications Multi-application Smartcard (elwise) Public Public Services e-passport, VISA Personal ID ID Building access control Employee ID, Transportation Air ticket, bus pass Card Card Manager Manager Application Application A Firewall Application Application B Firewall Application Application C Firewall Firewall Application D Application D Payment credit, e-money Operating System Operating System Hardware Hardware High speed Large memory (1MB) High performance

11 Smartcards Peripheral Devices Reader/writer (Gate Control) Reader/writer (contactless) Reader/writer (personal) Build-in Reader/writer Card Issuing Machine Reader/writer (with fingerprint sensor) Viewer Example: Corporate ID card of NTT Communications NTT Com. introduced elwise-based new corporate ID card system in September, This card supports employees activities Building entrance Smartcard New ID elwise Combination card Employee ID COM TARO Physical Security Employee Convenience Cafeteria Pay Point Cashless Security management By IC card Charge Management PoS TerminalVending Machine Information Security Management [Authorization] [PC Lock] Enterprise servers Intranet NICE Card Issuing AP DL Management Terminal [Remote Access] Home & Remote [PC Lock] Prevent unauthorized usage PC card R/W Mobile Hotspot Secure Pass Secure Pass Internet [Remote Access] Intranet VPNGW [ セーフティパス (B2C)] ( Mall/shop Goods WWW , File server etc Contents

12 RF Tags Benefits of RF Tags Inventory Management Anti-theft, self-operated POS in shops Automatic check of inventory Defense Department drafted RFID policy It will require suppliers to use RFID. Border Security Applications Container/cargo tracking Airline passenger/carry-on luggage identification and tracking Real-Time Traceability Automatic monitoring of items through the supply chain Drug prescription management Ensuring safe food from production to consumption

13 Typical Architecture of Network-based RFID system Data Processing Function Information Security Communications Security Communication Function Network Based RFID System Data Collection and Processing Authentication IPSec IPv6/v4 Protocol Conversion Access Control Database The Internet Airport Seaport Land Border Example: Inventory Management using Active RF Tags Administration Administration Center Center Monitoring System Store equipment location information collected by active tag reader Send alert by if item is moved or tag is peeled off Legend Existing Lost (confirmed) Lost (unconfirmed) Peeled off Moving Intranet Location Peel off Moving Reader for monitor PC Active Tag Each active tag on laptop-pc can be displayed, showing its condition on a map of the floor in real time. It is applicable to object location management at restricted area in the airport.

14 Next Generation IT Infrastructure for Aviation security For Aviation security A system for sharing information between airlines, airport authorities, government agencies will form a critical infrastructure. Sophisticated IT capabilities will be achieved on the Next Generation Internet. Key features of Next Generation Internet will be a combination of: IPv6 Smartcards RF Tags

15 Next Generation IT Infrastructure for Aviation Security Administration Office Nothing can be done before authorization, so preventing attacks Cargo/Delivery Web Camera FW Dynamic FW control makes pin holes for authorized traffic DoS Tampering Impersonation Wiretapping Must be Identified Attack IPv6 IPv6 The The Internet FW Web Camera RF Tag Airport Baggage Claim Before processing, admin server requests the communicating party to identify itself Connection Administration/ Communication Log FW Thank You