20
Security and the Security and the National ITS National ITS Architecture Architecture ITS America 2003 ITS America 2003 Session 19: The State of the Session 19: The State of the Practice: ITS and Homeland Practice: ITS and Homeland Security Security May 19, 2003 May 19, 2003 Minneapolis, MN Minneapolis, MN Architectur e Development Team

Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

Embed Size (px)

Citation preview

Page 1: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

Security and the National Security and the National ITS ArchitectureITS Architecture

ITS America 2003ITS America 2003

Session 19: The State of the Session 19: The State of the Practice: ITS and Homeland Practice: ITS and Homeland

SecuritySecurity

May 19, 2003May 19, 2003

Minneapolis, MNMinneapolis, MN

ArchitectureDevelopment

Team

Page 2: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 22

Security UpdateSecurity Update

Enhance Coverage of Security in the Enhance Coverage of Security in the National ITS ArchitectureNational ITS Architecture Nine areas of functionality identified and Nine areas of functionality identified and

presented to US DOTpresented to US DOT Cut across multiple user service areasCut across multiple user service areas Better reflect the opportunities for Better reflect the opportunities for

security applications in planning ITSsecurity applications in planning ITS Regional and Project Architecture Regional and Project Architecture

developmentdevelopment Standards developmentStandards development

Page 3: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 33

ITS Security AreasITS Security Areas

Using ITS to Enhance Surface Using ITS to Enhance Surface Transportation SecurityTransportation Security Transit SecurityTransit Security Rail SecurityRail Security Freight and Commercial Vehicle Security Freight and Commercial Vehicle Security HAZMAT Security HAZMAT Security Disaster Response and EvacuationDisaster Response and Evacuation Wide Area AlertWide Area Alert Critical Infrastructure Security Critical Infrastructure Security

Includes functions for Traveler SecurityIncludes functions for Traveler Security Securing ITSSecuring ITS

Page 4: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 44

Transit SecurityTransit Security

Use ITS to help secure passengers, Use ITS to help secure passengers, facilities, and assets of facilities, and assets of Bus transit systemsBus transit systems Rail transit systemsRail transit systems

Many aspects of transit security already Many aspects of transit security already exist in Version 4.0exist in Version 4.0 Video surveillance at stops/ stationsVideo surveillance at stops/ stations Response to emergenciesResponse to emergencies

On board transit vehicleOn board transit vehicle At transit stop/ stationAt transit stop/ station

Transit traveler informationTransit traveler information

Page 5: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 55

Transit SecurityTransit Security

Added Security functionalityAdded Security functionality Surveillance and Sensor MonitoringSurveillance and Sensor Monitoring

On-Board Transit VehiclesOn-Board Transit Vehicles StationsStations Facilities (e.g. yards, shops)Facilities (e.g. yards, shops) Infrastructure (Rail Track, Tunnel, Bridge, Guideway, Infrastructure (Rail Track, Tunnel, Bridge, Guideway,

etc.)etc.) Remote Vehicle DisableRemote Vehicle Disable Vehicle Operator AuthenticationVehicle Operator Authentication Use of Transit to Support Disaster Response and Use of Transit to Support Disaster Response and

EvacuationEvacuation

Page 6: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 66

Rail SecurityRail Security

Full scope of Rail Security includes using ITS Full scope of Rail Security includes using ITS to address Freight Rail Security for to address Freight Rail Security for TrainsTrains Rail CarRail Car Fixed Assets (e.g. track, wayside equipment, Fixed Assets (e.g. track, wayside equipment,

highway/rail crossings)highway/rail crossings) PersonnelPersonnel

However, Version 5 architecture will add onlyHowever, Version 5 architecture will add only Rail Interface for Emergency Services Rail Interface for Emergency Services

Update Incident Management User Service RequirementsUpdate Incident Management User Service Requirements

Page 7: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 77

Freight & CommercialFreight & CommercialVehicle SecurityVehicle Security

Use ITS to enhance security of Freight Use ITS to enhance security of Freight and Commercial Vehicle shipmentsand Commercial Vehicle shipments Tracking Commercial Vehicles and Tracking Commercial Vehicles and

Freight shipmentsFreight shipments Monitoring Freight Integrity Monitoring Freight Integrity Monitoring Commercial Vehicle Integrity Monitoring Commercial Vehicle Integrity Monitoring Assignment IntegrityMonitoring Assignment Integrity

CV Driver/Commercial Vehicle/Freight CV Driver/Commercial Vehicle/Freight EquipmentEquipment

Page 8: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 88

HAZMAT SecurityHAZMAT Security

Use ITS to Secure Commercial Vehicles Use ITS to Secure Commercial Vehicles carrying HAZMATcarrying HAZMAT Detect Diversions and Geofence ViolationsDetect Diversions and Geofence Violations

Safely Disable Vehicle / Public Safety Traffic StopSafely Disable Vehicle / Public Safety Traffic Stop Roadside Remote Sensing of HAZMAT CargoRoadside Remote Sensing of HAZMAT Cargo

Correlate with permitted activityCorrelate with permitted activity Pull-In/Public Safety Traffic StopPull-In/Public Safety Traffic Stop

Authenticate DriversAuthenticate Drivers Safely Disable Vehicle / Public Safety Traffic StopSafely Disable Vehicle / Public Safety Traffic Stop

Page 9: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 99

HAZMAT SecurityHAZMAT Security

Institutional Elements Institutional Elements Deployments will likely limit service to Security Deployments will likely limit service to Security

Sensitive HAZMAT (e.g. gasoline, not nail polish)Sensitive HAZMAT (e.g. gasoline, not nail polish) CV Tracking and Driver AuthenticationCV Tracking and Driver Authentication

Monitored by CV Dispatch functionMonitored by CV Dispatch function Private Fleet and Freight Management, NOT a Private Fleet and Freight Management, NOT a

Government AgencyGovernment Agency Police (Emergency Management) notified when FMS Police (Emergency Management) notified when FMS

detects/validates significant route deviation, geofence detects/validates significant route deviation, geofence boundary violation, or apparent hijackingboundary violation, or apparent hijacking

Remote disabling of vehicle by Fleet and Freight Remote disabling of vehicle by Fleet and Freight ManagementManagement

Page 10: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 1010

Disaster ResponseDisaster Responseand Evacuationand Evacuation

Use ITS to Enhance Response to All Use ITS to Enhance Response to All Disasters, Natural and Man-MadeDisasters, Natural and Man-Made

Work Within Existing Emergency Response Work Within Existing Emergency Response FrameworkFramework Existing Institutional Relationships, Roles, and Existing Institutional Relationships, Roles, and

ResponsibilitiesResponsibilities Define Scope to Focus on Transportation and Define Scope to Focus on Transportation and

Interface to Emergency Management/Public Interface to Emergency Management/Public SafetySafety

Existing Incident Management User Existing Incident Management User Service/Architecture Support Provide Service/Architecture Support Provide Starting PointStarting Point

Page 11: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 1111

Disaster ResponseDisaster Responseand Evacuationand Evacuation

Coordinate Response Coordinate Response PlansPlans

Monitor Alert LevelsMonitor Alert Levels Detect and Verify Detect and Verify

EmergencyEmergency Assess Infrastructure Assess Infrastructure

StatusStatus Manage Area Manage Area

TransportationTransportation Critical Service Critical Service

RestorationRestoration

Coordinate ResponseCoordinate Response Disaster Traveler Disaster Traveler

InformationInformation Evacuation Planning Evacuation Planning

SupportSupport Evacuation Traveler Evacuation Traveler

InformationInformation Evacuation Traffic Evacuation Traffic

ManagementManagement Evacuation Resource Evacuation Resource

Sharing Sharing

Page 12: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 1212

ITS Wide-AreaITS Wide-AreaAlertAlert

Use ITS to Notify Public in Emergency Use ITS to Notify Public in Emergency SituationsSituations Inspired by Recent Use of ITS For “AMBER Alerts” Inspired by Recent Use of ITS For “AMBER Alerts” Significant institutional issues will remainSignificant institutional issues will remain

Public Safety and Emergency Management Agencies Public Safety and Emergency Management Agencies ControlControl

Architecture Defines Potential ITS InterfacesArchitecture Defines Potential ITS Interfaces Plans, Policies, and Procedures for Use Established by Plans, Policies, and Procedures for Use Established by

Local JurisdictionsLocal Jurisdictions Modify Existing “Emergency Notification and Modify Existing “Emergency Notification and

Personal Security” User ServicePersonal Security” User Service

Page 13: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 1313

Critical InfrastructureCritical InfrastructureSecuritySecurity

Use ITS to secure critical transportation Use ITS to secure critical transportation infrastructureinfrastructure BridgesBridges TunnelsTunnels InterchangesInterchanges TMCs / OfficesTMCs / Offices Maintenance FacilitiesMaintenance Facilities

Critical infrastructure will be locally Critical infrastructure will be locally determineddetermined

Modify existing “Emergency Notification and Modify existing “Emergency Notification and Personal Security” user servicePersonal Security” user service

Page 14: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 1414

Securing ITSSecuring ITS

Define Security Services necessary for Define Security Services necessary for securing ITS itselfsecuring ITS itself Information SecurityInformation Security Operational SecurityOperational Security Personnel SecurityPersonnel Security Security Management Security Management

No change to the Architecture Functional No change to the Architecture Functional Definition (i.e., no new or modified Flows Definition (i.e., no new or modified Flows or Subsystems) or Subsystems)

Page 15: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 1515

Securing ITS Securing ITS

Map Securing ITS Services to Physical Map Securing ITS Services to Physical ArchitectureArchitecture Information Security => Architecture FlowsInformation Security => Architecture Flows Operational/Personnel Security => SubsystemsOperational/Personnel Security => Subsystems

No User Service or User Service No User Service or User Service Requirement ChangesRequirement Changes

““Considerations” not “Requirements”Considerations” not “Requirements” Securing ITS Services are Not MandatorySecuring ITS Services are Not Mandatory Provide resource to deployers of ITS to Provide resource to deployers of ITS to

understand need for providing security for their understand need for providing security for their ITSITS

Page 16: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 1616

Security SummarySecurity Summary

Physical Architecture high-level Physical Architecture high-level changeschanges New SubsystemNew Subsystem

Security MonitoringSecurity Monitoring New TerminatorsNew Terminators

Alerting and Advisory SystemsAlerting and Advisory Systems Freight Container-TrailerFreight Container-Trailer Shelter ProvidersShelter Providers Telecommunications System for Traveler Telecommunications System for Traveler

InformationInformation

Page 17: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 1717

Other Changes for Version Other Changes for Version 5.05.0

511511 Add new “Telecommunications System for Add new “Telecommunications System for

Traveler Information” terminator to interface Traveler Information” terminator to interface with the ISPwith the ISP

Hyperlinked Architecture Hyperlinked Architecture Theory of Operations and Market Package Theory of Operations and Market Package

documents text, tables, and diagramsdocuments text, tables, and diagrams Standards Mapping UpdatesStandards Mapping Updates Stakeholder feedback changesStakeholder feedback changes

Page 18: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 1818

Travelers

Vehicles

Centers

Field

CommercialVehicle

CommercialVehicle

TransitVehicleTransitVehicle

Maintenance andConstruction

Vehicle

Maintenance andConstruction

Vehicle

VehicleVehicle

EmergencyVehicle

EmergencyVehicle

CommercialVehicle

Administration

CommercialVehicle

Administration

Archived DataManagement

Archived DataManagement

RemoteTravelerSupport

RemoteTravelerSupport

PersonalInformation

Access

PersonalInformation

Access

TollAdministration

TollAdministration

EmergencyManagementEmergency

ManagementTraffic

ManagementTraffic

Management

Fleet andFreight

Management

Fleet andFreight

Management

TransitManagement

TransitManagement

EmissionsManagementEmissions

Management

InformationServiceProvider

InformationServiceProvider

Maintenance andConstructionManagement

Maintenance andConstructionManagement

Wide Area Wireless (Mobile) CommunicationsWide Area Wireless (Mobile) Communications

Veh

icle

to

Veh

icle

Co

mm

un

icat

ion

sV

ehic

le t

o V

ehic

le C

om

mu

nic

atio

ns RoadwayRoadway

Toll CollectionToll Collection

ParkingManagement

ParkingManagement

CommercialVehicleCheck

CommercialVehicleCheck

Version 5.0 Subsystem Version 5.0 Subsystem DiagramDiagram

Security MonitoringSecurity

Monitoring

Fixed-Point to Fixed-Point CommunicationsFixed-Point to Fixed-Point Communications

Ded

icat

ed S

ho

rt R

ang

e C

om

mu

nic

atio

ns

Ded

icat

ed S

ho

rt R

ang

e C

om

mu

nic

atio

ns

Page 19: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 1919

Turbo Architecture UpdateTurbo Architecture Update

Turbo ArchitectureTurbo Architecture New version will be released for use with New version will be released for use with

Version 5.0Version 5.0 Enables regional & project architectures Enables regional & project architectures

to incorporate new security, 511, and to incorporate new security, 511, and other featuresother features

Page 20: Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis,

5/19/035/19/03 2020

National ITS Architecture National ITS Architecture Version 5.0 Version 5.0

ScheduleSchedule Web site ready for feedbackWeb site ready for feedback Sep Sep

20032003 Look for Federal Register NoticeLook for Federal Register Notice

Launch Version 5.0 WebsiteLaunch Version 5.0 Website Oct Oct 20032003

CDs availableCDs available Nov 2003Nov 2003