飞机ADS.doc

飛機ADS-B數據鏈路之安全評估與設計 Assessing and Designing Security of Aircraft ADS-B Data Link 陳作舟 Tso-Cho Chen 中華科技大學 航空電子系 副教授 Department of Avionics China University of Science and Technology 摘 要 為因應未來民航運輸成長之需求，突破傳統地面助導航設施的限制，有效提昇飛航安全及效率，新一代的航空監視系統將採用廣播式自動回報監視（ADS-B）系統，提供空對空、空對地、地對地的數據鏈路；然而ADS-B之數據鏈路主要使用無線廣播方式，且無安全措施之設計，因此潛在的安全性弱點與威脅有待評估及解決。本文目的除評估ADS-B數據鏈路的安全性外，並建立加密及認證能力以增強ADS-B數據鏈路的安全性，使得廣播資料同時具有的隱私性與完整性。本文所提出DLAE-數據鏈路認證加密法，可同時具有認證與資訊保密功能；DLAE與其他傳統認證加密演算法比較，可以顯著的提升運作速度。 關鍵詞：廣播式自動回報監視（ADS-B）To meet future demand for air transport growth, break the traditional ground navigation aids facilities limitations and effectively enhance flight safety and efficiency, a new generation of air surveillance system will use automatic dependent surveillance broadcast (ADS-B) system to provide air-to-air, air-to-ground and ground-to-ground data link. However, ADS-B data link is a wireless broadcast-type link which is without designed-in security measures. Therefore potential security vulnerabilities and threats remain to be assessed and resolved. This paper aims to assess security of the ADS-B data link, and build encryption and authentication capability on the ADS-B data link to provide privacy and integrity of broadcast information. In the paper, a data link authenticated encryption (DLAE) scheme is designed for simultaneously protecting both message’s privacy and its authenticity. Traditionally, these two security goals had been handled separately by means of encryption schemes and message authentication codes. The proposed DLAE can increase significantly the processing speed in comparison with the traditional design methods. Keywords: ADS-B system, authenticated encryption scheme, privacy, security. 一、前言 隨著經濟蓬勃發展與全球化下，國際民航組織（International Civil Aviation Organization，ICAO）預估未來的二十年之間航空運輸量將會增加至現在的二到三倍左右，傳統助導航設施、程序及規範等，已漸漸不符合民航界的需求，為因應未來民航運輸成長之需求，突破傳統地面助導航設施的限制，有效提昇飛航安全及效率，ICAO於1989年提出了發展一套以衛星導航及數位化通信技術為基礎之通訊、導航、監視系統（Communication、Navigation、Surveillance，CNS），來支援建立一個全球均通行適用的飛航管理（Air T