Search papers, labs, and topics across Lattice.
This paper introduces a lightweight security layer for the Train Real-time Data Protocol (TRDP) that addresses its inherent lack of cryptographic protection, particularly in multicast traffic scenarios. By leveraging an On-board Key Management System (OKMS) for dynamic key distribution and security profile negotiation, the proposed solution offers flexibility in cryptographic algorithms, from basic authentication to advanced Authenticated Encryption with Associated Data (AEAD). Experimental evaluations reveal that the implementation maintains manageable overhead, making it suitable for the real-time communication needs of rolling stock systems.
A lightweight security layer for TRDP communications enables robust cryptographic protection without compromising real-time performance.
The Train Real-time Data Protocol (TRDP) is widely used on rolling stock but it provides limited native support for cryptographic protection. Furthermore, the multicast traffic profile used in TRDP Process Data to exchange critical information between onboard subsystems makes the introduction of cryptographic protection a challenge. This paper presents a lightweight security layer for secure TRDP communication that implements a number of security profiles built around modern cryptographic algorithms. This additional layer relies on an On-board Key Management System (OKMS) for both security profile negotiation, dynamic key distribution and key lifecycle management. The security profiles allow for cryptographic agility and flexibility, ranging from simple authentication to Authenticated Encryption with Associated Data (AEAD) algorithms. The security profile negotiation procedure guarantees all TRDP End Devices (ED) on a common Communication ID (ComID) share the same security profile and can therefore process each other's messages. A prototype implementation based on mbedTLS and Arm Platform Security Architecture (PSA) was developed and evaluated. Experimental results demonstrate manageable overhead, suitable for the real-time and time-sensitive communication found on rolling stock.
