Controller-Pilot Data Link Communications (CPDLC) are rapidly replacing voice-based Air Traffic Control (ATC) communications worldwide. Being digital, CPDLC is highly resilient and bandwidth efficient, which makes it the best choice for traffic-congested airports. Although CPDLC initially seems to be a perfect solution for modern-day ATC operations, it suffers from serious security issues. For instance, eavesdropping, spoofing, man-in-the-middle, message replay, impersonation attacks, etc. Cyber attacks on the aviation communication network could be hazardous, leading to fatal aircraft incidents and causing damage to individuals, service providers, and the aviation industry. Therefore, we propose a new security model called AKAASH, enabling several paramount security services, such as efficient and robust mutual authentication, key establishment, and a secure handover approach for the CPDLC-enabled aviation communication network. We implement the approach on hardware to examine the practicality of the proposed approach and verify its computational and communication efficiency and efficacy. We investigate the robustness of AKAASH through formal (proverif) and informal security analysis. The analysis reveals that the AKAASH adheres to the CPDLC standards and can easily integrate into the CPDLC framework.
Khan, S, Gaba, GS, Braeken, A, Kumar, P & Gurtov, A 2023, 'AKAASH: A realizable authentication, key agreement, and secure handover approach for controller-pilot data link communications', International journal of critical infrastructure protection, vol. 42, 100619. https://doi.org/10.1016/j.ijcip.2023.100619
Khan, S., Gaba, G. S., Braeken, A., Kumar, P., & Gurtov, A. (2023). AKAASH: A realizable authentication, key agreement, and secure handover approach for controller-pilot data link communications. International journal of critical infrastructure protection, 42, Article 100619. https://doi.org/10.1016/j.ijcip.2023.100619
@article{dc6c144faaad4751b82f2fac190032a3,
title = "AKAASH: A realizable authentication, key agreement, and secure handover approach for controller-pilot data link communications",
abstract = "Controller-Pilot Data Link Communications (CPDLC) are rapidly replacing voice-based Air Traffic Control (ATC) communications worldwide. Being digital, CPDLC is highly resilient and bandwidth efficient, which makes it the best choice for traffic-congested airports. Although CPDLC initially seems to be a perfect solution for modern-day ATC operations, it suffers from serious security issues. For instance, eavesdropping, spoofing, man-in-the-middle, message replay, impersonation attacks, etc. Cyber attacks on the aviation communication network could be hazardous, leading to fatal aircraft incidents and causing damage to individuals, service providers, and the aviation industry. Therefore, we propose a new security model called AKAASH, enabling several paramount security services, such as efficient and robust mutual authentication, key establishment, and a secure handover approach for the CPDLC-enabled aviation communication network. We implement the approach on hardware to examine the practicality of the proposed approach and verify its computational and communication efficiency and efficacy. We investigate the robustness of AKAASH through formal (proverif) and informal security analysis. The analysis reveals that the AKAASH adheres to the CPDLC standards and can easily integrate into the CPDLC framework.",
author = "Suleman Khan and Gaba, {Gurjot Singh} and An Braeken and Pardeep Kumar and Andrei Gurtov",
note = "Funding Information: This work was supported by Trafikverket, Sweden and Luftfartsverket, Sweden under Automation Program II. This work was also partially supported by the Wallenberg AI, Autonomous Systems and Software Program (WASP), Sweden . Publisher Copyright: {\textcopyright} 2023 The Author(s)",
year = "2023",
month = sep,
doi = "10.1016/j.ijcip.2023.100619",
language = "English",
volume = "42",
journal = "International journal of critical infrastructure protection",
issn = "2212-2087",
publisher = "Elsevier",
}