Security Architecture for Secure Train Control and Monitoring System

Abstract

A Train Control and Monitoring System (TCMS) is a vital part of monitoring sensors in a train. The data output of sensors is sent wirelessly to the data server for monitoring. However, as the wireless channel used to send the data is a shared public network, the transmitted data are prone to hackers and attacks. This paper proposes the Securebox architecture to manage secure data transfer from the onboard Vehicle Control Unit (VCU) to the data server in TCMS. The architecture is comprised of four main functions: network management, buffer management, data management, and security management. The architecture has been successfully developed in an HSM (Hardware Security Modul) and verified using alpha and beta software testing to form a secure TCMS. From the real-time testing phase in an electric-diesel train, the average performance of the AES-based HSM showed 55% faster time processing with unnoticed 0.1% added memory usage compared to the 3DES. The secure TCMS also withstands MITM attack and provides end-to-end data security compared to the (Mobile Station) MS to Base Station (BS) only in GSM-R.

Using Quantum Key Distribution With Free Space Optics to Secure Communications in High-Speed Trains

“…This innovative approach provides a level of encryption that remains impervious to all advancements in computational power or algorithmic breakthroughs, setting a new standard for communication security in high-speed rail systems. Unlike traditional methods such as Physical Layer Security [24], which depend on computational hardness and are susceptible to future technological advancements, or systems like Smart Collaborative Networking for Railways (SCN-R) [25] with its newly designed chaotic random number generator for password validation, and Securebox [26] that rely on complex cryptographic algorithms, or even Blockchain [27] that may face challenges due to its computational intensity and latency issues, QKD offers a fundamentally secure communication channel that is resistant to all known cyber threats. Furthermore, the integration of QKD with FSO capitalizes on the high data rates and direct line-ofsight communication advantages of FSO, all while maintaining unmatched security through the quantum properties of laser beam photons.…”

Improved SRP algorithm and bidirectional heterogeneous LTE‐R authentication key

“…With the rapid development of high‐speed railway wireless communication systems, the traditional railway digital mobile communication system Global System for Mobile Communications‐Railway (GSM‐R) belongs to 2G narrowband system, which can no longer meet the needs of more intelligent broadband services such as train control scheduling and video monitoring in high‐speed railway wireless communication system [1]. Long Term Evolution–Railway (LTE‐R), as the next generation of high‐speed Railway wireless communication system, It mainly uses Orthogonal Frequency Division Multiplexing (OFDM) [2] as the core technology of communication.…”