Integrity and Authentication of Real-Time Data in Navy Combat Systems Navy SBIR FY2010.2 Sol No.: Navy SBIR FY2010.2 Topic No.: N102-156 Topic Title: Integrity and Authentication of Real-Time Data in Navy Combat Systems Proposal No.: N102-156-1311 Firm: Concentris Systems LLC 2800 Woodlawn Drive Suite 238 Honolulu, Hawaii 96822 Contact: Tareq Hoque Phone: (808) 781-2003 Web Site: http://www.concentris-systems.com Abstract: Existing Information Assurance (IA) technologies in use by the Navy for near real-time and deadline-scheduled data are constrained by significant endpoint dependencies, such as proprietary hardware, pre-shared keys, and administrative configuration. The goal of the proposed project is to provide an enhanced IA suite capable of meeting authentication, integrity, provenance, and confidentiality requirements, particularly for near real-time and deadline scheduled data, in a decentralized, heterogeneous, dynamic-topology publication/subscription architecture, based on the Object Management Group's Data Distribution Service (DDS) standard. The successful design and implementation of a real-time capable Information Assurance framework for DDS will provide interoperability with key standards required by the Department of Defense's Net Centric Warfare objectives, leverage existing open standards and open source software, and ultimately result in a cost-effective, dual-use commercial product. Achieving this objective will enable secure, authenticated interconnectivity among potentially thousands of publish/subscribe participants, and greatly accelerate achievement of the DoD's Joint Vision 2020 objectives. Concentris will leverage our experience building publish-subscribe distributed systems, and our current SBIR-funded work on a Distributed Services Framework for DDS, to develop a solution we call TRIADS: Total Real-time Information Assurance for DDS. Benefits: The largest market potential for the TRIADS technology, at least initially, lies with organizations that have developed publish/subscribe software systems using non-authenticated implementations of DDS. In the commercial sector, immediate applications can be found in financial services systems and health care information interchange. Additional capabilities enabled by this technology may be found in deadline-scheduled distributed systems such as air traffic control, logistical coordination, utility infrastructure management, and emergency services management. DDS-compliant software is currently an active area of development for a large number of software and computing firms, including such industry players as IBM and Oracle, as well as DDS focused software firms such as PrismTech and RTI. There is potential for a real-time capable Information Assurance suite for DDS to become a complimentary offering with any of these vendor's implementations. Return