Integrity and Authentication of Real-Time Data in Navy Combat Systems Navy SBIR FY2010.2 Sol No.: Navy SBIR FY2010.2 Topic No.: N102-156 Topic Title: Integrity and Authentication of Real-Time Data in Navy Combat Systems Proposal No.: N102-156-0321 Firm: Real-Time Innovations 385 Moffett Park Drive, Suite 115 Sunnyvale, California 94089 Contact: Gerardo Pardo-Castellote Phone: (408) 990-7451 Web Site: http://www.rti.com Abstract: Real-Time Innovations (RTI) proposes a set of Information Assurance extensions to the DDS standard and the RTI product that provide the necessary support for Authentication, Access Control, Confidentiality, Integrity, and Non-repudiation for all the real-time data sent over DDS. Our approach will enforce Mandatory Access Control (MAC) on all applications that join a DDS Global Data-Space, requiring them to be authenticated and have the necessary credentials. Beyond access to the DDS Global Data Space, our approach will provide fine-grain Role-Based (or more generally, policy-based) Access Control (RBAC) to specific DDS Topics and even to specific fields within DDS Topics. It will ensure confidentiality of the information (via encryption), integrity, pedigree, and non-repudiation (via digital signatures). Finally, we are proposing key innovations in the area of publish-subscribe one-to-many (multicast) distribution of encrypted information; these innovations will be critical to maintain the real-time QoS in the distribution of information to multiple subscribers. The proposed Security Architecture will be configurable via newly added QoS polices, while remaining open and extensible via "plug-in" APIs so that Navy or Navy Primes can integrate with pre-existing Identity Management Mechanisms, Access Control Policy repositories, or cryptographic libraries which might be program or project specific. Benefits: We expect all of the proposed work done for this SBIR effort will have broad applicability to both commercial and government sectors. Over 300 Aerospace and Defense programs have adopted our DDS technology in the last 3 years; we expect more than half of these users will be interested in the Security Extensions. We have interest in this SBIR from multiple Prime contractors, including some of the largest and most important PEO IWS system integrators. Their letters of support, attached to this prosasal, outline the information assurance/security benefits they see resulting from this effort. The developed technology will have broad impact on distributed computing infrastructure software where it is important to establish fine-grained trust between data producer and data consumer. This includes the banking, securities, telecommunications, power, medical and transportation industries. Return