Security and the National ITS Architecture ITS America 2003 Session 19: The State of the Practice: ITS and Homeland Security May 19, 2003 Minneapolis, MN Architecture Development Team

5/19/032 Security Update Enhance Coverage of Security in the National ITS Architecture Enhance Coverage of Security in the National ITS Architecture Nine areas of functionality identified and presented to US DOT Nine areas of functionality identified and presented to US DOT Cut across multiple user service areas Cut across multiple user service areas Better reflect the opportunities for security applications in planning ITS Better reflect the opportunities for security applications in planning ITS Regional and Project Architecture development Regional and Project Architecture development Standards development Standards development

5/19/033 ITS Security Areas Using ITS to Enhance Surface Transportation Security Using ITS to Enhance Surface Transportation Security Transit Security Transit Security Rail Security Rail Security Freight and Commercial Vehicle Security Freight and Commercial Vehicle Security HAZMAT Security HAZMAT Security Disaster Response and Evacuation Disaster Response and Evacuation Wide Area Alert Wide Area Alert Critical Infrastructure Security Critical Infrastructure Security Includes functions for Traveler Security Includes functions for Traveler Security Securing ITS Securing ITS

5/19/034 Transit Security Use ITS to help secure passengers, facilities, and assets of Use ITS to help secure passengers, facilities, and assets of Bus transit systems Bus transit systems Rail transit systems Rail transit systems Many aspects of transit security already exist in Version 4.0 Many aspects of transit security already exist in Version 4.0 Video surveillance at stops/ stations Video surveillance at stops/ stations Response to emergencies Response to emergencies On board transit vehicle On board transit vehicle At transit stop/ station At transit stop/ station Transit traveler information Transit traveler information

5/19/035 Transit Security Added Security functionality Added Security functionality Surveillance and Sensor Monitoring Surveillance and Sensor Monitoring On-Board Transit Vehicles On-Board Transit Vehicles Stations Stations Facilities (e.g. yards, shops) Facilities (e.g. yards, shops) Infrastructure (Rail Track, Tunnel, Bridge, Guideway, etc.) Infrastructure (Rail Track, Tunnel, Bridge, Guideway, etc.) Remote Vehicle Disable Remote Vehicle Disable Vehicle Operator Authentication Vehicle Operator Authentication Use of Transit to Support Disaster Response and Evacuation Use of Transit to Support Disaster Response and Evacuation

5/19/036 Rail Security Full scope of Rail Security includes using ITS to address Freight Rail Security for Full scope of Rail Security includes using ITS to address Freight Rail Security for Trains Trains Rail Car Rail Car Fixed Assets (e.g. track, wayside equipment, highway/rail crossings) Fixed Assets (e.g. track, wayside equipment, highway/rail crossings) Personnel Personnel However, Version 5 architecture will add only However, Version 5 architecture will add only Rail Interface for Emergency Services Rail Interface for Emergency Services Update Incident Management User Service Requirements Update Incident Management User Service Requirements

5/19/037 Freight & Commercial Vehicle Security Use ITS to enhance security of Freight and Commercial Vehicle shipments Use ITS to enhance security of Freight and Commercial Vehicle shipments Tracking Commercial Vehicles and Freight shipments Tracking Commercial Vehicles and Freight shipments Monitoring Freight Integrity Monitoring Freight Integrity Monitoring Commercial Vehicle Integrity Monitoring Commercial Vehicle Integrity Monitoring Assignment Integrity Monitoring Assignment Integrity CV Driver/Commercial Vehicle/Freight Equipment CV Driver/Commercial Vehicle/Freight Equipment

5/19/038 HAZMAT Security Use ITS to Secure Commercial Vehicles carrying HAZMAT Use ITS to Secure Commercial Vehicles carrying HAZMAT Detect Diversions and Geofence Violations Detect Diversions and Geofence Violations Safely Disable Vehicle / Public Safety Traffic Stop Safely Disable Vehicle / Public Safety Traffic Stop Roadside Remote Sensing of HAZMAT Cargo Roadside Remote Sensing of HAZMAT Cargo Correlate with permitted activity Correlate with permitted activity Pull-In/Public Safety Traffic Stop Pull-In/Public Safety Traffic Stop Authenticate Drivers Authenticate Drivers Safely Disable Vehicle / Public Safety Traffic Stop Safely Disable Vehicle / Public Safety Traffic Stop

5/19/039 HAZMAT Security Institutional Elements Institutional Elements Deployments will likely limit service to Security Sensitive HAZMAT (e.g. gasoline, not nail polish) Deployments will likely limit service to Security Sensitive HAZMAT (e.g. gasoline, not nail polish) CV Tracking and Driver Authentication CV Tracking and Driver Authentication Monitored by CV Dispatch function Monitored by CV Dispatch function Private Fleet and Freight Management, NOT a Government Agency Private Fleet and Freight Management, NOT a Government Agency Police (Emergency Management) notified when FMS detects/validates significant route deviation, geofence boundary violation, or apparent hijacking Police (Emergency Management) notified when FMS detects/validates significant route deviation, geofence boundary violation, or apparent hijacking Remote disabling of vehicle by Fleet and Freight Management Remote disabling of vehicle by Fleet and Freight Management

5/19/0310 Disaster Response and Evacuation Use ITS to Enhance Response to All Disasters, Natural and Man-Made Use ITS to Enhance Response to All Disasters, Natural and Man-Made Work Within Existing Emergency Response Framework Work Within Existing Emergency Response Framework Existing Institutional Relationships, Roles, and Responsibilities Existing Institutional Relationships, Roles, and Responsibilities Define Scope to Focus on Transportation and Interface to Emergency Management/Public Safety Define Scope to Focus on Transportation and Interface to Emergency Management/Public Safety Existing Incident Management User Service/Architecture Support Provide Starting Point Existing Incident Management User Service/Architecture Support Provide Starting Point

5/19/0311 Disaster Response and Evacuation Coordinate Response Plans Coordinate Response Plans Monitor Alert Levels Monitor Alert Levels Detect and Verify Emergency Detect and Verify Emergency Assess Infrastructure Status Assess Infrastructure Status Manage Area Transportation Manage Area Transportation Critical Service Restoration Critical Service Restoration Coordinate Response Coordinate Response Disaster Traveler Information Disaster Traveler Information Evacuation Planning Support Evacuation Planning Support Evacuation Traveler Information Evacuation Traveler Information Evacuation Traffic Management Evacuation Traffic Management Evacuation Resource Sharing Evacuation Resource Sharing

5/19/0312 ITS Wide-Area Alert Use ITS to Notify Public in Emergency Situations Use ITS to Notify Public in Emergency Situations Inspired by Recent Use of ITS For “AMBER Alerts” Inspired by Recent Use of ITS For “AMBER Alerts” Significant institutional issues will remain Significant institutional issues will remain Public Safety and Emergency Management Agencies Control Public Safety and Emergency Management Agencies Control Architecture Defines Potential ITS Interfaces Architecture Defines Potential ITS Interfaces Plans, Policies, and Procedures for Use Established by Local Jurisdictions Plans, Policies, and Procedures for Use Established by Local Jurisdictions Modify Existing “Emergency Notification and Personal Security” User Service Modify Existing “Emergency Notification and Personal Security” User Service

5/19/0313 Critical Infrastructure Security Use ITS to secure critical transportation infrastructure Use ITS to secure critical transportation infrastructure Bridges Bridges Tunnels Tunnels Interchanges Interchanges TMCs / Offices TMCs / Offices Maintenance Facilities Maintenance Facilities Critical infrastructure will be locally determined Critical infrastructure will be locally determined Modify existing “Emergency Notification and Personal Security” user service Modify existing “Emergency Notification and Personal Security” user service

5/19/0314 Securing ITS Define Security Services necessary for securing ITS itself Define Security Services necessary for securing ITS itself Information Security Information Security Operational Security Operational Security Personnel Security Personnel Security Security Management Security Management No change to the Architecture Functional Definition (i.e., no new or modified Flows or Subsystems) No change to the Architecture Functional Definition (i.e., no new or modified Flows or Subsystems)

5/19/0315 Securing ITS Map Securing ITS Services to Physical Architecture Map Securing ITS Services to Physical Architecture Information Security => Architecture Flows Information Security => Architecture Flows Operational/Personnel Security => Subsystems Operational/Personnel Security => Subsystems No User Service or User Service Requirement Changes No User Service or User Service Requirement Changes “Considerations” not “Requirements” “Considerations” not “Requirements” Securing ITS Services are Not Mandatory Securing ITS Services are Not Mandatory Provide resource to deployers of ITS to understand need for providing security for their ITS Provide resource to deployers of ITS to understand need for providing security for their ITS

5/19/0316 Security Summary Physical Architecture high-level changes Physical Architecture high-level changes New Subsystem New Subsystem Security Monitoring Security Monitoring New Terminators New Terminators Alerting and Advisory Systems Alerting and Advisory Systems Freight Container-Trailer Freight Container-Trailer Shelter Providers Shelter Providers Telecommunications System for Traveler Information Telecommunications System for Traveler Information

5/19/0317 Other Changes for Version Add new “Telecommunications System for Traveler Information” terminator to interface with the ISP Add new “Telecommunications System for Traveler Information” terminator to interface with the ISP Hyperlinked Architecture Hyperlinked Architecture Theory of Operations and Market Package documents text, tables, and diagrams Theory of Operations and Market Package documents text, tables, and diagrams Standards Mapping Updates Standards Mapping Updates Stakeholder feedback changes Stakeholder feedback changes

5/19/0318 Travelers Vehicles Centers Field Commercial Vehicle Commercial Vehicle Transit Vehicle Transit Vehicle Maintenance and Construction Vehicle Maintenance and Construction Vehicle Emergency Vehicle Emergency Vehicle Commercial Vehicle Administration Commercial Vehicle Administration Archived Data Management Archived Data Management Remote Traveler Support Remote Traveler Support Personal Information Access Personal Information Access Toll Administration Toll Administration Emergency Management Emergency Management Traffic Management Traffic Management Fleet and Freight Management Fleet and Freight Management Transit Management Transit Management Emissions Management Emissions Management Information Service Provider Information Service Provider Maintenance and Construction Management Maintenance and Construction Management Wide Area Wireless (Mobile) Communications Vehicle to Vehicle Communications Roadway Toll Collection Parking Management Parking Management Commercial Vehicle Check Commercial Vehicle Check Version 5.0 Subsystem Diagram Security Monitoring Fixed-Point to Fixed-Point Communications Dedicated Short Range Communications

5/19/0319 Turbo Architecture Update Turbo Architecture Turbo Architecture New version will be released for use with Version 5.0 New version will be released for use with Version 5.0 Enables regional & project architectures to incorporate new security, 511, and other features Enables regional & project architectures to incorporate new security, 511, and other features

5/19/0320 National ITS Architecture Version 5.0 Schedule Schedule Web site ready for feedbackSep 2003 Web site ready for feedbackSep 2003 Look for Federal Register Notice Look for Federal Register Notice Launch Version 5.0 WebsiteOct 2003 Launch Version 5.0 WebsiteOct 2003 CDs availableNov 2003 CDs availableNov 2003