Samart Card Usage for Columbus Ground Operations

Kurzfassung

Spacecraft operations are slowly changing towards a network centric approach for which security issues cannot be ignored. By changing from an isolated environment into systems which are using, what is freely available in the internet, security becomes a bigger issue. Current security discussions are covering a wide range of subjects from the users to the spacecraft, from authentication to encryption. Here we didn’t want to show any features to secure up- and downlink security nor any kind of spacecraft security mechanisms. This paper will focus on a very specific area, which covers user authentication in ground operations for the Columbus mission. Previous missions operated by DLR used username/password for authentication, the Columbus ground segment recently introduced a PKI based system, where user authentication is with smart cards and certificates. This approach is not only used in one part of the overall Columbus ground segment but also in all attached support centers, the PKI running in the background for generation and management of certificates is based on a UNICERT solution by Cybertrust. The Berlin based company Sefirot developed for the Columbus usage an authentication software solution, which is based on their already available solution used e.g. in hospitals. This solution uses java based smartcards and supports different operational systems as Windows, Solaris, and Linux. Operational issues are also addresses such as: - shift handovers, - the problem of being in charge for more than one system, - different level of security, - different operation systems but the same look and feel. For handling user roles a product developed by the Austrian company Comtarsia is integrated. But not only the technical approach is part of the paper. It will also discuss the background of the operational resistance against the introduction of a smart card based authentication and the features which come along with our smart card. As this system is currently introduced and used for Columbus operations first user experiences with this system are reflected in the paper. It will also give an outlook on further usage in other projects as well on features, which might be implemented in the future.