Security Requirements for SATCOM Datalink Systems for Future Air Traffic Management

Aircraft equipped with satellite communication (SATCOM) systems will enable advanced Air Traffic Management (ATM) operations over datalink on a global basis. A key concept of future ATM is 4D trajectory management, which aims to ensure an optimal path and designated arrival time for the flight by integrating time as a fourth dimension into the aircraft trajectory. However, the increase reliance on digital information exchange needed for implementing 4D implies that cyber security will be a key concern. The goal of the Iris Service Evolution programme is to provide a secure and reliable datalink for air-ground communication in oceanic and remote environment based on satellite. This paper provides an overview over ongoing work on cyber security in the Iris programme. We discuss the need for security for future datalink services in the aircraft control domain and, based on a security risk and threat analysis, provide a number of security requirements that future SATCOM datalink systems for ATM should fulfil.