Swiss Common PKI

Project: SWIM Common PKI

Funding programme: Connecting Europe Facility

Project ID: 2017_084_AF5

Project duration: 13/11/2018 – 31/12/2021

Project coordinator: EUROCONTROL

Partners:

• Paris Airports;

• Air Navigation Services Finland Oy;

• Osterreichische Gesellschaft fur Zivilluftfahrt mit beschrankter Haftung, limited liability company;

• BELGOCONTROL;

• Bulgarian Air Traffic Services Authority;

• Deutsche Lufthansa Aktiengesellschaft;

• French Ministry of the Armies/Direction General de l’Armement;

• DFS Deutsche Flugsicherung GmbH;

• The French State – Ministere de la Transition ecologique et solidaire, DGAC (Direction generale de l’aviation civile),

• DSNA (Direction des services de la navigation aerienne);

• ENAV;

• FABCE, letalske storitve, d.o.o. (F ABCE, Aviation Services, Ltd.);

• Hellenic Civil Aviation Authority;

• HungaroControl Air Navigation Services Pte Ltd Co.;

• K0benhavns Lufthavne A/S;

• Luchtverkeersleiding Nederland (Air Traffic Control The Netherlands);

• Luftfartsverket, a state enterprise (LFV);

• Manchester Airport PLC;

• NATS (En Route) plc;

• Navegac;:ao Aerea de Portugal- NAV Portugal, E.P.E.;

• Naviair, a state-owned company;

• Polish Air Navigation Services Agency;

• Ryanair DAC;

• Romanian Air Traffic Services Administration;

• Serbia and Montenegro Air Traffic Services LLC;

• Slovenia Control, Slovenian Air Navigation Services, Limited;

• Societe Air France;

• SPANISH AIR FORCE;

• State Enterprise “Oro Navigacija”;

• Letove Prevadzkove Sluzby SR, Statny Podnik – LPS SR, s. p.

Purpose:

The project aims to develop and implement a common framework for integrating local PKI solutions in a compliant manner, including providing interoperable digital certificates to SWIM users. The result and the associated with it framework, which will be part of the cyber security infrastructure of the air navigation systems, must enable the signing, publication and maintenance of digital certificates and removal lists, according to the requirements. Digital certificates will allow user authentication as well as encryption/decryption whenever and wherever necessary to ensure that information can be transferred in a secure manner. All interested participants in the aviation industry (air navigation service providers, airspace users, military organizations, airports, etc.) will benefit from the results achieved by the project.

The scope of the project includes the definition and development of a targeted common PKI framework for the needs of the aviation organizations in Europe, and also includes integration and validation with some stakeholders. The project will ensure the digital certificates interoperability both in Europe and with other regions.

The project also aims to develop the systems necessary for the functioning of PKI and the associated with it framework for developing and managing digital certificates, e.g. certificate authorities, validation services such as OCSP or CRL, user interfaces, systems supporting the roles of the registration authority and the policy management authority. These systems will be developed through public procurements, which will use the EUROCONTROL procurement process through call for tenders based on the specifications developed within the framework of this project. The system development will be based on existing and mature COTS hardware and software.

Activities:

• Project activities include:
• Development of policies and procedures;
• Development of common PKI specifications;
• Defining SWIM interfaces to the common PKI;
• Launching a public procurement;
• Evaluation of offers and selection of a Contractor;
• Development of a contract for a common PKI;
• Implementation preparation;
• Project management.