rfc9153.original.xml | rfc9153.xml | |||
---|---|---|---|---|
<?xml version='1.0' encoding='utf-8'?> | <?xml version="1.0" encoding="UTF-8"?> | |||
<!DOCTYPE rfc SYSTEM "rfc2629-xhtml.ent"> | ||||
<?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?> | <!-- draft submitted in xml v3 --> | |||
<?rfc toc="yes" ?> | ||||
<?rfc symrefs="yes" ?> | <!DOCTYPE rfc [ | |||
<?rfc sortrefs="yes"?> | <!ENTITY nbsp " "> | |||
<?rfc compact="yes" ?> | <!ENTITY zwsp "​"> | |||
<?rfc subcompact="no" ?> | <!ENTITY nbhy "‑"> | |||
<?rfc iprnotified="no" ?> | <!ENTITY wj "⁠"> | |||
<?rfc strict="no" ?> | ]> | |||
<rfc xmlns:xi="http://www.w3.org/2001/XInclude" | ||||
docName="draft-ietf-drip-reqs-18" category="info" | <rfc xmlns:xi="http://www.w3.org/2001/XInclude" docName="draft-ietf-drip- | |||
ipr="trust200902" obsoletes="" updates="" submissionType="IETF" | reqs-18" number="9153" ipr="trust200902" obsoletes="" updates="" submissionType= | |||
xml:lang="en" tocInclude="true" symRefs="true" sortRefs="true" | "IETF" category="info" consensus="true" xml:lang="en" tocInclude="true" symRefs= | |||
version="3"> | "true" sortRefs="true" version="3"> | |||
<!-- xml2rfc v2v3 conversion 2.37.1 --> | <!-- xml2rfc v2v3 conversion 2.37.1 --> | |||
<front> | <front> | |||
<title abbrev="DRIP Requirements">Drone Remote Identification Protocol | <title abbrev="DRIP Requirements">Drone Remote Identification Protocol (D | |||
(DRIP) Requirements</title> | RIP) Requirements and Terminology | |||
<seriesInfo name="Internet-Draft" value="draft-ietf-drip-reqs-18"/> | </title> | |||
<seriesInfo name="RFC" value="9153"/> | ||||
<author fullname="Stuart W. Card" | <author fullname="Stuart W. Card" | |||
initials="S." surname="Card" role="editor"> | initials="S." surname="Card" role="editor"> | |||
<organization>AX Enterprize</organization> | <organization>AX Enterprize</organization> | |||
<address> | <address> | |||
<postal> | <postal> | |||
<street>4947 Commercial Drive</street> | <street>4947 Commercial Drive</street> | |||
<city>Yorkville</city> | <city>Yorkville</city> | |||
<region>NY</region> | <region>NY</region> | |||
<code>13495</code> | <code>13495</code> | |||
<country>USA</country> | <country>United States of America</country> | |||
</postal> | </postal> | |||
<email>stu.card@axenterprize.com</email> | <email>stu.card@axenterprize.com</email> | |||
</address> | </address> | |||
</author> | </author> | |||
<author fullname="Adam Wiethuechter" | <author fullname="Adam Wiethuechter" | |||
initials="A." surname="Wiethuechter"> | initials="A." surname="Wiethuechter"> | |||
<organization>AX Enterprize</organization> | <organization>AX Enterprize</organization> | |||
<address> | <address> | |||
<postal> | <postal> | |||
<street>4947 Commercial Drive</street> | <street>4947 Commercial Drive</street> | |||
<city>Yorkville</city> | <city>Yorkville</city> | |||
<region>NY</region> | <region>NY</region> | |||
<code>13495</code> | <code>13495</code> | |||
<country>USA</country> | <country>United States of America</country> | |||
</postal> | </postal> | |||
<email>adam.wiethuechter@axenterprize.com</email> | <email>adam.wiethuechter@axenterprize.com</email> | |||
</address> | </address> | |||
</author> | </author> | |||
<author fullname="Robert Moskowitz" | <author fullname="Robert Moskowitz" | |||
initials="R" surname="Moskowitz"> | initials="R" surname="Moskowitz"> | |||
<organization>HTT Consulting</organization> | <organization>HTT Consulting</organization> | |||
<address> | <address> | |||
<postal> | <postal> | |||
<street/> | <street/> | |||
<city>Oak Park</city> | <city>Oak Park</city> | |||
<region>MI</region> | <region>MI</region> | |||
<code>48237</code> | <code>48237</code> | |||
<country>USA</country> | <country>United States of America</country> | |||
</postal> | </postal> | |||
<email>rgm@labs.htt-consult.com</email> | <email>rgm@labs.htt-consult.com</email> | |||
</address> | </address> | |||
</author> | </author> | |||
<author fullname="Andrei Gurtov" initials="A." surname="Gurtov"> | <author fullname="Andrei Gurtov" initials="A." surname="Gurtov"> | |||
<organization>Linköping University</organization> | <organization>Linköping University</organization> | |||
<address> | <address> | |||
<postal> | <postal> | |||
<street>IDA</street> | <street>IDA</street> | |||
<city>Linköping</city> | <city>Linköping</city> | |||
<code>58183</code> | <code>58183</code> | |||
<country>Sweden</country> | <country>Sweden</country> | |||
</postal> | </postal> | |||
<email>gurtov@acm.org</email> | <email>gurtov@acm.org</email> | |||
</address> | </address> | |||
</author> | </author> | |||
<date year="2021"/> | <date year="2022" month="February" /> | |||
<area>Internet</area> | <area>Internet</area> | |||
<workgroup>DRIP</workgroup> | <workgroup>DRIP</workgroup> | |||
<keyword>RFC</keyword> | ||||
<keyword>Request for Comments</keyword> | ||||
<keyword>I-D</keyword> | ||||
<keyword>Internet-Draft</keyword> | ||||
<keyword>DRIP</keyword> | <keyword>DRIP</keyword> | |||
<abstract> | <abstract> | |||
<t> | <t> | |||
This document defines terminology and requirements for Drone Remote | This document defines terminology and requirements for solutions produced by | |||
Identification Protocol (DRIP) Working Group solutions to support | the Drone Remote Identification Protocol (DRIP) Working Group. These | |||
Unmanned Aircraft System Remote Identification and tracking (UAS | solutions will support Unmanned Aircraft System Remote Identification and | |||
RID) for security, safety, and other purposes (e.g., initiation of | tracking (UAS RID) for security, safety, and other purposes (e.g., | |||
identity based network sessions supporting UAS applications). DRIP | initiation of identity-based network sessions supporting UAS applications). | |||
will facilitate use of existing Internet resources to support RID | DRIP will facilitate use of existing Internet resources to support RID and | |||
and to enable enhanced related services, and will enable online and | to enable enhanced related services, and it will enable online and offline | |||
offline verification that RID information is trustworthy. | verification that RID information is trustworthy. | |||
</t> | </t> | |||
</abstract> | </abstract> | |||
</front> | </front> | |||
<middle> | <middle> | |||
<section numbered="true" toc="default"> <name>Introduction</name> | <section numbered="true" toc="default"> <name>Introduction</name> | |||
<t> | ||||
This document defines terminology and requirements for solutions produced by | ||||
the Drone Remote Identification Protocol (DRIP) Working Group. These | ||||
solutions will support Unmanned Aircraft System Remote Identification and | ||||
tracking (UAS RID) for security, safety, and other purposes (e.g., | ||||
initiation of identity-based network sessions supporting UAS applications). | ||||
DRIP will facilitate use of existing Internet resources to support RID and | ||||
to enable enhanced related services, and it will enable online and offline | ||||
verification that RID information is trustworthy. | ||||
</t> | ||||
<t> | <t> | |||
For any unfamiliar or <em>a priori</em> ambiguous terminology | For any unfamiliar or a priori ambiguous terminology | |||
herein, see <xref target="terms" format="default"/>. | herein, see <xref target="terms" format="default"/>. | |||
</t> | </t> | |||
<section numbered="true" toc="default"> <name>Motivation and External Influences </name> | <section numbered="true" toc="default"> <name>Motivation and External Influences </name> | |||
<t> | <t> | |||
Many considerations (especially safety and security) necessitate | Many considerations (especially safety and security) necessitate | |||
Unmanned Aircraft Systems (UAS) Remote Identification and tracking | Unmanned Aircraft System Remote Identification and tracking | |||
(RID). | (UAS RID). | |||
</t> | </t> | |||
<t> | <t> | |||
Unmanned Aircraft (UA) may be fixed wing, rotary wing (e.g., | Unmanned Aircraft (UA) may be fixed-wing, rotary-wing (e.g., | |||
helicopter), hybrid, balloon, rocket, etc. Small fixed wing UA | helicopter), hybrid, balloon, rocket, etc. Small fixed-wing UA | |||
typically have Short Take-Off and Landing (STOL) capability; rotary | typically have Short Take-Off and Landing (STOL) capability; rotary-wing | |||
wing and hybrid UA typically have Vertical Take-Off and Landing | and | |||
hybrid UA typically have Vertical Take-Off and Landing | ||||
(VTOL) capability. UA may be single- or multi-engine. The most | (VTOL) capability. UA may be single- or multi-engine. The most | |||
common today are multicopters: rotary wing, multi engine. The | common today are multicopters (rotary-wing, multi-engine). The | |||
explosion in UAS was enabled by hobbyist development, for | explosion in UAS was enabled by hobbyist development | |||
multicopters, of advanced flight stability algorithms, enabling | of advanced flight stability algorithms for multicopters that enabled ev | |||
even inexperienced pilots to take off, fly to a location of | en | |||
interest, hover, and return to the take-off location or land at a | inexperienced pilots to take off, fly to a location of interest, | |||
hover, and return to the takeoff location or land at a | ||||
distance. UAS can be remotely piloted by a human (e.g., with a | distance. UAS can be remotely piloted by a human (e.g., with a | |||
joystick) or programmed to proceed from Global Navigation Satellite | joystick) or programmed to proceed from Global Navigation Satellite | |||
System (GNSS) waypoint to waypoint in a weak form of autonomy; | System (GNSS) waypoint to waypoint in a weak form of autonomy; | |||
stronger autonomy is coming. | stronger autonomy is coming. | |||
</t> | </t> | |||
<t> | <t> | |||
Small UA are "low observable" as they: | Small UA are "low observable" as they: | |||
</t> | </t> | |||
<ul spacing="normal" empty="false"> | <ul spacing="normal" empty="false"> | |||
<li> | <li> | |||
typically have small radar cross sections; | typically have small radar cross sections; | |||
</li> | </li> | |||
<li> | <li> | |||
make noise quite noticeable at short ranges but difficult to | make noise that is quite noticeable at short ranges but difficult to | |||
detect at distances they can quickly close (500 meters in under | detect at distances they can quickly close (500 meters in under | |||
13 seconds by the fastest consumer mass market drones available | 13 seconds by the fastest consumer mass-market drones available | |||
in early 2021); | in early 2021); | |||
</li> | </li> | |||
<li> | <li> | |||
typically fly at low altitudes (e.g., for those to which RID | typically fly at low altitudes (e.g., | |||
applies in the US, under 400 feet Above Ground Level (AGL) as | under 400 feet Above Ground Level (AGL) for UA to which RID appli | |||
per <xref target="Part107" format="default"/>); | es in the US, as | |||
per <xref target="Part107" format="default"/>); and | ||||
</li> | </li> | |||
<li> | <li> | |||
are highly maneuverable so can fly under trees and between | are highly maneuverable and thus can fly under trees and between | |||
buildings. | buildings. | |||
</li> | </li> | |||
</ul> | </ul> | |||
<t> | <t> | |||
UA can carry payloads including sensors, cyber and kinetic weapons, | UA can carry payloads (including sensors, cyber weapons, and kinetic weap ons) | |||
or can be used themselves as weapons by flying them into targets. | or can be used themselves as weapons by flying them into targets. | |||
They can be flown by clueless, careless, or criminal operators. | They can be flown by clueless, careless, or criminal operators. | |||
Thus the most basic function of UAS RID is "Identification Friend | Thus, the most basic function of UAS RID is "Identification Friend | |||
or Foe" (IFF) to mitigate the significant threat they present. | or Foe (IFF)" to mitigate the significant threat they present. | |||
</t> | </t> | |||
<t> | <t> | |||
Diverse other applications can be enabled or facilitated by RID. | Diverse other applications can be enabled or facilitated by RID. | |||
Internet protocols typically start out with at least one entity | Internet protocols typically start out with at least one entity | |||
already knowing an identifier or locator of another; but an entity | already knowing an identifier or locator of another; but an entity | |||
(e.g., UAS or Observer device) encountering an <em>a priori</em> | (e.g., UAS or Observer device) encountering an a priori | |||
unknown UA in physical space has no identifier or logical space | unknown UA in physical space has no identifier or logical space | |||
locator for that UA, unless and until one is provided somehow. RID | locator for that UA, unless and until one is provided somehow. RID | |||
provides an identifier, which, if well chosen, can facilitate use | provides an identifier, which, if well chosen, can facilitate use | |||
of a variety of Internet family protocols and services to support | of a variety of Internet family protocols and services to support | |||
arbitrary applications, beyond the basic security functions of RID. | arbitrary applications beyond the basic security functions of RID. | |||
For most of these, some type of identifier is essential, e.g., | For most of these, some type of identifier is essential, e.g., | |||
Network Access Identifier (NAI), Digital Object Identifier (DOI), | Network Access Identifier (NAI), Digital Object Identifier (DOI), | |||
Uniform Resource Identifier (URI), domain name, or public key. DRIP | Uniform Resource Identifier (URI), domain name, or public key. DRIP | |||
motivations include both the basic security and the broader | motivations include both the basic security and the broader | |||
application support functions of RID. The general scenario is | application support functions of RID. The general scenario is | |||
illustrated in <xref target="Scenario" format="default"/>. | illustrated in <xref target="Scenario" format="default"/>. | |||
</t> | </t> | |||
<figure anchor="Scenario"> | <figure anchor="Scenario"> | |||
<name>"General UAS RID Usage Scenario"</name> | <name>General UAS RID Usage Scenario</name> | |||
<artwork type="ascii-art"> | <artwork type="ascii-art"> | |||
+-----+ +-----+ | +-----+ +-----+ | |||
| UA1 | | UA2 | | | UA1 | | UA2 | | |||
+-----+ +-----+ | +-----+ +-----+ | |||
+----------+ +----------+ | +----------+ +----------+ | |||
| General | | Public | | | General | | Public | | |||
| Public | | Safety | | | Public | | Safety | | |||
| Observer o------\ /------o Observer | | | Observer o------\ /------o Observer | | |||
+----------+ | | +----------+ | +----------+ | | +----------+ | |||
skipping to change at line 203 ¶ | skipping to change at line 210 ¶ | |||
| Public o---/ | \---o Private | | | Public o---/ | \---o Private | | |||
| Registry | | | Registry | | | Registry | | | Registry | | |||
+----------+ | +----------+ | +----------+ | +----------+ | |||
+--o--+ | +--o--+ | |||
| DNS | | | DNS | | |||
+-----+ | +-----+ | |||
</artwork> | </artwork> | |||
</figure> | </figure> | |||
<t> | <t> | |||
<xref target="Scenario" format="default"/> illustrates a typical | <xref target="Scenario" format="default"/> illustrates a typical | |||
case where there may be: multiple Observers, some of them members | case where there may be the following: | |||
of the general public, others government officers with public | ||||
safety/security responsibilities; multiple UA in flight within | ||||
observation range, each with its own pilot/operator; at least one | ||||
registry each for lookup of public and (by authorized parties only) | ||||
private information regarding the UAS and their pilots/operators; | ||||
and in the DRIP vision, DNS resolving various identifiers and | ||||
locators of the entities involved. | ||||
</t> | </t> | |||
<ul> | ||||
<li> multiple Observers, some of them members of the general public | ||||
and others government officers with public safety and security | ||||
responsibilities,</li> | ||||
<li> multiple UA in flight within observation range, each with its own | ||||
pilot/operator,</li> | ||||
<li> at least one registry each for lookup of public and (by authorized | ||||
parties only) private information regarding the UAS and their | ||||
pilots/operators, and</li> | ||||
<li> in the DRIP vision, DNS resolving various identifiers and locators | ||||
of the entities involved.</li> | ||||
</ul> | ||||
<t> | <t> | |||
Note the absence of any links to/from the UA in the figure; this is | Note the absence of any links to/from the UA in the figure; this is | |||
because UAS RID and other connectivity involving the UA varies. | because UAS RID and other connectivity involving the UA varies. | |||
Some connectivity paths do or do not exist depending upon the | Some connectivity paths do or do not exist depending upon the | |||
scenario. Command and Control (C2) from the GCS to the UA via the | scenario. Command and Control (C2) from the Ground Control Station (GCS) to the UA via the | |||
Internet (e.g., using LTE cellular) is expected to become much more | Internet (e.g., using LTE cellular) is expected to become much more | |||
common as Beyond Visual Line Of Sight (BVLOS) operations increase; | common as Beyond Visual Line Of Sight (BVLOS) operations increase; | |||
in such a case, there is typically not also a direct wireless link | in such a case, there is typically not also a direct wireless link | |||
between the GCS and UA. Conversely, if C2 is running over a direct | between the GCS and UA. Conversely, if C2 is running over a direct | |||
wireless link, then typically the GCS has but the UA lacks Internet | wireless link, then the GCS typically has Internet | |||
connectivity. Further, paths that nominally exist, such as between | connectivity, but the UA does not. Further, paths that nominally exist, s | |||
uch as between | ||||
an Observer device and the Internet, may be severely intermittent. | an Observer device and the Internet, may be severely intermittent. | |||
These connectivity constraints are likely to have an impact, e.g., | These connectivity constraints are likely to have an impact, e.g., | |||
on how reliably DRIP requirements can be satisfied. | on how reliably DRIP requirements can be satisfied. | |||
</t> | </t> | |||
<t> | <t> | |||
An Observer of UA may need to classify them, as illustrated | An Observer of UA may need to classify them, as illustrated | |||
notionally in <xref target="Classification" format="default"/>, for | notionally in <xref target="Classification" format="default"/>, for | |||
basic airspace Situational Awareness (SA). An Observer who | basic airspace Situational Awareness (SA). | |||
classifies a UAS: as Taskable, can ask it to do something useful; | An Observer can classify a UAS as one of the following and treat as: | |||
as Low Concern, can reasonably assume it is not malicious and would | ||||
cooperate with requests to modify its flight plans for safety | ||||
concerns that arise; as High Concern or Unidentified, can focus | ||||
surveillance on it. | ||||
</t> | </t> | |||
<ul> | ||||
<li> Taskable: can ask it to do something useful.</li> | ||||
<li> Low Concern: can reasonably assume it is not | ||||
malicious and would cooperate with requests to modify its flight | ||||
plans for safety concerns that arise.</li> | ||||
<li> High Concern or Unidentified: can focus surveillance on it.</li> | ||||
</ul> | ||||
<figure anchor="Classification"> | <figure anchor="Classification"> | |||
<name>"Notional UAS Classification"</name> | <name>Notional UAS Classification</name> | |||
<artwork type="ascii-art"> | <artwork type="ascii-art"> | |||
xxxxxxx | xxxxxxx | |||
x x No +--------------+ | x x No +--------------+ | |||
x ID? x+---->| Unidentified | | x ID? x+---->| Unidentified | | |||
x x +--------------+ | x x +--------------+ | |||
xxxxxxx | xxxxxxx | |||
+ | + | |||
| Yes | | Yes | |||
v | v | |||
xxxxxxx | xxxxxxx | |||
x x | x x | |||
skipping to change at line 259 ¶ | skipping to change at line 279 ¶ | |||
xxxxxxx | xxxxxxx | |||
x x | x x | |||
.---------+x Type? x+----------. | .---------+x Type? x+----------. | |||
| x x | | | x x | | |||
| xxxxxxx | | | xxxxxxx | | |||
| + | | | + | | |||
v v v | v v v | |||
+--------------+ +--------------+ +--------------+ | +--------------+ +--------------+ +--------------+ | |||
| Taskable | | Low Concern | | High Concern | | | Taskable | | Low Concern | | High Concern | | |||
+--------------+ +--------------+ +--------------+ | +--------------+ +--------------+ +--------------+ | |||
</artwork> | </artwork> | |||
</figure> | </figure> | |||
<t> | <t> | |||
ASTM International, Technical Committee F38 (UAS), Subcommittee | The widely cited "Standard Specification for Remote ID and Tracking" <xre | |||
F38.02 (Aircraft Operations), Work Item WK65041, developed the | f | |||
widely cited Standard Specification for Remote ID and Tracking | target="F3411-19" format="default"/> was developed by ASTM International | |||
<xref target="F3411-19" format="default"/>: the published standard | , Technical Committee F38 (UAS), Subcommittee F38.02 | |||
is available for purchase from ASTM and as an ASTM membership | (Aircraft Operations), Work Item WK65041. | |||
premium; early drafts are freely available as <xref | The published standard is | |||
target="OpenDroneID" format="default"/> specifications. <xref | available for purchase from ASTM and is also available as an ASTM members | |||
target="F3411-19" format="default"/> is frequently referenced in | hip premium; | |||
DRIP, where building upon its link layers and both enhancing | early draft versions are freely available as Open Drone ID specifications | |||
support for and expanding the scope of its applications are | <xref target="OpenDroneID" format="default"/>. <xref target="F3411-19" | |||
central foci. | format="default"/> is frequently referenced in DRIP, where building | |||
upon its link layers and both enhancing support for and expanding the | ||||
scope of its applications are central foci. | ||||
</t> | </t> | |||
<t> | <t> | |||
In many applications, including UAS RID, identification and | In many applications, including UAS RID, identification and | |||
identifiers are not ends in themselves; they exist to enable | identifiers are not ends in themselves; they exist to enable | |||
lookups and provision of other services. | lookups and provision of other services. | |||
</t> | </t> | |||
<t> | <t> | |||
Using UAS RID to facilitate vehicular (V2X) communications and | Using UAS RID to facilitate vehicular (i.e., Vehicle-to-Everything (V2X)) communications and | |||
applications such as Detect And Avoid (DAA), which would impose | applications such as Detect And Avoid (DAA), which would impose | |||
tighter latency bounds than RID itself, is an obvious possibility, | tighter latency bounds than RID itself, is an obvious possibility; this i | |||
explicitly contemplated in the United States (US) Federal Aviation | s | |||
Administration (FAA) Remote Identification of Unmanned Aircraft | explicitly contemplated in the "Remote Identification of Unmanned Aircraf | |||
rule <xref target="FRUR" format="default"/>. However, usage of RID | t" | |||
rule of the US Federal Aviation | ||||
Administration (FAA) <xref target="FRUR" format="default"/>. However, usa | ||||
ge of RID | ||||
systems and information beyond mere identification (primarily to | systems and information beyond mere identification (primarily to | |||
hold operators accountable after the fact), including DAA, have | hold operators accountable after the fact), including DAA, were | |||
been declared out of scope in ASTM F38.02 WK65041, based on a | declared out of scope in ASTM F38.02 WK65041, based on a | |||
distinction between RID as a security standard vs DAA as a safety | distinction between RID as a security standard versus DAA as a safety | |||
application. Aviation community Standards Development Organizations | application. Standards Development Organizations | |||
(SDOs) generally set a higher bar for safety than for security, | (SDOs) in the aviation community generally set a higher bar for safety th | |||
an for security, | ||||
especially with respect to reliability. Each SDO has its own | especially with respect to reliability. Each SDO has its own | |||
cultural set of connotations of safety vs security; the denotative | cultural set of connotations of safety versus security; the denotative | |||
definitions of the International Civil Aviation Organization (ICAO) | definitions of the International Civil Aviation Organization (ICAO) | |||
are cited in <xref target="terms" format="default"/>. | are cited in <xref target="terms" format="default"/>. | |||
</t> | </t> | |||
<t> | <t> | |||
<xref target="Opinion1" format="default"/> and <xref target="WG105" | <xref target="Opinion1" format="default"/> and <xref target="WG105" | |||
format="default"/> cite the Direct Remote Identification (DRI) | format="default"/> cite the Direct Remote Identification (DRI) | |||
previously required and specified, explicitly stating that whereas | previously required and specified, explicitly stating that whereas | |||
DRI is primarily for security purposes, the "Network Identification | DRI is primarily for security purposes, the "Network Identification | |||
Service" <xref target="Opinion1" format="default"/> (in the context | Service" <xref target="Opinion1" format="default"/> (in the context | |||
of U-space <xref target="InitialView" format="default"/>) or | of U-space <xref target="InitialView" format="default"/>) or | |||
"Electronic Identification" <xref target="WG105" format="default"/> | "Electronic Identification" <xref target="WG105" format="default"/> | |||
is primarily for safety purposes (e.g., Air Traffic Management, | is primarily for safety purposes (e.g., Air Traffic Management, | |||
especially hazards deconfliction) and also is allowed to be used | especially hazards deconfliction) and also is allowed to be used | |||
for other purposes such as support of efficient operations. These | for other purposes such as support of efficient operations. These | |||
emerging standards allow the security and safety oriented systems | emerging standards allow the security- and safety-oriented systems | |||
to be separate or merged. In addition to mandating both Broadcast | to be separate or merged. In addition to mandating both Broadcast | |||
and Network one-way to Observers, they will use V2V to other UAS | and Network RID one-way to Observers, they will use Vehicle-to-Vehicle (V 2V) to other UAS | |||
(also likely to and/or from some manned aircraft). These reflect | (also likely to and/or from some manned aircraft). These reflect | |||
the broad scope of the European Union (EU) U-space concept, as | the broad scope of the European Union (EU) U-space concept, as | |||
being developed in the Single European Sky ATM Research (SESAR) | being developed in the Single European Sky ATM Research (SESAR) | |||
Joint Undertaking, the U-space architectural principles of which | Joint Undertaking, the U-space architectural principles of which | |||
are outlined in <xref target="InitialView" format="default"/>. | are outlined in <xref target="InitialView" format="default"/>. | |||
</t> | </t> | |||
<t> | <t> | |||
ASD-STAN is an Associated Body to CEN (European Committee for | ASD-STAN is an Associated Body to CEN (European Committee for | |||
Standardization) for Aerospace Standards. It is publishing an EU | Standardization) for Aerospace Standards. It has published an EU | |||
standard "Aerospace series - Unmanned Aircraft Systems - Part 002: | standard titled "Aerospace series - Unmanned Aircraft Systems - Part 002: | |||
Direct Remote Identification; English version prEN 4709-002:2020" | Direct Remote Identification" <xref target="ASDSTAN4709-002" format="defa | |||
for which a current (early 2021) informal overview is freely | ult"/>; | |||
available in <xref target="ASDRI" format="default"/>. It will | a current (early 2021) informal overview is freely | |||
available in <xref target="ASDRI" format="default"/> (note that <xref tar | ||||
get="ASDRI" format="default"/> may not precisely reflect the final standard as i | ||||
t was published before <xref target="ASDSTAN4709-002" format="default"/>). It wi | ||||
ll | ||||
provide compliance to cover the identical DRI requirements | provide compliance to cover the identical DRI requirements | |||
applicable to drones of classes C1 - <xref target="Delegated" | applicable to drones of the following classes: | |||
format="default"/> Part 2, C2 - <xref target="Delegated" | ||||
format="default"/> Part 3, C3 - <xref target="Delegated" | ||||
format="default"/> Part 4, C5 - <xref target="Amended" | ||||
format="default"/> Part 16, and C6 - <xref target="Amended" | ||||
format="default"/> Part 17. | ||||
</t> | </t> | |||
<ul> | ||||
<li>C1 (<xref target="Delegated" format="default"/>, Part 2) </li> | ||||
<li>C2 (<xref target="Delegated" format="default"/>, Part 3) </li> | ||||
<li>C3 (<xref target="Delegated" format="default"/>, Part 4) </li> | ||||
<li>C5 (<xref target="Amended" format="default"/>, Part 16) </li> | ||||
<li>C6 (<xref target="Amended" format="default"/>, Part 17) </li> | ||||
</ul> | ||||
<t> | <t> | |||
The standard contemplated in <xref target="ASDRI" | The standard contemplated in <xref target="ASDRI" | |||
format="default"/> will provide UA capability to be identified in | format="default"/> will provide UA capability to be identified in | |||
real time during the whole duration of the flight, without specific | real time during the whole duration of the flight, without specific | |||
connectivity or ground infrastructure link, utilizing existing | connectivity or ground infrastructure link, utilizing existing | |||
mobile devices within broadcast range. It will use Bluetooth 4, | mobile devices within broadcast range. It will use Bluetooth 4, | |||
Bluetooth 5, Wi-Fi Neighbor Awareness Networking (NAN, also known | Bluetooth 5, Wi-Fi Neighbor Awareness Networking (NAN) (also known | |||
as Wi-Fi Aware, <xref target="WiFiNAN" format="default"/>) and/or | as "Wi-Fi Aware" <xref target="WiFiNAN" format="default"/>), and/or | |||
IEEE 802.11 Beacon modes. The EU standard emphasis was | IEEE 802.11 Beacon modes. The emphasis of the EU standard is | |||
compatibility with <xref target="F3411-19" format="default"/>, | compatibility with <xref target="F3411-19" format="default"/>, | |||
although there are differences in mandatory and optional message | although there are differences in mandatory and optional message | |||
types and fields. | types and fields. | |||
</t> | </t> | |||
<t> | <t> | |||
The <xref target="ASDRI" format="default"/> contemplated DRI system | The DRI system contemplated in <xref target="ASDRI" format="default"/> | |||
will broadcast locally: | will broadcast the following locally: | |||
</t> | </t> | |||
<ol spacing="normal" type="1"> | <ol spacing="normal" type="1"> | |||
<li> | <li> | |||
the UAS operator registration number; | the UAS operator registration number; | |||
</li> | </li> | |||
<li> | <li> | |||
the <xref target="CTA2063A" format="default"/> compliant unique | the <xref target="CTA2063A" format="default"/>-compliant unique | |||
serial number of the UA; | serial number of the UA; | |||
</li> | </li> | |||
<li> | <li> | |||
a time stamp, the geographical position of the UA, and its | a time stamp, the geographical position of the UA, and its | |||
height AGL or above its take-off point; | height AGL or above its takeoff point; | |||
</li> | </li> | |||
<li> | <li> | |||
the UA ground speed and route course measured clockwise from | the UA ground speed and route course measured clockwise from | |||
true north; | true north; | |||
</li> | </li> | |||
<li> | <li> | |||
the geographical position of the remote pilot, or if that is | the geographical position of the Remote Pilot, or if that is | |||
not available, the geographical position of the UA take-off | not available, the geographical position of the UA takeoff | |||
point; and | point; and | |||
</li> | </li> | |||
<li> | <li> | |||
for Classes C1, C2, C3, the UAS emergency status. | for classes C1, C2, C3, the UAS emergency status. | |||
</li> | </li> | |||
</ol> | </ol> | |||
<t> | <t> | |||
Under the <xref target="ASDRI" format="default"/> contemplated | Under the | |||
standard, data will be sent in plain text and the UAS operator | standard contemplated in <xref target="ASDRI" format="default"/>, data wi | |||
ll be sent in plaintext, and the UAS operator | ||||
registration number will be represented as a 16-byte string | registration number will be represented as a 16-byte string | |||
including the (European) state code. The corresponding private ID | including the (European) state code. The corresponding private ID | |||
part will contain 3 characters that are not broadcast but used by | part will contain three characters that are not broadcast but used by | |||
authorities to access regional registration databases for | authorities to access regional registration databases for | |||
verification. | verification. | |||
</t> | </t> | |||
<t> | <t> | |||
ASD-STAN also contemplates corresponding Network Remote | ASD-STAN also contemplates corresponding Network Remote Identification | |||
Identification (NRI) functionality. The ASD-STAN RID target is to | (NRI) functionality. ASD-STAN plans to revise their current standard | |||
revise their current standard with additional functionality (e.g., | with additional functionality (e.g., DRIP) to be published no later | |||
DRIP) to be published before 2022 <xref target="ASDRI" | than 2022 <xref target="ASDRI" format="default"/>. | |||
format="default"/>. | ||||
</t> | </t> | |||
<t> | <t> | |||
Security oriented UAS RID essentially has two goals: enable the | Security-oriented UAS RID essentially has two goals: 1) enable the | |||
general public to obtain and record an opaque ID for any observed | general public to obtain and record an opaque ID for any observed | |||
UA, which they can then report to authorities; and enable | UA, which they can then report to authorities and 2) enable | |||
authorities, from such an ID, to look up information about the UAS | authorities, from such an ID, to look up information about the UAS | |||
and its operator. Safety oriented UAS RID has stronger | and its operator. Safety-oriented UAS RID has stronger | |||
requirements. | requirements. | |||
</t> | </t> | |||
<t> | <t> | |||
Although dynamic establishment of secure communications between the | Dynamic establishment of secure communications between the Observer | |||
Observer and the UAS pilot seems to have been contemplated by the | and the UAS pilot seems to have been contemplated by the FAA UAS ID | |||
FAA UAS ID and Tracking Aviation Rulemaking Committee (ARC) in | and Tracking Aviation Rulemaking Committee (ARC) in <xref | |||
their <xref target="Recommendations" format="default"/>, it is not | target="Recommendations" format="default"/>; however, aside from DRIP, | |||
addressed in any of the subsequent regulations or international SDO | it is not addressed in any of the subsequent regulations or | |||
technical specifications, other than DRIP, known to the authors as | international SDO technical specifications known to the authors as of | |||
of early 2021. | early 2021. | |||
</t> | </t> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>Concerns and Constraints</name> | <section numbered="true" toc="default"> <name>Concerns and Constraints</name> | |||
<t> | <t> | |||
Disambiguation of multiple UA flying in close proximity may be very | Disambiguation of multiple UA flying in close proximity may be very | |||
challenging, even if each is reporting its identity, position, and | challenging, even if each is reporting its identity, position, and | |||
velocity as accurately as it can. | velocity as accurately as it can. | |||
</t> | </t> | |||
<t> | <t> | |||
The origin of information in UAS RID and UAS Traffic Management | The origin of information in UAS RID and UAS Traffic Management | |||
(UTM) generally is the UAS or its operator. Self-reports may be | (UTM) generally is the UAS or its operator. Self-reports may be | |||
initiated by the remote pilot at the console of the Ground Control | initiated by the Remote Pilot at the console of the GCS (the UAS subsyste | |||
Station (GCS, the UAS subsystem used to remotely operate the UA), | m used to remotely operate the UA) | |||
or automatically by GCS software; in Broadcast RID, they typically | or automatically by GCS software; in Broadcast RID, they are typically | |||
would be initiated automatically by a process on the UA. Data in | initiated automatically by a process on the UA. Data in | |||
the reports may come from sensors available to the operator (e.g., | the reports may come from sensors available to the operator (e.g., | |||
radar or cameras), the GCS (e.g., "dead reckoning" UA location, | radar or cameras), the GCS (e.g., "dead reckoning" UA location, | |||
starting from the takeoff location and estimating the displacements | starting from the takeoff location and estimating the displacements | |||
due to subsequent piloting commands, wind, etc.), or the UA itself | due to subsequent piloting commands, wind, etc.), or the UA itself | |||
(e.g., an on-board GNSS receiver); in Broadcast RID, all the data | (e.g., an on-board GNSS receiver). In Broadcast RID, all the data | |||
must be sent proximately by, and most of the data comes ultimately | must be sent proximately by the UA, and most of the data ultimately comes | |||
from, the UA itself. Whether information comes proximately from the | from the UA. Whether information comes proximately from the | |||
operator, or from automated systems configured by the operator, | operator or from automated systems configured by the operator, | |||
there are possibilities not only of unintentional error in but also | there are possibilities of unintentional error in and | |||
of intentional falsification of this data. Mandating UAS RID, | intentional falsification of this data. | |||
specifying data elements required to be sent, monitoring compliance | Mandating UAS RID, | |||
and enforcing it (or penalizing non-compliance) are matters for | specifying data elements required to be sent, monitoring compliance, | |||
Civil Aviation Authorities (CAAs) et al; specifying message | and enforcing compliance (or penalizing non-compliance) are matters for | |||
formats, etc. to carry those data elements has been addressed by | Civil Aviation Authorities (CAAs) and potentially other authorities. Spec | |||
other SDOs; offering technical means, as extensions to external | ifying message | |||
formats and supporting technologies to carry those data elements has been | ||||
addressed by | ||||
other SDOs. Offering technical means, as extensions to external | ||||
standards, to facilitate verifiable compliance and | standards, to facilitate verifiable compliance and | |||
enforcement/monitoring, are opportunities for DRIP. | enforcement/monitoring is an opportunity for DRIP. | |||
</t> | </t> | |||
<t> | <t> | |||
Minimal specified information must be made available to the public. | Minimal specified information must be made available to the public. | |||
Access to other data, e.g., UAS operator Personally Identifiable | Access to other data, e.g., UAS operator Personally Identifiable | |||
Information (PII), must be limited to strongly authenticated | Information (PII), must be limited to strongly authenticated | |||
personnel, properly authorized in accordance with applicable | personnel, properly authorized in accordance with applicable | |||
policy. The balance between privacy and transparency remains a | policy. The balance between privacy and transparency remains a | |||
subject for public debate and regulatory action; DRIP can only | subject for public debate and regulatory action; DRIP can only | |||
offer tools to expand the achievable trade space and enable | offer tools to expand the achievable trade space and enable | |||
trade-offs within that space. <xref target="F3411-19" | trade-offs within that space. <xref target="F3411-19" | |||
format="default"/>, the basis for most current (2021) thinking | format="default"/>, the basis for most current (2021) thinking | |||
about and efforts to provide UAS RID, specifies only how to get the | about and efforts to provide UAS RID, specifies only how to get the | |||
UAS ID to the Observer: how the Observer can perform these lookups | UAS ID to the Observer: how the Observer can perform these lookups | |||
and how the registries first can be populated with information are | and how the registries first can be populated with information are | |||
unspecified therein. | not specified therein. | |||
</t> | </t> | |||
<t> | <t> | |||
The need for nearly universal deployment of UAS RID is pressing: | The need for nearly universal deployment of UAS RID is pressing: | |||
consider how negligible the value of an automobile license plate | consider how negligible the value of an automobile license plate | |||
system would be if only 90% of the cars displayed plates. This | system would be if only 90% of the cars displayed plates. This | |||
implies the need to support use by Observers of already ubiquitous | implies the need to support use by Observers of already-ubiquitous | |||
mobile devices (typically smartphones and tablets). Anticipating | mobile devices (typically smartphones and tablets). Anticipating | |||
CAA requirements to support legacy devices, especially in light of | CAA requirements to support legacy devices, especially in light of | |||
<xref target="Recommendations" format="default"/>, <xref | <xref target="Recommendations" format="default"/>, <xref | |||
target="F3411-19" format="default"/> specifies that any UAS sending | target="F3411-19" format="default"/> specifies that any UAS sending | |||
Broadcast RID over Bluetooth must do so over Bluetooth 4, | Broadcast RID over Bluetooth must do so over Bluetooth 4, | |||
regardless of whether it also does so over newer versions; as UAS | regardless of whether it also does so over newer versions. As UAS | |||
sender devices and Observer receiver devices are unpaired, this | sender devices and Observer receiver devices are unpaired, this | |||
implies extremely short "advertisement" (beacon) frames. | unpaired state requires use of the extremely short BT4 "advertisement" | |||
(beacon) frames. | ||||
</t> | </t> | |||
<t> | <t> | |||
Wireless data links to or from UA are challenging. Flight is often | Wireless data links to or from UA are challenging. Flight is often | |||
amidst structures and foliage at low altitudes over varied terrain. | amidst structures and foliage at low altitudes over varied terrain. | |||
UA are constrained in both total energy and instantaneous power by | UA are constrained in both total energy and instantaneous power by | |||
their batteries. Small UA imply small antennas. Densely populated | their batteries. Small UA imply small antennas. Densely populated | |||
volumes will suffer from link congestion: even if UA in an airspace | volumes will suffer from link congestion: even if UA in an airspace | |||
volume are few, other transmitters nearby on the ground, sharing | volume are few, other transmitters nearby on the ground, sharing | |||
the same license free spectral band, may be many. Thus air to air | the same license free spectral band, may be many. Thus, air-to-air | |||
and air to ground links will generally be slow and unreliable. | and air-to-ground links will generally be slow and unreliable. | |||
</t> | </t> | |||
<t> | <t> | |||
UAS Cost, Size, Weight, and Power (CSWaP) constraints are severe. | UAS Cost, Size, Weight, and Power (CSWaP) constraints are severe. | |||
CSWaP is a burden not only on the designers of new UAS for sale, | CSWaP is a burden not only on the designers of new UAS for sale | |||
but also on owners of existing UAS that must be retrofit. Radio | but also on owners of existing UAS that must be retrofit. Radio | |||
Controlled (RC) aircraft modelers, "hams" who use licensed amateur | Controlled (RC) aircraft modelers, "hams" who use licensed amateur | |||
radio frequencies to control UAS, drone hobbyists, and others who | radio frequencies to control UAS, drone hobbyists, and others who | |||
custom build UAS, all need means of participating in UAS RID, | custom build UAS all need means of participating in UAS RID | |||
sensitive to both generic CSWaP and application-specific | that are sensitive to both generic CSWaP and application-specific | |||
considerations. | considerations. | |||
</t> | </t> | |||
<t> | <t> | |||
To accommodate the most severely constrained cases, all these | To accommodate the most severely constrained cases, all of the concerns descri | |||
conspire to motivate system design decisions that complicate the | bed above | |||
protocol design problem. | conspire to motivate system design decisions that complicate the | |||
protocol design problem. | ||||
</t> | </t> | |||
<t> | <t> | |||
Broadcast RID uses one-way local data links. UAS may have Internet | Broadcast RID uses one-way local data links. UAS may have Internet | |||
connectivity only intermittently, or not at all, during flight. | connectivity only intermittently, or not at all, during flight. | |||
</t> | </t> | |||
<t> | <t> | |||
Internet-disconnected operation of Observer devices has been deemed | Internet-disconnected operation of Observer devices has been deemed | |||
by ASTM F38.02 too infrequent to address. However, the preamble to | by ASTM F38.02 as too infrequent to address. However, the preamble to | |||
<xref target="FRUR" format="default"/> cites "remote and rural | <xref target="FRUR" format="default"/> cites "remote and rural | |||
areas that do not have reliable Internet access" as a major reason | areas that do not have reliable Internet access" as a major reason | |||
for requiring Broadcast rather than Network RID, and states that | for requiring Broadcast rather than Network RID. <xref target="FRUR" form | |||
"Personal wireless devices that are capable of receiving 47 CFR | at="default"/> also states:</t> | |||
<blockquote> | ||||
Personal wireless devices that are capable of receiving 47 CFR | ||||
part 15 frequencies, such as smart phones, tablets, or other | part 15 frequencies, such as smart phones, tablets, or other | |||
similar commercially available devices, will be able to receive | similar commercially available devices, will be able to receive | |||
broadcast remote identification information directly without | broadcast remote identification information directly without | |||
reliance on an Internet connection". Internet-disconnected | reliance on an Internet connection. | |||
</blockquote> | ||||
<t>Internet-disconnected | ||||
operation presents challenges, e.g., for Observers needing access | operation presents challenges, e.g., for Observers needing access | |||
to the <xref target="F3411-19" format="default"/> web based | to the <xref target="F3411-19" format="default"/> web-based | |||
Broadcast Authentication Verifier Service or needing to do external | Broadcast Authentication Verifier Service or needing to do external | |||
lookups. | lookups. | |||
</t> | </t> | |||
<t> | <t> | |||
As RID must often operate within these constraints, heavyweight | As RID must often operate within these constraints, heavyweight | |||
cryptographic security protocols or even simple cryptographic | cryptographic security protocols or even simple cryptographic | |||
handshakes are infeasible, yet trustworthiness of UAS RID | handshakes are infeasible, yet trustworthiness of UAS RID | |||
information is essential. Under <xref target="F3411-19" | information is essential. Under <xref target="F3411-19" | |||
format="default"/>, <em>even the most basic datum, the UAS ID | format="default"/>, <em>even the most basic datum, the UAS ID | |||
itself, can be merely an unsubstantiated claim</em>. | itself, can be merely an unsubstantiated claim</em>. | |||
skipping to change at line 522 ¶ | skipping to change at line 551 ¶ | |||
lookups. | lookups. | |||
</t> | </t> | |||
<t> | <t> | |||
As RID must often operate within these constraints, heavyweight | As RID must often operate within these constraints, heavyweight | |||
cryptographic security protocols or even simple cryptographic | cryptographic security protocols or even simple cryptographic | |||
handshakes are infeasible, yet trustworthiness of UAS RID | handshakes are infeasible, yet trustworthiness of UAS RID | |||
information is essential. Under <xref target="F3411-19" | information is essential. Under <xref target="F3411-19" | |||
format="default"/>, <em>even the most basic datum, the UAS ID | format="default"/>, <em>even the most basic datum, the UAS ID | |||
itself, can be merely an unsubstantiated claim</em>. | itself, can be merely an unsubstantiated claim</em>. | |||
</t> | </t> | |||
<t> | <t> | |||
Observer devices being ubiquitous, thus popular targets for malware | Observer devices are ubiquitous; thus, they are popular targets for malwa | |||
or other compromise, cannot be generally trusted (although the user | re | |||
of each device is compelled to trust that device, to some extent); | or other compromise, so they cannot be generally trusted (although the us | |||
a "fair witness" functionality (inspired by <xref target="Stranger" | er | |||
of each device is compelled to trust that device, to some extent). | ||||
A "fair witness" functionality (inspired by <xref target="Stranger" | ||||
format="default"/>) is desirable. | format="default"/>) is desirable. | |||
</t> | </t> | |||
<t> | <t> | |||
Despite work by regulators and SDOs, there are substantial gaps in | Despite work by regulators and SDOs, there are substantial gaps in | |||
UAS standards generally and UAS RID specifically. <xref | UAS standards generally and UAS RID specifically. <xref | |||
target="Roadmap" format="default"/> catalogs UAS related standards, | target="Roadmap" format="default"/> catalogs UAS-related standards, | |||
ongoing standardization activities and gaps (as of 2020); Section | ongoing standardization activities, and gaps (as of 2020); Section | |||
7.8 catalogs those related specifically to UAS RID. DRIP will | 7.8 catalogs those related specifically to UAS RID. DRIP will | |||
address the most fundamental of these gaps, as foreshadowed above. | address the most fundamental of these gaps, as foreshadowed above. | |||
</t> | </t> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>DRIP Scope</name> | <section numbered="true" toc="default"> <name>DRIP Scope</name> | |||
<t> | <t> | |||
DRIP’s initial charter is to make RID immediately actionable, in | DRIP's initial objective is to make RID immediately actionable, | |||
both Internet and local-only connected scenarios (especially | especially in emergencies, in severely constrained UAS environments | |||
emergencies), in severely constrained UAS environments, balancing | (both Internet and local-only connected scenarios), balancing legitimate | |||
legitimate (e.g., public safety) authorities’ Need To Know | (e.g., public safety) authorities' Need To Know trustworthy information | |||
trustworthy information with UAS operators’ privacy. By | with UAS operators' privacy. | |||
"immediately actionable" is meant information of sufficient | The phrase | |||
precision, accuracy, timeliness, etc. for an Observer to use it as | "immediately actionable" means information of sufficient | |||
the basis for immediate decisive action, whether that be to trigger | precision, accuracy, and timeliness for an Observer to use it as | |||
a defensive counter-UAS system, to attempt to initiate | the basis for immediate decisive action (e.g., triggering | |||
communications with the UAS operator, to accept the presence of the | a defensive counter-UAS system, attempting to initiate | |||
communications with the UAS operator, accepting the presence of the | ||||
UAS in the airspace where/when observed as not requiring further | UAS in the airspace where/when observed as not requiring further | |||
action, or whatever, with potentially severe consequences of any | action, etc.) with potentially severe consequences of any | |||
action or inaction chosen based on that information. For further | action or inaction chosen based on that information. For further | |||
explanation of the concept of immediate actionability, see <xref | explanation of the concept of immediate actionability, see <xref | |||
target="ENISACSIRT" format="default"/>. | target="ENISACSIRT" format="default"/>. | |||
</t> | </t> | |||
<t> | <t> | |||
Note that UAS RID must achieve nearly universal adoption, but DRIP | Note that UAS RID must achieve nearly universal adoption, but DRIP can | |||
can add value even if only selectively deployed. Authorities with | add value even if only selectively deployed. Authorities with | |||
jurisdiction over more sensitive airspace volumes may set a higher | jurisdiction over more sensitive airspace volumes may set a RID | |||
than generally mandated RID requirement for flight in such volumes. | requirement, for flight in such volumes, that is higher than generally | |||
Those with a greater need for high-confidence IFF can equip with | mandated. Those with a greater need for high-confidence IFF can equip | |||
DRIP, enabling strong authentication of their own aircraft and | with DRIP, enabling strong authentication of their own aircraft and | |||
allied operators without regard for the weaker (if any) | allied operators without regard for the weaker (if any) authentication | |||
authentication of others. | of others. | |||
</t> | </t> | |||
<t> | <t> | |||
DRIP (originally Trustworthy Multipurpose Remote Identification, | DRIP (originally "Trustworthy Multipurpose Remote Identification | |||
TM-RID) potentially could be applied to verifiably identify other | (TM-RID)") could be applied to verifiably identify other types of | |||
types of registered things reported to be in specified physical | registered things reported to be in specified physical | |||
locations, and providing timely trustworthy identification data is | locations. Providing timely trustworthy identification data is also | |||
also prerequisite to identity-oriented networking, but the urgent | prerequisite to identity-oriented networking. Despite the value of | |||
motivation and clear initial focus is UAS. Existing Internet | DRIP to these and other potential applications, UAS RID is the urgent | |||
resources (protocol standards, services, infrastructure, and | motivation and clear initial focus of DRIP. Existing Internet | |||
business models) should be leveraged. | resources (protocol standards, services, infrastructure, and business | |||
models) should be leveraged. | ||||
</t> | </t> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>Document Scope</name> | <section numbered="true" toc="default"> <name>Document Scope</name> | |||
<t> | <t> | |||
This document describes the problem space for UAS RID conforming to | This document describes the problem space for UAS RID conforming to | |||
proposed regulations and external technical standards, defines | proposed regulations and external technical standards, defines | |||
common terminology, specifies numbered requirements for DRIP, | common terminology, specifies numbered requirements for DRIP, | |||
identifies some important considerations (IANA, security, privacy | identifies some important considerations (IANA, security, privacy, | |||
and transparency), and discusses limitations. | and transparency), and discusses limitations. | |||
</t> | </t> | |||
<t> | <t> | |||
A natural Internet-based approach to meet these requirements is | A natural Internet-based approach to meet these requirements is | |||
described in a companion architecture document <xref | described in a companion architecture document <xref | |||
target="I-D.ietf-drip-arch" format="default"/> and elaborated in | target="I-D.ietf-drip-arch" format="default"/> and elaborated in | |||
other DRIP documents. | other DRIP documents. | |||
</t> | </t> | |||
</section> | </section> | |||
</section> | </section> | |||
<section anchor="terms" numbered="true" toc="default"> <name>Terms and Definitio ns</name> | <section anchor="terms" numbered="true" toc="default"> <name>Terms and Definitio ns</name> | |||
<section numbered="true" toc="default"> <name>Requirements Terminology</name> | <section numbered="true" toc="default"> <name>Requirements Terminology</name> | |||
<t> | ||||
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", | <t> | |||
"SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", | The key words "<bcp14>MUST</bcp14>", "<bcp14>MUST NOT</bcp14>", "<bcp14>REQU | |||
and "OPTIONAL" in this document are to be interpreted as described | IRED</bcp14>", "<bcp14>SHALL</bcp14>", "<bcp14>SHALL | |||
in BCP 14 <xref target="RFC2119" format="default"/> <xref | NOT</bcp14>", "<bcp14>SHOULD</bcp14>", "<bcp14>SHOULD NOT</bcp14>", "<bcp14> | |||
target="RFC8174" format="default"/> when, and only when, they | RECOMMENDED</bcp14>", "<bcp14>NOT RECOMMENDED</bcp14>", | |||
appear in all capitals, as shown here. | "<bcp14>MAY</bcp14>", and "<bcp14>OPTIONAL</bcp14>" in this document are to | |||
</t> | be interpreted as | |||
described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> | ||||
when, and only when, they appear in all capitals, as shown here. | ||||
</t> | ||||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>Definitions</name> | <section numbered="true" toc="default"> <name>Definitions</name> | |||
<t> | <t> | |||
This section defines a non-comprehensive set of terms expected to | This section defines a non-comprehensive set of terms expected to be | |||
be used in DRIP documents. This list is meant to be the DRIP | used in DRIP documents. This list is meant to be the DRIP | |||
terminology reference; as such, some of the terms listed below are | terminology reference; as such, some of the terms listed below are | |||
not used in this document. | not used in this document. | |||
</t> | </t> | |||
<t> | <t> | |||
<xref target="RFC4949" format="default"/> provides a glossary | To encourage comprehension necessary for adoption of DRIP by the | |||
of Internet security terms that should be used where applicable. | intended user community, the UAS community's norms are respected | |||
herein, and definitions are quoted in cases where they have been | ||||
found in that community's documents. Most of the terms listed | ||||
below are from that community (even if specific source documents | ||||
are not cited); any terms that are DRIP-specific or defined by | ||||
this document are marked "(DRIP)". | ||||
</t> | </t> | |||
<t> | <t> | |||
In the UAS community, the plural form of acronyms generally is the | Note that, in the UAS community, the plural form of an acronym, | |||
same as the singular form, e.g., Unmanned Aircraft System (singular) | generally, is the same as the singular form, e.g., Unmanned Aircraft | |||
and Unmanned Aircraft Systems (plural) are both represented as UAS. | System (singular) and Unmanned Aircraft Systems (plural) are both | |||
On this and other terminological issues, to encourage comprehension | represented as UAS. | |||
necessary for adoption of DRIP by the intended user community, that | ||||
community's norms are respected herein, and definitions are quoted | ||||
in cases where they have been found in that community's documents. | ||||
Most of the listed terms are from that community (even if specific | ||||
source documents are not cited); any that are DRIP-specific or | ||||
invented by the authors of this document are marked "(DRIP)". | ||||
</t> | </t> | |||
<t> | ||||
<xref target="RFC4949" format="default"/> provides a glossary | ||||
of Internet security terms that should be used where applicable. | ||||
</t> | ||||
<dl newline="true" spacing="normal"> | <dl newline="true" spacing="normal"> | |||
<dt>4-D</dt> | <dt>4-D</dt> | |||
<dd> | <dd> | |||
Four-dimensional. Latitude, Longitude, Altitude, Time. Us ed | Four-dimensional. Latitude, Longitude, Altitude, Time. Us ed | |||
especially to delineate an airspace volume in which an | especially to delineate an airspace volume in which an | |||
operation is being or will be conducted. | operation is being or will be conducted. | |||
</dd> | </dd> | |||
<dt>AAA</dt> | <dt>AAA</dt> | |||
<dd> | <dd> | |||
Attestation, Authentication, Authorization, Access Contro l, | Attestation, Authentication, Authorization, Access Contro l, | |||
skipping to change at line 652 ¶ | skipping to change at line 691 ¶ | |||
AirBorne DAA. Accomplished using systems onboard the | AirBorne DAA. Accomplished using systems onboard the | |||
aircraft involved. Supports "self-separation" (remaining | aircraft involved. Supports "self-separation" (remaining | |||
"well clear" of other aircraft) and collision avoidance. | "well clear" of other aircraft) and collision avoidance. | |||
</dd> | </dd> | |||
<dt>ADS-B</dt> | <dt>ADS-B</dt> | |||
<dd> | <dd> | |||
Automatic Dependent Surveillance - Broadcast. "ADS-B Out" | Automatic Dependent Surveillance - Broadcast. "ADS-B Out" | |||
equipment obtains aircraft position from other on-board | equipment obtains aircraft position from other on-board | |||
systems (typically GNSS) and periodically broadcasts it t o | systems (typically GNSS) and periodically broadcasts it t o | |||
"ADS-B In" equipped entities, including other aircraft, | "ADS-B In" equipped entities, including other aircraft, | |||
ground stations, and satellite based monitoring systems. | ground stations, and satellite-based monitoring systems. | |||
</dd> | </dd> | |||
<dt>AGL</dt> | <dt>AGL</dt> | |||
<dd> | <dd> | |||
Above Ground Level. Relative altitude, above the variousl y | Above Ground Level. Relative altitude, above the variousl y | |||
defined local ground level, typically of a UA, measured i n | defined local ground level, typically of a UA, measured i n | |||
feet or meters. Should be explicitly specified as either | feet or meters. Should be explicitly specified as either | |||
barometric (pressure) or geodetic (GNSS) altitude. | barometric (pressure) or geodetic (GNSS) altitude. | |||
</dd> | </dd> | |||
<dt>ATC</dt> | <dt>ATC</dt> | |||
<dd> | <dd> | |||
Air Traffic Control. Explicit flight direction to pilots | Air Traffic Control. Explicit flight direction to pilots | |||
from ground controllers. Contrast with ATM. | from ground controllers. Contrast with ATM. | |||
</dd> | </dd> | |||
<dt>ATM</dt> | <dt>ATM</dt> | |||
<dd> | <dd> | |||
Air Traffic Management. A broader functional and geograph ic | Air Traffic Management. A broader functional and geograph ic | |||
scope and/or a higher layer of abstraction than ATC. "The | scope and/or a higher layer of abstraction than ATC. | |||
<xref | ||||
target="ICAOATM" format="default"/> defines ATM as the f | ||||
ollowing: "The | ||||
dynamic, integrated management of air traffic and airspac e | dynamic, integrated management of air traffic and airspac e | |||
including air traffic services, airspace management and a ir | including air traffic services, airspace management and a ir | |||
traffic flow management - safely, economically and | traffic flow management -- safely, economically and | |||
efficiently - through the provision of facilities and | efficiently -- through the provision of facilities and | |||
seamless services in collaboration with all parties and | seamless services in collaboration with all parties and | |||
involving airborne and ground-based functions" <xref | involving airborne and ground-based functions". | |||
target="ICAOATM" format="default"/>. | </dd> | |||
</dd> | ||||
<dt>Authentication Message</dt> | <dt>Authentication Message</dt> | |||
<dd> | <dd> | |||
<xref target="F3411-19" format="default"/> Message Type 2 . | <xref target="F3411-19" format="default"/> Message Type 2 . | |||
Provides framing for authentication data, only; the only | Provides framing for authentication data only; the only | |||
message that can be extended in length by segmenting it | message that can be extended in length by segmenting it | |||
across more than one page. | across more than one page. | |||
</dd> | </dd> | |||
<dt>Basic ID Message</dt> | <dt>Basic ID Message</dt> | |||
<dd> | <dd> | |||
<xref target="F3411-19" format="default"/> Message Type 0 . | <xref target="F3411-19" format="default"/> Message Type 0 . | |||
Provides UA Type, UAS ID Type (and Specific Session ID | Provides UA Type, ID Type (and Specific Session ID | |||
subtype if applicable), and UAS ID, only. | subtype if applicable), and UAS ID only. | |||
</dd> | </dd> | |||
<dt>Broadcast Authentication Verifier Service</dt> | <dt>Broadcast Authentication Verifier Service</dt> | |||
<dd> | <dd> | |||
System component designed to handle any authentication of | System component designed to handle any authentication of | |||
Broadcast RID by offloading signature verification to a w eb | Broadcast RID by offloading signature verification to a w eb | |||
service <xref target="F3411-19" format="default"/>. | service <xref target="F3411-19" format="default"/>. | |||
</dd> | </dd> | |||
<dt>BVLOS</dt> | <dt>BVLOS</dt> | |||
<dd> | <dd> | |||
Beyond Visual Line Of Sight. See VLOS. | Beyond Visual Line Of Sight. See VLOS. | |||
</dd> | </dd> | |||
<dt>byte</dt> | <dt>byte</dt> | |||
<dd> | <dd> | |||
Used here in its now-customary sense as a synonym for | Used here in its now-customary sense as a synonym for | |||
"octet", as "byte" is used exclusively in definitions of | "octet", as "byte" is used exclusively in definitions of | |||
data structures specified in <xref target="F3411-19" | data structures specified in <xref target="F3411-19" | |||
format="default"/> | format="default"/>. | |||
</dd> | </dd> | |||
<dt>CAA</dt> | <dt>CAA</dt> | |||
<dd> | <dd> | |||
Civil Aviation Authority of a regulatory jurisdiction. | Civil Aviation Authority of a regulatory jurisdiction. | |||
Often so named, but other examples include the United | Often so named, but other examples include the United | |||
States Federal Aviation Administration (FAA) and the Japa n | States Federal Aviation Administration (FAA) and the Japa n | |||
Civil Aviation Bureau. | Civil Aviation Bureau. | |||
</dd> | </dd> | |||
<dt>CSWaP</dt> | <dt>CSWaP</dt> | |||
<dd> | <dd> | |||
Cost, Size, Weight, and Power. | Cost, Size, Weight, and Power | |||
</dd> | </dd> | |||
<dt>C2</dt> | <dt>C2</dt> | |||
<dd> | <dd> | |||
Command and Control. Previously mostly used in military | Command and Control. Previously mostly used in military | |||
contexts. Properly refers to a function, exercisable over | contexts. Properly refers to a function that is exercisab | |||
arbitrary communications; but in the small UAS context, | le over | |||
arbitrary communications, but in the small UAS context, | ||||
often refers to the communications (typically RF data lin k) | often refers to the communications (typically RF data lin k) | |||
over which the GCS controls the UA. | over which the GCS controls the UA. | |||
</dd> | </dd> | |||
<dt>DAA</dt> | <dt>DAA</dt> | |||
<dd> | <dd> | |||
Detect And Avoid, formerly Sense And Avoid (SAA). A means | Detect And Avoid, formerly "Sense And Avoid (SAA)". A | |||
of keeping aircraft "well clear" of each other and | means of keeping aircraft "well clear" of each other | |||
obstacles for safety. "The capability to see, sense or | and obstacles for safety. <xref target="ICAOUAS" | |||
detect conflicting traffic or other hazards and take the | format="default"/> defines DAA as the following: "The | |||
appropriate action to comply with the applicable rules of | capability to see, sense or detect conflicting traffic | |||
flight" <xref target="ICAOUAS" format="default"/>. | or other hazards and take the appropriate action to | |||
comply with the applicable rules of flight". | ||||
</dd> | </dd> | |||
<dt>DRI (not to be confused with DRIP)</dt> | <dt>DRI (not to be confused with DRIP)</dt> | |||
<dd> | <dd> | |||
Direct Remote Identification. EU regulatory requirement f or | Direct Remote Identification. EU regulatory requirement f or | |||
"a system that ensures the local broadcast of information | "a system that ensures the local broadcast of information | |||
about a UA in operation, including the marking of the UA, | about a UA in operation, including the marking of the UA, | |||
so that this information can be obtained without physical | so that this information can be obtained without physical | |||
access to the UA". <xref target="Delegated" | access to the UA" <xref target="Delegated" | |||
format="default"/> that presumably can be satisfied with | format="default"/>. This requirement can presumably be sa | |||
tisfied with | ||||
appropriately configured <xref target="F3411-19" | appropriately configured <xref target="F3411-19" | |||
format="default"/> Broadcast RID. | format="default"/> Broadcast RID. | |||
</dd> | </dd> | |||
<dt>DSS</dt> | <dt>DSS</dt> | |||
<dd> | <dd> | |||
Discovery and Synchronization Service. The UTM system | Discovery and Synchronization Service. The UTM system | |||
overlay network backbone. Most importantly, it enables on e | overlay network backbone. Most importantly, it enables on e | |||
USS to learn which other USS have UAS operating in a give n | USS to learn which other USS have UAS operating in a give n | |||
4-D airspace volume, for strategic deconfliction of plann ed | 4-D airspace volume, for strategic deconfliction of plann ed | |||
operations and Network RID surveillance of active | operations and Network RID surveillance of active | |||
operations. <xref target="F3411-19" format="default"/> | operations. See <xref target="F3411-19" format="default"/ >. | |||
</dd> | </dd> | |||
<dt>EUROCAE</dt> | <dt>EUROCAE</dt> | |||
<dd> | <dd> | |||
European Organisation for Civil Aviation Equipment. | European Organisation for Civil Aviation Equipment. | |||
Aviation SDO, originally European, now with broader | Aviation SDO, originally European, now with broader | |||
membership. Cooperates extensively with RTCA. | membership. Cooperates extensively with RTCA. | |||
</dd> | </dd> | |||
<dt>GBDAA</dt> | <dt>GBDAA</dt> | |||
<dd> | <dd> | |||
Ground Based DAA. Accomplished with the aid of ground bas ed | Ground-Based DAA. Accomplished with the aid of ground-bas ed | |||
functions. | functions. | |||
</dd> | </dd> | |||
<dt>GCS</dt> | <dt>GCS</dt> | |||
<dd> | <dd> | |||
Ground Control Station. The part of the UAS that the remo | Ground Control Station. The part of the UAS that the Remo | |||
te | te | |||
pilot uses to exercise C2 over the UA, whether by remotel | Pilot uses to exercise C2 over the UA, whether by remotel | |||
y | y | |||
exercising UA flight controls to fly the UA, by setting | exercising UA flight controls to fly the UA, by setting | |||
GNSS waypoints, or otherwise directing its flight. | GNSS waypoints, or by otherwise directing its flight. | |||
</dd> | </dd> | |||
<dt>GNSS</dt> | <dt>GNSS</dt> | |||
<dd> | <dd> | |||
Global Navigation Satellite System. Satellite based timin g | Global Navigation Satellite System. Satellite-based timin g | |||
and/or positioning with global coverage, often used to | and/or positioning with global coverage, often used to | |||
support navigation. | support navigation. | |||
</dd> | </dd> | |||
<dt>GPS</dt> | <dt>GPS</dt> | |||
<dd> | <dd> | |||
Global Positioning System. A specific GNSS, but in the UA S | Global Positioning System. A specific GNSS, but in the UA S | |||
context, the term is typically misused in place of the mo re | context, the term is typically misused in place of the mo re | |||
generic term GNSS. | generic term "GNSS". | |||
</dd> | </dd> | |||
<dt>GRAIN</dt> | <dt>GRAIN</dt> | |||
<dd> | <dd> | |||
Global Resilient Aviation Interoperable Network. ICAO | Global Resilient Aviation Interoperable | |||
managed IPv6 overlay internetwork based on IATF, dedicate | Network. ICAO-managed IPv6 overlay internetwork based | |||
d | on IATF that is dedicated to aviation (but not just | |||
to aviation (but not just aircraft). Currently (2021) in | aircraft). As currently (2021) designed, it accommodates | |||
design, accommodating the proposed DRIP identifier. | the proposed DRIP identifier. | |||
</dd> | </dd> | |||
<dt>IATF</dt> | <dt>IATF</dt> | |||
<dd> | <dd> | |||
International Aviation Trust Framework. ICAO effort to | International Aviation Trust Framework. ICAO effort to | |||
develop a resilient and secure by design framework for | develop a resilient and secure by design framework for | |||
networking in support of all aspects of aviation. | networking in support of all aspects of aviation. | |||
</dd> | </dd> | |||
<dt>ICAO</dt> | <dt>ICAO</dt> | |||
<dd> | <dd> | |||
International Civil Aviation Organization. A United Natio | International Civil Aviation Organization. A | |||
ns | specialized agency of the United Nations that develops an | |||
specialized agency that develops and harmonizes | d harmonizes | |||
international standards relating to aviation. | international standards relating to aviation. | |||
</dd> | </dd> | |||
<dt>IFF</dt> | <dt>IFF</dt> | |||
<dd> | <dd> | |||
Identification Friend or Foe. Originally, and in its narr ow | Identification Friend or Foe. Originally, and in its narrow | |||
sense still, a self-identification broadcast in response to | sense still, a self-identification broadcast in response to | |||
interrogation via radar, to reduce friendly fire incident s, | interrogation via radar to reduce friendly fire incidents , | |||
which led to military and commercial transponder systems | which led to military and commercial transponder systems | |||
such as ADS-B. In the broader sense used here, any proces s | such as ADS-B. In the broader sense used here, any proces s | |||
intended to distinguish friendly from potentially hostile | intended to distinguish friendly from potentially hostile | |||
UA or other entities encountered. | UA or other entities encountered. | |||
</dd> | </dd> | |||
<dt>LAANC</dt> | <dt>LAANC</dt> | |||
<dd> | <dd> | |||
Low Altitude Authorization and Notification Capability. | Low Altitude Authorization and Notification Capability. | |||
Supports ATC authorization requirements for UAS operation s: | Supports ATC authorization requirements for UAS operation s: | |||
remote pilots can apply to receive a near real-time | Remote Pilots can apply to receive a near real-time | |||
authorization for operations under 400 feet in controlled | authorization for operations under 400 feet in controlled | |||
airspace near airports. FAA authorized partial stopgap in | airspace near airports. FAA- authorized partial stopgap i n | |||
the US until UTM comes. | the US until UTM comes. | |||
</dd> | </dd> | |||
<dt>Location/Vector Message</dt> | <dt>Location/Vector Message</dt> | |||
<dd> | <dd> | |||
<xref target="F3411-19" format="default"/> Message Type 1 . | <xref target="F3411-19" format="default"/> Message Type 1 . | |||
Provides UA location, altitude, heading, speed, and statu s. | Provides UA location, altitude, heading, speed, and statu s. | |||
</dd> | </dd> | |||
<dt>LOS</dt> | <dt>LOS</dt> | |||
<dd> | <dd> | |||
Line Of Sight. An adjectival phrase describing any | Line Of Sight. An adjectival phrase describing any | |||
skipping to change at line 847 ¶ | skipping to change at line 893 ¶ | |||
</dd> | </dd> | |||
<dt>Message Pack</dt> | <dt>Message Pack</dt> | |||
<dd> | <dd> | |||
<xref target="F3411-19" format="default"/> Message Type 1 5. | <xref target="F3411-19" format="default"/> Message Type 1 5. | |||
The framed concatenation, in message type index order, of | The framed concatenation, in message type index order, of | |||
at most one message of each type of any subset of the oth er | at most one message of each type of any subset of the oth er | |||
types. Required to be sent in Wi-Fi NAN and in Bluetooth 5 | types. Required to be sent in Wi-Fi NAN and in Bluetooth 5 | |||
Extended Advertisements, if those media are used; cannot be | Extended Advertisements, if those media are used; cannot be | |||
sent in Bluetooth 4. | sent in Bluetooth 4. | |||
</dd> | </dd> | |||
<dt>MSL</dt> | <dt>MSL</dt> | |||
<dd> | <dd> | |||
Mean Sea Level. Shorthand for relative altitude, above th e | Mean Sea Level. Shorthand for relative altitude, above th e | |||
variously defined mean sea level, typically of a UA (but in | variously defined mean sea level, typically of a UA (but in | |||
<xref target="FRUR" format="default"/> also for a GCS), | <xref target="FRUR" format="default"/>, also for a GCS), | |||
measured in feet or meters. Should be explicitly specifie d | measured in feet or meters. Should be explicitly specifie d | |||
as either barometric (pressure) or geodetic (e.g., as | as either barometric (pressure) or geodetic (e.g., as | |||
indicated by GNSS, referenced to the WGS84 ellipsoid). | indicated by GNSS, referenced to the WGS84 ellipsoid). | |||
</dd> | </dd> | |||
<dt>Net-RID DP</dt> | <dt>Net-RID DP</dt> | |||
<dd> | <dd> | |||
Network RID Display Provider. <xref target="F3411-19" | Network RID Display Provider. <xref target="F3411-19" | |||
format="default"/> logical entity that aggregates data fr om | format="default"/> logical entity that aggregates data fr om | |||
Net-RID SPs as needed in response to user queries regardi ng | Net-RID SPs as needed in response to user queries regardi ng | |||
UAS operating within specified airspace volumes, to enabl e | UAS operating within specified airspace volumes to enable | |||
display by a user application on a user device. Potential ly | display by a user application on a user device. Potential ly | |||
could provide not only information sent via UAS RID but | could provide not only information sent via UAS RID but | |||
also information retrieved from UAS RID registries or | also information retrieved from UAS RID registries or | |||
information beyond UAS RID. Under superseded <xref | information beyond UAS RID. Under superseded <xref | |||
target="NPRM" format="default"/>, not recognized as a | target="NPRM" format="default"/>, not recognized as a | |||
distinct entity, but a service provided by USS, including | distinct entity, but as a service provided by USS, includ | |||
Public Safety USS that may exist primarily for this purpo | ing | |||
se | public safety USS that may exist primarily for this purpo | |||
se | ||||
rather than to manage any subscribed UAS. | rather than to manage any subscribed UAS. | |||
</dd> | </dd> | |||
<dt>Net-RID SP</dt> | <dt>Net-RID SP</dt> | |||
<dd> | <dd> | |||
Network RID Service Provider. <xref target="F3411-19" | Network RID Service Provider. <xref target="F3411-19" | |||
format="default"/> logical entity that collects RID | format="default"/> logical entity | |||
messages from UAS and responds to NetRID-DP queries for | that collects RID | |||
messages from UAS and responds to Net-RID DP queries for | ||||
information on UAS of which it is aware. Under superseded | information on UAS of which it is aware. Under superseded | |||
<xref target="NPRM" format="default"/>, the USS to which | <xref target="NPRM" format="default"/>, the USS to which | |||
the UAS is subscribed ("Remote ID USS"). | the UAS is subscribed (i.e., the "Remote ID USS"). | |||
</dd> | </dd> | |||
<dt>Network Identification Service</dt> | <dt>Network Identification Service</dt> | |||
<dd> | <dd> | |||
EU regulatory requirement in <xref target="Opinion1" | EU regulatory requirement in <xref target="Opinion1" | |||
format="default"/> and <xref target="WG105" | format="default"/>, corresponding to the Electronic Ident | |||
format="default"/> that presumably can be satisfied with | ification for which Minimum Operational Performance Standards are specified in < | |||
xref target="WG105" | ||||
format="default"/>, which presumably can be satisfied wit | ||||
h | ||||
appropriately configured <xref target="F3411-19" | appropriately configured <xref target="F3411-19" | |||
format="default"/> Network RID. | format="default"/> Network RID. | |||
</dd> | </dd> | |||
<dt>Observer</dt> | <dt>Observer</dt> | |||
<dd> | <dd> | |||
An entity (typically but not necessarily an individual | An entity (typically, but not necessarily, an individual | |||
human) who has directly or indirectly observed a UA and | human) who has directly or indirectly observed a UA and | |||
wishes to know something about it, starting with its ID. An | wishes to know something about it, starting with its ID. An | |||
Observer typically is on the ground and local (within VLO S | Observer typically is on the ground and local (within VLO S | |||
of an observed UA), but could be remote (observing via | of an observed UA), but could be remote (observing via | |||
Network RID or other surveillance), operating another UA, | Network RID or other surveillance), operating another UA, | |||
aboard another aircraft, etc. (DRIP) | aboard another aircraft, etc. (DRIP) | |||
</dd> | </dd> | |||
<dt>Operation</dt> | <dt>Operation</dt> | |||
<dd> | <dd> | |||
A flight, or series of flights of the same mission, by th e | A flight, or series of flights of the same mission, by th e | |||
same UAS, separated by at most brief ground intervals. | same UAS, separated by, at most, brief ground intervals. | |||
(Inferred from UTM usage, no formal definition found) | (Inferred from UTM usage; no formal definition found.) | |||
</dd> | </dd> | |||
<dt>Operator</dt> | <dt>Operator</dt> | |||
<dd> | <dd> | |||
"A person, organization or enterprise engaged in or | "A person, organization or | |||
offering to engage in an aircraft operation" <xref | enterprise engaged in or offering to engage in an | |||
target="ICAOUAS" format="default"/>. | aircraft operation" <xref target="ICAOUAS" | |||
format="default"/>. | ||||
</dd> | </dd> | |||
<dt>Operator ID Message</dt> | <dt>Operator ID Message</dt> | |||
<dd> | <dd> | |||
<xref target="F3411-19" format="default"/> Message Type 5 . | <xref target="F3411-19" format="default"/> Message Type 5 . | |||
Provides CAA issued Operator ID, only. Operator ID is | Provides CAA-issued Operator ID only. Operator ID is | |||
distinct from UAS ID. | distinct from UAS ID. | |||
</dd> | </dd> | |||
<dt>page</dt> | <dt>page</dt> | |||
<dd> | <dd> | |||
Payload of a frame, containing a chunk of a message that | Payload of a frame, containing a chunk of a message that | |||
has been segmented, to allow transport of a message longe | has been segmented, that allows transport of a message lo | |||
r | nger | |||
than can be encapsulated in a single frame. <xref | than can be encapsulated in a single frame. See <xref | |||
target="F3411-19" format="default"/> | target="F3411-19" format="default"/>. | |||
</dd> | </dd> | |||
<dt>PIC</dt> | <dt>PIC</dt> | |||
<dd> | <dd> | |||
Pilot In Command. "The pilot designated by the operator, | Pilot In Command. "The pilot designated by the | |||
or | operator, or in the case of general aviation, the | |||
in the case of general aviation, the owner, as being in | owner, as being in command and charged with the safe | |||
command and charged with the safe conduct of a flight" | conduct of a flight" <xref target="ICAOUAS" | |||
<xref target="ICAOUAS" format="default"/>. | format="default"/>. | |||
</dd> | </dd> | |||
<dt>PII</dt> | <dt>PII</dt> | |||
<dd> | <dd> | |||
Personally Identifiable Information. In the UAS RID | Personally Identifiable Information. In the UAS RID | |||
context, typically of the UAS Operator, Pilot In Command | context, typically of the UAS Operator, | |||
(PIC), or Remote Pilot, but possibly of an Observer or | PIC, or Remote Pilot, but possibly of an Observer or | |||
other party. This specific term is used primarily in the | other party. This specific term is used primarily in the | |||
US; other terms with essentially the same meaning are mor e | US; other terms with essentially the same meaning are mor e | |||
common in other jurisdictions (e.g., "personal data" in t he | common in other jurisdictions (e.g., "personal data" in t he | |||
EU). Used herein generically to refer to personal | EU). Used herein generically to refer to personal | |||
information, which the person might wish to keep private, | information that the person might wish to keep private | |||
or may have a statutorily recognized right to keep privat e | or may have a statutorily recognized right to keep privat e | |||
(e.g., under the EU <xref target="GDPR" | (e.g., under the EU <xref target="GDPR" | |||
format="default"/>), potentially imposing (legally or | format="default"/>), potentially imposing (legally or | |||
ethically) a confidentiality requirement on | ethically) a confidentiality requirement on | |||
protocols/systems. | protocols/systems. | |||
</dd> | </dd> | |||
<dt>Remote Pilot</dt> | <dt>Remote Pilot</dt> | |||
<dd> | <dd> | |||
A pilot using a GCS to exercise proximate control of a UA . | A pilot using a GCS to exercise proximate control of a UA . | |||
Either the PIC or under the supervision of the PIC. "The | Either the PIC or under the supervision of the PIC. "The | |||
skipping to change at line 954 ¶ | skipping to change at line 1009 ¶ | |||
protocols/systems. | protocols/systems. | |||
</dd> | </dd> | |||
<dt>Remote Pilot</dt> | <dt>Remote Pilot</dt> | |||
<dd> | <dd> | |||
A pilot using a GCS to exercise proximate control of a UA . | A pilot using a GCS to exercise proximate control of a UA . | |||
Either the PIC or under the supervision of the PIC. "The | Either the PIC or under the supervision of the PIC. "The | |||
person who manipulates the flight controls of a | person who manipulates the flight controls of a | |||
remotely-piloted aircraft during flight time" <xref | remotely-piloted aircraft during flight time" <xref | |||
target="ICAOUAS" format="default"/>. | target="ICAOUAS" format="default"/>. | |||
</dd> | </dd> | |||
<dt>RF</dt> | <dt>RF</dt> | |||
<dd> | <dd> | |||
Radio Frequency. Adjective, e.g., "RF link", or noun. | Radio Frequency. Can be used as an adjective (e.g., "RF l ink") or as a noun. | |||
</dd> | </dd> | |||
<dt>RF LOS</dt> | <dt>RF LOS</dt> | |||
<dd> | <dd> | |||
RF Line Of Sight. Typically used in describing a direct | RF Line Of Sight. Typically used in describing a direct | |||
radio link between a GCS and the UA under its control, | radio link between a GCS and the UA under its control, | |||
potentially subject to blockage by foliage, structures, | potentially subject to blockage by foliage, structures, | |||
terrain, or other vehicles, but less so than VLOS. | terrain, or other vehicles, but less so than VLOS. | |||
</dd> | </dd> | |||
<dt>RTCA</dt> | <dt>RTCA</dt> | |||
<dd> | <dd> | |||
Radio Technical Commission for Aeronautics. US aviation | Radio Technical Commission for Aeronautics. US aviation | |||
SDO. Cooperates extensively with EUROCAE. | SDO. Cooperates extensively with EUROCAE. | |||
</dd> | </dd> | |||
<dt>Safety</dt> | <dt>Safety</dt> | |||
<dd> | <dd> | |||
"The state in which risks associated with aviation | "The state in which risks associated with aviation | |||
activities, related to, or in direct support of the | activities, related to, or in direct support of the | |||
operation of aircraft, are reduced and controlled to an | operation of aircraft, are reduced and controlled to an | |||
acceptable level." From Annex 19 of the Chicago Conventio | acceptable level" (from Annex 19 of the Chicago Conventio | |||
n, | n, | |||
quoted in <xref target="ICAODEFS" format="default"/> | quoted in <xref target="ICAODEFS" format="default"/>). | |||
</dd> | </dd> | |||
<dt>Security</dt> | <dt>Security</dt> | |||
<dd> | <dd> | |||
"Safeguarding civil aviation against acts of unlawful | "Safeguarding civil aviation against acts of unlawful | |||
interference." From Annex 17 of the Chicago Convention, | interference" (from Annex 17 of the Chicago Convention, | |||
quoted in <xref target="ICAODEFS" format="default"/> | quoted in <xref target="ICAODEFS" format="default"/>). | |||
</dd> | </dd> | |||
<dt>Self-ID Message</dt> | <dt>Self-ID Message</dt> | |||
<dd> | <dd> | |||
<xref target="F3411-19" format="default"/> Message Type 3 . | <xref target="F3411-19" format="default"/> Message Type 3 . | |||
Provides a 1 byte descriptor and 23 byte ASCII free text | Provides a 1-byte descriptor and 23-byte ASCII free text | |||
field, only. Expected to be used to provide context on th e | field, only. Expected to be used to provide context on th e | |||
operation, e.g., mission intent. | operation, e.g., mission intent. | |||
</dd> | </dd> | |||
<dt>SDO</dt> | <dt>SDO</dt> | |||
<dd> | <dd> | |||
Standards Development Organization. ASTM, IETF, et al. | Standards Development Organization, such as ASTM, IETF, e tc. | |||
</dd> | </dd> | |||
<dt>SDSP</dt> | <dt>SDSP</dt> | |||
<dd> | <dd> | |||
Supplemental Data Service Provider. An entity that | Supplemental Data Service Provider. An entity that | |||
participates in the UTM system, but provides services | participates in the UTM system but provides services (e.g | |||
beyond those specified as basic UTM system functions (e.g | ., | |||
., | weather data) beyond those specified as basic UTM system | |||
weather data). <xref target="FAACONOPS" format="default"/ | functions. See <xref target="FAACONOPS" format="default"/ | |||
> | >. | |||
</dd> | </dd> | |||
<dt>System Message</dt> | <dt>System Message</dt> | |||
<dd> | <dd> | |||
<xref target="F3411-19" format="default"/> Message Type 4 . | <xref target="F3411-19" format="default"/> Message Type 4 . | |||
Provides general UAS information, including remote pilot | Provides general UAS information, including Remote Pilot | |||
location, multiple UA group operational area, etc. | location, multiple UA group operational area, etc. | |||
</dd> | </dd> | |||
<dt>U-space</dt> | <dt>U-space</dt> | |||
<dd> | <dd> | |||
EU concept and emerging framework for integration of UAS | EU concept and emerging framework for integration of | |||
into all classes of airspace, specifically including high | UAS into all types of airspace, including but not | |||
density urban areas, sharing airspace with manned aircraf | limited to volumes that are in high-density urban | |||
t | areas and/or shared with manned aircraft <xref | |||
<xref target="InitialView" format="default"/>. | target="InitialView" format="default"/>. | |||
</dd> | </dd> | |||
<dt>UA</dt> | <dt>UA</dt> | |||
<dd> | <dd> | |||
Unmanned Aircraft. In popular parlance, "drone". "An | Unmanned Aircraft. In popular parlance, "drone". "An | |||
aircraft which is intended to operate with no pilot on | aircraft which is intended to operate with no pilot on | |||
board" <xref target="ICAOUAS" format="default"/>. | board" <xref target="ICAOUAS" format="default"/>. | |||
</dd> | </dd> | |||
<dt>UAS</dt> | <dt>UAS</dt> | |||
<dd> | <dd> | |||
Unmanned Aircraft System. Composed of UA, all required | Unmanned Aircraft System. Composed of UA, all required | |||
skipping to change at line 1038 ¶ | skipping to change at line 1096 ¶ | |||
format="default"/>. | format="default"/>. | |||
</dd> | </dd> | |||
<dt>UAS ID</dt> | <dt>UAS ID</dt> | |||
<dd> | <dd> | |||
UAS identifier. Although called "UAS ID", it is actually | UAS identifier. Although called "UAS ID", it is actually | |||
unique to the UA, neither to the operator (as some UAS | unique to the UA, neither to the operator (as some UAS | |||
registration numbers have been and for exclusively | registration numbers have been and for exclusively | |||
recreational purposes are continuing to be assigned), nor | recreational purposes are continuing to be assigned), nor | |||
to the combination of GCS and UA that comprise the UAS. | to the combination of GCS and UA that comprise the UAS. | |||
<em>Maximum length of 20 bytes</em> <xref target="F3411-1 9" | <em>Maximum length of 20 bytes</em> <xref target="F3411-1 9" | |||
format="default"/>. If the UAS ID Type is 4, the proposed | format="default"/>. If the ID Type is 4, the proposed | |||
Specific Session ID, then the 20 bytes includes the subty pe | Specific Session ID, then the 20 bytes includes the subty pe | |||
index, leaving only 19 bytes for the actual identifier. | index, leaving only 19 bytes for the actual identifier. | |||
</dd> | </dd> | |||
<dt>UAS ID Type</dt> | ||||
<dt>ID Type</dt> | ||||
<dd> | <dd> | |||
UAS Identifier type index. 4 bits, see <xref | UAS identifier type index. 4 bits. See <xref | |||
target="IDtypes" format="default"></xref> for currently | target="IDtypes" format="default"></xref> for current | |||
defined values 0-3. <xref target="F3411-19" | standard values 0-3 and currently proposed additional | |||
format="default"/> | value 4. See also <xref target="F3411-19" | |||
format="default"/>. | ||||
</dd> | </dd> | |||
<dt>UAS RID</dt> | <dt>UAS RID</dt> | |||
<dd> | <dd> | |||
UAS Remote Identification and tracking. System to enable | UAS Remote Identification and tracking. System to enable | |||
arbitrary Observers to identify UA during flight. | arbitrary Observers to identify UA during flight. | |||
</dd> | </dd> | |||
<dt>USS</dt> | <dt>USS</dt> | |||
<dd> | <dd> | |||
UAS Service Supplier. "A USS is an entity that assist s | UAS Service Supplier. "A USS is an entity that assist s | |||
UAS Operators with meeting UTM operational requirement s | UAS Operators with meeting UTM operational requirement s | |||
that enable safe and efficient use of airspace" and | that enable safe and efficient use of airspace" <xref | |||
"... provide services to support the UAS community, t | target="FAACONOPS" format="default"/>. In addition, | |||
o | "USSs provide services to support the UAS community, to | |||
connect Operators and other entities to enable informatio n | connect Operators and other entities to enable informatio n | |||
flow across the USS Network, and to promote shared | flow across the USS Network, and to promote shared | |||
situational awareness among UTM participants" <xref | situational awareness among UTM participants" <xref | |||
target="FAACONOPS" format="default"/>. | target="FAACONOPS" format="default"/>. | |||
</dd> | </dd> | |||
<dt>UTM</dt> | <dt>UTM</dt> | |||
<dd> | <dd> | |||
UAS Traffic Management. "A specific aspect of air traffic | UAS Traffic Management. "A specific aspect of air traffic | |||
management which manages UAS operations safely, | management which manages UAS operations safely, | |||
economically and efficiently through the provision of | economically and efficiently through the provision of | |||
facilities and a seamless set of services in collaboratio n | facilities and a seamless set of services in collaboratio n | |||
with all parties and involving airborne and ground-based | with all parties and involving airborne and ground-based | |||
functions" <xref target="ICAOUTM" format="default"/>. In | functions" <xref target="ICAOUTM" format="default"/>. In | |||
the US, according to the FAA, a "traffic management" | the US, according to the FAA, a "traffic management" | |||
ecosystem for "uncontrolled" low altitude UAS operations, | ecosystem for "uncontrolled" UAS operations at low altitu des, | |||
separate from, but complementary to, the FAA's ATC system | separate from, but complementary to, the FAA's ATC system | |||
for "controlled" operations of manned aircraft. | for "controlled" operations of manned aircraft. | |||
</dd> | </dd> | |||
<dt>V2V</dt> | <dt>V2V</dt> | |||
<dd> | <dd> | |||
Vehicle-to-Vehicle. Originally communications between | Vehicle-to-Vehicle. Originally communications between | |||
automobiles, now extended to apply to communications | automobiles, now extended to apply to communications | |||
between vehicles generally. Often, together with | between vehicles generally. Often, together with | |||
Vehicle-to-Infrastructure (V2I) etc., generalized to V2X. | Vehicle-to-Infrastructure (V2I) and similar functions, ge neralized to V2X. | |||
</dd> | </dd> | |||
<dt>VLOS</dt> | <dt>VLOS</dt> | |||
<dd> | <dd> | |||
Visual Line Of Sight. Typically used in describing | Visual Line Of Sight. Typically used in describing | |||
operation of a UA by a "remote" pilot who can clearly | operation of a UA by a "remote" pilot who can clearly and | |||
directly (without video cameras or any aids other than | directly (without video cameras or any aids other than | |||
glasses or under some rules binoculars) see the UA and it s | glasses or, under some rules, binoculars) see the UA and its | |||
immediate flight environment. Potentially subject to | immediate flight environment. Potentially subject to | |||
blockage by foliage, structures, terrain, or other | blockage by foliage, structures, terrain, or other | |||
vehicles, more so than RF LOS. | vehicles, more so than RF LOS. | |||
</dd> | </dd> | |||
</dl> | </dl> | |||
</section> | </section> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>UAS RID Problem Space</name> | <section numbered="true" toc="default"> <name>UAS RID Problem Space</name> | |||
<t> | <t> | |||
CAAs worldwide are mandating UAS RID. The European Union Aviation | CAAs worldwide are mandating UAS RID. The European Union Aviation | |||
Safety Agency (EASA) has published <xref target="Delegated" | Safety Agency (EASA) has published <xref target="Delegated" | |||
format="default"/> and <xref target="Implementing" | format="default"/> and <xref target="Implementing" | |||
format="default"/> Regulations. The US FAA has published a "final" | format="default"/> regulations. The US FAA has published a "final" | |||
rule <xref target="FRUR" format="default"/> and has described the | rule <xref target="FRUR" format="default"/> and has described the | |||
key role that UAS RID plays in UAS Traffic Management (UTM) in | key role that UAS RID plays in UAS Traffic Management | |||
(UTM) in | ||||
<xref target="FAACONOPS" format="default"/> (especially Section | <xref target="FAACONOPS" format="default"/> (especially Section | |||
2.6). CAAs currently (2021) promulgate performance-based | 2.6). At the time of writing, CAAs promulgate performance-based | |||
regulations that do not specify techniques, but rather cite | regulations that do not specify techniques but rather cite | |||
industry consensus technical standards as acceptable means of | industry consensus technical standards as acceptable means of | |||
compliance. | compliance. | |||
</t> | </t> | |||
<t> | <t> | |||
The most widely cited such industry consensus technical standard | The most widely cited such industry consensus technical standard | |||
for UAS RID is <xref target="F3411-19" format="default"/>, which | for UAS RID is <xref target="F3411-19" format="default"/>, which | |||
defines two means of UAS RID: | defines two means of UAS RID: | |||
</t> | </t> | |||
<ul spacing="normal" empty="true"> | ||||
<ul spacing="normal"> | ||||
<li> | <li> | |||
Network RID defines a set of information for UAS to make | Network RID defines a set of information for UAS to make | |||
available globally indirectly via the Internet, through servers | available globally indirectly via the Internet, through servers | |||
that can be queried by Observers. | that can be queried by Observers. | |||
</li> | </li> | |||
<li> | <li> | |||
Broadcast RID defines a set of messages for UA to transmit | Broadcast RID defines a set of messages for UA to transmit | |||
locally directly one-way over Bluetooth or Wi-Fi (without IP or | locally directly one-way over Bluetooth or Wi-Fi (without IP or | |||
any other protocols between the data link and application | any other protocols between the data link and application | |||
layers), to be received in real time by local Observers. | layers), to be received in real time by local Observers. | |||
skipping to change at line 1130 ¶ | skipping to change at line 1195 ¶ | |||
available globally indirectly via the Internet, through servers | available globally indirectly via the Internet, through servers | |||
that can be queried by Observers. | that can be queried by Observers. | |||
</li> | </li> | |||
<li> | <li> | |||
Broadcast RID defines a set of messages for UA to transmit | Broadcast RID defines a set of messages for UA to transmit | |||
locally directly one-way over Bluetooth or Wi-Fi (without IP or | locally directly one-way over Bluetooth or Wi-Fi (without IP or | |||
any other protocols between the data link and application | any other protocols between the data link and application | |||
layers), to be received in real time by local Observers. | layers), to be received in real time by local Observers. | |||
</li> | </li> | |||
</ul> | </ul> | |||
<t> | <t> | |||
UAS using both means must send the same UAS RID application layer | UAS using both means must send the same UAS RID application-layer | |||
information via each <xref target="F3411-19" format="default"/>. | information via each <xref target="F3411-19" format="default"/>. | |||
The presentation may differ, as Network RID defines a data | The presentation may differ, as Network RID defines a data | |||
dictionary, whereas Broadcast RID defines message formats (which | dictionary, whereas Broadcast RID defines message formats (which | |||
carry items from that same data dictionary). The interval (or rate) | carry items from that same data dictionary). The interval (or rate) | |||
at which it is sent may differ, as Network RID can accommodate | at which it is sent may differ, as Network RID can accommodate | |||
Observer queries asynchronous to UAS updates (which generally need | Observer queries asynchronous to UAS updates (which generally need | |||
be sent only when information, such as location, changes), whereas | be sent only when information, such as location, changes), whereas | |||
Broadcast RID depends upon Observers receiving UA messages at the | Broadcast RID depends upon Observers receiving UA messages at the | |||
time they are transmitted. | time they are transmitted. | |||
</t> | </t> | |||
skipping to change at line 1142 ¶ | skipping to change at line 1208 ¶ | |||
information via each <xref target="F3411-19" format="default"/>. | information via each <xref target="F3411-19" format="default"/>. | |||
The presentation may differ, as Network RID defines a data | The presentation may differ, as Network RID defines a data | |||
dictionary, whereas Broadcast RID defines message formats (which | dictionary, whereas Broadcast RID defines message formats (which | |||
carry items from that same data dictionary). The interval (or rate) | carry items from that same data dictionary). The interval (or rate) | |||
at which it is sent may differ, as Network RID can accommodate | at which it is sent may differ, as Network RID can accommodate | |||
Observer queries asynchronous to UAS updates (which generally need | Observer queries asynchronous to UAS updates (which generally need | |||
be sent only when information, such as location, changes), whereas | be sent only when information, such as location, changes), whereas | |||
Broadcast RID depends upon Observers receiving UA messages at the | Broadcast RID depends upon Observers receiving UA messages at the | |||
time they are transmitted. | time they are transmitted. | |||
</t> | </t> | |||
<t> | <t> | |||
Network RID depends upon Internet connectivity in several segments | Network RID depends upon Internet connectivity in several segments | |||
from the UAS to each Observer. Broadcast RID should need Internet | from the UAS to each Observer. | |||
(or other Wide Area Network) connectivity only to retrieve UAS | Broadcast RID should need Internet | |||
registry information using the directly locally received UAS | (or other Wide Area Network) connectivity only to retrieve registry | |||
Identifier (UAS ID) as the primary unique key for database lookup. | information, using, as the primary unique key for database lookup, | |||
the UAS | ||||
Identifier (UAS ID) that was directly locally received. | ||||
Broadcast RID does not assume IP connectivity of UAS; messages are | Broadcast RID does not assume IP connectivity of UAS; messages are | |||
encapsulated by the UA <em>without IP</em>, directly in link layer | encapsulated by the UA <em>without IP</em>, directly in link-layer | |||
frames (Bluetooth 4, Bluetooth 5, Wi-Fi NAN, IEEE 802.11 Beacon, or | frames (Bluetooth 4, Bluetooth 5, Wi-Fi NAN, IEEE 802.11 Beacon, or | |||
in the future perhaps others). | perhaps others in the future). | |||
</t> | </t> | |||
<t anchor="IDtypes"> | <t anchor="IDtypes"> | |||
<xref target="F3411-19" format="default"/> specifies three UAS ID | <xref target="F3411-19" format="default"/> specifies three ID | |||
Type values and its currently (August 2021) proposed revision adds | Type values, and its proposed revision (at the time of writing) adds | |||
a fourth: | a fourth: | |||
</t> | </t> | |||
<ol spacing="normal" type="%d" group="type"> | <ol spacing="normal" type="%d" group="type"> | |||
<li> | <li> | |||
A static, manufacturer assigned, hardware serial number as | A static, manufacturer-assigned, hardware serial number as | |||
defined in ANSI/CTA-2063-A "Small Unmanned Aerial System Serial | defined in "Small Unmanned Aerial Systems Serial | |||
Numbers" <xref target="CTA2063A" format="default"/>. | Numbers" <xref target="CTA2063A" format="default"/>. | |||
</li> | </li> | |||
<li> | <li> | |||
A CAA assigned (generally static) ID, like the registration | A CAA-assigned (generally static) ID, like the registration | |||
number of a manned aircraft. | number of a manned aircraft. | |||
</li> | </li> | |||
<li> | <li> | |||
A UTM system assigned UUID <xref target="RFC4122" | A UTM-system-assigned Universally Unique Identifier (UUID) <xref target="RFC4122" | |||
format="default"/>, which can but need not be dynamic. | format="default"/>, which can but need not be dynamic. | |||
</li> | </li> | |||
<li> | <li> | |||
A Specific Session ID, of any of an 8 bit range of subtypes | A Specific Session ID, of any of an 8-bit range of subtypes | |||
defined external to ASTM and registered with ICAO, for which | defined external to ASTM and registered with ICAO, for which | |||
subtype 1 has been reserved by ASTM for the DRIP entity ID. | subtype 1 has been reserved by ASTM for the DRIP entity ID. | |||
</li> | </li> | |||
</ol> | </ol> | |||
<t> | <t> | |||
Per <xref target="Delegated" format="default"/>, the EU allows only | Per <xref target="Delegated" format="default"/>, the EU allows only | |||
UAS ID Type 1. Under <xref target="FRUR" format="default"/>, the US | ID Type 1. Under <xref target="FRUR" format="default"/>, the US | |||
allows types 1 and 3. <xref target="NPRM" format="default"/> | allows ID Type 1 and ID Type 3. <xref target="NPRM" format="default"/> | |||
proposed that a type 3 "Session ID" would be "e.g., a | proposed that a "Session ID" would be "e.g., a | |||
randomly-generated alphanumeric code assigned by a Remote ID UAS | randomly-generated alphanumeric code assigned by a Remote ID UAS | |||
Service Supplier (USS) on a per-flight basis designed to provide | Service Supplier (USS) on a per-flight basis designed to provide | |||
additional privacy to the operator", but given the omission of | additional privacy to the operator", but given the omission of | |||
Network RID from <xref target="FRUR" format="default"/>, how this | Network RID from <xref target="FRUR" format="default"/>, how this | |||
is to be assigned in the US is still to be determined. | is to be assigned in the US is still to be determined. | |||
</t> | </t> | |||
<t> | <t> | |||
As yet apparently there are no CAA public proposals to use UAS ID | As yet, there are apparently no CAA public proposals to use ID | |||
Type 2. In the preamble of <xref target="FRUR" format="default"/>, | Type 2. In the preamble of <xref target="FRUR" format="default"/>, | |||
the FAA argues that registration numbers should not be sent in RID, | the FAA argues that registration numbers should not be sent in RID, | |||
insists that the capability of looking up registration numbers from | insists that the capability of looking up registration numbers from | |||
information contained in RID should be restricted to FAA and other | information contained in RID should be restricted to FAA and other | |||
Government agencies, and implies that Session ID would be linked to | Government agencies, and implies that Session ID would be linked to | |||
the registration number only indirectly via the serial number in | the registration number only indirectly via the serial number in | |||
the registration database. The possibility of cryptographically | the registration database. The possibility of cryptographically | |||
blinding registration numbers, such that they can be revealed under | blinding registration numbers, such that they can be revealed under | |||
specified circumstances, does not appear to be mentioned in | specified circumstances, does not appear to be mentioned in | |||
applicable regulations or external technical standards. | applicable regulations or external technical standards. | |||
</t> | </t> | |||
<t> | <t> | |||
Under <xref target="Delegated" format="default"/>, the EU also | Per <xref target="Delegated" format="default"/>, the EU also | |||
requires an operator registration number (an additional identifier | requires an operator registration number (an additional identifier | |||
distinct from the UAS ID) that can be carried in an <xref | distinct from the UAS ID) that can be carried in an <xref | |||
target="F3411-19" format="default"/> optional Operator ID message. | target="F3411-19" format="default"/> optional Operator ID Message. | |||
</t> | </t> | |||
<t> | <t> | |||
<xref target="FRUR" format="default"/> allows RID requirements to | <xref target="FRUR" format="default"/> allows RID requirements to | |||
be met by either the UA itself, which is then designated a | be met either by the UA itself, which is then designated a | |||
"standard remote identification unmanned aircraft", or by an add-on | "standard remote identification unmanned aircraft", or by an add-on | |||
"remote identification broadcast module". Relative to a standard | "remote identification broadcast module". | |||
RID UA, the different requirements for a module are that the | ||||
latter: must transmit its own serial number (neither the serial | The requirements for a module are different than for a standard RID UA. The | |||
number of the UA to which it is attached, nor a Session ID); must | module: | |||
transmit takeoff location as a proxy for the location of the | ||||
pilot/GCS; need not transmit UA emergency status; and is allowed to | ||||
be used only for operations within VLOS of the remote pilot. | ||||
</t> | </t> | |||
<ul> | ||||
<li>must transmit its own serial number (neither the serial number of the UA | ||||
to which it is attached, nor a Session ID),</li> | ||||
<li>must transmit takeoff location as a proxy for the location of the | ||||
pilot/GCS,</li> | ||||
<li>need not transmit UA emergency status, and</li> | ||||
<li>is allowed to be used only for operations within VLOS of the Remote | ||||
Pilot.</li> | ||||
</ul> | ||||
<t> | <t> | |||
Jurisdictions may relax or waive RID requirements for certain | Jurisdictions may relax or waive RID requirements for certain | |||
operators and/or under certain conditions. For example, <xref | operators and/or under certain conditions. For example, <xref | |||
target="FRUR" format="default"/> allows operators with UAS not | target="FRUR" format="default"/> allows operators with UAS not | |||
equipped for RID to conduct VLOS operations at counter-intuitively | equipped for RID to conduct VLOS operations at counterintuitively | |||
named "FAA-recognized identification areas" (FRIA); radio | named "FAA-Recognized Identification Areas (FRIAs)"; radio-controlled mod | |||
controlled model aircraft flying clubs and other eligible | el aircraft flying clubs and other eligible | |||
organizations can apply to the FAA for such recognition of their | organizations can apply to the FAA for such recognition of their | |||
operating areas. | operating areas. | |||
</t> | </t> | |||
<section numbered="true" toc="default"> <name>Network RID</name> | <section numbered="true" toc="default"> <name>Network RID</name> | |||
<t> | ||||
<xref target="NetRID" format="default"/> illustrates Network RID | ||||
information flows. Only two of the three typically wireless links | ||||
shown involving the UAS (UA-GCS, UA-Internet, and GCS-Internet) | ||||
need exist to support C2 and Network RID. All three may exist, at | ||||
the same or different times, especially in BVLOS operations. There | ||||
must be at least one information flow path (direct or indirect) between t | ||||
he | ||||
GCS and the UA, for the former to exercise C2 over the latter. If | ||||
this path is two-way (as increasingly it is, even for inexpensive small | ||||
UAS), the UA will also send its status (and position, if | ||||
suitably equipped, e.g., with GNSS) to the GCS. There also must be | ||||
a path between at least one subsystem of the UAS (UA or GCS) and | ||||
the Internet, for the former to send status and position updates to | ||||
its USS (serving inter alia as a Net-RID SP). | ||||
</t> | ||||
<figure anchor="NetRID"> | <figure anchor="NetRID"> | |||
<name>"Network RID Information Flow"</name> | <name>Network RID Information Flow</name> | |||
<artwork type="ascii-art"> | <artwork type="ascii-art"> | |||
+-------------+ ****************** | +-------------+ ****************** | |||
| UA | * Internet * | | UA | * Internet * | |||
+--o-------o--+ * * | +--o-------o--+ * * | |||
| | * * | | | * * | |||
| | * * +------------+ | | | * * +------------+ | |||
| '--------*--(+)-----------*-----o | | | '--------*--(+)-----------*-----o | | |||
| * | * | | | | * | * | | | |||
| .--------*--(+)-----------*-----o NET-Rid SP | | | .--------*--(+)-----------*-----o Net-RID SP | | |||
| | * * | | | | | * * | | | |||
| | * .------*-----o | | | | * .------*-----o | | |||
| | * | * +------------+ | | | * | * +------------+ | |||
| | * | * | | | * | * | |||
| | * | * +------------+ | | | * | * +------------+ | |||
| | * '------*-----o | | | | * '------*-----o | | |||
| | * * | NET-Rid DP | | | | * * | Net-RID DP | | |||
| | * .------*-----o | | | | * .------*-----o | | |||
| | * | * +------------+ | | | * | * +------------+ | |||
| | * | * | | | * | * | |||
| | * | * +------------+ | | | * | * +------------+ | |||
+--o-------o--+ * '------*-----o Observer's | | +--o-------o--+ * '------*-----o Observer's | | |||
| GCS | * * | Device | | | GCS | * * | Device | | |||
+-------------+ ****************** +------------+ | +-------------+ ****************** +------------+ | |||
</artwork> | </artwork> | |||
</figure> | </figure> | |||
<t> | ||||
<xref target="NetRID" format="default"/> illustrates Network RID | ||||
information flows. Only two of the three typically wireless links | ||||
shown involving the UAS (UA-GCS, UA-Internet, and GCS-Internet) | ||||
need exist to support C2 and Network RID. All three may exist, at | ||||
the same or different times, especially in BVLOS operations. There | ||||
must be some information flow path (direct or indirect) between the | ||||
GCS and the UA, for the former to exercise C2 over the latter. If | ||||
this path is two-way (as increasingly it is, even for inexpensive | ||||
small UAS), the UA will also send its status (and position, if | ||||
suitably equipped, e.g., with GNSS) to the GCS. There also must be | ||||
some path between at least one subsystem of the UAS (UA or GCS) and | ||||
the Internet, for the former to send status and position updates to | ||||
its USS (serving <em>inter alia</em> as a Net-RID SP). | ||||
</t> | ||||
<t> | <t> | |||
Direct UA-Internet wireless links are expected to become more | Direct UA-Internet wireless links are expected to become more | |||
common, especially on larger UAS, but currently (2021) are rare. | common, especially on larger UAS, but, at the time of writing, they are r are. | |||
Instead, the RID data flow typically originates on the UA and | Instead, the RID data flow typically originates on the UA and | |||
passes through the GCS, or originates on the GCS. Network RID data | passes through the GCS, or it originates on the GCS. Network RID data | |||
makes three trips through the Internet (GCS-SP, SP-DP, DP-Observer, | makes three trips through the Internet (GCS-SP, SP-DP, DP-Observer, | |||
unless any of them are colocated), implying use of IP (and other | unless any of them are colocated), implying use of IP (and other | |||
middle layer protocols, e.g., TLS/TCP or DTLS/UDP) on those trips. | middle-layer protocols, e.g., TLS/TCP or DTLS/UDP) on those trips. | |||
IP is not necessarily used or supported on the UA-GCS link (if | IP is not necessarily used or supported on the UA-GCS link (if | |||
indeed that direct link exists, as it typically does now, but in | indeed that direct link exists, as it typically does now, but in | |||
BVLOS operations often will not). | BVLOS operations often will not). | |||
</t> | </t> | |||
<t> | <t> | |||
Network RID is publish-subscribe-query. In the UTM context: | Network RID is publish-subscribe-query. In the UTM context: | |||
</t> | </t> | |||
<ol spacing="normal" type="1"> | <ol spacing="normal" type="1"> | |||
<li> | <li> | |||
The UAS operator pushes an "operational intent" (the current | The UAS operator pushes an "operational intent" (the current | |||
term in UTM corresponding to a flight plan in manned aviation) | term in UTM corresponding to a flight plan in manned aviation) | |||
to the USS (call it USS#1) that will serve that UAS (call it | to the USS (call it USS#1) that will serve that UAS (call it | |||
UAS#1) for that operation, primarily to enable deconfliction | UAS#1) for that operation, primarily to enable deconfliction | |||
with other operations potentially impinging upon that | with other operations potentially impinging upon that | |||
operation's 4-D airspace volume (call it Volume#1). | operation's 4-D airspace volume (call it Volume#1). | |||
</li> | </li> | |||
<li> | <li> | |||
Assuming the operation is approved and commences, UAS#1 | Assuming the operation is approved and commences, UAS#1 | |||
periodically pushes location/status updates to USS#1, which | periodically pushes location/status updates to USS#1, which | |||
serves <em>inter alia</em> as the Network RID Service Provider | serves inter alia as the Network RID Service Provider | |||
(Net-RID SP) for that operation. | (Net-RID SP) for that operation. | |||
</li> | </li> | |||
<li> | <li> | |||
When users of any other USS (whether they be other UAS | When users of any other USS (whether they be other UAS | |||
operators or Observers) develop an interest in any 4-D airspace | operators or Observers) develop an interest in any 4-D airspace | |||
volume (e.g., because they wish to submit an operational intent | volume (e.g., because they wish to submit an operational intent | |||
or because they have observed a UA), they query their own USS | or because they have observed a UA), they query their own USS | |||
on the volumes in which they are interested. | on the volumes in which they are interested. | |||
</li> | </li> | |||
<li> | <li> | |||
Their USS query, via the UTM Discovery and Synchronization | Their USS query, via the UTM | |||
Service (DSS), all other USS in the UTM system, and learn of | Discovery and Synchronization | |||
Service (DSS), all other USS in the UTM system and learn of | ||||
any USS that have operations in those volumes (including any | any USS that have operations in those volumes (including any | |||
volumes intersecting them); thus those USS whose query volumes | volumes intersecting them); thus, those USS whose query volumes | |||
intersect Volume#1 (call them USS#2 through USS#n) learn that | intersect Volume#1 (call them USS#2 through USS#n) learn that | |||
USS#1 has such operations. | USS#1 has such operations. | |||
</li> | </li> | |||
<li> | <li> | |||
Interested parties can then subscribe to track updates on that | Interested parties can then subscribe to track updates on that | |||
operation of UAS#1, via their own USS, which serve as Network | operation of UAS#1, via their own USS, which serve as | |||
RID Display Providers (Net-RID DP) for that operation. | Network RID | |||
Display Providers (Net-RID DPs) for that operation. | ||||
</li> | </li> | |||
<li> | <li> | |||
USS#1 (as Net-RID SP) will then publish updates of UAS#1 status | USS#1 (as Net-RID SP) will then publish updates of UAS#1 status | |||
and position to all other subscribed USS in USS#2 through USS#n | and position to all other subscribed USS in USS#2 through USS#n | |||
(as Net-RID DP). | (as Net-RID DP). | |||
</li> | </li> | |||
<li> | <li> | |||
All Net-RID DP subscribed to that operation of UAS#1 will | All Net-RID DP subscribed to that operation of UAS#1 will | |||
deliver its track information to their users who subscribed to | deliver its track information to their users who subscribed to | |||
that operation of UAS#1 (via means unspecified by <xref | that operation of UAS#1 (via means unspecified by <xref | |||
target="F3411-19" format="default"/> etc., but generally | target="F3411-19" format="default"/>, etc., but generally | |||
presumed to be web browser based). | presumed to be web browser based). | |||
</li> | </li> | |||
</ol> | </ol> | |||
<t> | <t> | |||
Network RID has several connectivity scenarios: | Network RID has several connectivity scenarios: | |||
</t> | </t> | |||
<ul spacing="normal" empty="true"> | <ul spacing="normal"> | |||
<li> | ||||
<em>Persistently Internet connected UA</em> can consistently | <li> | |||
<em>Persistently Internet-connected UA</em> can consistently | ||||
directly source RID information; this requires wireless | directly source RID information; this requires wireless | |||
coverage throughout the intended operational airspace volume, | coverage throughout the intended operational airspace volume, | |||
plus a buffer (e.g., winds may drive the UA out of the volume). | plus a buffer (e.g., winds may drive the UA out of the volume). | |||
</li> | </li> | |||
<li> | <li> | |||
<em>Intermittently Internet connected UA</em>, can usually | <em>Intermittently Internet-connected UA</em>, can usually | |||
directly source RID information, but when offline (e.g., due to | directly source RID information, but when offline (e.g., due to | |||
signal blockage by a large structure being inspected using the | signal blockage by a large structure being inspected using the | |||
UAS), need the GCS to proxy source RID information. | UAS), need the GCS to proxy source RID information. | |||
</li> | </li> | |||
<li> | <li> | |||
<em>Indirectly connected UA</em> lack the ability to send IP | <em>Indirectly connected UA</em> lack the ability to send IP | |||
packets that will be forwarded into and across the Internet, | packets that will be forwarded into and across the Internet | |||
but instead have some other form of communications to another | but instead have some other form of communications to another | |||
node that can relay or proxy RID information to the Internet; | node that can relay or proxy RID information to the Internet; | |||
typically this node would be the GCS (which to perform its | typically, this node would be the GCS (which to perform its | |||
function must know where the UA is, although C2 link outages do | function must know where the UA is, although C2 link outages do | |||
occur). | occur). | |||
</li> | </li> | |||
<li> | <li> | |||
<em>Non-connected UA</em> have no means of sourcing RID | <em>Non-connected UA</em> have no means of sourcing RID | |||
information, in which case the GCS or some other interface | information, in which case the GCS or some other interface | |||
available to the operator must source it. In the extreme case, | available to the operator must source it. In the extreme case, | |||
this could be the pilot or other agent of the operator using a | this could be the pilot or other agent of the operator using a | |||
web browser/application to designate, to a USS or other UTM | web browser or application to designate, to a USS or other UTM | |||
entity, a time-bounded airspace volume in which an operation | entity, a time-bounded airspace volume in which an operation | |||
will be conducted. This is referred to as a "non-equipped | will be conducted. This is referred to as a "non-equipped | |||
network participant" engaging in "area operations". This may | network participant" engaging in "area operations". This may | |||
impede disambiguation of ID if multiple UAS operate in the same | impede disambiguation of ID if multiple UAS operate in the same | |||
or overlapping 4-D volumes. In most airspace volumes, most | or overlapping 4-D volumes. In most airspace volumes, most | |||
classes of UA will not be permitted to fly if non-connected. | classes of UA will not be permitted to fly if non-connected. | |||
</li> | </li> | |||
</ul> | </ul> | |||
<t> | <t> | |||
In most cases in the near term (2021), the Network RID first hop | In most cases in the near term (2021), the Network RID first-hop | |||
data link is likely to be cellular, which can also support BVLOS C2 | data link is likely to be either cellular (which can also support BVLOS C | |||
over existing large coverage areas, or Wi-Fi, which can also | 2 | |||
support Broadcast RID. However, provided the data link can support | over existing large coverage areas) or Wi-Fi (which can also | |||
support Broadcast RID). However, provided the data link can support | ||||
at least UDP/IP and ideally also TCP/IP, its type is generally | at least UDP/IP and ideally also TCP/IP, its type is generally | |||
immaterial to higher layer protocols. The UAS, as the ultimate | immaterial to higher-layer protocols. The UAS, as the ultimate | |||
source of Network RID information, feeds a Net-RID SP (typically | source of Network RID information, feeds a Net-RID SP (typically | |||
the USS to which the UAS operator subscribes), which proxies for | the USS to which the UAS operator subscribes), which proxies for | |||
the UAS and other data sources. An Observer or other ultimate | the UAS and other data sources. An Observer or other ultimate | |||
consumer of Network RID information obtains it from a Net-RID DP | consumer of Network RID information obtains it from a Net-RID DP | |||
(also typically a USS), which aggregates information from multiple | (also typically a USS), which aggregates information from multiple | |||
Net-RID SPs to offer airspace Situational Awareness (SA) coverage | Net-RID SPs to offer airspace Situational Awareness (SA) coverage | |||
of a volume of interest. Network RID Service and Display providers | of a volume of interest. Network RID Service and Display Providers | |||
are expected to be implemented as servers in well-connected | are expected to be implemented as servers in well-connected | |||
infrastructure, communicating with each other via the Internet, and | infrastructure, communicating with each other via the Internet and | |||
accessible by Observers via means such as web Application | accessible by Observers via means such as web Application | |||
Programming Interfaces (APIs) and browsers. | Programming Interfaces (APIs) and browsers. | |||
</t> | </t> | |||
<t> | <t> | |||
Network RID is the less constrained of the defined UAS RID means. | Network RID is the less constrained of the defined means of UAS RID. | |||
<xref target="F3411-19" format="default"/> specifies only Net-RID | <xref target="F3411-19" format="default"/> only specifies information exc | |||
SP to Net-RID DP information exchanges. It is presumed that IETF | hanges from Net-RID | |||
SP to Net-RID DP. It is presumed that IETF | ||||
efforts supporting the more constrained Broadcast RID (see next | efforts supporting the more constrained Broadcast RID (see next | |||
section) can be generalized for Network RID and potentially also | section) can be generalized for Network RID and potentially also | |||
for UAS to USS or other UTM communications. | for UAS-to-USS or other UTM communications. | |||
</t> | </t> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>Broadcast RID</name> | <section anchor="broadcast-rid" numbered="true" toc="default"> <name>Broadcast R | |||
ID</name> | ||||
<t> | ||||
<xref target="B-RID" format="default"/> illustrates the Broadcast RID | ||||
information flow. Note the absence of the Internet from the figure. | ||||
This is because Broadcast RID is one-way direct transmission of | ||||
application-layer messages over an RF data link (without IP) from | ||||
the UA to local Observer devices. Internet connectivity is involved | ||||
only in what the Observer chooses to do with the information | ||||
received, such as verify signatures using a web-based Broadcast | ||||
Authentication Verifier Service and look up information in | ||||
registries using the UAS ID as the primary unique key. | ||||
</t> | ||||
<figure anchor="B-RID"> | <figure anchor="B-RID"> | |||
<name>"Broadcast RID Information Flow"</name> | <name>Broadcast RID Information Flow</name> | |||
<artwork type="ascii-art"> | <artwork type="ascii-art"> | |||
+-------------------+ | +-------------------+ | |||
| Unmanned Aircraft | | | Unmanned Aircraft | | |||
+---------o---------+ | +---------o---------+ | |||
| | | | |||
| | | | |||
| | | | |||
| app messages directly over one-way RF data link | | app messages directly over one-way RF data link | |||
| | | | |||
| | | | |||
v | v | |||
skipping to change at line 1424 ¶ | skipping to change at line 1524 ¶ | |||
| | | | |||
| | | | |||
| | | | |||
| app messages directly over one-way RF data link | | app messages directly over one-way RF data link | |||
| | | | |||
| | | | |||
v | v | |||
+------------------o-------------------+ | +------------------o-------------------+ | |||
| Observer's device (e.g., smartphone) | | | Observer's device (e.g., smartphone) | | |||
+--------------------------------------+ | +--------------------------------------+ | |||
</artwork> | </artwork> | |||
</figure> | </figure> | |||
<t> | <t> | |||
<xref target="B-RID" format="default"/> illustrates Broadcast RID | Broadcast RID is conceptually similar to | |||
information flow. Note the absence of the Internet from the figure. | Automatic Dependent | |||
This is because Broadcast RID is one-way direct transmission of | Surveillance - Broadcast (ADS-B). However, for various technical | |||
application layer messages over a RF data link (without IP) from | ||||
the UA to local Observer devices. Internet connectivity is involved | ||||
only in what the Observer chooses to do with the information | ||||
received, such as verify signatures using a web-based Broadcast | ||||
Authentication Verifier Service and look up information in | ||||
registries using the UAS ID as the primary unique key. | ||||
</t> | ||||
<t> | ||||
Broadcast RID is conceptually similar to Automatic Dependent | ||||
Surveillance - Broadcast (ADS-B). However, for various technical | ||||
and other reasons, regulators including the EASA have not indicated | and other reasons, regulators including the EASA have not indicated | |||
intent to allow, and FAA has explicitly prohibited, use of ADS-B | intent to allow, and FAA has explicitly prohibited, use of ADS-B | |||
for UAS RID. | for UAS RID. | |||
</t> | </t> | |||
<t> | <t> | |||
<xref target="F3411-19" format="default"/> specifies four Broadcast | <xref target="F3411-19" format="default"/> specifies four Broadcast | |||
RID data links: Bluetooth 4.x, Bluetooth 5.x with Extended | RID data links: Bluetooth 4.x, Bluetooth 5.x with Extended | |||
Advertisements and Long Range Coded PHY (S=8), Wi-Fi NAN at 2.4 | Advertisements and Long-Range Coded PHY (S=8), Wi-Fi NAN at 2.4 | |||
GHz, and Wi-Fi NAN at 5 GHz. A UA must broadcast (using | GHz, and Wi-Fi NAN at 5 GHz. A UA must broadcast (using | |||
advertisement mechanisms where no other option supports broadcast) | advertisement mechanisms where no other option supports broadcast) | |||
on at least one of these. If sending on Bluetooth 5.x, it is also | on at least one of these. If sending on Bluetooth 5.x, it is | |||
required concurrently to do so on 4.x (referred to in <xref | required to do so concurrently on 4.x (referred to in <xref | |||
target="F3411-19" format="default"/> as Bluetooth Legacy); current | target="F3411-19" format="default"/> as "Bluetooth Legacy"); current | |||
(2021) discussions in ASTM F38.02 on revising the standard, | (2021) discussions in ASTM F38.02 on revising <xref target="F3411-19" for | |||
motivated by European standards drafts, suggest that both Bluetooth | mat="default"/>, | |||
motivated by drafts of European standards, suggest that both Bluetooth | ||||
versions will be required. If broadcasting Wi-Fi NAN at 5 GHz, it | versions will be required. If broadcasting Wi-Fi NAN at 5 GHz, it | |||
is also required concurrently to do so at 2.4 GHz; current | is required to do so concurrently at 2.4 GHz; current | |||
discussions in F38.02 include relaxing this. Wi-Fi Beacons are also | discussions in ASTM F38.02 include relaxing this. Wi-Fi Beacons are also | |||
under consideration. Future revisions of <xref target="F3411-19" | under consideration. Future revisions of <xref target="F3411-19" | |||
format="default"/> may allow other data links. | format="default"/> may allow other data links. | |||
</t> | </t> | |||
<t> | <t> | |||
The selection of the Broadcast media was driven by research into | The selection of Broadcast RID media was driven by research into | |||
what is commonly available on 'ground' units (smartphones and | what is commonly available on "ground" units (smartphones and | |||
tablets) and what was found as prevalent or 'affordable' in UA. | tablets) and what was found as prevalent or "affordable" in UA. | |||
Further, there must be an API for the Observer's receiving | Further, there must be an API for the Observer's receiving | |||
application to have access to these messages. As yet only Bluetooth | application to have access to these messages. As yet, only Bluetooth | |||
4.x support is readily available, thus the current focus is on | 4.x support is readily available; thus, the current focus is on | |||
working within the 31 byte payload limit of the Bluetooth 4.x | working within the 31-byte payload limit of the Bluetooth 4.x | |||
"Broadcast Frame" transmitted as an "advertisement" on beacon | "Broadcast Frame" transmitted as an "advertisement" on beacon | |||
channels. After overheads, this limits the RID message to 25 bytes | channels. After overheads, this limits the RID message to 25 bytes | |||
and UAS ID string to a maximum length of 20 bytes. | and the UAS ID string to a maximum length of 20 bytes. | |||
</t> | </t> | |||
<t> | <t> | |||
Length constraints also preclude a single Bluetooth 4.x frame | A single Bluetooth 4.x advertisement frame can just barely fit any UAS ID long | |||
carrying not only the UAS ID but also position, velocity, and other | enough to | |||
information that should be bound to the UAS ID, much less strong | be sufficiently unique for its purpose.</t> | |||
authentication data. Messages that cannot be encapsulated in a | ||||
single frame (thus far, only the Authentication Message) must be | <t> | |||
segmented into message "pages" (in the terminology of <xref | There is related information, which especially includes, but is not limited t | |||
target="F3411-19" format="default"/>). Message pages must somehow | o, | |||
be correlated as belonging to the same message. Messages carrying | the UA position and velocity, which must be represented by data | |||
position, velocity and other data must somehow be correlated with | elements long enough to provide precision sufficient for their | |||
the Basic ID message that carries the UAS ID. This correlation is | purpose while remaining unambiguous with respect to their reference | |||
expected to be done on the basis of MAC address: this may be | frame.</t> | |||
complicated by MAC address randomization; not all the common | <t> | |||
devices expected to be used by Observers have APIs that make sender | In order to enable Observer devices to verify that 1) the claimed UAS ID is i | |||
MAC addresses available to user space receiver applications; and | ndeed owned by the sender | |||
MAC addresses are easily spoofed. Data elements are not so detached | and 2) the related information was indeed sent by the owner of that same UAS ID, | |||
on other media (see Message Pack in the paragraph after next). | authentication data elements | |||
would typically be lengthy with conventional cryptographic signature schemes. T | ||||
hey would be | ||||
too long to fit in a single frame, even with the latest schemes currently being | ||||
standardized.</t> | ||||
<t> | ||||
Thus, it is infeasible to bundle information related to the UAS ID and correspon | ||||
ding | ||||
authentication data elements in a single Bluetooth 4.x frame; yet, somehow all t | ||||
hese must | ||||
be securely bound together.</t> | ||||
<t> | ||||
Messages that cannot be encapsulated in a | ||||
single frame (thus far, only the Authentication Message) must be segmented | ||||
into message "pages" (in the terminology of <xref target="F3411-19" | ||||
format="default"/>). Message pages must somehow be correlated as belonging | ||||
to the same message. Messages carrying position, velocity and other data | ||||
must somehow be correlated with the Basic ID Message that carries the UAS | ||||
ID. | ||||
This correlation is expected to be done on the basis of Media Access | ||||
Control (MAC) address. This may be complicated by MAC address | ||||
randomization. Not all the common devices expected to be used by Observers | ||||
have APIs that make sender MAC addresses available to user space receiver | ||||
applications. MAC addresses are easily spoofed. | ||||
Data elements are not | ||||
so detached on other media (see Message Pack in the paragraph after next). | ||||
</t> | </t> | |||
<t> | <t> | |||
<xref target="F3411-19" format="default"/> Broadcast RID specifies | <xref target="F3411-19" format="default"/> Broadcast RID specifies | |||
several message types. The 4 bit message type field in the header | several message types (see Section 5.4.5 and Table 3 of <xref | |||
can index up to 16 types. Only 7 are currently defined. Only 2 are | target="F3411-19" format="default"/>). The table below lists | |||
these message types. The 4-bit Message Type field in the header can | ||||
index up to 16 types. Only seven are defined at the time of writing. Only | ||||
two are | ||||
mandatory. All others are optional, unless required by a | mandatory. All others are optional, unless required by a | |||
jurisdictional authority, e.g., a CAA. To satisfy both EASA and FAA | jurisdictional authority, e.g., a CAA. To satisfy both EASA and FAA | |||
rules, all types are needed, except Self-ID and Authentication, as | rules, all types are needed, except Self-ID and Authentication, as the | |||
the data elements required by the rules are scattered across | data elements required by the rules are scattered across several | |||
several message types (along with some data elements not required | message types (along with some data elements not required by the | |||
by the rules). | rules). | |||
</t> | </t> | |||
<t> | <t> | |||
The Message Pack (type 0xF) is not actually a message, but the | The Message Pack (type 0xF) is not actually a message but the | |||
framed concatenation of at most one message of each type of any | framed concatenation of at most one message of each type of any | |||
subset of the other types, in type index order. Some of the | subset of the other types, in type index order. Some of the | |||
messages that it can encapsulate are mandatory, others optional. | messages that it can encapsulate are mandatory; others are optional. | |||
The Message Pack itself is mandatory on data links that can | The Message Pack itself is mandatory on data links that can | |||
encapsulate it in a single frame (Bluetooth 5.x and Wi-Fi). | encapsulate it in a single frame (Bluetooth 5.x and Wi-Fi). | |||
</t> | </t> | |||
<table anchor="MsgTypes"> | <table anchor="MsgTypes"> | |||
<name>F3411-19 Message Types</name> | <name>Message Types Defined in <xref target="F3411-19" format="default"/> </name> | |||
<thead> | <thead> | |||
<tr><td>Index</td><td>Name</td><td>Req</td><td>Notes</td></tr> | <tr><td>Index</td><td>Name</td><td>Req</td><td>Notes</td></tr> | |||
</thead> | </thead> | |||
<tbody> | <tbody> | |||
<tr><td>0x0</td><td>Basic ID</td><td>Mandatory</td> | <tr><td>0x0</td><td>Basic ID</td><td>Mandatory</td> | |||
<td>-</td></tr> | <td>-</td></tr> | |||
<tr><td>0x1</td><td>Location/Vector</td><td>Mandatory</td> | <tr><td>0x1</td><td>Location/Vector</td><td>Mandatory</td> | |||
<td>-</td></tr> | <td>-</td></tr> | |||
<tr><td>0x2</td><td>Authentication</td><td>Optional</td> | <tr><td>0x2</td><td>Authentication</td><td>Optional</td> | |||
<td>paged</td></tr> | <td>paged</td></tr> | |||
<tr><td>0x3</td><td>Self-ID</td><td>Optional</td> | <tr><td>0x3</td><td>Self-ID</td><td>Optional</td> | |||
<td>free text</td></tr> | <td>free text</td></tr> | |||
<tr><td>0x4</td><td>System</td><td>Optional</td> | <tr><td>0x4</td><td>System</td><td>Optional</td> | |||
<td>-</td></tr> | <td>-</td></tr> | |||
<tr><td>0x5</td><td>Operator</td><td>Optional</td> | <tr><td>0x5</td><td>Operator ID</td><td>Optional</td> | |||
<td>-</td></tr> | <td>-</td></tr> | |||
<tr><td>0xF</td><td>Message Pack</td><td>-</td> | <tr><td>0xF</td><td>Message Pack</td><td>-</td> | |||
<td>BT5 and Wi-Fi</td></tr> | <td>BT5 and Wi-Fi</td></tr> | |||
</tbody> | </tbody> | |||
<tfoot> | ||||
<tr><td>See Section 5.4.5 and Table 3 of <xref | ||||
target="F3411-19" format="default"/></td> | ||||
<td>-</td><td>-</td><td>-</td></tr> | ||||
</tfoot> | ||||
</table> | </table> | |||
<t> | <t> | |||
<xref target="F3411-19" format="default"/> Broadcast RID specifies | <xref target="F3411-19" format="default"/> Broadcast RID specifies | |||
very few quantitative performance requirements: static information | very few quantitative performance requirements: static information | |||
must be transmitted at least once per 3 seconds; dynamic | must be transmitted at least once per three seconds, and dynamic | |||
information (the Location/Vector message) must be transmitted at | information (the Location/Vector Message) must be transmitted at | |||
least once per second and be no older than one second when sent. | least once per second and be no older than one second when sent. | |||
<xref target="FRUR" format="default"/> requires all information be | <xref target="FRUR" format="default"/> requires all information be | |||
sent at least once per second. | sent at least once per second. | |||
</t> | </t> | |||
<t> | <t> | |||
<xref target="F3411-19" format="default"/> Broadcast RID transmits | <xref target="F3411-19" format="default"/> Broadcast RID transmits | |||
all information as cleartext (ASCII or binary), so static IDs | all information as cleartext (ASCII or binary), so static IDs | |||
enable trivial correlation of patterns of use, unacceptable in many | enable trivial correlation of patterns of use, which is unacceptable in m any | |||
applications, e.g., package delivery routes of competitors. | applications, e.g., package delivery routes of competitors. | |||
</t> | </t> | |||
<t> | <t> | |||
Any UA can assert any ID using the <xref target="F3411-19" | Any UA can assert any ID using the <xref target="F3411-19" format="defaul | |||
format="default"/> required Basic ID message, which lacks any | t"/> required Basic ID Message, which lacks any | |||
provisions for verification. The Position/Vector message likewise | provisions for verification. The Location/Vector Message likewise | |||
lacks provisions for verification, and does not contain the ID, so | lacks provisions for verification and does not contain the ID, so it | |||
must be correlated somehow with a Basic ID message: the developers | must be correlated somehow with a Basic ID Message: the developers | |||
of <xref target="F3411-19" format="default"/> have suggested using | of <xref target="F3411-19" format="default"/> have suggested using | |||
the MAC addresses on the Broadcast RID data link, but these may be | the MAC addresses on the Broadcast RID data link, but these may be | |||
randomized by the operating system stack to avoid the adversarial | randomized by the operating system stack to avoid the adversarial | |||
correlation problems of static identifiers. | correlation problems of static identifiers. | |||
</t> | </t> | |||
<t> | <t> | |||
The <xref target="F3411-19" format="default"/> optional | The <xref target="F3411-19" format="default"/> optional | |||
Authentication Message specifies framing for authentication data, | Authentication Message specifies framing for authentication data | |||
but does not specify any authentication method, and the maximum | but does not specify any authentication method, and the maximum | |||
length of the specified framing is too short for conventional | length of the specified framing is too short for conventional | |||
digital signatures and far too short for conventional certificates | digital signatures and far too short for conventional certificates | |||
(e.g., X.509). Fetching certificates via the Internet is not always | (e.g., X.509). Fetching certificates via the Internet is not always | |||
possible (e.g., Observers working in remote areas, such as national | possible (e.g., Observers working in remote areas, such as national | |||
forests), so devising a scheme whereby certificates can be | forests), so devising a scheme whereby certificates can be | |||
transported over Broadcast RID is necessary. The one-way nature of | transported over Broadcast RID is necessary. The one-way nature of | |||
Broadcast RID precludes challenge-response security protocols | Broadcast RID precludes challenge-response security protocols | |||
(e.g., Observers sending nonces to UA, to be returned in signed | (e.g., Observers sending nonces to UA, to be returned in signed | |||
messages). Without DRIP extensions to <xref target="F3411-19" | messages). Without DRIP extensions to <xref target="F3411-19" | |||
skipping to change at line 1581 ¶ | skipping to change at line 1691 ¶ | |||
possible (e.g., Observers working in remote areas, such as national | possible (e.g., Observers working in remote areas, such as national | |||
forests), so devising a scheme whereby certificates can be | forests), so devising a scheme whereby certificates can be | |||
transported over Broadcast RID is necessary. The one-way nature of | transported over Broadcast RID is necessary. The one-way nature of | |||
Broadcast RID precludes challenge-response security protocols | Broadcast RID precludes challenge-response security protocols | |||
(e.g., Observers sending nonces to UA, to be returned in signed | (e.g., Observers sending nonces to UA, to be returned in signed | |||
messages). Without DRIP extensions to <xref target="F3411-19" | messages). Without DRIP extensions to <xref target="F3411-19" | |||
format="default"/>, an Observer would be seriously challenged to | format="default"/>, an Observer would be seriously challenged to | |||
validate the asserted UAS ID or any other information about the UAS | validate the asserted UAS ID or any other information about the UAS | |||
or its operator looked up therefrom. | or its operator looked up therefrom. | |||
</t> | </t> | |||
<t> | <t> | |||
In the currently (2021) proposed revision to ASTM <xref | At the time of writing, the proposed revision of <xref target="F3411-19" | |||
target="F3411-19" format="default"/>, a new Authentication Type 5 | format="default"/> defines a new Authentication Type 5 ("Specific Authentication | |||
has been defined, "Specific Authentication Method" (SAM), to enable | Method (SAM)") | |||
to enable | ||||
SDOs other than ASTM to define authentication payload formats. The | SDOs other than ASTM to define authentication payload formats. The | |||
first byte of the payload is the SAM Type, used to demultiplex such | first byte of the payload is the SAM Type, used to demultiplex such | |||
variant formats. All formats for other than private experimental | variant formats. All formats (aside from those for private experimental | |||
use must be registered with ICAO, which assigns the SAM Type. Any | use) must be registered with ICAO, which assigns the SAM Type. Any | |||
authentication message payload that is to be sent in exactly the | Authentication Message payload that is to be sent in exactly the | |||
same form over all currently specified Broadcast RID media is | same form over all currently specified Broadcast RID media is | |||
limited by lower layer constraints to a total length of 201 bytes. | limited by lower-layer constraints to a total length of 201 bytes. | |||
For Authentication Type 5, expected to be used by DRIP, the SAM | For Authentication Type 5, which is expected to be used by DRIP, the SAM | |||
Type byte consumes the first of these, limiting DRIP authentication | Type byte consumes the first of these, limiting DRIP authentication | |||
payload formats to a maximum of 200 bytes. | payload formats to a maximum of 200 bytes. | |||
</t> | </t> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>USS in UTM and RID</name> | <section numbered="true" toc="default"> <name>USS in UTM and RID</name> | |||
<t> | <t> | |||
UAS RID and UTM are complementary; Network RID is a UTM service. | UAS RID and UTM are complementary; Network RID is a UTM service. | |||
The backbone of the UTM system is comprised of multiple USS: one or | The backbone of the UTM system is comprised of multiple USS: one or | |||
several per jurisdiction; some limited to a single jurisdiction, | several per jurisdiction with some being limited to a single jurisdiction | |||
others spanning multiple jurisdictions. USS also serve as the | while | |||
principal or perhaps the sole interface for operators and UAS into | others span multiple jurisdictions. USS also serve as the | |||
principal, or perhaps the sole, interface for operators and UAS into | ||||
the UTM environment. Each operator subscribes to at least one USS. | the UTM environment. Each operator subscribes to at least one USS. | |||
Each UAS is registered by its operator in at least one USS. Each | Each UAS is registered by its operator in at least one USS. Each | |||
operational intent is submitted to one USS; if approved, that UAS | operational intent is submitted to one USS; if approved, that UAS | |||
and operator can commence that operation. During the operation, | and operator can commence that operation. During the operation, | |||
status and location of that UAS must be reported to that USS, which | status and location of that UAS must be reported to that USS, which, | |||
in turn provides information as needed about that operator, UAS, | in turn, provides information as needed about that operator, UAS, | |||
and operation into the UTM system and to Observers via Network RID. | and operation into the UTM system and to Observers via Network RID. | |||
</t> | </t> | |||
<t> | <t> | |||
USS provide services not limited to Network RID; indeed, the | USS provide services not limited to Network RID; indeed, the primary | |||
primary USS function is deconfliction of airspace usage by | USS function is deconfliction of airspace usage between different UAS (an | |||
different UAS and other (e.g., manned aircraft, rocket launch) | d their | |||
operations. Most deconfliction involving a given operation is hoped | operators). It will occasionally deconflict UAS from non-UAS operations, | |||
to be completed prior to commencing that operation, and is called | such as | |||
"strategic deconfliction". If that fails, "tactical deconfliction" | manned aircraft and rocket | |||
comes into play; ABDAA may not involve USS, but GBDAA likely will. | launch. Most deconfliction involving a given operation is hoped to be | |||
Dynamic constraints, formerly called UAS Volume Restrictions (UVR), | completed prior to commencing that operation; this is called "strategic | |||
can be necessitated by local emergencies, extreme weather, etc., | deconfliction". If that fails, "tactical deconfliction" comes into | |||
specified by authorities on the ground, and propagated in UTM. | play; AirBorne DAA (ABDAA) may not involve USS, but Ground-Based DAA (GBD | |||
AA) | ||||
likely will. Dynamic | ||||
constraints, formerly called "UAS Volume Restrictions (UVRs)", can be | ||||
necessitated by circumstances such as local emergencies and extreme weath | ||||
er, specified by | ||||
authorities on the ground, and propagated in UTM. | ||||
</t> | </t> | |||
<t> | <t> | |||
No role for USS in Broadcast RID is currently specified by | No role for USS in Broadcast RID is currently specified by | |||
regulators or <xref target="F3411-19" format="default"/>. However, | regulators or by <xref target="F3411-19" format="default"/>. However, | |||
USS are likely to serve as registries (or perhaps registrars) for | USS are likely to serve as registries (or perhaps registrars) for | |||
UAS (and perhaps operators); if so, USS will have a role in all | UAS (and perhaps operators); if so, USS will have a role in all | |||
forms of RID. Supplemental Data Service Providers (SDSP) are also | forms of RID. Supplemental Data Service Providers (SDSPs) are also | |||
likely to find roles, not only in UTM as such but also in enhancing | likely to find roles, not only in UTM as such but also in enhancing | |||
UAS RID and related services. Whether USS, SDSP, etc. are involved | UAS RID and related services. | |||
or not, RID services, narrowly defined, provide regulator specified | RID services are used | |||
identification information; more broadly defined, RID services may | in concert with USS, SDSP, or other UTM entities (if and as needed and availa | |||
leverage identification to facilitate related services or | ble). | |||
functions, likely beginning with V2X. | Narrowly defined, RID services provide | |||
regulator-specified identification information; more broadly defined, | ||||
RID services may leverage identification to facilitate related | ||||
services or functions, likely beginning with V2X. | ||||
</t> | </t> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>DRIP Focus</name> | <section numbered="true" toc="default"> <name>DRIP Focus</name> | |||
<t> | <t> | |||
In addition to the gaps described above, there is a fundamental gap | In addition to the gaps described above, there is a fundamental gap | |||
in almost all current or proposed regulations and technical | in almost all current or proposed regulations and technical | |||
standards for UAS RID. As noted above, ID is not an end in itself, | standards for UAS RID. As noted above, ID is not an end in itself, | |||
but a means. Protocols specified in <xref target="F3411-19" | but a means. Protocols specified in <xref target="F3411-19" | |||
format="default"/> etc. provide limited information potentially | format="default"/> etc. provide limited information potentially | |||
enabling, and no technical means for, an Observer to communicate | enabling (but no technical means for) an Observer to communicate | |||
with the pilot, e.g., to request further information on the UAS | with the pilot, e.g., to request further information on the UAS | |||
operation or exit from an airspace volume in an emergency. The | operation or exit from an airspace volume in an emergency. The | |||
System Message provides the location of the pilot/GCS, so an | System Message provides the location of the pilot/GCS, so an | |||
Observer could physically go to the asserted location to look for | Observer could physically go to the asserted location to look for | |||
the remote pilot; this is at best slow and may not be feasible. | the Remote Pilot; this is slow, at best, and may not be feasible. | |||
What if the pilot is on the opposite rim of a canyon, or there are | What if the pilot is on the opposite rim of a canyon, or there are | |||
multiple UAS operators to contact, whose GCS all lie in different | multiple UAS operators to contact whose GCS all lie in different | |||
directions from the Observer? An Observer with Internet | directions from the Observer? An Observer with Internet | |||
connectivity and access privileges could look up operator PII in a | connectivity and access privileges could look up operator PII in a | |||
registry, then call a phone number in hopes someone who can | registry and then call a phone number in hopes that someone who can | |||
immediately influence the UAS operation will answer promptly during | immediately influence the UAS operation will answer promptly during | |||
that operation; this is at best unreliable and may not be prudent. | that operation; this is unreliable, at best, and may not be prudent. | |||
Should pilots be encouraged to answer phone calls while flying? | Should pilots be encouraged to answer phone calls while flying? | |||
Internet technologies can do much better than this. | Internet technologies can do much better than this. | |||
</t> | </t> | |||
<t> | <t> | |||
Thus complementing <xref target="F3411-19" format="default"/> with | Thus, to achieve widespread adoption of a RID system supporting safe and secur | |||
protocols enabling strong authentication, preserving operator | e | |||
privacy while enabling immediate use of information by authorized | operation of UAS, protocols must do the following (despite the intrinsic tensi | |||
parties, is critical to achieve widespread adoption of a RID system | on among | |||
supporting safe and secure operation of UAS. Just as <xref | these objectives): | |||
</t> | ||||
<ul> | ||||
<li>preserve operator privacy,</li> | ||||
<li>enable strong authentication, and</li> | ||||
<li>enable the immediate use of information by authorized parties.</li> | ||||
</ul> | ||||
<t> | ||||
Just as <xref | ||||
target="F3411-19" format="default"/> is expected to be approved by | target="F3411-19" format="default"/> is expected to be approved by | |||
regulators as a basic means of compliance with UAS RID regulations, | regulators as a basic means of compliance with UAS RID regulations, | |||
DRIP is expected likewise to be approved to address further issues, | DRIP is likewise expected to be approved to address further issues, | |||
starting with the creation and registration of Session IDs. | starting with the creation and registration of Session IDs. | |||
</t> | </t> | |||
<t> | <t> | |||
DRIP will focus on making information obtained via UAS RID | DRIP will focus on making information obtained via UAS RID | |||
immediately usable: | immediately usable: | |||
</t> | </t> | |||
<ol spacing="normal" type="1"> | <ol spacing="normal" type="1"> | |||
<li> | <li> | |||
by making it trustworthy (despite the severe constraints | by making it trustworthy (despite the severe constraints | |||
of Broadcast RID); | of Broadcast RID); | |||
</li> | </li> | |||
<li> | <li> | |||
by enabling verification that a UAS is registered for RID, and | by enabling verification that a UAS is registered for RID, and, | |||
if so, in which registry (for classification of trusted | if so, in which registry (for classification of trusted | |||
operators on the basis of known registry vetting, even by | operators on the basis of known registry vetting, even by | |||
Observers lacking Internet connectivity at observation time); | Observers lacking Internet connectivity at observation time); | |||
</li> | </li> | |||
<li> | <li> | |||
by facilitating independent reports of UA aeronautical data | by facilitating independent reports of UA aeronautical data | |||
(location, velocity, etc.) to confirm or refute the operator | (location, velocity, etc.) to confirm or refute the operator | |||
self-reports upon which UAS RID and UTM tracking are based; | self-reports upon which UAS RID and UTM tracking are based; | |||
</li> | </li> | |||
<li> | <li> | |||
by enabling instant establishment, by authorized parties, | by enabling instant establishment, by authorized parties, | |||
of secure communications with the remote pilot. | of secure communications with the Remote Pilot. | |||
</li> | </li> | |||
</ol> | </ol> | |||
<t> | <t> | |||
The foregoing considerations, beyond those addressed by baseline | The foregoing considerations, beyond those addressed by baseline | |||
UAS RID standards such as <xref target="F3411-19" | UAS RID standards such as <xref target="F3411-19" | |||
format="default"/>, imply the following requirements for DRIP. | format="default"/>, imply the requirements for DRIP detailed in <xref tar get="reqs"/>. | |||
</t> | </t> | |||
</section> | </section> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>Requirements</name> | <section numbered="true" toc="default" anchor="reqs"> <name>Requirements</name> | |||
<t> | <t> | |||
The following requirements apply to DRIP as a set of related | The following requirements apply to DRIP as a set of related | |||
protocols, various subsets of which, in conjunction with other IETF | protocols, various subsets of which, in conjunction with other IETF | |||
and external technical standards, may suffice to comply with the | and external technical standards, may suffice to comply with the | |||
regulations in any given jurisdiction or meet any given user need. | regulations in any given jurisdiction or meet any given user need. | |||
It is not intended that each and every DRIP protocol alone satisfy | It is not intended that each and every protocol of the DRIP set, alone, s atisfy | |||
each and every requirement. To satisfy these requirements, Internet | each and every requirement. To satisfy these requirements, Internet | |||
connectivity is required some of the time: e.g., to support DRIP | connectivity is required some of the time (e.g., to support DRIP | |||
entity identifier creation/registration; but not all of the time, | Entity Identifier creation/registration) but not all of the time | |||
e.g., authentication of an asserted DRIP entity identifier can be | (e.g., authentication of an asserted DRIP Entity Identifier can be | |||
achieved by a fully working and provisioned Observer device even | achieved by a fully working and provisioned Observer device even | |||
when that device is off-line so is required at all times. | when that device is off-line so is required at all times). | |||
</t> | </t> | |||
<section numbered="true" toc="default"> <name>General</name> | <section numbered="true" toc="default" anchor="gen-req"> <name>General</name> | |||
<section numbered="true" toc="default"> <name>Normative Requirements</name> | <section numbered="true" toc="default"> <name>Normative Requirements</name> | |||
<ol spacing="normal" type="GEN-%d" group="gen"> | <ol spacing="normal" type="GEN-%d" group="gen" indent="9"> | |||
<li> | ||||
Provable Ownership: DRIP MUST enable verification that the | <li> | |||
asserted entity (typically UAS) ID is that of the actual | Provable Ownership: DRIP <bcp14>MUST</bcp14> enable verification that the | |||
current sender (i.e., the entity ID in the DRIP authenticated | asserted entity (typically UAS) ID is that of the actual current sender | |||
message set is not a replay attack or other spoof, e.g., by | (i.e., the Entity ID in the DRIP authenticated message set is not a replay | |||
verifying an asymmetric cryptographic signature using a sender | attack or other spoof), even on an Observer device lacking Internet | |||
provided public key from which the asserted UAS ID can be at | connectivity at the time of observation. | |||
least partially derived), even on an Observer device lacking | ||||
Internet connectivity at the time of observation. | ||||
</li> | </li> | |||
<li> | <li> | |||
Provable Binding: DRIP MUST enable the cryptographic binding of | Provable Binding: DRIP <bcp14>MUST</bcp14> enable the cryptograph ic binding of | |||
all other <xref target="F3411-19" format="default"/> messages | all other <xref target="F3411-19" format="default"/> messages | |||
from the same actual current sender to the UAS ID asserted in | from the same actual current sender to the UAS ID asserted in | |||
the Basic ID message. | the Basic ID Message. | |||
</li> | </li> | |||
<li> | <li> | |||
Provable Registration: DRIP MUST enable cryptographically | Provable Registration: DRIP <bcp14>MUST</bcp14> enable cryptograp hically | |||
secure verification that the UAS ID is in a registry and | secure verification that the UAS ID is in a registry and | |||
identification of that registry, even on an Observer device | identification of that registry, even on an Observer device | |||
lacking Internet connectivity at the time of observation; the | lacking Internet connectivity at the time of observation; the | |||
same sender may have multiple IDs, potentially in different | same sender may have multiple IDs, potentially in different | |||
registries, but each ID must clearly indicate in which registry | registries, but each ID must clearly indicate in which registry | |||
it can be found. | it can be found. | |||
</li> | </li> | |||
<li> | <li> | |||
Readability: DRIP MUST enable information (regulation required | Readability: DRIP <bcp14>MUST</bcp14> enable information (regulat ion required | |||
elements, whether sent via UAS RID or looked up in registries) | elements, whether sent via UAS RID or looked up in registries) | |||
to be read and utilized by both humans and software. | to be read and utilized by both humans and software. | |||
</li> | </li> | |||
<li> | <li> | |||
Gateway: DRIP MUST enable Broadcast RID to Network RID | Gateway: DRIP <bcp14>MUST</bcp14> enable | |||
application layer gateways to stamp messages with precise | application-layer gateways from Broadcast RID to Network RID to s | |||
tamp messages with precise | ||||
date/time received and receiver location, then relay them to a | date/time received and receiver location, then relay them to a | |||
network service (e.g., SDSP or distributed ledger) whenever the | network service (e.g., SDSP or distributed ledger) whenever the | |||
gateway has Internet connectivity. | gateway has Internet connectivity. | |||
</li> | </li> | |||
<li> | <li> | |||
Contact: DRIP MUST enable dynamically establishing, with AAA, | Contact: DRIP <bcp14>MUST</bcp14> enable dynamically establishing, with | |||
per policy, strongly mutually authenticated, end-to-end | AAA, | |||
strongly encrypted communications with the UAS RID sender and | per policy, strongly mutually authenticated, end-to-end | |||
entities looked up from the UAS ID, including at least the | strongly encrypted communications with the UAS RID sender and | |||
pilot (remote pilot or Pilot In Command), the USS (if any) | entities looked up from the UAS ID, including at least the | |||
under which the operation is being conducted, and registries in | (1) pilot (Remote Pilot or Pilot In Command), (2) the USS (if any) | |||
which data on the UA and pilot are held, whenever each party to | under which the operation is being conducted, and (3) registries | |||
such desired communications has a currently usable means of | in which data on the UA and pilot are held. This requirement applies | |||
resolving the other party's DRIP entity identifier to a locator | whenever each | |||
(IP address) and currently usable bidirectional IP (not | party to such desired communications has a currently usable | |||
necessarily Internet) connectivity with the other party. | means of resolving the other party's DRIP Entity Identifier | |||
to a locator (IP address) and currently usable bidirectional | ||||
IP (not necessarily Internet) connectivity with the other | ||||
party. | ||||
</li> | </li> | |||
<li> | <li> | |||
QoS: DRIP MUST enable policy based specification of performance | QoS: DRIP <bcp14>MUST</bcp14> enable policy-based specification o f performance | |||
and reliability parameters. | and reliability parameters. | |||
</li> | </li> | |||
<li> | <li> | |||
Mobility: DRIP MUST support physical and logical mobility of | Mobility: DRIP <bcp14>MUST</bcp14> support physical and logical m | |||
UA, GCS and Observers. DRIP SHOULD support mobility of | obility of | |||
UA, GCS, and Observers. DRIP <bcp14>SHOULD</bcp14> support mobili | ||||
ty of | ||||
essentially all participating nodes (UA, GCS, Observers, | essentially all participating nodes (UA, GCS, Observers, | |||
Net-RID SP, Net-RID DP, Private Registry, SDSP, and potential ly | Net-RID SP, Net-RID DP, Private Registries, SDSP, and potentially | |||
others as RID and UTM evolve). | others as RID and UTM evolve). | |||
</li> | </li> | |||
<li> | <li> | |||
Multihoming: DRIP MUST support multihoming of UA and GCS, for | Multihoming: DRIP <bcp14>MUST</bcp14> support multihoming of UA a nd GCS, for | |||
make-before-break smooth handoff and resiliency against | make-before-break smooth handoff and resiliency against | |||
path/link failure. DRIP SHOULD support multihoming of | path or link failure. DRIP <bcp14>SHOULD</bcp14> support multihom ing of | |||
essentially all participating nodes. | essentially all participating nodes. | |||
</li> | </li> | |||
<li> | <li> | |||
Multicast: DRIP SHOULD support multicast for efficient | Multicast: DRIP <bcp14>SHOULD</bcp14> support multicast for effic ient | |||
and flexible publish-subscribe notifications, e.g., of UAS | and flexible publish-subscribe notifications, e.g., of UAS | |||
reporting positions in designated airspace volumes. | reporting positions in designated airspace volumes. | |||
</li> | </li> | |||
<li> | <li> | |||
Management: DRIP SHOULD support monitoring of the health | Management: DRIP <bcp14>SHOULD</bcp14> support monitoring of the health | |||
and coverage of Broadcast and Network RID services. | and coverage of Broadcast and Network RID services. | |||
</li> | </li> | |||
</ol> | </ol> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>Rationale</name> | <section numbered="true" toc="default"> <name>Rationale</name> | |||
<t> | <t> | |||
Requirements imposed either by regulation or <xref | Requirements imposed either by regulation or by <xref | |||
target="F3411-19" format="default"/> are not reiterated here, but | target="F3411-19" format="default"/> are not reiterated in this document, | |||
drive many of the numbered requirements listed here. The <xref | but they | |||
target="FRUR" format="default"/> regulatory QoS requirement | drive many of the numbered requirements listed here. The regulatory perfo | |||
rmance requirement in <xref | ||||
target="FRUR" format="default"/> | ||||
currently would be satisfied by ensuring information refresh rates | currently would be satisfied by ensuring information refresh rates | |||
of at least 1 Hertz, with latencies no greater than 1 second, at | of at least 1 Hertz, with latencies no greater than 1 second, at | |||
least 80% of the time, but these numbers may vary between | least 80% of the time, but these numbers may vary between | |||
jurisdictions and over time. So instead the DRIP QoS requirement is | jurisdictions and over time. Instead, the DRIP QoS requirement is | |||
that performance, reliability, etc. parameters be user policy | that parameters such as performance and reliability be specifiable by use | |||
specifiable, which does not imply satisfiable in all cases, but | r policy, | |||
(especially together with the management requirement) implies that | which does not imply satisfiable in all cases but | |||
does imply (especially together with the Management requirement) that | ||||
when specifications are not met, appropriate parties are notified. | when specifications are not met, appropriate parties are notified. | |||
</t> | </t> | |||
<t> | <t> | |||
The "provable ownership" requirement addresses the possibility that | The Provable Ownership requirement addresses the possibility that the | |||
the actual sender is not the claimed sender (i.e., is a spoofer). | actual sender is not the claimed sender (i.e., is a spoofer). DRIP | |||
The "provable binding" requirement addresses the MAC address | could meet this requirement by, for example, verifying an asymmetric | |||
correlation problem of <xref target="F3411-19" format="default"/> | cryptographic signature using a sender-provided public key from which | |||
noted above. The "provable registration" requirement may impose | the asserted UAS ID can be at least partially derived. The Provable | |||
burdens not only on the UAS sender and the Observer's receiver, but | Binding requirement addresses the problem with MAC address correlation | |||
also on the registry; yet it cannot depend upon the Observer being | <xref target="F3411-19" format="default"/> noted in <xref | |||
able to contact the registry at the time of observing the UA. The | target="broadcast-rid" format="default"/>. The Provable Registration | |||
"readability" requirement pertains to the structure and format of | requirement may impose burdens not only on the UAS sender and the | |||
information at endpoints rather than its encoding in transit, so | Observer's receiver, but also on the registry; yet, it cannot depend | |||
may involve machine assisted format conversions, e.g., from binary | upon the Observer being able to contact the registry at the time of | |||
encodings, and/or decryption (see <xref target="priv" | observing the UA. The Readability requirement pertains to the | |||
format="default"/>). | structure and format of information at endpoints rather than its | |||
encoding in transit, so it may involve machine-assisted format | ||||
conversions (e.g., from binary encodings) and/or decryption (see <xref | ||||
target="priv" format="default"/>). | ||||
</t> | </t> | |||
<t> | <t> | |||
The "gateway" requirement is in pursuit of three objectives: (1) | The Gateway requirement is in pursuit of three objectives: (1) | |||
mark up a RID message with where and when it was actually received, | mark up a RID message with where and when it was actually received, | |||
which may agree or disagree with the self-report in the set of | which may agree or disagree with the self-report in the set of | |||
messages; (2) defend against replay attacks; and (3) support | messages; (2) defend against replay attacks; and (3) support | |||
optional SDSP services such as multilateration, to complement UAS | optional SDSP services such as multilateration, to complement UAS | |||
position self-reports with independent measurements. This is the | position self-reports with independent measurements. This is the | |||
only instance in which DRIP transports <xref target="F3411-19" | only instance in which DRIP transports <xref target="F3411-19" format="de | |||
format="default"/> messages; most of DRIP pertains to the | fault"/> messages; most of DRIP pertains to the | |||
authentication of such messages and identifiers carried in them. | authentication of such messages and identifiers carried in them. | |||
</t> | </t> | |||
<t> | <t> | |||
The "contact" requirement allows any party that learns a UAS ID | The Contact requirement allows any party that learns a UAS ID | |||
(that is a DRIP entity identifier rather than another UAS ID Type) | (that is a DRIP Entity Identifier rather than another ID Type) | |||
to request establishment of a communications session with the | to request establishment of a communications session with the | |||
corresponding UAS RID sender and certain entities associated with | corresponding UAS RID sender and certain entities associated with | |||
that UAS, but AAA and policy restrictions, <em>inter alia</em> on | that UAS, but AAA and policy restrictions, inter alia on | |||
resolving the identifier to any locators (typically IP addresses), | resolving the identifier to any locators (typically IP addresses), | |||
should prevent unauthorized parties from distracting or harassing | should prevent unauthorized parties from distracting or harassing | |||
pilots. Thus some but not all Observers of UA, receivers of | pilots. Thus, some but not all Observers of UA, receivers of | |||
Broadcast RID, clients of Network RID, and other parties can | Broadcast RID, clients of Network RID, and other parties can | |||
become successfully initiating endpoints for these sessions. | become successfully initiating endpoints for these sessions. | |||
</t> | </t> | |||
<t> | <t> | |||
The "QoS" requirement is only that performance and reliability | The QoS requirement is only that performance and reliability | |||
parameters can be <em>specified</em> by policy, not that any such | parameters can be <em>specified</em> by policy, not that any such | |||
specifications must be guaranteed to be met; any failure to meet | specifications must be guaranteed to be met; any failure to meet | |||
such would be reported under the "management" requirement. Examples | such would be reported under the Management requirement. Examples | |||
of such parameters are the maximum time interval at which messages | of such parameters are the maximum time interval at which messages | |||
carrying required data elements may be transmitted, the maximum | carrying required data elements may be transmitted, the maximum | |||
tolerable rate of loss of such messages, and the maximum tolerable | tolerable rate of loss of such messages, and the maximum tolerable | |||
latency between a dynamic data element (e.g., GNSS position of UA) | latency between a dynamic data element (e.g., GNSS position of UA) | |||
being provided to the DRIP sender and that element being delivered | being provided to the DRIP sender and that element being delivered | |||
by the DRIP receiver to an application. | by the DRIP receiver to an application. | |||
</t> | </t> | |||
<t> | <t> | |||
The "mobility" requirement refers to rapid geographic mobility of | The Mobility requirement refers to rapid geographic mobility of | |||
nodes, changes of their points of attachment to networks, and | nodes, changes of their points of attachment to networks, and | |||
changes to their IP addresses; it is not limited to micro-mobility | changes to their IP addresses; it is not limited to micro-mobility | |||
within a small geographic area or single Internet access provider. | within a small geographic area or single Internet access provider. | |||
</t> | </t> | |||
</section> | </section> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name> Identifier</name> | <section numbered="true" toc="default" anchor="id-req"> <name> Identifier</name> | |||
<section numbered="true" toc="default"> <name>Normative Requirements</name> | <section numbered="true" toc="default"> <name>Normative Requirements</name> | |||
<ol spacing="normal" type="ID-%d" group="id"> | <ol spacing="normal" type="ID-%d" group="id" indent="9"> | |||
<li> | <li> | |||
Length: The DRIP entity identifier MUST NOT be longer than 19 | Length: The DRIP Entity Identifier <bcp14>MUST NOT</bcp14> be lon ger than 19 | |||
bytes, to fit in the Specific Session ID subfield of the UAS ID | bytes, to fit in the Specific Session ID subfield of the UAS ID | |||
field of the Basic ID message of the currently (August 2021) | field of the Basic ID Message of the | |||
proposed revision of <xref target="F3411-19" | proposed revision of <xref target="F3411-19" | |||
format="default"/>. | format="default"/> (at the time of writing). | |||
</li> | </li> | |||
<li> | <li> | |||
Registry ID: The DRIP identifier MUST be sufficient to identify | Registry ID: The DRIP identifier <bcp14>MUST</bcp14> be sufficien t to identify | |||
a registry in which the entity identified therewith is listed. | a registry in which the entity identified therewith is listed. | |||
</li> | </li> | |||
<li> | <li> | |||
Entity ID: The DRIP identifier MUST be sufficient to enable | Entity ID: The DRIP identifier <bcp14>MUST</bcp14> be sufficient to enable | |||
lookups of other data associated with the entity identified | lookups of other data associated with the entity identified | |||
therewith in that registry. | therewith in that registry. | |||
</li> | </li> | |||
<li> | <li> | |||
Uniqueness: The DRIP identifier MUST be unique within the | Uniqueness: The DRIP identifier <bcp14>MUST</bcp14> be unique wit hin the | |||
applicable global identifier space from when it is first | applicable global identifier space from when it is first | |||
registered therein until it is explicitly de-registered | registered therein until it is explicitly deregistered | |||
therefrom (due to, e.g., expiration after a specified lifetime, | therefrom (due to, e.g., expiration after a specified lifetime, | |||
revocation by the registry, or surrender by the operator). | revocation by the registry, or surrender by the operator). | |||
</li> | </li> | |||
<li> | <li> | |||
Non-spoofability: The DRIP identifier MUST NOT be spoofable | Non-spoofability: The DRIP identifier <bcp14>MUST NOT</bcp14> be spoofable | |||
within the context of a minimal Remote ID broadcast message set | within the context of a minimal Remote ID broadcast message set | |||
(to be specified within DRIP to be sufficient collectively to | (to be specified within DRIP to be sufficient collectively to | |||
prove sender ownership of the claimed identifier). | prove sender ownership of the claimed identifier). | |||
</li> | </li> | |||
<li> | <li> | |||
Unlinkability: The DRIP identifier MUST NOT facilitate | Unlinkability: The DRIP identifier <bcp14>MUST NOT</bcp14> facili tate | |||
adversarial correlation over multiple operations. If this is | adversarial correlation over multiple operations. If this is | |||
accomplished by limiting each identifier to a single use or | accomplished by limiting each identifier to a single use or | |||
brief period of usage, the DRIP identifier MUST support | brief period of usage, the DRIP identifier <bcp14>MUST</bcp14> su pport | |||
well-defined, scalable, timely registration methods. | well-defined, scalable, timely registration methods. | |||
</li> | </li> | |||
</ol> | </ol> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>Rationale</name> | <section numbered="true" toc="default"> <name>Rationale</name> | |||
<t> | <t> | |||
The DRIP identifier can refer to various entities. In the primary | The DRIP identifier can refer to various entities. In the primary | |||
initial use case, the entity to be identified is the UA. Entities | initial use case, the entity to be identified is the UA. Entities to | |||
to be identified in other likely use cases include but are not | be identified in other likely use cases include, but are not limited to, | |||
limited to the operator, USS, and Observer. In all cases, the | the operator, USS, and Observer. In all cases, the entity identified | |||
entity identified must own (have the exclusive capability to use, | must own the identifier (i.e., have the exclusive capability to use | |||
such that receivers can verify its ownership of) the identifier. | the identifier, such that receivers can verify the entity's ownership | |||
of it). | ||||
</t> | </t> | |||
<t> | <t> | |||
The DRIP identifier can be used at various layers. In Broadcast | The DRIP identifier can be used at various layers. In Broadcast RID, | |||
RID, it would be used by the application running directly over the | it would be used by the application running directly over the data | |||
data link. In Network RID, it would be used by the application | link. In Network RID, it would be used by the application running over | |||
running over HTTPS (not required by DRIP but generally used by | HTTPS (not required by DRIP but generally used by Network RID | |||
Network RID implementations) and possibly other protocols. In RID | implementations) and possibly other protocols. In RID-initiated V2X | |||
initiated V2X applications such as DAA and C2, it could be used | applications such as DAA and C2, it could be used between the network | |||
between the network and transport layers, e.g., with the Host | and transport layers (e.g., with the Host Identity Protocol (HIP) | |||
Identity Protocol (HIP, <xref target="RFC9063" format="default"/>, | <xref target="RFC9063" format="default"/> <xref target="RFC7401" | |||
<xref target="RFC7401" format="default"/>, etc.), or between the | format="default"/>) or between the transport and application | |||
transport and application layers, e.g., with Datagram Transport | layers (e.g., with DTLS <xref | |||
Layer Security (DTLS, <xref target="RFC6347" format="default"/>). | target="RFC6347" format="default"/>). | |||
</t> | </t> | |||
<t> | <t> | |||
Registry ID (which registry the entity is in) and Entity ID (which | Registry ID (which registry the entity is in) and Entity ID (which | |||
entity it is, within that registry) are requirements on a single | entity it is, within that registry) are requirements on a single | |||
DRIP entity identifier, not separate (types of) ID. In the most | DRIP Entity Identifier, not separate (types of) ID. In the most | |||
common use case, the entity will be the UA, and the DRIP identifier | common use case, the entity will be the UA, and the DRIP identifier | |||
will be the UAS ID; however, other entities may also benefit from | will be the UAS ID; however, other entities may also benefit from | |||
having DRIP identifiers, so the entity type is not prescribed here. | having DRIP identifiers, so the entity type is not prescribed here. | |||
</t> | </t> | |||
<t> | <t> | |||
Whether a UAS ID is generated by the operator, GCS, UA, USS, | Whether a UAS ID is generated by the operator, GCS, UA, USS, | |||
registry, or some collaboration thereamong, is unspecified; | registry, or some collaboration among them is unspecified; | |||
however, there must be agreement on the UAS ID among these | however, there must be agreement on the UAS ID among these | |||
entities. Management of DRIP identifiers is the primary function of | entities. Management of DRIP identifiers is the primary function of | |||
their registration hierarchies, from the root (presumably IANA), | their registration hierarchies, from the root (presumably IANA), | |||
through sector-specific and regional authorities (presumably ICAO | through sector-specific and regional authorities (presumably ICAO | |||
and CAAs), to the identified entities themselves. | and CAAs), to the identified entities themselves. | |||
</t> | </t> | |||
<t> | <t> | |||
While "uniqueness" might be considered an implicit requirement for | While Uniqueness might be considered an implicit requirement for | |||
any identifier, here the point of the explicit requirement is not | any identifier, here the point of the explicit requirement is not | |||
just that it should be unique, but also where and when it should be | just that it should be unique, but also where and when it should be | |||
unique: global scope within a specified space, from registration to | unique: global scope within a specified space, from registration to | |||
deregistration. | deregistration. | |||
</t> | </t> | |||
<t> | <t> | |||
While "non-spoofability" imposes requirements for and on a DRIP | While Non-spoofability imposes requirements for and on a DRIP | |||
authentication protocol, it also imposes requirements on the | authentication protocol, it also imposes requirements on the | |||
properties of the identifier itself. An example of how the nature | properties of the identifier itself. An example of how the nature | |||
of the identifier can support non-spoofability is embedding a hash | of the identifier can support non-spoofability is embedding a hash | |||
of both the registry ID and a public key of the entity in the | of both the Registry ID and a public key of the entity in the | |||
entity identifier, thus making it self-authenticating any time the | entity identifier, thus making it self-authenticating any time the | |||
entity's corresponding private key is used to sign a message. | entity's corresponding private key is used to sign a message. | |||
</t> | </t> | |||
<t> | <t> | |||
While "unlinkability" is a privacy desideratum (see next section), | While Unlinkability is a privacy desideratum (see <xref target="priv"/>), | |||
it imposes requirements on the DRIP identifier itself, as distinct | it imposes requirements on the DRIP identifier itself, as distinct | |||
from other currently permitted choices for the UAS ID (including | from other currently permitted choices for the UAS ID (including | |||
primarily the static serial number of the UA or RID module). | primarily the static serial number of the UA or RID module). | |||
</t> | </t> | |||
</section> | </section> | |||
</section> | </section> | |||
<section anchor="priv" numbered="true" toc="default"> <name>Privacy</name> | <section anchor="priv" numbered="true" toc="default"> <name>Privacy</name> | |||
<section numbered="true" toc="default"> <name>Normative Requirements</name> | <section numbered="true" toc="default"> <name>Normative Requirements</name> | |||
<ol spacing="normal" type="PRIV-%d" group="priv"> | <ol spacing="normal" type="PRIV-%d" group="priv" indent="9"> | |||
<li> | <li> | |||
Confidential Handling: DRIP MUST enable confidential | Confidential Handling: DRIP <bcp14>MUST</bcp14> enable confidenti | |||
handling of private information (i.e., any and all information | al | |||
designated by neither cognizant authority nor the information | handling of private information (i.e., any and all | |||
owner as public, e.g., personal data). | information that neither the cognizant authority nor | |||
the information owner has designated as public, e.g., personal data) | ||||
. | ||||
</li> | </li> | |||
<li> | <li> | |||
Encrypted Transport: DRIP MUST enable selective strong | Encrypted Transport: DRIP <bcp14>MUST</bcp14> enable selective st rong | |||
encryption of private data in motion in such a manner that only | encryption of private data in motion in such a manner that only | |||
authorized actors can recover it. If transport is via IP, then | authorized actors can recover it. If transport is via IP, then | |||
encryption MUST be end-to-end, at or above the IP layer. DRIP | encryption <bcp14>MUST</bcp14> be end-to-end, at or above the IP | |||
MUST NOT encrypt safety critical data to be transmitted over | layer. DRIP | |||
<bcp14>MUST NOT</bcp14> encrypt safety critical data to be transm | ||||
itted over | ||||
Broadcast RID in any situation where it is unlikely that local | Broadcast RID in any situation where it is unlikely that local | |||
Observers authorized to access the plaintext will be able to | Observers authorized to access the plaintext will be able to | |||
decrypt it or obtain it from a service able to decrypt it. DRIP | decrypt it or obtain it from a service able to decrypt it. DRIP | |||
MUST NOT encrypt data when/where doing so would conflict with | <bcp14>MUST NOT</bcp14> encrypt data when/where doing so would co nflict with | |||
applicable regulations or CAA policies/procedures, i.e., DRIP | applicable regulations or CAA policies/procedures, i.e., DRIP | |||
MUST support configurable disabling of encryption. | <bcp14>MUST</bcp14> support configurable disabling of encryption. | |||
</li> | </li> | |||
<li> | <li> | |||
Encrypted Storage: DRIP SHOULD facilitate selective strong | Encrypted Storage: DRIP <bcp14>SHOULD</bcp14> facilitate selectiv e strong | |||
encryption of private data at rest in such a manner that only | encryption of private data at rest in such a manner that only | |||
authorized actors can recover it. | authorized actors can recover it. | |||
</li> | </li> | |||
<li> | <li> | |||
Public/Private Designation: DRIP SHOULD facilitate designation, | Public/Private Designation: DRIP <bcp14>SHOULD</bcp14> facilitate designation, | |||
by cognizant authorities and information owners, of which | by cognizant authorities and information owners, of which | |||
information is public and which is private. By default, all | information is public and which is private. By default, all | |||
information required to be transmitted via Broadcast RID, even | information required to be transmitted via Broadcast RID, even | |||
when actually sent via Network RID or stored in registries, is | when actually sent via Network RID or stored in registries, is | |||
assumed to be public; all other information held in registries | assumed to be public; all other information held in registries | |||
for lookup using the UAS ID is assumed to be private. | for lookup using the UAS ID is assumed to be private. | |||
</li> | </li> | |||
<li> | <li> | |||
Pseudonymous Rendezvous: DRIP MAY enable mutual discovery of | Pseudonymous Rendezvous: DRIP <bcp14>MAY</bcp14> enable mutual di scovery of | |||
and communications among participating UAS operators whose UA | and communications among participating UAS operators whose UA | |||
are in 4-D proximity, using the UAS ID without revealing | are in 4-D proximity, using the UAS ID without revealing | |||
pilot/operator identity or physical location. | pilot/operator identity or physical location. | |||
</li> | </li> | |||
</ol> | </ol> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>Rationale</name> | <section numbered="true" toc="default"> <name>Rationale</name> | |||
<t> | <t> | |||
Most data to be sent via Broadcast RID or Network RID is public, | Most data to be sent via Broadcast RID or Network RID is public; | |||
thus the "encrypted transport" requirement for private data is | thus, the Encrypted Transport requirement for private data is | |||
selective, e.g., for the entire payload of the Operator ID Message, | selective, e.g., for the entire payload of the Operator ID Message, | |||
but only the pilot/GCS location fields of the System Message. | but only the pilot/GCS location fields of the System Message. | |||
Safety critical data includes at least the UA location. Other data | Safety critical data includes at least the UA location. Other data | |||
also may be deemed safety critical, e.g., in some jurisdictions the | also may be deemed safety critical, e.g., in some jurisdictions the | |||
pilot/GCS location is implied to be safety critical. | pilot/GCS location is implied to be safety critical. | |||
</t> | </t> | |||
<t> | <t> | |||
UAS have several potential means of assessing the likelihood that | UAS have several potential means of assessing the likelihood that | |||
local Observers authorized to access the plaintext will be able to | local Observers authorized to access the plaintext will be able to | |||
decrypt it or obtain it from a service able to decrypt it. If the | decrypt it or obtain it from a service able to decrypt it. If the | |||
UAS is not participating in UTM, an Observer would have no means of | UAS is not participating in UTM, an Observer would have no means of | |||
obtaining a decryption key or decryption services from a cognizant | obtaining a decryption key or decryption services from a cognizant | |||
USS. If the UAS is participating in UTM, but has lost connectivity | USS. If the UAS is participating in UTM but has lost connectivity | |||
with its USS, then an Observer within visual LOS of the UA is also | with its USS, then an Observer within visual LOS of the UA is also | |||
unlikely to be able to communicate with that USS (whether due to | unlikely to be able to communicate with that USS (whether due to | |||
the USS being offline or the UAS and Observer being in an area with | the USS being offline or the UAS and Observer being in an area with | |||
poor Internet connectivity). Either of these conditions (UTM | poor Internet connectivity). Either of these conditions (UTM | |||
non-participation or USS unreachability) would be known to the UAS. | non-participation or USS unreachability) would be known to the UAS. | |||
</t> | </t> | |||
<t> | <t> | |||
In some jurisdictions, the configurable enabling and disabling of | In some jurisdictions, the configurable enabling and disabling of | |||
encryption may need to be outside the control of the operator. | encryption may need to be outside the control of the operator. | |||
<xref target="FRUR" format="default"/> mandates manufacturers | <xref target="FRUR" format="default"/> mandates that manufacturers | |||
design RID equipment with some degree of tamper resistance; the | design RID equipment with some degree of tamper resistance; the | |||
preamble and other FAA commentary suggest this is to reduce the | preamble of <xref target="FRUR" format="default"/> and other FAA commenta ry suggest this is to reduce the | |||
likelihood that an operator, intentionally or unintentionally, | likelihood that an operator, intentionally or unintentionally, | |||
might alter the values of the required data elements or disable | might alter the values of the required data elements or disable | |||
their transmission in the required manner (e.g., as cleartext). | their transmission in the required manner (e.g., as cleartext). | |||
</t> | </t> | |||
<t> | <t> | |||
How information is stored on end systems is out of scope for DRIP. | How information is stored on end systems is out of scope for DRIP. | |||
Encouraging privacy best practices, including end system storage | Encouraging privacy best practices, including end system storage | |||
encryption, by facilitating it with protocol design reflecting such | encryption, by facilitating it with protocol design reflecting such | |||
considerations, is in scope. Similar logic applies to methods for | considerations is in scope. Similar logic applies to methods for | |||
designating information as public or private. | designating information as public or private. | |||
</t> | </t> | |||
<t> | <t> | |||
The privacy requirements above are for DRIP, neither for <xref | The Privacy requirements above are for DRIP, neither for <xref | |||
target="F3411-19" format="default"/> (which requires obfuscation of | target="F3411-19" format="default"/> (which, in the interest of | |||
location to any Network RID subscriber engaging in wide area | privacy, requires obfuscation of location to any Network RID | |||
surveillance, limits data retention periods, etc., in the interests | subscriber engaging in wide area surveillance, limits data retention | |||
of privacy), nor for UAS RID in any specific jurisdiction (which | periods, etc.), nor for UAS RID in any specific jurisdiction (which may | |||
may have its own regulatory requirements). The requirements above | have its own regulatory requirements). The requirements above are also | |||
are also in a sense parameterized: who are the "authorized actors", | in a sense parameterized: who are the "authorized actors", how are | |||
how are they designated, how are they authenticated, etc.? | they designated, how are they authenticated, etc.? | |||
</t> | </t> | |||
</section> | </section> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>Registries</name> | <section numbered="true" toc="default"> <name>Registries</name> | |||
<section numbered="true" toc="default"> <name>Normative Requirements</name> | <section numbered="true" toc="default"> <name>Normative Requirements</name> | |||
<ol spacing="normal" type="REG-%d" group="reg"> | <ol spacing="normal" type="REG-%d" group="reg" indent="9"> | |||
<li> | <li> | |||
Public Lookup: DRIP MUST enable lookup, from the UAS ID, of | Public Lookup: DRIP <bcp14>MUST</bcp14> enable lookup, from the U | |||
information designated by cognizant authority as public, and | AS ID, of | |||
MUST NOT restrict access to this information based on identity | information designated by cognizant authority as public and | |||
<bcp14>MUST NOT</bcp14> restrict access to this information based | ||||
on identity | ||||
or role of the party submitting the query. | or role of the party submitting the query. | |||
</li> | </li> | |||
<li> | <li> | |||
Private Lookup: DRIP MUST enable lookup of private information | Private Lookup: DRIP <bcp14>MUST</bcp14> enable lookup of private information | |||
(i.e., any and all information in a registry, associated with | (i.e., any and all information in a registry, associated with | |||
the UAS ID, that is designated by neither cognizant authority | the UAS ID, that is designated by neither cognizant authority | |||
nor the information owner as public), and MUST, according to | nor the information owner as public), and <bcp14>MUST</bcp14>, ac cording to | |||
applicable policy, enforce AAA, including restriction of access | applicable policy, enforce AAA, including restriction of access | |||
to this information based on identity or role of the party | to this information based on identity or role of the party | |||
submitting the query. | submitting the query. | |||
</li> | </li> | |||
<li> | <li> | |||
Provisioning: DRIP MUST enable provisioning registries with | Provisioning: DRIP <bcp14>MUST</bcp14> enable provisioning regist ries with | |||
static information on the UAS and its operator, dynamic | static information on the UAS and its operator, dynamic | |||
information on its current operation within the U-space/UTM | information on its current operation within the U-space/UTM | |||
(including means by which the USS under which the UAS is | (including means by which the USS under which the UAS is | |||
operating may be contacted for further, typically even more | operating may be contacted for further, typically even more | |||
dynamic, information), and Internet direct contact information | dynamic, information), and Internet direct contact information | |||
for services related to the foregoing. | for services related to the foregoing. | |||
</li> | </li> | |||
<li> | <li> | |||
AAA Policy: DRIP AAA MUST be specifiable by policies; the | AAA Policy: DRIP AAA <bcp14>MUST</bcp14> be specifiable by polici es; the | |||
definitive copies of those policies must be accessible in | definitive copies of those policies must be accessible in | |||
registries; administration of those policies and all DRIP | registries; administration of those policies and all DRIP | |||
registries must be protected by AAA. | registries must be protected by AAA. | |||
</li> | </li> | |||
</ol> | </ol> | |||
</section> | </section> | |||
<section numbered="true" toc="default"> <name>Rationale</name> | <section numbered="true" toc="default"> <name>Rationale</name> | |||
<t> | <t> | |||
Registries are fundamental to RID. Only very limited information | Registries are fundamental to RID. Only very limited information can | |||
can be Broadcast, but extended information is sometimes needed. The | be transmitted via Broadcast RID, but extended information is sometimes n | |||
most essential element of information sent is the UAS ID itself, | eeded. The most | |||
the unique key for lookup of extended information in registries. | essential element of information sent is the UAS ID itself, the unique | |||
Beyond designating the UAS ID as that unique key, the registry | key for lookup of extended information in registries. | |||
information model is not specified herein, in part because | The regulatory requirements for the registry information models for UAS and | |||
regulatory requirements for different registries (UAS operators and | their operators for RID and, more broadly, for U-space/UTM needs are in flux. | |||
their UA, each narrowly for UAS RID and broadly for U-space/UTM) | Thus, beyond designating the UAS ID as that unique key, the registry information | |||
and business models for meeting those requirements are in flux. | model is not specified in this document. | |||
While it is expected that registry functions will be integrated | While it is expected that | |||
with USS, who will provide them is not yet determined in most, and | registry functions will be integrated with USS, who will provide them | |||
is expected to vary between, jurisdictions. However this evolves, | is expected to vary between jurisdictions and has not yet been determined | |||
the essential registry functions, starting with management of | in | |||
identifiers, are expected to remain the same, so are specified | most jurisdictions. However this evolves, the essential registry | |||
herein. | functions, starting with management of identifiers, are expected to | |||
remain the same, so those are specified herein. | ||||
</t> | </t> | |||
<t> | <t> | |||
While most data to be sent via Broadcast or Network RID is public, | While most data to be sent via Broadcast or Network RID is public, | |||
much of the extended information in registries will be private. | much of the extended information in registries will be private. | |||
Thus AAA for registries is essential, not just to ensure that | Thus, AAA for registries is essential, not just to ensure that | |||
access is granted only to strongly authenticated, duly authorized | access is granted only to strongly authenticated, duly authorized | |||
parties, but also to support subsequent attribution of any leaks, | parties, but also to support subsequent attribution of any leaks, | |||
audit of who accessed information when and for what purpose, etc. | audit of who accessed information when and for what purpose, etc. | |||
As specific AAA requirements will vary by jurisdictional | Specific AAA requirements will vary by jurisdictional | |||
regulation, provider philosophy, customer demand, etc., they are | regulation, provider philosophy, customer demand, etc., so they are | |||
left to specification in policies, which should be human readable | left to specification in policies. Such policies should be human readable | |||
to facilitate analysis and discussion, and machine readable to | to facilitate analysis and discussion, be machine readable to | |||
enable automated enforcement, using a language amenable to both, | enable automated enforcement, and use a language amenable to both, | |||
e.g., XACML. | e.g., eXtensible Access Control Markup Language (XACML). | |||
</t> | </t> | |||
<t> | <t> | |||
The intent of the negative and positive access control requirements | The intent of the negative and positive access control requirements | |||
on registries is to ensure that no member of the public would be | on registries is to ensure that no member of the public would be | |||
hindered from accessing public information, while only duly | hindered from accessing public information, while only duly | |||
authorized parties would be enabled to access private information. | authorized parties would be enabled to access private information. | |||
Mitigation of Denial of Service attacks and refusal to allow | Mitigation of denial-of-service attacks and refusal to allow | |||
database mass scraping would be based on those behaviors, not on | database mass scraping would be based on those behaviors, not on | |||
identity or role of the party submitting the query <em>per se</em>, | identity or role of the party submitting the query per se; | |||
but querant identity information might be gathered (by security | however, | |||
systems protecting DRIP implementations) on such misbehavior. | information on the identity of the party submitting the query might be | |||
gathered on such misbehavior by security systems protecting DRIP | ||||
implementations. | ||||
</t> | </t> | |||
<t> | <t> | |||
By "Internet direct contact information" is meant a locator (e.g., | "Internet direct contact information" means a locator (e.g., | |||
IP address), or identifier (e.g., FQDN) that can be resolved to a | IP address), or identifier (e.g., FQDN) that can be resolved to a | |||
locator, which would enable initiation of an end-to-end | locator, which enables initiation of an end-to-end | |||
communication session using a well known protocol (e.g., SIP). | communication session using a well-known protocol (e.g., SIP). | |||
</t> | </t> | |||
</section> | </section> | |||
</section> | </section> | |||
</section> | </section> | |||
<section anchor="IANA" numbered="true" toc="default"> <name>IANA Considerations< /name> | <section anchor="IANA" numbered="true" toc="default"> <name>IANA Considerations< /name> | |||
<t> | <t> | |||
This document does not make any IANA request. | This document has no IANA actions. | |||
</t> | </t> | |||
</section> | </section> | |||
<section anchor="Security" numbered="true" toc="default"> <name>Security Conside rations</name> | <section anchor="Security" numbered="true" toc="default"> <name>Security Conside rations</name> | |||
<t> | <t> | |||
DRIP is all about safety and security, so content pertaining to | DRIP is all about safety and security, so content pertaining to | |||
such is not limited to this section. This document does not define | such is not limited to this section. This document does not define | |||
any protocols, so security considerations of such are speculative. | any protocols, so security considerations of such are speculative. | |||
Potential vulnerabilities of DRIP solutions to these requirements | Potential vulnerabilities of DRIP solutions to these requirements | |||
include but are not limited to: | include but are not limited to: | |||
</t> | </t> | |||
skipping to change at line 2188 ¶ | skipping to change at line 2326 ¶ | |||
</li> | </li> | |||
<li> | <li> | |||
processing overload induced by attempting to verify many | processing overload induced by attempting to verify many | |||
spoofed signed messages (where verification will fail but | spoofed signed messages (where verification will fail but | |||
still consume cycles) | still consume cycles) | |||
</li> | </li> | |||
<li> | <li> | |||
malicious or malfunctioning registries | malicious or malfunctioning registries | |||
</li> | </li> | |||
<li> | <li> | |||
interception by on-path attacker of (i.e., Man In The | interception by on-path attacker of (i.e., man-in-the-mid | |||
Middle attacks on) registration messages | dle attacks on) registration messages | |||
</li> | </li> | |||
<li> | <li> | |||
UA impersonation through private key extraction, improper | UA impersonation through private key extraction, improper | |||
key sharing, or carriage of a small (presumably harmless) | key sharing, or carriage of a small (presumably harmless) | |||
UA, i.e., as a "false flag", by a larger (malicious) UA | UA, i.e., as a "false flag", by a larger (malicious) UA | |||
</li> | </li> | |||
</ul> | </ul> | |||
<t> | <t> | |||
It may be inferred from the general requirements (Section 4.1) for | It may be inferred from the General requirements (<xref target="gen-req"/ | |||
provable ownership, provable binding, and provable registration, | >) for | |||
together with the identifier requirements (Section 4.2), that DRIP | Provable Ownership, Provable Binding, and Provable Registration, | |||
together with the Identifier requirements (<xref target="id-req"/>), that | ||||
DRIP | ||||
must provide: | must provide: | |||
</t> | </t> | |||
<ul> | <ul> | |||
<li> | <li> | |||
message integrity | message integrity | |||
</li> | </li> | |||
<li> | <li> | |||
non-repudiation | non-repudiation | |||
</li> | </li> | |||
<li> | <li> | |||
skipping to change at line 2224 ¶ | skipping to change at line 2361 ¶ | |||
defense against spoofing | defense against spoofing | |||
</li> | </li> | |||
</ul> | </ul> | |||
<t> | <t> | |||
One approach to so doing involves verifiably binding the DRIP | One approach to so doing involves verifiably binding the DRIP | |||
identifier to a public key. Providing these security features, | identifier to a public key. Providing these security features, | |||
whether via this approach or another, is likely to be especially | whether via this approach or another, is likely to be especially | |||
challenging for Observers without Internet connectivity at the time | challenging for Observers without Internet connectivity at the time | |||
of observation. For example, checking the signature of a registry | of observation. For example, checking the signature of a registry | |||
on a public key certificate received via Broadcast RID in a remote | on a public key certificate received via Broadcast RID in a remote | |||
area presumably would require that the registry’s public key had | area presumably would require that the registry's public key had | |||
been previously installed on the Observer’s device, yet there may | been previously installed on the Observer's device, yet there may | |||
be many registries and the Observer’s device may be storage | be many registries and the Observer's device may be storage | |||
constrained, and new registries may come on-line subsequent to | constrained, and new registries may come on-line subsequent to | |||
installation of DRIP software on the Observer’s device. See also | installation of DRIP software on the Observer's device. See also | |||
<xref target="Scenario" format="default"/> and the associated | <xref target="Scenario" format="default"/> and the associated | |||
explanatory text, especially the second paragraph after the figure. | explanatory text, especially the second paragraph after the figure. | |||
Thus there may be caveats on the extent to which requirements can | Thus, there may be caveats on the extent to which requirements can | |||
be satisfied in such cases, yet strenuous effort should be made to | be satisfied in such cases, yet strenuous effort should be made to | |||
satisfy them, as such cases, e.g., firefighting in a national | satisfy them, as such cases are important, e.g., firefighting in a nation | |||
forest, are important. Each numbered requirement <em>a priori</em> | al | |||
forest. Each numbered requirement a priori | ||||
expected to suffer from such limitations (General requirements for | expected to suffer from such limitations (General requirements for | |||
Gateway and Contact functionality) contains language stating when | Gateway and Contact functionality) contains language stating when | |||
it applies. | it applies. | |||
</t> | </t> | |||
</section> | </section> | |||
<section anchor="Privacy" numbered="true" toc="default"> | <section anchor="Privacy" numbered="true" toc="default"> | |||
<name>Privacy and Transparency Considerations</name> | <name>Privacy and Transparency Considerations</name> | |||
<t> | <t> | |||
Privacy and transparency are important for legal reasons including | Privacy and transparency are important for legal reasons including | |||
regulatory consistency. <xref target="EU2018" format="default"/> | regulatory consistency. <xref target="EU2018" format="default"/> | |||
states "harmonised and interoperable national registration | states:</t> | |||
systems... should comply with the applicable Union and national law | <blockquote> | |||
harmonised and interoperable national registration | ||||
systems ... should comply with the applicable Union and national law | ||||
on privacy and processing of personal data, and the information | on privacy and processing of personal data, and the information | |||
stored in those registration systems should be easily accessible.” | stored in those registration systems should be easily accessible. | |||
</t> | </blockquote> | |||
<t> | <t> | |||
Privacy and transparency (where essential to security or safety) | Transparency (where essential to security or safety) and privacy | |||
are also ethical and moral imperatives. Even in cases where old | are also ethical and moral imperatives. Even in cases where old | |||
practices (e.g., automobile registration plates) could be imitated, | practices (e.g., automobile registration plates) could be imitated, | |||
when new applications involving PII (such as UAS RID) are addressed | when new applications involving PII (such as UAS RID) are addressed | |||
and newer technologies could enable improving privacy, such | and newer technologies could enable improving privacy, such | |||
opportunities should not be squandered. Thus it is recommended that | opportunities should not be squandered. Thus, it is recommended that | |||
all DRIP work give due regard to <xref target="RFC6973" | all DRIP work give due regard to <xref target="RFC6973" | |||
format="default"/> and more broadly <xref target="RFC8280" | format="default"/> and, more broadly, to <xref target="RFC8280" | |||
format="default"/>. | format="default"/>. | |||
</t> | </t> | |||
<t> | <t> | |||
However, privacy and transparency are often conflicting goals, | However, privacy and transparency are often conflicting goals, | |||
demanding careful attention to their balance. | demanding careful attention to their balance. | |||
</t> | </t> | |||
<t> | <t> | |||
DRIP information falls into two classes: that which, to achieve the | DRIP information falls into two classes:</t> | |||
<ul spacing="normal" empty="false"> | ||||
<li>that which, to achieve the | ||||
purpose, must be published openly as cleartext, for the benefit of | purpose, must be published openly as cleartext, for the benefit of | |||
any Observer (e.g., the basic UAS ID itself); and that which must | any Observer (e.g., the basic UAS ID itself); and </li> | |||
<li>that which must | ||||
be protected (e.g., PII of pilots) but made available to properly | be protected (e.g., PII of pilots) but made available to properly | |||
authorized parties (e.g., public safety personnel who urgently need | authorized parties (e.g., public safety personnel who urgently need | |||
to contact pilots in emergencies). | to contact pilots in emergencies).</li> | |||
</t> | </ul> | |||
<t> | <t> | |||
How properly authorized parties are authorized, authenticated, etc. | How properly authorized parties are authorized, authenticated, etc. | |||
are questions that extend beyond the scope of DRIP, but DRIP may be | are questions that extend beyond the scope of DRIP, but DRIP may be | |||
able to provide support for such processes. Classification of | able to provide support for such processes. Classification of | |||
information as public or private must be made explicit and | information as public or private must be made explicit and | |||
reflected with markings, design, etc. Classifying the information | reflected with markings, design, etc. Classifying the information | |||
will be addressed primarily in external standards; herein it will | will be addressed primarily in external standards; in this document, it w ill | |||
be regarded as a matter for CAA, registry, and operator policies, | be regarded as a matter for CAA, registry, and operator policies, | |||
for which enforcement mechanisms will be defined within the scope | for which enforcement mechanisms will be defined within the scope | |||
of DRIP WG and offered. Details of the protection mechanisms will | of the DRIP WG and offered. Details of the protection mechanisms will | |||
be provided in other DRIP documents. Mitigation of adversarial | be provided in other DRIP documents. Mitigation of adversarial | |||
correlation will also be addressed. | correlation will also be addressed. | |||
</t> | </t> | |||
</section> | </section> | |||
</middle> | </middle> | |||
<back> | <back> | |||
<displayreference target="I-D.ietf-drip-arch" to="drip-architecture"/> | <displayreference target="I-D.ietf-drip-arch" to="DRIP-ARCH"/> | |||
<displayreference target="I-D.ietf-raw-ldacs" to="LDACS"/> | ||||
<references> <name>References</name> | <references> <name>References</name> | |||
<references> <name>Normative References</name> | <references> <name>Normative References</name> | |||
<xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/refere | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | |||
nce.RFC.2119.xml"/> | C.2119.xml"/> | |||
<xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/refere | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | |||
nce.RFC.8174.xml"/> | C.8174.xml"/> | |||
<reference anchor="F3411-19" target="http://www.astm.org/cgi-bin/resolver .cgi?F3411"> | <reference anchor="F3411-19" target="http://www.astm.org/cgi-bin/resolver .cgi?F3411"> | |||
<front> | <front> | |||
<title>Standard Specification for Remote ID and Tracking</title> | <title>Standard Specification for Remote ID and Tracking</title> | |||
<author> | <author> | |||
<organization>ASTM International</organization> | <organization>ASTM International</organization> | |||
</author> | </author> | |||
<date month="02" year="2020"/> | <date month="02" year="2020"/> | |||
</front> | </front> | |||
<seriesInfo name="ASTM" value="F3411-19"/> | ||||
<seriesInfo name="DOI" value="10.1520/F3411-19"/> | ||||
</reference> | </reference> | |||
</references> | </references> | |||
<references> <name>Informative References</name> | <references> <name>Informative References</name> | |||
<xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/refere | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | |||
nce.RFC.4122.xml"/> | C.4122.xml"/> | |||
<xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/refere | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | |||
nce.RFC.4949.xml"/> | C.4949.xml"/> | |||
<xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/refere | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | |||
nce.RFC.6347.xml"/> | C.6347.xml"/> | |||
<xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/refere | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | |||
nce.RFC.6973.xml"/> | C.6973.xml"/> | |||
<xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/refere | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | |||
nce.RFC.7401.xml"/> | C.7401.xml"/> | |||
<xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/refere | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | |||
nce.RFC.8280.xml"/> | C.8280.xml"/> | |||
<xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/refere | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | |||
nce.RFC.9063.xml"/> | C.9063.xml"/> | |||
<xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml3/refer | ||||
ence.I-D.ietf-drip-arch.xml"/> | ||||
<xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml3/refer | ||||
ence.I-D.ietf-raw-ldacs.xml"/> | ||||
<reference anchor="Amended" target="https://eur-lex.europa.eu/legal-conte | <!-- [I-D.ietf-drip-arch] IESG state I-D Exists --> | |||
nt/EN/TXT/?uri=CELEX%3A32020R1058"> | ||||
<reference anchor='I-D.ietf-drip-arch'> | ||||
<front> | ||||
<title>Drone Remote Identification Protocol (DRIP) Architecture</title> | ||||
<author initials='S' surname='Card' fullname='Stuart Card'> | ||||
<organization /> | ||||
</author> | ||||
<author initials='A' surname='Wiethuechter' fullname='Adam Wiethuechter'> | ||||
<organization /> | ||||
</author> | ||||
<author initials='R' surname='Moskowitz' fullname='Robert Moskowitz'> | ||||
<organization /> | ||||
</author> | ||||
<author initials='S' surname='Zhao' fullname='Shuai Zhao' role="editor"> | ||||
<organization /> | ||||
</author> | ||||
<author initials='A' surname='Gurtov' fullname='Andrei Gurtov'> | ||||
<organization /> | ||||
</author> | ||||
<date year='2022' month='January' day="28" /> | ||||
</front> | ||||
<seriesInfo name='Internet-Draft' value='draft-ietf-drip-arch-20'/> | ||||
</reference> | ||||
<!-- [I-D.ietf-raw-ldacs] IESG state Publication Requested --> | ||||
<reference anchor='I-D.ietf-raw-ldacs'> | ||||
<front> | ||||
<title>L-band Digital Aeronautical Communications System (LDACS)</title> | ||||
<author initials='N' surname='Maeurer' fullname='Nils Maeurer' role="editor"> | ||||
<organization /> | ||||
</author> | ||||
<author initials='T' surname='Graeupl' fullname='Thomas Graeupl' role="editor"> | ||||
<organization /> | ||||
</author> | ||||
<author initials='C' surname='Schmitt' fullname='Corinna Schmitt' role="editor"> | ||||
<organization /> | ||||
</author> | ||||
<date year='2021' month='October' day="22" /> | ||||
</front> | ||||
<seriesInfo name='Internet-Draft' value='draft-ietf-raw-ldacs-09'/> | ||||
</reference> | ||||
<reference anchor="Amended" target="https://eur-lex.europa.eu/eli/reg_del | ||||
/2020/1058/oj"> | ||||
<front> | <front> | |||
<title>Commission Delegated Regulation (EU) 2020/1058 of 27 April 2020 amending Delegated Regulation (EU) 2019/945</title> | <title>Commission Delegated Regulation (EU) 2020/1058 of 27 April 2020 amending Delegated Regulation (EU) 2019/945 as regards the introduction of two new unmanned aircraft systems classes</title> | |||
<author> | <author> | |||
<organization>European Union Aviation Safety Agency (EASA )</organization> | <organization>European Parliament and Council</organizati on> | |||
</author> | </author> | |||
<date month="04" year="2020"/> | <date month="04" year="2020"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="ASDRI" target="https://asd-stan.org/wp-content/uploads /ASD-STAN_DRI_Introduction_to_the_European_digital_RID_UAS_Standard.pdf"> | <reference anchor="ASDRI" target="https://asd-stan.org/wp-content/uploads /ASD-STAN_DRI_Introduction_to_the_European_digital_RID_UAS_Standard.pdf"> | |||
<front> | <front> | |||
<title>Introduction to the European UAS Digital Remote ID Technic al Standard</title> | <title>Introduction to the European UAS Digital Remote ID Technic al Standard</title> | |||
<author> | <author> | |||
<organization> ASD-STAN </organization> | <organization> ASD-STAN </organization> | |||
</author> | </author> | |||
<date month="01" year="2021"/> | <date month="01" year="2021"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="ASDSTAN4709-002" target="https://asd-stan.org/download | ||||
s/asd-stan-pren-4709-002-p1/"> | ||||
<front> | ||||
<title>Aerospace series - Unmanned Aircraft Systems - Part 002: D | ||||
irect Remote Identification</title> | ||||
<author> | ||||
<organization>ASD-STAN</organization> | ||||
</author> | ||||
<date month="10" year="2021"/> | ||||
</front> | ||||
<seriesInfo name="ASD-STAN prEN" value="4709-002 P1"/> | ||||
<refcontent></refcontent> | ||||
</reference> | ||||
<reference anchor="CPDLC" target="https://www.mdpi.com/1424-8220/18/5/16 36"> | <reference anchor="CPDLC" target="https://www.mdpi.com/1424-8220/18/5/16 36"> | |||
<front> | <front> | |||
<title>Controller-Pilot Data Link Communication Security</title> | <title>Controller-Pilot Data Link Communication Security</title> | |||
<author initials = "A." surname = "Gurtov"> <organization /> < /author> | <author initials = "A." surname = "Gurtov"> <organization /> < /author> | |||
<author initials = "T." surname = "Polishchuk"> <organization /> </author> | <author initials = "T." surname = "Polishchuk"> <organization /> </author> | |||
<author initials = "M." surname = "Wernberg"> <organization /> </author> | <author initials = "M." surname = "Wernberg"> <organization /> </author> | |||
<date month="" year="2018" /> | <date month="" year="2018" /> | |||
</front> | </front> | |||
<seriesInfo name="MDPI Sensors" value="18(5), 1636"/> | <seriesInfo name="DOI" value="10.3390/s18051636"/> | |||
<refcontent>Sensors 18, no. 5: 1636</refcontent> | ||||
</reference> | </reference> | |||
<reference anchor="CTA2063A" target="https://shop.cta.tech/products/small -unmanned-aerial-systems-serial-numbers"> | <reference anchor="CTA2063A" target="https://shop.cta.tech/products/small -unmanned-aerial-systems-serial-numbers"> | |||
<front> | <front> | |||
<title>Small Unmanned Aerial Systems Serial Numbers</title> | <title>Small Unmanned Aerial Systems Serial Numbers</title> | |||
<author> | <author> | |||
<organization>ANSI</organization> | <organization>ANSI</organization> | |||
</author> | </author> | |||
<date month="09" year="2019"/> | <date month="09" year="2019"/> | |||
</front> | </front> | |||
<seriesInfo name="ANSI/CTA" value="2063-A"/> | ||||
</reference> | </reference> | |||
<reference anchor="Delegated" target="https://eur-lex.europa.eu/eli/reg_d el/2019/945/oj"> | <reference anchor="Delegated" target="https://eur-lex.europa.eu/eli/reg_d el/2019/945/oj"> | |||
<front> | <front> | |||
<title>Commission Delegated Regulation (EU) 2019/945 of 12 March 2019 on unmanned aircraft systems and on third-country operators of unmanned air craft systems</title> | <title>Commission Delegated Regulation (EU) 2019/945 of 12 March 2019 on unmanned aircraft systems and on third-country operators of unmanned air craft systems</title> | |||
<author> | <author> | |||
<organization>European Union Aviation Safety Agency (EASA )</organization> | <organization>European Parliament and Council</organizati on> | |||
</author> | </author> | |||
<date month="03" year="2019"/> | <date month="03" year="2019"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="ENISACSIRT" target="https://www.enisa.europa.eu/topics | ||||
/csirt-cert-services/reactive-services/copy_of_actionable-information"> | <reference anchor="ENISACSIRT" target="https://www.enisa.europa.eu/topics | |||
/csirt-cert-services/reactive-services/copy_of_actionable-information/actionable | ||||
-information"> | ||||
<front> | <front> | |||
<title>Actionable information for Security Incident Response</tit le> | <title>Actionable information for Security Incident Response</tit le> | |||
<author> | <author> | |||
<organization>European Union Agency for Cybersecurity (EN ISA)</organization> | <organization>European Union Agency for Cybersecurity (EN ISA)</organization> | |||
</author> | </author> | |||
<date month="11" year="2014"/> | <date month="11" year="2014"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="EU2018" target="https://www.consilium.europa.eu/media/ 35805/easa-regulation-june-2018.pdf"> | <reference anchor="EU2018" target="https://www.consilium.europa.eu/media/ 35805/easa-regulation-june-2018.pdf"> | |||
<front> | <front> | |||
<title>2015/0277 (COD) PE-CONS 2/18</title> | <title>2015/0277 (COD) PE-CONS 2/18</title> | |||
<author> | <author> | |||
<organization>European Parliament and Council</organizati on> | <organization>European Parliament and Council</organizati on> | |||
</author> | </author> | |||
<date month="02" year="2018"/> | <date month="June" year="2018"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="FAACONOPS" target="https://www.faa.gov/uas/research_de velopment/traffic_management/media/UTM_ConOps_v2.pdf"> | <reference anchor="FAACONOPS" target="https://www.faa.gov/uas/research_de velopment/traffic_management/media/UTM_ConOps_v2.pdf"> | |||
<front> | <front> | |||
<title>UTM Concept of Operations v2.0</title> | <title>UTM Concept of Operations v2.0</title> | |||
<author> | <author> | |||
<organization>FAA Office of NextGen</organization> | <organization>FAA Office of NextGen</organization> | |||
</author> | </author> | |||
<date month="03" year="2020"/> | <date month="03" year="2020"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="FR24" target="https://www.flightradar24.com/about"> | <reference anchor="FR24" target="https://www.flightradar24.com/about"> | |||
<front> | <front> | |||
<title>Flightradar24 Live Air Traffic</title> | <title>About Flightradar24</title> | |||
<author> | <author> | |||
<organization>Flightradar24 AB</organization> | <organization>Flightradar24</organization> | |||
</author> | </author> | |||
<date month="05" year="2021"/> | ||||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="FRUR" target="https://www.federalregister.gov/document s/2021/01/15/2020-28948/remote-identification-of-unmanned-aircraft"> | <reference anchor="FRUR" target="https://www.federalregister.gov/document s/2021/01/15/2020-28948/remote-identification-of-unmanned-aircraft"> | |||
<front> | <front> | |||
<title>Remote Identification of Unmanned Aircraft</title> | <title>Remote Identification of Unmanned Aircraft</title> | |||
<author> | <author> | |||
<organization>Federal Aviation Administration</organizati on> | <organization>Federal Aviation Administration (FAA)</orga nization> | |||
</author> | </author> | |||
<date month="01" year="2021"/> | <date month="01" year="2021"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="GDPR" target="https://eur-lex.europa.eu/eli/reg/2016/6 79/oj"> | <reference anchor="GDPR" target="https://eur-lex.europa.eu/eli/reg/2016/6 79/oj"> | |||
<front> | <front> | |||
<title>General Data Protection Regulation</title> | <title>Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard t o the processing of personal data and on the free movement of such data, and rep ealing Directive 95/46/EC (General Data Protection Regulation)</title> | |||
<author> | <author> | |||
<organization>European Parliament and Council</organizati on> | <organization>European Parliament and Council</organizati on> | |||
</author> | </author> | |||
<date month="04" year="2016"/> | <date month="04" year="2016"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="ICAOATM" target="https://store.icao.int/en/procedures- for-air-navigation-services-air-traffic-management-doc-4444"> | <reference anchor="ICAOATM" target="https://store.icao.int/en/procedures- for-air-navigation-services-air-traffic-management-doc-4444"> | |||
<front> | <front> | |||
<title>Doc 4444: Procedures for Air Navigation Services: Air Traf fic Management</title> <author> | <title>Procedures for Air Navigation Services: Air Traffic Manage ment</title> <author> | |||
<organization>International Civil Aviation Organization</ organization> | <organization>International Civil Aviation Organization</ organization> | |||
</author> | </author> | |||
<date month="11" year="2016"/> | <date month="11" year="2016"/> | |||
</front> | </front> | |||
<seriesInfo name="Doc" value="4444"/> | ||||
</reference> | </reference> | |||
<reference anchor="ICAODEFS" target="https://www.icao.int/safety/cargosaf ety/Documents/Draft%20Glossary%20of%20terms.docx"> | <reference anchor="ICAODEFS" target="https://www.icao.int/safety/cargosaf ety/Documents/Draft%20Glossary%20of%20terms.docx"> | |||
<front> | <front> | |||
<title>Defined terms from the Annexes to the Chicago Convention a nd ICAO guidance material</title> <author> | <title>Defined terms from the Annexes to the Chicago Convention a nd ICAO guidance material</title> <author> | |||
<organization>International Civil Aviation Organization</ organization> | <organization>International Civil Aviation Organization</ organization> | |||
</author> | </author> | |||
<date month="07" year="2017"/> | <date month="07" year="2017"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="ICAOUAS" target="https://www.icao.int/meetings/uas/doc uments/circular%20328_en.pdf"> | <reference anchor="ICAOUAS" target="https://www.icao.int/meetings/uas/doc uments/circular%20328_en.pdf"> | |||
<front> | <front> | |||
<title>Circular 328: Unmanned Aircraft Systems</title> <author> | <title>Unmanned Aircraft Systems</title> <author> | |||
<organization>International Civil Aviation Organization</ organization> | <organization>International Civil Aviation Organization</ organization> | |||
</author> | </author> | |||
<date month="02" year="2011"/> | <date year="2011"/> | |||
</front> | </front> | |||
<seriesInfo name="Circular" value="328"/> | ||||
</reference> | </reference> | |||
<reference anchor="ICAOUTM" target="https://www.icao.int/safety/UA/Docume nts/UTM%20Framework%20Edition%203.pdf"> | <reference anchor="ICAOUTM" target="https://www.icao.int/safety/UA/Docume nts/UTM%20Framework%20Edition%203.pdf"> | |||
<front> | <front> | |||
<title>Unmanned Aircraft Systems Traffic Management (UTM) - A Com mon Framework with Core Principles for Global Harmonization, Edition 3</title> < author> | <title>Unmanned Aircraft Systems Traffic Management (UTM) - A Com mon Framework with Core Principles for Global Harmonization, Edition 3</title> < author> | |||
<organization>International Civil Aviation Organization</ organization> | <organization>International Civil Aviation Organization</ organization> | |||
</author> | </author> | |||
<date month="10" year="2020"/> | <date month="10" year="2020"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="Implementing" target="https://eur-lex.europa.eu/eli/re g_impl/2019/947/oj"> | <reference anchor="Implementing" target="https://eur-lex.europa.eu/eli/re g_impl/2019/947/oj"> | |||
<front> | <front> | |||
<title>Commission Implementing Regulation (EU) 2019/947 of 24 May 2019 on the rules and procedures for the operation of unmanned aircraft</title> | <title>Commission Implementing Regulation (EU) 2019/947 of 24 May 2019 on the rules and procedures for the operation of unmanned aircraft</title> | |||
<author> | <author> | |||
<organization>European Union Aviation Safety Agency (EASA )</organization> | <organization>European Parliament and Council</organizati on> | |||
</author> | </author> | |||
<date month="05" year="2019"/> | <date month="05" year="2019"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="InitialView" target="https://www.sesarju.eu/sites/defa ult/files/documents/u-space/SESAR%20principles%20for%20U-space%20architecture.pd f"> | <reference anchor="InitialView" target="https://www.sesarju.eu/sites/defa ult/files/documents/u-space/SESAR%20principles%20for%20U-space%20architecture.pd f"> | |||
<front> | <front> | |||
<title>Initial view on Principles for the U-space architecture</t itle> | <title>Initial view on Principles for the U-space architecture</t itle> | |||
<author> | <author> | |||
<organization>SESAR Joint Undertaking</organization> | <organization>SESAR Joint Undertaking</organization> | |||
</author> | </author> | |||
<date month="07" year="2019"/> | <date month="07" year="2019"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="NPRM" target="https://www.federalregister.gov/document s/2019/12/31/2019-28100/remote-identification-of-unmanned-aircraft-systems"> | <reference anchor="NPRM" target="https://www.federalregister.gov/document s/2019/12/31/2019-28100/remote-identification-of-unmanned-aircraft-systems"> | |||
<front> | <front> | |||
<title>Notice of Proposed Rule Making on Remote Identification of Unmanned Aircraft Systems</title> | <title>Notice of Proposed Rule Making on Remote Identification of Unmanned Aircraft Systems</title> | |||
<author> | <author> | |||
<organization>United States Federal Aviation Administrati on (FAA)</organization> | <organization>United States Federal Aviation Administrati on (FAA)</organization> | |||
</author> | </author> | |||
<date month="12" year="2019"/> | <date month="12" year="2019"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="OpenDroneID" target="https://github.com/opendroneid/sp ecs"> | <reference anchor="OpenDroneID" target="https://github.com/opendroneid/sp ecs"> | |||
<front> | <front> | |||
<title>Open Drone ID</title> | <title>The Open Drone ID specification</title> | |||
<author> | <author> | |||
<organization>Intel Corp.</organization> | <organization></organization> | |||
</author> | </author> | |||
<date month="03" year="2019"/> | <date month="03" year="2020"/> | |||
</front> | </front> | |||
<seriesInfo name="commit" value="c4c8bb8"/> | ||||
</reference> | </reference> | |||
<reference anchor="OpenSky" target="https://opensky-network.org/about/abo ut-us"> | <reference anchor="OpenSky" target="https://opensky-network.org/about/abo ut-us"> | |||
<front> | <front> | |||
<title>The OpenSky Network</title> | <title>About the OpenSky Network</title> | |||
<author> | <author> | |||
<organization>OpenSky Network non-profit association</org anization> | <organization>OpenSky Network</organization> | |||
</author> | </author> | |||
<date month="05" year="2021"/> | ||||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="Opinion1" target="https://www.easa.europa.eu/document- library/opinions/opinion-012020"> | <reference anchor="Opinion1" target="https://www.easa.europa.eu/document- library/opinions/opinion-012020"> | |||
<front> | <front> | |||
<title>Opinion No 01/2020: High-level regulatory framework for th e U-space</title> | <title>High-level regulatory framework for the U-space</title> | |||
<author> | <author> | |||
<organization>European Union Aviation Safety Agency (EASA )</organization> | <organization>European Union Aviation Safety Agency (EASA )</organization> | |||
</author> | </author> | |||
<date month="03" year="2020"/> | <date month="03" year="2020"/> | |||
</front> | </front> | |||
<seriesInfo name="Opinion" value="No 01/2020"/> | ||||
</reference> | </reference> | |||
<reference anchor="Part107" target="https://www.ecfr.gov/cgi-bin/text-idx ?node=pt14.2.107"> | <reference anchor="Part107" target="https://www.ecfr.gov/cgi-bin/text-idx ?node=pt14.2.107"> | |||
<front> | <front> | |||
<title>Code of Federal Regulations Part 107</title> | <title>Part 107 - SMALL UNMANNED AIRCRAFT SYSTEMS</title> | |||
<author> | <author> | |||
<organization>United States Federal Aviation Administrati on</organization> | <organization>Code of Federal Regulations</organization> | |||
</author> | </author> | |||
<date month="06" year="2016"/> | <date month="06" year="2016"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="Recommendations" target="https://www.faa.gov/regulatio ns_policies/rulemaking/committees/documents/media/UAS%20ID%20ARC%20Final%20Repor t%20with%20Appendices.pdf"> | <reference anchor="Recommendations" target="https://www.faa.gov/regulatio ns_policies/rulemaking/committees/documents/media/UAS%20ID%20ARC%20Final%20Repor t%20with%20Appendices.pdf"> | |||
<front> | <front> | |||
<title>UAS ID and Tracking ARC Recommendations Final Report</titl | <title>UAS Identification and Tracking (UAS ID) Aviation | |||
e> | Rulemaking Committee (ARC): ARC Recommendations Final Report | |||
</title> | ||||
<author> | <author> | |||
<organization>FAA UAS Identification and Tracking Aviatio n Rulemaking Committee</organization> | <organization>FAA UAS Identification and Tracking (UAS ID ) Aviation Rulemaking Committee (ARC)</organization> | |||
</author> | </author> | |||
<date month="09" year="2017"/> | <date month="09" year="2017"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="Roadmap" target="https://share.ansi.org/Shared Documen ts/Standards Activities/UASSC/UASSC_20-001_WORKING_DRAFT_ANSI_UASSC_Roadmap_v2.p df"> | <reference anchor="Roadmap" target="https://share.ansi.org/Shared Documen ts/Standards Activities/UASSC/UASSC_20-001_WORKING_DRAFT_ANSI_UASSC_Roadmap_v2.p df"> | |||
<front> | <front> | |||
<title>Standardization Roadmap for Unmanned Aircraft Systems draf | <title>Standardization Roadmap for Unmanned Aircraft Systems | |||
t v2.0</title> | </title> | |||
<author> | <author> | |||
<organization>American National Standards Institute (ANSI ) Unmanned Aircraft Systems Standardization Collaborative (UASSC)</organization> | <organization>ANSI Unmanned Aircraft Systems Standardizat ion Collaborative (UASSC)</organization> | |||
</author> | </author> | |||
<date month="04" year="2020"/> | <date month="04" year="2020"/> | |||
</front> | </front> | |||
<refcontent>Working | ||||
Draft, Version 2.0</refcontent> | ||||
</reference> | </reference> | |||
<reference anchor="Stranger" target=""> | ||||
<reference anchor="Stranger"> | ||||
<front> | <front> | |||
<title>Stranger in a Strange Land</title> | <title>Stranger in a Strange Land</title> | |||
<author surname="Heinlein" initials="R.A."> | <author surname="Heinlein" initials="R."> | |||
</author> | </author> | |||
<date month="06" year="1961"/> | <date month="06" year="1961"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
<reference anchor="WG105" target=""> | <reference anchor="WG105" target=""> | |||
<front> | <front> | |||
<title>WG-105 draft ED-282 Minimum Operational Performance Standa rds (MOPS) for Unmanned Aircraft System (UAS) Electronic Identification</title> | <title>Minimum Operational Performance Standards (MOPS) for Unman ned Aircraft System (UAS) Electronic Identification</title> | |||
<author> | <author> | |||
<organization>EUROCAE</organization> | <organization>EUROCAE</organization> | |||
</author> | </author> | |||
<date month="06" year="2020"/> | <date month="06" year="2020"/> | |||
</front> | </front> | |||
<refcontent>WG-105 SG-32 draft ED-282</refcontent> | ||||
</reference> | </reference> | |||
<reference anchor="WiFiNAN" target="https://www.wi-fi.org/downloads-regis | ||||
tered-guest/Wi-Fi_Aware_Specification_v3.2.pdf/29731"> | <reference anchor="WiFiNAN" target="https://www.wi-fi.org/discover-wi-fi/ | |||
wi-fi-aware"> | ||||
<front> | <front> | |||
<title>Wi-Fi Aware™ Specification Version 3.2</title> | <title>Wi-Fi Aware</title> | |||
<author> | <author> | |||
<organization>Wi-Fi Alliance</organization> | <organization>Wi-Fi Alliance</organization> | |||
</author> | </author> | |||
<date month="10" year="2020"/> | <date month="10" year="2020"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
</references> | </references> | |||
</references> | </references> | |||
<section anchor="Discussion" numbered="true" toc="default"> <name>Discussion and Limitations</name> | <section anchor="Discussion" numbered="true" toc="default"> <name>Discussion and Limitations</name> | |||
<t> | <t> | |||
This document is largely based on the process of one SDO, ASTM. | This document is largely based on the process of one SDO -- ASTM. | |||
Therefore, it is tailored to specific needs and data formats of | Therefore, it is tailored to specific needs and data formats of ASTM's | |||
this standard. Other organizations, for example in EU, do not | "Standard Specification for Remote ID and Tracking" <xref | |||
necessarily follow the same architecture. | target="F3411-19" format="default"/>. Other organizations (for | |||
example, in the EU) do not necessarily follow the same architecture. | ||||
</t> | </t> | |||
<t> | <t> | |||
The need for drone ID and operator privacy is an open discussion | The need for drone ID and operator privacy is an open discussion | |||
topic. For instance, in the ground vehicular domain each car | topic. For instance, in the ground vehicular domain, each car | |||
carries a publicly visible plate number. In some countries, for | carries a publicly visible plate number. In some countries, for | |||
nominal cost or even for free, anyone can resolve the identity and | nominal cost or even for free, anyone can resolve the identity and | |||
contact information of the owner. Civil commercial aviation and | contact information of the owner. Civil commercial aviation and | |||
maritime industries also have a tradition of broadcasting plane or | maritime industries also have a tradition of broadcasting plane or | |||
ship ID, coordinates, and even flight plans in plain text. | ship ID, coordinates, and even flight plans in plaintext. | |||
Community networks such as OpenSky <xref target="OpenSky" | Community networks such as OpenSky <xref target="OpenSky" | |||
format="default"/> and Flightradar24 <xref target="FR24" | format="default"/> and Flightradar24 <xref target="FR24" | |||
format="default"/> use this open information through ADS-B to | format="default"/> use this open information through ADS-B to | |||
deploy public services of flight tracking. Many researchers also | deploy public services of flight tracking. Many researchers also | |||
use these data to perform optimization of routes and airport | use these data to perform optimization of routes and airport | |||
operations. Such ID information should be integrity protected, but | operations. Such ID information should be integrity protected, but | |||
not necessarily confidential. | not necessarily confidential. | |||
</t> | </t> | |||
<t> | <t> | |||
In civil aviation, aircraft identity is broadcast by a device known | In civil aviation, aircraft identity is broadcast by a device known | |||
as transponder. It transmits a four octal digit squawk code, which | as transponder. It transmits a four-octal digit squawk code, which | |||
is assigned by a traffic controller to an airplane after approving | is assigned by a traffic controller to an airplane after approving | |||
a flight plan. There are several reserved codes such as 7600 which | a flight plan. There are several reserved codes, such as 7600, that | |||
indicate radio communication failure. The codes are unique in each | indicate radio communication failure. The codes are unique in each | |||
traffic area and can be re-assigned when entering another control | traffic area and can be re-assigned when entering another control | |||
area. The code is transmitted in plain text by the transponder and | area. The code is transmitted in plaintext by the transponder and | |||
also used for collision avoidance by a system known as Traffic | also used for collision avoidance by a system known as Traffic | |||
alert and Collision Avoidance System (TCAS). The system could be | alert and Collision Avoidance System (TCAS). The system could be | |||
used for UAS as well initially, but the code space is quite limited | used for UAS as well initially, but the code space is quite limited | |||
and likely to be exhausted soon. The number of UAS far exceeds the | and likely to be exhausted soon. The number of UAS far exceeds the | |||
number of civil airplanes in operation. | number of civil airplanes in operation. | |||
</t> | </t> | |||
<t> | <t> | |||
The ADS-B system is utilized in civil aviation for each “ADS-B Out” | The ADS-B system is utilized in civil aviation for each "ADS-B Out" | |||
equipped airplane to broadcast its ID, coordinates, and altitude | equipped airplane to broadcast its ID, coordinates, and altitude | |||
for other airplanes and ground control stations. If this system is | for other airplanes and ground control stations. If this system is | |||
adopted for drone IDs, it has additional benefit with backward | adopted for drone IDs, it has additional benefit with backward | |||
compatibility with civil aviation infrastructure; then, pilots and | compatibility with civil aviation infrastructure; then, pilots and | |||
dispatchers will be able to see UA on their control screens and | dispatchers will be able to see UA on their control screens and | |||
take those into account. If not, a gateway translation system | take those into account. If not, a gateway translation system | |||
between the proposed drone ID and civil aviation system should be | between the proposed drone ID and civil aviation system should be | |||
implemented. Again, system saturation due to large numbers of UAS | implemented. Again, system saturation due to large numbers of UAS | |||
is a concern. | is a concern. | |||
</t> | </t> | |||
<t> | <t> | |||
The Mode S transponders used in all TCAS and most ADS-B Out | The Mode S transponders used in all TCAS and most "ADS-B Out" | |||
installations are assigned an ICAO 24 bit "address" (arguably | installations are assigned an ICAO 24-bit "address" (arguably | |||
really an identifier rather than a locator) that is associated with | really an identifier rather than a locator) that is associated with | |||
the aircraft as part of its registration. In the US alone, well | the aircraft as part of its registration. In the US alone, well | |||
over 2^20 UAS are already flying; thus, a 24 bit space likely would | over 2<sup>20</sup> UAS are already flying; thus, a 24-bit space likely w ould | |||
be rapidly exhausted if used for UAS (other than large UAS flying | be rapidly exhausted if used for UAS (other than large UAS flying | |||
in controlled airspace, especially internationally, under rules | in controlled airspace, especially internationally, under rules | |||
other than those governing small UAS at low altitudes). | other than those governing small UAS at low altitudes). | |||
</t> | </t> | |||
<t> | <t> | |||
Wi-Fi and Bluetooth are two wireless technologies currently | Wi-Fi and Bluetooth are two wireless technologies currently | |||
recommended by ASTM specifications due to their widespread use and | recommended by ASTM specifications due to their widespread use and | |||
broadcast nature. However, those have limited range (max 100s of | broadcast nature. However, those have limited range (max 100s of | |||
meters) and may not reliably deliver UAS ID at high altitude or | meters) and may not reliably deliver UAS ID at high altitude or | |||
distance. Therefore, a study should be made of alternative | distance. Therefore, a study should be made of alternative | |||
technologies from the telecom domain (WiMAX / IEEE 802.16, 5G) or | technologies from the telecom domain (e.g., WiMAX / IEEE 802.16, 5G) or | |||
sensor networks (Sigfox, LoRa). Such transmission technologies can | sensor networks (e.g., Sigfox, LoRa). Such transmission technologies can | |||
impose additional restrictions on packet sizes and frequency of | impose additional restrictions on packet sizes and frequency of | |||
transmissions, but could provide better energy efficiency and | transmissions but could provide better energy efficiency and | |||
range. | range. | |||
</t> | </t> | |||
<t> | <t> | |||
In civil aviation, Controller-Pilot Data Link Communications | In civil aviation, Controller-Pilot Data Link Communications | |||
(CPDLC) is used to transmit command and control between the pilots | (CPDLC) is used to transmit command and control between the pilots | |||
and ATC. It could be considered for UAS as well due to long range | and ATC. It could be considered for UAS as well due to long-range | |||
and proven use despite its lack of security <xref target="CPDLC" | and proven use despite its lack of security <xref target="CPDLC" | |||
format="default"/>. | format="default"/>. | |||
</t> | </t> | |||
<t> | <t> | |||
L-band Digital Aeronautical Communications System (LDACS) is being | L-band Digital Aeronautical Communications System (LDACS) is being | |||
standardized by ICAO and IETF for use in future civil aviation | standardized by ICAO and IETF for use in future civil aviation | |||
<xref target="I-D.ietf-raw-ldacs" format="default"/>. It | <xref target="I-D.ietf-raw-ldacs" format="default"/>. LDACS | |||
provides secure communication, positioning, and control for aircraft | provides secure communication, positioning, and control for aircraft | |||
using a dedicated radio band. It should be analyzed as a potential | using a dedicated radio band. It should be analyzed as a potential | |||
provider for UAS RID as well. This will bring the benefit of a | provider for UAS RID as well. This will bring the benefit of a | |||
global integrated system creating a global airspace use | global integrated system creating awareness of global airspace use. | |||
awareness. | ||||
</t> | </t> | |||
</section> | </section> | |||
<section numbered="false" toc="default"> <name>Acknowledgments</name> | <section numbered="false" toc="default"> <name>Acknowledgments</name> | |||
<t> | <t> | |||
The work of the FAA's UAS Identification and Tracking (UAS ID) | The work of the FAA's UAS Identification and Tracking | |||
Aviation Rulemaking Committee (ARC) is the foundation of later ASTM | Aviation Rulemaking Committee (ARC) is the foundation of later ASTM | |||
<xref target="F3411-19" format="default"/> and IETF DRIP efforts. | <xref target="F3411-19" format="default"/> and IETF DRIP efforts. | |||
The work of Gabriel Cox, Intel Corp., and their Open Drone ID | The work of <contact fullname="Gabriel Cox"/>, Intel Corp., and their Ope n Drone ID | |||
collaborators opened UAS RID to a wider community. The work of ASTM | collaborators opened UAS RID to a wider community. The work of ASTM | |||
F38.02 in balancing the interests of diverse stakeholders is | F38.02 in balancing the interests of diverse stakeholders is | |||
essential to the necessary rapid and widespread deployment of UAS | essential to the necessary rapid and widespread deployment of UAS | |||
RID. IETF volunteers who have extensively reviewed or otherwise | RID. IETF volunteers who have extensively reviewed or otherwise | |||
contributed to this document include Amelia Andersdotter, Carsten | contributed to this document include <contact fullname="Amelia Andersdott | |||
Bormann, Toerless Eckert, Susan Hares, Mika Jarvenpaa, Alexandre | er"/>, <contact fullname="Carsten | |||
Petrescu, Saulo Da Silva and Shuai Zhao. Thanks to Linda Dunbar for | Bormann"/>, <contact fullname="Toerless Eckert"/>, <contact fullname="Sus | |||
the Secdir review, Nagendra Nainar for the Opsdir review and Suresh | an Hares"/>, <contact fullname="Mika Jarvenpaa"/>, <contact fullname="Alexandre | |||
Krishnan for the Gen-ART review. Thanks to IESG members Roman | Petrescu"/>, <contact fullname="Saulo Da Silva"/>, and <contact fullname= | |||
Danyliw, Erik Kline, Murray Kucherawy and Robert Wilton for helpful | "Shuai Zhao"/>. Thanks to <contact fullname="Linda Dunbar"/> for | |||
and positive comments. Thanks to chairs Daniel Migault and Mohamed | the SECDIR review, <contact fullname="Nagendra Nainar"/> for the OPSDIR r | |||
Boucadair for direction of our team of authors and editor, some of | eview, and <contact fullname="Suresh | |||
Krishnan"/> for the Gen-ART review. Thanks to IESG members <contact fulln | ||||
ame="Roman | ||||
Danyliw"/>, <contact fullname="Erik Kline"/>, <contact fullname="Murray K | ||||
ucherawy"/>, and <contact fullname="Robert Wilton"/> for helpful | ||||
and positive comments. Thanks to chairs <contact fullname="Daniel Migault | ||||
"/> and <contact fullname="Mohamed | ||||
Boucadair"/> for direction of our team of authors and editor, some of | ||||
whom are newcomers to writing IETF documents. Thanks especially to | whom are newcomers to writing IETF documents. Thanks especially to | |||
Internet Area Director Eric Vyncke for guidance and support. | Internet Area Director <contact fullname="Éric Vyncke"/> for guidance and | |||
support. | ||||
</t><t>This work was partly supported by the EU project AiRMOUR (enabling | ||||
sustainable air mobility in urban contexts via | ||||
emergency and medical services) under grant agreement no. 101006601. | ||||
</t> | </t> | |||
</section> | </section> | |||
</back> | </back> | |||
</rfc> | </rfc> | |||
End of changes. 464 change blocks. | ||||
838 lines changed or deleted | 1170 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ |