upgrade

Definition
Included In
Communication Solutions
Characteristics
Security

Definitions

personnel device software install/upgrade (Information Flow): This flow supports installation and update of software residing in Personnel Devices. It supports download of the software installation files, including executable code and associated support files.

Center (Source Physical Object): This general physical object is used to model core capabilities that are common to any center.

Personnel Device (Destination Physical Object): 'Personnel Device' represents devices used by emergency personnel or maintenance and construction personnel in the field. In the case of emergency personnel, the devices would include body cameras or smartphones (and their peripherals) that can be used by emergency personnel to provide images or video as well as send or receive data regarding the incident. The devices could also be used for incident scene safety messages to the personnel. In the case of maintenance and construction field personnel, the devices could be cellular phones or specialized safety devices that would be used for work zone safety messages to the personnel.

Included In

This Triple is in the following Service Packages:

SU13: Personnel Device Maintenance

This triple is associated with the following Functional Objects:

This Triple is described by the following Functional View Data Flows:

personnel_device_software_install

This Triple has the following triple relationships:

None

Communication Solutions

TUF - Secure Wireless Internet (ITS) (4)
Proprietary Data - Proprietary Comm (16)
(None-Data) - Secure Wireless Internet (EU) (32)

Solutions are sorted in ascending Gap Severity order. The Gap Severity is the parenthetical number at the end of the solution.

Selected Solution

TUF - Secure Wireless Internet (ITS)

Solution Description

This solution is used within the U.S.. It combines standards associated with TUF with those for I-M: Secure Wireless Internet (ITS). The TUF standards include upper-layer standards required to install and update application software. The I-M: Secure Wireless Internet (ITS) standards include lower-layer standards that support secure communications between two entities, either or both of which may be mobile devices, but they must be stationary or only moving within wireless range of a single wireless access point (e.g., a parked car). Security is based on X.509 or IEEE 1609.2 certificates. A non-mobile (if any) endpoint may connect to the service provider using any Internet connection method.

ITS Application Entity No Standard Needed			Click gap icons for more info.
Mgmt Bundle: SNMPv3 MIB	Facilities TUF	Security TUF Secure Session Alternatives
	TransNet IP Alternatives Internet Transport Alternatives
	Access Wireless Internet Alternatives (NA)

Note that some layers might have alternatives, in which case all of the gap icons associated with every alternative may be shown on the diagram, but the solution severity calculations (and resulting ordering of solutions) includes only the issues associated with the default (i.e., best, least severe) alternative.

Characteristics

Characteristic	Value
Time Context	Recent
Spatial Context	Regional
Acknowledgement	True
Cardinality	Unicast
Initiator	Destination
Authenticable	True
Encrypt	True

Interoperability	Description
National	This triple should be implemented consistently within the geopolitical region through which movement is essentially free (e.g., the United States, the European Union).

Security

Information Flow Security
	Confidentiality	Integrity	Availability
Rating	High	High	Moderate
Basis	PID control, configuration and software/firmware update should all be protected from view. A hostile third party could use this information to reverse engineer control/configuration/update processes, and use that information in an attack across a broad swatch of similar devices, which would have severe effects to the installed base.	PID control, configuration and update need to be correct or the PID may be misconfigured, which for some applications could have severe safety impacts.	PID control, configuration and update needs to be available; however the availability requirement is probably less than Integrity, as without this flow the PID can continue to operate. The exception would be post-cyber attack, when this flow becomes critical.

Security Characteristics	Value
Authenticable	True
Encrypt	True

Center --> Personnel Device:personnel device software install/upgrade