Identity Management in Future Railway Mobile Communication System

Abstract

The Future Railway Mobile Communication System (FRMCS) has emerged as a worldwide standard for railway communication. This technology enables the operational efficiency and safety of railways to be improved by providing mission critical communications, machine-type communication for the railway system on board, in addition to trackside telemetry and broadband connectivity for passengers. Different equipment types, users, and functional identities can be involved in communication, and each of them is uniquely identified. Identity management is an important part of the security functions provided by the FRMCS system. This paper presents a service-oriented approach to identity management functionality, enabling service composition for railway applications and service virtualization. This paper studies functionality for the initial registration and subsequent deregistration of railway devices, users, and their functional identities, in addition to the transfer of the registered identities between different FRMCS serving areas while the train moves. Two FRMCS services that follow the principles of representational state transfer architecture are proposed. Services’ functionality is illustrated by use cases, data types, and application programming interfaces that enable services to be interacted with. Identity registration status models are developed, formally described, and mathematically verified. Discussion of the applicability of the proposed services for the implementation of FRMCS security and safety functions is provided. The presented service-oriented approach features a satisfactory level of flexibility and versatility.