IV 4 1 Fujimoto Security

Trial Solution for VOS security issue in Japan: 

Trial Solution for VOS security issue in Japan Japan Meteorological Agency

Slide2: 

Distribution of reports from Japanese VOS ＪＡＰＡＮ

Slide3: 

Locations of pirates attacks in 2006 Victims of pirates attacks in 2006

Slide4: 

19 incidents happened in 2005 22 incidents in 2006 In March 2005, a Japanese ship was attacked and the crews were kidnapped at the Malacca Strait.

Slide5: 

Suspension of weather reports from Japanese VOS on 16 September 2005

Slide6: 

Tentative measure (SHIP) in Japan since September 2005

Slide7: 

Solution Japan Ship Owners Maritime Bureau Japan Meteorological Agency Japan Coast Guard WMO/EC58 Res.7 (June 2006) “SHIP” or “MASK” Tracing and identifying country names of “MASK” ships are easier than “SHIP” ships.

Slide8: 

Non-“callsign masking” ships Data exchange in the network of WMO “Improved　SHIP” scheme Reports with dummy callsign BBXX JGQH 26034 99070 11623 41/97 70103 10283 20230 40079 57018 70222 83963 22263 00294 1//03 20100 32414 40702 50702 70016= BBXX SHIP 26034 99070 11623 41/97 70103 10283 20230 40079 57018 70222 83963 22263 00294 1//03 20100 32414 40702 50702 70016= More accurate weather forecast Contributions to safety navigation More precise climate information “Callsign masking” ships Original weather reports with callsign Callsign Replacing Reports with callsign Reports with callsign JMA Non-Replacing Reports with callsign Yamaguchi LES Registered NMHSs (Secured data exchange in real time)

Registration for masking: 

Registration for masking (As of April 6, 2007) 706 ships registered 662 ships masking Including: 3 ships of UK-VOF 8 ships of US-VOF 44 ships non-masking JMA accepts masking requests from foreign countries.

Slide10: 

… 　Security #1 (Encrypting) Security #2 (Authentication) Original data server 10 minutes … SMVX41 RJTD 290000 BBXX JGQH 29000 99498 11630 41598 73610 10004 20001 40185 52031 70322 874// 22255 00012 20404 331// 40604 5//// 80003= SHIP 29000 99514 11546 41/97 73107 18069 40279 51023 70327 22272 00001 2//// 333// 40503 5////= JDWX 29000 99466 11522 43/98 63407 11010 40281 52015 22212 00040 20304= JCCX 29000 99466 11522 43/98 63407 11010 40281 52015 22212 00040 20304= Secured data exchange Third Parties X Accumulating messages into files every 10 minutes 10 minutes 10 minutes　Delay Usually within 1 minutes, sometime within 2 minute … Registered NMHSs - Real time monitoring -Climate analyses

Slide11: 

<Requirement 1> Real time quality monitoring JMA provides original data in real time (about 10 minutes delay from GTS). =Enough for real time monitoring. JMA is one of RSMC.

Slide12: 

<Requirement 2> Collect non-masked data and provide them to monitoring centres. JMA collects and puts original data in its data server. Authorized organizations can get original data in real time through the data server.

Slide13: 

JMA exchanged technical information (Data format, Encryption, filename etc.) with RSMC Exeter to minimize the impact. => - Format, file name follow to the Manual on GTS. - Encryption will be done when the encryption strategy is to be fixed. (Ship　owners agreed.) =>Users can easily get and use non-masked data. <Requirement 3> Minimize the impact on centres receiving non-masked data.

Slide14: 

SMVX41 RJTD 290000 BBXX SHIP 29000 99498 11630 41598 73610 10004 20001 40185 52031 70322 874// 22255 00012 20404 331// 40604 5//// 80003= SHIP 29000 99514 11546 41/97 73107 18069 40279 51023 70327 22272 00001 2//// 333// 40503 5////= SHIP 29000 99466 11522 43/98 63407 11010 40281 52015 22212 00040 20304= SHIP 29000 99466 11522 43/98 63407 11010 40281 52015 22212 00040 20304= … … Registered NMHSs SMVX91 RJTD 290000 BBXX JGQH 29000 99498 11630 41598 73610 10004 20001 40185 52031 70322 874// 22255 00012 20404 331// 40604 5//// 80003= SHIP 29000 99514 11546 41/97 73107 18069 40279 51023 70327 22272 00001 2//// 333// 40503 5////= JDWX 29000 99466 11522 43/98 63407 11010 40281 52015 22212 00040 20304= JCCX 29000 99466 11522 43/98 63407 11010 40281 52015 22212 00040 20304= Improved SHIP scheme One solution for duplication problem GTS (masked data) (original data)

Slide15: 

Application for Access to JMA Ship Data Server Under the following terms and conditions, my organization will access weather reports from ships including Voluntary Observing Ships (VOS) call signs to be provided via the Ship Data Server (the “Server”) operated by the Japan Meteorological Agency (JMA) for the purpose of real-time monitoring and climate analysis, in accordance with the Resolution 7 of WMO/EC-LVIII. 1. Costs JMA provides weather reports including VOS call signs and position data, free of charge, via the Server, while registered user will cover the whole costs required to access the reports, including those for user’s computer system and communications. 2. Restriction Registered users shall not provide or expose to any third parties the data obtained via the Server and the IDs/passwords for the access to the Server. JMA may revoke the IDs in case the above is not secured. 3. Disclaimer JMA dose not warrant accuracy and quality of data provided through the Server. JMA assumes no liability or responsibility for any problems resulting from the use of the Server. 4. Alteration of the service JMA may terminate the Server with prior notification. JMA may change the contents of the data-providing service via the Server with prior notification. I designated the following staff member of my organization as a contact point on this matter. First Name Surname Affiliation(Title, Division and Department etc.) E-mail Address Name of the organization: Name of the Director: (Please type) Date of application: (Signature) Access to the Original Data Server

Slide16: 

SUMMARY In accordance with Res.7 of EC58, Japan adopts “Improved SHIP” scheme after consultation with ship owners and relevant bodies in Japan. In accordance with Res.7 of EC58, Japan provides secure exchanges of the original data through a secured web server in real time. When the U.S. starts SHIP masking on the weather reports, “Improved SHIP “ can cover globally.

Slide17: 

Who owes the security risks? Users (NMSs)? Reporters (VOS)? We should resolve their concerns as much as possible. Improved SHIP scheme is for the ships which want “SHIP” masking, ships in high risk areas.