Hosted Payload Secure Interface (HPSI)

ABSTRACT: Innoflight"s Phase 1 SBIR proposes to define the architecture, CONOPs and preliminary design and interface specification of a Hosted Payload Secure Interface (HPSI) leveraging Innoflight"s existing High Assurance Internet Protocol Encryptor (HAIPE) embedded solution. HAIPE provides NSA compliant endpoint encryption over packet-switched communication infrastructures. The purpose of the HPSI is to provide a highly secure, continuously available link between a sensitive national security payload and an ordinary transponder channel on a commercial spacecraft. As designed, the HPSI will enable a full duplex data channel of networked communications for all commands and data handling (C & DH) between the national security payload and the government"s payload users through commercial IP routing infrastructure already present in commercial host ground architectures. HPSI includes several key elements in addition to security including a modular red-side digital interface to handle a wide range of payload inputs, a HAIPE engine to establish multiple security associations from any payload"addresses"to any number of end users over a single communications link, and a programmable modem interface to support a variety of commercial transponders that provide the RF pathway for the hosted payload data streams. Space Systems Loral has committed their support to the proposed HPSI SBIR efforts. BENEFIT: Innoflight"s proposed Hosted Payload Secure Interface (HPSI) technology is a key enabler for the commercially hosted payload enterprise by accomplishing two vital objectives: a) Provide assurance to the US Government customer that the confidentiality and integrity of payload data message traffic can be secured over commercial space-to-ground RF links; and b)Enable secure data distribution though affordable, abundant commercial packet switched ground networks once the data from the hosted payload enters the terrestrial communication sphere through the satellite operator"s commercial ground gateway.