Resilient Edge-enabled Data Interchange (REDI)

The Resilient Edge-enabled Data Interchange (REDI) architecture addresses the Department of the Navy’s (DoN) critical need for secure, resilient, and interoperable data management in environments where traditional security measures are insufficient. These environments, characterized by Disrupted, Disconnected, Intermittent, and Low-bandwidth (DDIL) scenarios, present unique challenges that current enterprise-focused solutions fail to address due to their reliance on centralized key management, network connectivity, and platform-specific dependencies. REDI advances data-centric security by integrating key technologies, including Blockchain, Zero Trust Data Format (ZTDF), Public Key Infrastructure (PKI), and Verifiable Credentials (VCs). This layered architecture ensures that data integrity, access control, and secure distribution are maintained, independent of network status, platform, or application. The architecture is designed to operate effectively in DDIL environments by eliminating the need for constant connectivity and enabling secure, decentralized data exchange.Key components of the REDI architecture include:1. Policy-aware Data Exchange: REDI uses ZTDF to associate Attribute-Based Access Control (ABAC) policies directly with the data, enabling decentralized enforcement of access policies. The architecture also explores the potential of Zero Knowledge Proof (ZKP) to allow secure data discovery without revealing sensitive information.2. Platform-agnostic Encryption: REDI leverages PKI, VCs, and blockchain smart contracts to create a flexible encryption system that avoids reliance on a single key server or Identity Provider (IdP). This ensures secure data exchange across various platforms, even when traditional key management systems are unavailable.3. Interoperable Access Policy: By employing semantic web technologies, REDI enables the mediation between different policy vocabularies, facilitating interoperability across diverse organizations, including multinational coalitions.4. Edge-Enabled Network Access: The architecture utilizes blockchain technology to manage encryption keys, validate access rights, and ensure data integrity, even in the absence of continuous network connectivity. NIRA aims to demonstrate the feasibility of REDI in a Phase I effort, focusing on its application within an Air Mobility Command (AMC) use case, where forces are forward-deployed in contested environments. REDI’s methods are particularly suited to scenarios like AMC’s Airlift-Tanker Open Mission Systems (ATOMS) concept, which requires secure data integrity and control in both connected and disconnected states. The project’s ultimate goal is to provide the DoN and other defense entities with a robust, interoperable solution that significantly enhances operational resilience and security across diverse and challenging environments.