End-to-End, Topic-Level Security for EGS Applications

Mission need comes down to secure communications, C2, and data that maintains integrity throughout Tx/Rx pathways. This becomes n^2 more difficult as the n number of nodes in the space ground architecture increases. SpiderOak will adapt its commercial OrbitSecure suite to provide fully decentralized software-defined control and data planes with expert key management and strict policy enforcement. This will enable an enterprise command brokering system that enables use of US Government, Allied, and/or commercial infrastructure for command and control. This solution provides unique end-to-end secure encryption for each topic with high assurance enforcement of role based access control (RBAC) built on a lightweight distributed ledger solution providing both integrity of messages moving forward across the system and the ability to audit past transactions. SpiderOak will extend its commercial OrbitSecure solution in several ways. The primary effort is focused on the adoption of US Space Force (USSF) Enterprise Ground Services (EGS) identity and access management  (IdAM) and topic management, enabling multiple security domains defined by topic across multiple missions and commodity hardware. Significant effort will go towards the creation and implementation of USSF EGS security policy as OrbitSecure-native policy, and extension of the OrbitSecure runtime to add additional capabilities where missing to support USSF EGS security needs. Additionally, SpiderOak will extend the OrbitSecure Application Programming Interface (API) surface to support the NASA Goddard Mission Services Evolution Center (GMSEC) APIs, in widespread use across the USSF EGS infrastructure. This will provide zero-code-change "plug and play" support for both existing EGS applications as well as software yet to be written. It also provides vendor flexibility for the US Government, allowing incorporation and federation of EGS data with other systems.