Special Conditions: Gulfstream Model GVI Airplane; Electronic Systems Security Protection From Unauthorized External Access, 10529-10530 [2011-4232]
Download as PDF
<![CDATA[
Federal Register / Vol. 76, No. 38 / Friday, February 25, 2011 / Proposed Rules
risks potentially resulting in unsafe
conditions for the airplane and its
occupants.
This potential exploitation of security
vulnerabilities may result in intentional
or unintentional destruction, disruption,
degradation, or exploitation of data and
systems critical to the safety and
maintenance of the airplane. The
existing regulations and guidance
material did not anticipate these types
of system architectures. Furthermore, 14
CFR regulations and current system
safety assessment policy and techniques
do not address potential security
vulnerabilities which could be exploited
by unauthorized access to airplane
networks and servers. Therefore, these
special conditions and a means of
compliance are proposed to ensure that
the security (i.e., confidentiality,
integrity, and availability) of airplane
systems is not compromised by
unauthorized wired or wireless
electronic connections between airplane
systems and networks and the passenger
entertainment domain.
Applicability
As discussed above, these proposed
special conditions are applicable to the
GVI. Should Gulfstream apply at a later
date for a change to the type certificate
to include another model incorporating
the same novel or unusual design
features, these proposed special
conditions would apply to that model as
well.
Conclusion
This action affects only certain novel
or unusual design features of the GVI. It
is not a rule of general applicability.
List of Subjects in 14 CFR Part 25
Aircraft, Aviation safety, Reporting
and recordkeeping requirements.
The authority citation for these
special conditions is as follows:
Authority: 49 U.S.C. 106(g), 40113, 44701,
44702, 44704.
srobinson on DSKHWCL6B1PROD with PROPOSALS
The Proposed Special Conditions
Accordingly, the Federal Aviation
Administration (FAA) proposes the
following special condition as part of
the type certification basis for the GVI
airplanes.
The design must isolate or provide
protection from any inadvertent or
malicious change to, and any adverse
effect on any systems, software, or data
in the aircraft control domain or airline
information domain from any point
within the passenger entertainment
domain.
VerDate Mar<15>2010
15:08 Feb 24, 2011
Jkt 223001
Issued in Renton, Washington, on February
15, 2011.
KC Yanamura,
Acting Manager, Transport Airplane
Directorate, Aircraft Certification Service.
[FR Doc. 2011–4231 Filed 2–24–11; 8:45 am]
BILLING CODE 4910–13–P
DEPARTMENT OF TRANSPORTATION
Federal Aviation Administration
14 CFR Part 25
[Docket No. NM448 Special Conditions No.
25–11–07–SC]
Special Conditions: Gulfstream Model
GVI Airplane; Electronic Systems
Security Protection From Unauthorized
External Access
Federal Aviation
Administration (FAA), DOT.
ACTION: Notice of proposed special
conditions.
AGENCY:
This action proposes special
conditions for the Gulfstream GVI
airplane. This airplane will have novel
or unusual design features associated
with the architecture and connectivity
capabilities of the airplane’s computer
systems and networks, which may allow
access by external computer systems
and networks. Connectivity by external
systems and networks may result in
security vulnerabilities to the airplane’s
systems. The applicable airworthiness
regulations do not contain adequate or
appropriate safety standards for these
design features. These proposed special
conditions contain the additional safety
standards that the Administrator
considers necessary to establish a level
of safety equivalent to that established
by the existing airworthiness standards.
DATES: We must receive your comments
by April 11, 2011.
ADDRESSES: You must mail two copies
of your comments to: Federal Aviation
Administration, Transport Airplane
Directorate, Attn: Rules Docket (ANM–
113), Docket No. NM448, 1601 Lind
Avenue, SW., Renton, Washington
98057–3356. You may deliver two
copies to the Transport Airplane
Directorate at the above address. You
must mark your comments: Docket No.
NM448. You can inspect comments in
the Rules Docket weekdays, except
Federal holidays, between 7:30 a.m. and
4 p.m.
FOR FURTHER INFORMATION CONTACT: Will
Struck, FAA, Airplane and Flight Crew
Interface Branch, ANM–111, Transport
Standards Staff, Transport Airplane
Directorate, Aircraft Certification
Service, 1601 Lind Avenue, SW.,
SUMMARY:
PO 00000
Frm 00004
Fmt 4702
Sfmt 4702
10529
Renton, Washington 98057–3356;
telephone (425) 227–2764; facsimile
(425) 227–1320.
SUPPLEMENTARY INFORMATION:
Comments Invited
We invite interested people to take
part in this rulemaking by sending
written comments, data, or views. The
most helpful comments reference a
specific portion of the special
conditions, explain the reason for any
recommended change, and include
supporting data. We ask that you send
us two copies of written comments.
We will file in the docket all
comments we receive, as well as a
report summarizing each substantive
public contact with FAA personnel
concerning these special conditions.
You can inspect the docket before and
after the comment closing date. If you
wish to review the docket in person, go
to the address in the ADDRESSES section
of this preamble between 7:30 a.m. and
4 p.m., Monday through Friday, except
Federal holidays.
We will consider all comments we
receive on or before the closing date for
comments. We will consider comments
filed late if it is possible to do so
without incurring expense or delay. We
may change these special conditions
based on the comments we receive.
If you want us to acknowledge receipt
of your comments on this proposal,
include with your comments a selfaddressed, stamped postcard on which
you have written the docket number.
We will stamp the date on the postcard
and mail it back to you.
Background
On March 29, 2005, Gulfstream
Aerospace Corporation (hereafter
referred to as ‘‘Gulfstream’’) applied for
an FAA type certificate for its new
Gulfstream Model GVI passenger
airplane. Gulfstream later applied for,
and was granted, an extension of time
for the type certificate, which changed
the effective application date to
September 28, 2006. The Gulfstream
Model GVI airplane will be an all-new,
two-engine jet transport airplane with
an executive cabin interior. The
maximum takeoff weight will be 99,600
pounds, with a maximum passenger
count of 19 passengers.
Type Certification Basis
Under provisions of Title 14, Code of
Federal Regulations (14 CFR) 21.17,
Gulfstream must show that the
Gulfstream Model GVI airplane
(hereafter referred to as ‘‘the GVI’’) meets
the applicable provisions of 14 CFR part
25, as amended by Amendments 25–1
through 25–119, 25–122, and 25–124. If
E:\FR\FM\25FEP1.SGM
25FEP1
10530
Federal Register / Vol. 76, No. 38 / Friday, February 25, 2011 / Proposed Rules
the Administrator finds that the
applicable airworthiness regulations
(i.e., 14 CFR part 25) do not contain
adequate or appropriate safety standards
for the Gulfstream Model GVI because of
a novel or unusual design feature,
special conditions are prescribed under
the provisions of § 21.16.
Special conditions are initially
applicable to the model for which they
are issued. Should the type certificate
for that model be amended later to
include any other model that
incorporates the same novel or unusual
design features, the special conditions
would also apply to the other model
under provisions of § 21.101.
In addition to complying with the
applicable airworthiness regulations
and special conditions, the GVI must
comply with the fuel vent and exhaust
emission requirements of 14 CFR part
34 and the noise certification
requirements of 14 CFR part 36. The
FAA must also issue a finding of
regulatory adequacy pursuant to section
611 of Public Law 92–574, the ‘‘Noise
Control Act of 1972.’’
The FAA issues special conditions, as
defined in 14 CFR 11.19, in accordance
with § 11.38, and they become part of
the type certification basis under
§ 21.17(a)(2).
srobinson on DSKHWCL6B1PROD with PROPOSALS
Novel or Unusual Design Features
The GVI will incorporate the
following novel or unusual design
features: Digital systems architecture
composed of several connected
networks. The proposed architecture
and network configuration may be used
for, or interfaced with, a diverse set of
functions, including:
1. Flight-safety related control,
communication, and navigation systems
(aircraft control domain),
2. Airline business and administrative
support (airline information domain),
3. Passenger information and
entertainment systems (passenger
entertainment domain), and
4. The capability to allow access to or
by external sources.
Discussion of Proposed Special
Conditions
The proposed Model GVI architecture
and network configuration may allow
increased connectivity to and access by
external airplane sources and airline
operations and maintenance systems to
the aircraft control domain and airline
information domain. The aircraft control
domain and airline information domain
perform functions required for the safe
operation and maintenance of the
airplane. Previously these domains had
very limited connectivity with external
sources.
VerDate Mar<15>2010
15:08 Feb 24, 2011
Jkt 223001
The architecture and network
configuration may allow the
exploitation of network security
vulnerabilities resulting in intentional
or unintentional destruction, disruption,
degradation, or exploitation of data,
systems, and networks critical to the
safety and maintenance of the airplane.
The existing regulations and guidance
material did not anticipate these types
of airplane system architectures.
Furthermore, 14 CFR regulations and
current system safety assessment policy
and techniques do not address potential
security vulnerabilities, which could be
exploited by unauthorized access to
airplane systems, data buses, and
servers. Therefore, these special
conditions and a means of compliance
are proposed to ensure that the security
(i.e., confidentiality, integrity, and
availability) of airplane systems is not
compromised by unauthorized wired or
wireless electronic connections.
Applicability
As discussed above, these proposed
special conditions are applicable to the
GVI. Should Gulfstream apply at a later
date for a change to the type certificate
to include another model incorporating
the same novel or unusual design
features, these proposed special
conditions would apply to that model as
well.
Conclusion
This action affects only certain novel
or unusual design features of the GVI. It
is not a rule of general applicability.
List of Subjects in 14 CFR Part 25
Aircraft, Aviation safety, Reporting
and recordkeeping requirements.
The authority citation for these
special conditions is as follows:
Authority: 49 U.S.C. 106(g), 40113, 44701,
44702, 44704.
The Proposed Special Conditions
Accordingly, the Federal Aviation
Administration (FAA) proposes the
following special conditions as part of
the type certification basis for the GVI
airplanes.
1. The applicant must ensure
electronic system security protection for
the aircraft control domain and airline
information domain from access by
unauthorized sources external to the
airplane, including those possibly
caused by maintenance activity.
2. The applicant must ensure that
electronic system security threats from
external sources are identified and
assessed, and that effective electronic
system security protection strategies are
implemented to protect the airplane
from all adverse impacts on safety,
PO 00000
Frm 00005
Fmt 4702
Sfmt 4702
functionality, and continued
airworthiness.
Issued in Renton, Washington, on February
15, 2011.
KC Yanamura,
Acting Manager, Transport Airplane
Directorate, Aircraft Certification Service.
[FR Doc. 2011–4232 Filed 2–24–11; 8:45 am]
BILLING CODE 4910–13–P
ENVIRONMENTAL PROTECTION
AGENCY
40 CFR Part 49
[EPA–R09–OAR–2010–0683; FRL–9269–4]
Supplemental Proposed Rule of
Source Specific Federal
Implementation Plan for Implementing
Best Available Retrofit Technology for
Four Corners Power Plant: Navajo
Nation
Environmental Protection
Agency (EPA).
ACTION: Supplemental proposed rule.
AGENCY:
On October 19, 2010, the
Environmental Protection Agency (EPA)
published a proposal to promulgate a
source specific Federal Implementation
Plan (FIP) requiring the Four Corners
Power Plant (FCPP), located on the
Navajo Nation, to achieve emissions
reductions required by the Clean Air
Act’s Best Available Retrofit Technology
(BART) provision. On November 24,
2010, Arizona Public Service (APS)
acting on behalf of FCPP’s owners
submitted a letter to EPA offering an
alternative proposal to reduce visibilityimpairing pollution. In this action, EPA
is supplementing our October 19, 2010
BART proposal with our technical
evaluation of APS’ alternative proposal.
We are proposing to find that a different
alternative emissions control strategy
would achieve more progress than
EPA’s BART proposal towards
achieving visibility improvements in the
surrounding Class I areas.
DATES: Comments on this supplemental
proposed rule must be submitted no
later than May 2, 2011.
Open houses and public hearings will
be held on the following dates:
Shiprock Chapter, Shiprock, New
Mexico—March 29, 2011;
Nenahnezad Chapter, Fruitland, New
Mexico—March 30, 2011;
Farmington, New Mexico—March 30,
2011;
Durango, Colorado—March 31, 2011.
ADDRESSES: Submit comments,
identified by docket number EPA–R09–
OAR–2010–0683, by one of the
following methods:
SUMMARY:
E:\FR\FM\25FEP1.SGM
25FEP1
]]>Agencies
[Federal Register Volume 76, Number 38 (Friday, February 25, 2011)]
[Proposed Rules]
[Pages 10529-10530]
From the Federal Register Online via the Government Printing Office [www.gpo.gov]
[FR Doc No: 2011-4232]
-----------------------------------------------------------------------
DEPARTMENT OF TRANSPORTATION
Federal Aviation Administration
14 CFR Part 25
[Docket No. NM448 Special Conditions No. 25-11-07-SC]
Special Conditions: Gulfstream Model GVI Airplane; Electronic
Systems Security Protection From Unauthorized External Access
AGENCY: Federal Aviation Administration (FAA), DOT.
ACTION: Notice of proposed special conditions.
-----------------------------------------------------------------------
SUMMARY: This action proposes special conditions for the Gulfstream GVI
airplane. This airplane will have novel or unusual design features
associated with the architecture and connectivity capabilities of the
airplane's computer systems and networks, which may allow access by
external computer systems and networks. Connectivity by external
systems and networks may result in security vulnerabilities to the
airplane's systems. The applicable airworthiness regulations do not
contain adequate or appropriate safety standards for these design
features. These proposed special conditions contain the additional
safety standards that the Administrator considers necessary to
establish a level of safety equivalent to that established by the
existing airworthiness standards.
DATES: We must receive your comments by April 11, 2011.
ADDRESSES: You must mail two copies of your comments to: Federal
Aviation Administration, Transport Airplane Directorate, Attn: Rules
Docket (ANM-113), Docket No. NM448, 1601 Lind Avenue, SW., Renton,
Washington 98057-3356. You may deliver two copies to the Transport
Airplane Directorate at the above address. You must mark your comments:
Docket No. NM448. You can inspect comments in the Rules Docket
weekdays, except Federal holidays, between 7:30 a.m. and 4 p.m.
FOR FURTHER INFORMATION CONTACT: Will Struck, FAA, Airplane and Flight
Crew Interface Branch, ANM-111, Transport Standards Staff, Transport
Airplane Directorate, Aircraft Certification Service, 1601 Lind Avenue,
SW., Renton, Washington 98057-3356; telephone (425) 227-2764; facsimile
(425) 227-1320.
SUPPLEMENTARY INFORMATION:
Comments Invited
We invite interested people to take part in this rulemaking by
sending written comments, data, or views. The most helpful comments
reference a specific portion of the special conditions, explain the
reason for any recommended change, and include supporting data. We ask
that you send us two copies of written comments.
We will file in the docket all comments we receive, as well as a
report summarizing each substantive public contact with FAA personnel
concerning these special conditions. You can inspect the docket before
and after the comment closing date. If you wish to review the docket in
person, go to the address in the ADDRESSES section of this preamble
between 7:30 a.m. and 4 p.m., Monday through Friday, except Federal
holidays.
We will consider all comments we receive on or before the closing
date for comments. We will consider comments filed late if it is
possible to do so without incurring expense or delay. We may change
these special conditions based on the comments we receive.
If you want us to acknowledge receipt of your comments on this
proposal, include with your comments a self-addressed, stamped postcard
on which you have written the docket number. We will stamp the date on
the postcard and mail it back to you.
Background
On March 29, 2005, Gulfstream Aerospace Corporation (hereafter
referred to as ``Gulfstream'') applied for an FAA type certificate for
its new Gulfstream Model GVI passenger airplane. Gulfstream later
applied for, and was granted, an extension of time for the type
certificate, which changed the effective application date to September
28, 2006. The Gulfstream Model GVI airplane will be an all-new, two-
engine jet transport airplane with an executive cabin interior. The
maximum takeoff weight will be 99,600 pounds, with a maximum passenger
count of 19 passengers.
Type Certification Basis
Under provisions of Title 14, Code of Federal Regulations (14 CFR)
21.17, Gulfstream must show that the Gulfstream Model GVI airplane
(hereafter referred to as ``the GVI'') meets the applicable provisions
of 14 CFR part 25, as amended by Amendments 25-1 through 25-119, 25-
122, and 25-124. If
[[Page 10530]]
the Administrator finds that the applicable airworthiness regulations
(i.e., 14 CFR part 25) do not contain adequate or appropriate safety
standards for the Gulfstream Model GVI because of a novel or unusual
design feature, special conditions are prescribed under the provisions
of Sec. 21.16.
Special conditions are initially applicable to the model for which
they are issued. Should the type certificate for that model be amended
later to include any other model that incorporates the same novel or
unusual design features, the special conditions would also apply to the
other model under provisions of Sec. 21.101.
In addition to complying with the applicable airworthiness
regulations and special conditions, the GVI must comply with the fuel
vent and exhaust emission requirements of 14 CFR part 34 and the noise
certification requirements of 14 CFR part 36. The FAA must also issue a
finding of regulatory adequacy pursuant to section 611 of Public Law
92-574, the ``Noise Control Act of 1972.''
The FAA issues special conditions, as defined in 14 CFR 11.19, in
accordance with Sec. 11.38, and they become part of the type
certification basis under Sec. 21.17(a)(2).
Novel or Unusual Design Features
The GVI will incorporate the following novel or unusual design
features: Digital systems architecture composed of several connected
networks. The proposed architecture and network configuration may be
used for, or interfaced with, a diverse set of functions, including:
1. Flight-safety related control, communication, and navigation
systems (aircraft control domain),
2. Airline business and administrative support (airline information
domain),
3. Passenger information and entertainment systems (passenger
entertainment domain), and
4. The capability to allow access to or by external sources.
Discussion of Proposed Special Conditions
The proposed Model GVI architecture and network configuration may
allow increased connectivity to and access by external airplane sources
and airline operations and maintenance systems to the aircraft control
domain and airline information domain. The aircraft control domain and
airline information domain perform functions required for the safe
operation and maintenance of the airplane. Previously these domains had
very limited connectivity with external sources.
The architecture and network configuration may allow the
exploitation of network security vulnerabilities resulting in
intentional or unintentional destruction, disruption, degradation, or
exploitation of data, systems, and networks critical to the safety and
maintenance of the airplane.
The existing regulations and guidance material did not anticipate
these types of airplane system architectures. Furthermore, 14 CFR
regulations and current system safety assessment policy and techniques
do not address potential security vulnerabilities, which could be
exploited by unauthorized access to airplane systems, data buses, and
servers. Therefore, these special conditions and a means of compliance
are proposed to ensure that the security (i.e., confidentiality,
integrity, and availability) of airplane systems is not compromised by
unauthorized wired or wireless electronic connections.
Applicability
As discussed above, these proposed special conditions are
applicable to the GVI. Should Gulfstream apply at a later date for a
change to the type certificate to include another model incorporating
the same novel or unusual design features, these proposed special
conditions would apply to that model as well.
Conclusion
This action affects only certain novel or unusual design features
of the GVI. It is not a rule of general applicability.
List of Subjects in 14 CFR Part 25
Aircraft, Aviation safety, Reporting and recordkeeping
requirements.
The authority citation for these special conditions is as follows:
Authority: 49 U.S.C. 106(g), 40113, 44701, 44702, 44704.
The Proposed Special Conditions
Accordingly, the Federal Aviation Administration (FAA) proposes the
following special conditions as part of the type certification basis
for the GVI airplanes.
1. The applicant must ensure electronic system security protection
for the aircraft control domain and airline information domain from
access by unauthorized sources external to the airplane, including
those possibly caused by maintenance activity.
2. The applicant must ensure that electronic system security
threats from external sources are identified and assessed, and that
effective electronic system security protection strategies are
implemented to protect the airplane from all adverse impacts on safety,
functionality, and continued airworthiness.
Issued in Renton, Washington, on February 15, 2011.
KC Yanamura,
Acting Manager, Transport Airplane Directorate, Aircraft Certification
Service.
[FR Doc. 2011-4232 Filed 2-24-11; 8:45 am]
BILLING CODE 4910-13-P
