Operational Information Security Group
The "Operational Information" architecture flows carry information that is used to support operation of the transportation system. While not intended for general public distribution, this information has no special sensitivity. Transportation system operation does rely to some degree on the information's integrity and availability.
Security Services
| Service | Importance | Service Description |
|---|---|---|
| Confidentiality | Low | The system should prevent unauthorized disclosure of information deemed sensitive. |
| Integrity | Low | The system should ensure that information is protected from unauthorized intentional or unintentional modifications. |
| Availability | Low | The system should protect critical ITS services in order to prevent degradation or denial of the ITS services to users of the services. Single points of failure should be avoided. |
| Authentication | Low | The system should verify the identity of a user and/or other system prior to granting access to a requested resource. |
| Access Control | Low | The system should limit access to the resources of a subsystem to only those users and other subsystems that are properly authorized. After authenticating an entity, the system should have the capability to limit system access to information or resources based on that entity’s access privileges. The system should limit software modifications and upgrades to users and other systems that have authorization. |
Security Objectives
| Objective | Classification | Class Description |
|---|---|---|
| Confidentiality | Low | Information that is generally available to ITS personnel |
| Integrity | Low | Unauthorized or unintended modification of the information could result in minor impact to the operation of the transportation system |
| Availability | Low | Loss of the information could result in minor impact to the operation of the transportation system. |
Security Threats
| Threat | Importance | Threat Description |
|---|---|---|
| Disruption | Low | A circumstance or event that interrupts or prevents the correct operation of system services and functions. |
Architecture flows
- area pollution data
- asset damage assessment
- asset inventory
- asset restrictions
- asset status update
- basic vehicle measures
- border clearance status
- current asset restrictions
- demand response passenger and use data
- demand responsive transit request
- device data
- device status
- equipment availability
- equipment maintenance status
- event confirmation
- event information
- event information request
- event plans
- fare management information
- field device status
- field equipment status
- hov data
- hri advisories
- hri status
- infrastructure conditions data
- infrastructure monitoring sensor data
- ISP operations information presentation
- lane management information
- lane management inputs
- lighting system status
- logged vehicle routes
- maint and constr administrative information
- maint and constr administrative request
- maint and constr dispatch status
- maint and constr equipment repair status
- maint and constr fleet information
- maint and constr material information
- maint and constr resource coordination
- maint and constr resource request
- maint and constr resource response
- maint and constr vehicle conditions
- maint and constr vehicle location data
- maint and constr vehicle measures
- maint and constr vehicle operational data
- maint and constr vehicle status coordination
- maint and constr vehicle system control
- maint and constr work performance
- maint and constr work plans
- maintenance and repair needs
- maintenance materials storage status
- multimodal information
- multimodal information request
- multimodal service data
- parking coordination
- parking demand management request
- parking demand management response
- parking information
- parking lot data request
- parking lot inputs
- pollution data display
- pollution state data request
- railroad schedules
- request for vehicle measures
- request transit information
- reversible lane status
- right-of-way request notification
- road data
- road network conditions
- road network traffic probe data
- roadway information system data
- roadway information system status
- roadway maintenance status
- roadway treatment system status
- roadway warning system status
- security equipment maintenance status
- security field equipment status
- selected routes
- service request
- service response
- shoulder management information
- signal control status
- signal fault data
- speed monitoring information
- storage facility request
- toll probe data
- toll service change request
- toll service change response
- traffic control priority status
- traffic flow
- traffic images
- traffic metering status
- traffic probe data
- transit and fare schedules
- transit demand management request
- transit demand management response
- transit information request
- transit multimodal information
- transit probe data
- transit schedule adherence information
- transit schedule information
- transit service coordination
- transit system data
- transit traveler information coordination
- transit vehicle conditions
- transit vehicle loading data
- transit vehicle location data
- transit vehicle measures
- transit vehicle operator information
- transit vehicle schedule performance
- transportation information for operations
- travel service reservation request
- variable speed limit status
- vehicle diagnostics data
- vehicle emissions data
- vehicle occupancy
- VMT equipment fault
- widearea statistical pollution information
- work plan coordination
- work plan feedback
- work zone information
- work zone status
- work zone warning notification
- work zone warning status
