AF Key Management Infrastructure (AF KMI)

Abstract

The Air Force Key Management Infrastructure (AF KMI) Program consists of multiple developments supporting the AF requirements/portion of the DoD Key Management Infrastructure (KMI). (The National Security Agency [NSA] acts as the Executive Agency for the DoD KMI Program.) AF KMI, in concert with this overarching DoD KMI Program, will provide a secure and flexible capability for the electronic generation, distribution, accounting, and management of key material and other communications security (COMSEC) materials for all DoD Command, Control, Communications, Computers, and Intelligence (C4I) and for the Services' weapon systems. KMI represents a broad-scale replacement of the current Electronic Key Management System (EKMS). The new KMI will provide capabilities that will allow networked operation in consonance with the Global Information Grid (GIG) and other DoD, fellow Service, and AF enterprise objectives. It thereby will assure a viable support infrastructure for future weapons and C4I programs to incorporate key management into their system designs. The DoD KMI will greatly improve protection of national, security-related information by substantially enhancing confidentiality, integrity, and non-repudiation characteristics over the legacy Electronic Key Management System. KMI will greatly accelerate the availability of crypto key materials through electronic transmission versus shipping of materials, will enhance mission responsiveness and flexibility, and will eventually take the man "out-of-the-loop" in the distribution of crypto key materials. The AF Key Management Infrastructure (KMI) Program is building the AF KMI "Last Mile" architecture. This R&D effort includes defining all of the AF KMI "Last Mile" architecture, building the linkage interfaces that will allow KMI systems to communicate, and other related developments to meet operational needs. AF KMI is addressing requirements in increments. Increment 1 is in the concept development phase conducting development, studies and analysis efforts that includes: Single Point Fill Capability Development, Black Data Distribution System development, and the Legacy ECU Adaptor effort. Increment 1 also includes the studies, analysis, concept development and prototyping efforts of the Next Generation Fill Device which is renamed as the AF KMI Last Mile Load Device (LMLD) and will be developed in conjunction with the KOV-21 Follow-on Crypto Engine as a complete/combined unit to replace the current Simple Key Loader and its KOV-21 Crypto Engine. In addition, the AF KMI program is working with NSA to explore new key delivery methods for KMI: "Mobile" Clients that can be brought out to platforms and remote ECUs; a new COMSEC material device that works with KMI and incorporates netcentricity; and a method called "over-the-air-keying (OTAK)" to ultimately replace the current data transfer devices. Activities also include an integration laboratory and studies and analysis to support both current program planning and execution and future program planning. In parallel with AFKMI, DoD and the Services are developing a new generation of End Crypto Units (ECUs) under the Joint Crypto Modernization Initiative that will be capable of direct interaction with the KMI. (PE0303140F, BPAC 675100, Cryptographic Modernization, supports this initiative). In some cases these new ECUs, although needing to be supported by KMI, will not be KMI network-connected. "Last mile" transport of black (aka benign, or encrypted) and red (unencrypted) keying material from a KMI client to a new generation ECU or current legacy ECU will need to be handled in the early years by one of two data transfer devices. This program is in Budget Activity 7, Operational System Development because this budget activity includes development efforts to upgrade systems that have been fielded or have received approval for full rate production and anticipate production funding in the current or subsequent fiscal year.

Open PDF

Document Details

Document Type
Project
Publication Date
Oct 01, 2012
Source ID
675231_0303140F_7_3600_PB_2012

Tags

Fields of Study

  • Computer science

Readers

  • Cybersecurity.
  • Enterprise Information Systems Architecture and Joint Command Capability Interoperability Support.

Technology Areas

  • Fully Networked C3
  • Fully Networked C3 - Command and Control
  • Microelectronics

Related Documents