Thales delivering digital trust for safety-critical systems on UK rail network

30/08/2022

Facebook

Twitter

LinkedIn

Thales has won a new contract to implement Certificate Authority/Public Key Infrastructure across Network Rail's estate.

The contract to design, build, test and deliver Enterprise CA/PKI also includes a discovery phase, now completed, which has identified new systems and capability that could grow over time.

The contract includes a three-year support period with the option of two 12-month extensions, giving the potential to develop the service further.

A newly awarded contract places Thales at the centre of digital trust for Network Rail Telecom (NRT), providing an enhanced cyber security posture across the entire Network Rail Enterprise.

This will allow NRT to assign and centrally manage digital certificates and authentication to services across the entire Network Rail operation.

Building on last year's contract to introduce Online Key Management System (OKMS) on the East Coast Main Line (ECML), with the East Coast Digital Programme, Thales has won a new contract to implement Certificate Authority/ Public Key Infrastructure across Network Rail's estate.

The introduction of the European Train Control System (ETCS) on the ECML is driving the introduction of new Digital Signalling by Network Rail. Our OKMS is the enabling technology that ensures signalling data communications to trains are resilient and secure. ETCS continuously calculates a safe maximum speed for each train, with in-cab signaling for the driver, and on-board systems that take control if permissible speed is exceeded. The new Enterprise CA/PKI system supports OKMS by authenticating the origin of these ETCS signaling data communication messages. - Guy Cleall, Thales's Customer Account Manager for CA/PKI

NRTs Enterprise CA/PKI is a powerful cyber-security system that introduces greater digital trust through authentication, encryption and certification, protecting Network Rail's wider infrastructure, including Information Technology (IT), software, the Internet of Things (IOT), security cameras, station information boards, as well as securing Operational Technology (OT) assets.

The contract to design, build, test and deliver Enterprise CA/PKI also includes a discovery phase, now completed, which has identified new systems and capability that could grow over time. Enterprise CA/PKI will also need to accommodate the additional services and organisations that will be introduced when Great British Railway, a new, state-owned public body, currently planned to commence transitioning from 2024 to oversee all UK rail transport operations, is formed. The contract includes a three-year support period with the option of two 12-month extensions, giving the potential to develop the service further.

Also within the contract is the responsibility to periodically generate and protect Network Rail's CA/PKI root keys. The root key certificate (a string of alpha-numeric characters) is important because this master key certificate verifies all the certificates below it. The security of the root certificate determines the security of the entire Network Rail Enterprise CA/PKI system. Thales is entrusted to securely store Network Rails root CAs within its List X facility, which is a commercial site used to securely hold UK government information.

The introduction of CA/PKI will introduce greater levels of digital trust as the railway system transitions from trackside signaling to on-board digital systems. It will also give greater control to Network Rail for managing its own IT, IOT and OT assets, being able to determine the lifecycles of devices, such as laptops and mobile phones, through its own certification process, rather than relying on external agencies.

The Enterprise CA/PKI that Thales is providing underpins OKMS operation and looks after digital trust across the Network Rail enterprise. It's a game-changer for them and a good place to be for Thales. We're building a very good relationship with Network Rail but now we have to deliver, and deliver well, and as a result I hope we can go further together. - Guy Cleall, Thales's Customer Account Manager for CA/PKI

Enterprise CA/PKI is due to be delivered in early 2023, in time for the roll-out of OKMS later next year.

Documents

PR_20220830_Thales delivering digital trust for safety-critical systems on UK rail network.pdf

Contact

Thales, Media Relations Ground Transportation

+33 (0)6 25 15 72 93 chrystelle.dugimont@thalesgroup.com

12 Sep 2022

KT SAT and Thales Alenia Space sign contract for KOREASAT 6A communications satellite

Read more

08 Sep 2022

Thales to expand its presence in North America by adding hundreds of new employees

Read more

08 Sep 2022

Emirates A350 fleet to fly with Thales' AVANT Up

Read more

LINK:	https://www.thalesgroup.com/en/worldwide/transport/press_release/thale...
	See more stories from thales

Thales delivering digital trust for safety-critical systems on UK rail network

More from Thales

30/06/2025

30/06/2025

27/06/2025

26/06/2025

24/06/2025

24/06/2025

24/06/2025

23/06/2025

20/06/2025

19/06/2025

12/06/2025

12/06/2025

11/06/2025

10/06/2025

05/06/2025

04/06/2025

03/06/2025

02/06/2025

02/06/2025

22/05/2025

21/05/2025

20/05/2025

19/05/2025

19/05/2025

15/05/2025

15/05/2025

15/05/2025

14/05/2025

13/05/2025

13/05/2025

13/05/2025

30/04/2025

29/04/2025

25/04/2025

24/04/2025

23/04/2025

22/04/2025

17/04/2025

16/04/2025

15/04/2025

14/04/2025

08/04/2025

08/04/2025

07/04/2025

07/04/2025

03/04/2025

03/04/2025

02/04/2025

01/04/2025

31/03/2025