Research on Security Gateway of System Wide Information Management

SWIM (System Wide Information Management) is considered to be the basic network system responsible for information sharing in the next generation of ATM (Air Traffic Management). As the national airspace and commercial privacy of aviation operators are involved, and the data circulation of civil aviation flight, weather, intelligence and other data is increasing rapidly at this stage, SWIM urgently needs a security gateway that meets the requirements of civil aviation to provide comprehensive protection for SWIM internal data, SWIM users and infrastructure, and to co-process complex business interactions within the system. This article analyzes the requirements of the security gateway for SWIM. According to the analysis results, the overall architecture of the SWIM security gateway is preliminarily designed, and the authentication and authorization process based on JWT (JSON Web Tokens) is proposed, and functions and performance tests are carried out. It proves that the solution in this paper can realize 4A (Account, Authentication, Authorization, Audit) security protection with relatively small resource overhead, and finally completes the design of SWIM security gateway.