Wi-Fi Communication System

29 Apr 2019
 Objective:

• Introduction to Communication Techniques

• To Familiarise the Data Communication System (Wi-Fi)

in CBTC System.

2
 Contents
• Introduction to Communication techniques
• Voice & Audio Frequency
• ITU RF Frequency band
• Classes of Transmission media
• ISM bands
• IEEE standards (802.11 series)
• DCS overview
• Wayside/ Radio/ onboard network
• Security architecture of DCS
3
 Audio Frequency
• Audio Frequency range: 20 Hz to 20 KHz.

Voice Frequency

• Voice Frequency Range : 300Hz to 3.4KHz

Band of Frequencies

5
 Frequency and
Band name Abbreviation Example Uses
Wavelength
3–30 kHz Navigation, time signal, submarine communication,
Very low Frequency VLF
100–10 km wireless heartrate monitors.
30–300 kHz Navigation, AM long wave broadcasting (Europe and parts
Low Frequency LF
10–1 km of Asia), RFID.
300–3,000 kHz AM (medium-wave) broadcasts, amateur radio, avalanche
Medium Frequency MF
1,000–100 m beacons
3–30 MHz SW broadcasts, Citizen band radio, RFID, over the horizon
High Frequency HF
100–10 m radar, automatic link establishment
FM Television broadcasts, line-of-sight ground-to-aircraft
30–300 MHz and aircraft-to-aircraft communications, land mobile and
Very high frequency VHF
10–1 m maritime mobile communications, amateur radio,
Weather radio
Television broadcasts, microwave oven, microwave
300–3,000 MHz devices /communications, mobile phones, Wireless LAN,
Ultra-high frequency UHF
1–0.1 m Blue tooth, GPS and two-way radios such as land mobile,
Remote control System
Microwave devices/communications, wireless LAN, most
3–30 GHz modern radars communication satellite, cable and
Super high frequency SHF
100–10 mm satellite television broadcasting, amateur radio, satellite
radio.

Radio astronomy, high-frequency microwave radio relay,

30–300 GHz
Extremely high frequency EHF microwave remote sensing, amateur radio, directed-
10–1 mm (millimetre wave)
energy weapon, wireless LAN (802.11ad)

Terahertz or Tremendously high 300–3,000 GHz Experimental medical imaging to replace X-rays, ultrafast
THz or THF
frequency 1–0.1 mm molecular dynamics, Gama rays
 Types of Transmission Media

Transmission
media

Unguided
Guided (Wired)
(Wireless)

Twisted-pair Coaxial Fiber-Optic

Cable Cable Air
cable
7
 ISM Bands
• The industrial, Scientific and Medical Radio Bands are radio
band reserved internationally for the use of ISM purpose other
than Telecommunication.

• ISM bands fall under the category of Un-licenced operations for

various applications.

• Short range low power communications system (RF O/P of

Radio=30 dBm, EIRP 36dBm) is used in Hyderabad Metro rail

8
 ISM bands frequencies defined by the ITU-R
Frequency range Bandwidth Centre Availability
frequency
6.765Mhz 6.795Mhz 30 KHz 6.780 MHz Subject to local
acceptance
13.553 MHz 13.567 MHz 14 KHz 13.560 Worldwide
26.957 MHz 27.283 MHz 327 KHz 27.120MHz Worldwide
40.660 MHz 40.700 MHz 40 KHz 40.680MHz Worldwide
433.050 MHz 434.790 MHz 1.74 MHz 433.920 MHz
902.000 MHz 928.000 MHz 26 MHz 915.000 MHz
2.400 GHz 2.500 GHz 100 MHz 2.450 GHz worldwide
5.725 GHz 5.875 GHz 150 MHz 5.800 GHz Worldwide
24.000 GHz 24.250 GHz 250 MHz 24.125 GHz Worldwide
61.000 GHz 61.500 GHz 500 MHz 61.250 GHz Subject to local
acceptance
122.000 GHz 123.000 GHz 1 GHz 122.500 GHz -do-
244.00 GHz 246.000 GHz 2 GHz 245.000 GHz -do-
 Differences between 2.4 and 5.8 GHz
2.4 GHz 5.8 GHz
Longer (Reason- Basic Comparatively shorter
characteristics that wave attenuate (can increase the range by the use
Range much faster at higher frequencies). of specialized High gain directional
antennas)
Comparatively less (MW don’t
Interference Suffer more interference operate up in 5GHz)
Power
requirement Less power required More power required.
No of devices Large number of devices in usages Fewer no of devices in usage.

Channel Fewer channel Options (Only 3 Many channels are available (23
Option non-overlapping channel) Non overlapping channels)
Speed Slower data transmission Faster data transmission

Cost Components that operate on 2.4 Components that operate on 5 GHz

GHz are less expensive. are more expensive.
 Limitations

➢ Keeping in view of the above 5GHz frequency is the much

better option as there are more channels to use to isolate from
other networks and there are far fewer interference sources.

➢ But 5 GHz has a limitation of shorter range as compared to 2.4

GHz.
 IEEE Standards 802.11
• IEEE Standards: 802.11a.
➢ Brought network Connection to device over the Air
instead of through Copper cables.
➢ It was built around 5GHz spectrum and speed 54 Mbps.
• IEEE Standards: 802.11b.
➢ It offered basically the same feature as 802.11a but used less
expensive and more readily available components.
➢ Because of the low-cost significant adoption amongst home
and small office users.
➢ Popularity of Wi-Fi began to grow and the standard continued
to improve.
➢ Frequency Used 2.4 GHz
 Frequency Hopping Spread Spectrum (FHSS)

➢ FHSS is a method of transmitting radio signals by rapidly

switching a carrier among many frequency channels,
using a pseudorandom sequence known to both
transmitter and receiver.

➢ Frequency hopping is achieved by dividing the large

bandwidth into smaller channels that would fit the data.
The signal would then be sent pseudo-randomly into a
different channel.

13
 Direct Sequence Spread Spectrum (DSSS)

➢ Direct Sequence Spread Spectrum (DSSS) is a spread

spectrum technique whereby the original data signal is
multiplied with a pseudo random noise spreading code.

➢ Message signal is used to modulate a bit sequence

known as a Pseudo Noise (PN) code; this PN
code consists of a radio pulse that is much shorter in
duration (larger bandwidth) than the original message
signal.
 Indian Government rules and Regulation for the ISM
band

• Licence free ISM bands:

➢ 2.4 GHz - 2.4835 GHz band indoor and outdoor

(Frequency band used by Hyderabad project)

➢ 5.725GHz – 5.875 GHz.

➢ Maximum peak conducted output Power shall not exceed

1W (30dBm)

➢ Maximum EIRP (if using directional antenna) shall not

exceed 4W (36dBm)
 DCS OVERVIEW

• The Data Communication System supports communication

between different CBTC components located at
Central/Depot/Station Control, Wayside, and On-Board.

• This can be through wired media (copper or fibre optics, e.g.

stations to stations) or wireless (between trains and wayside
units).
 Digital Communication Network (DCS) contd…

The DCS consists of:

• A wayside network for

(a) wayside to wayside

(b) wayside to On-Board,

• An On-Board network for

a) On-Board to On-Board
b) On-Board to wayside.
 Architecture for an Overlay Application
SelTrac® CBTC

SelTrac® S&SS A-tag

AMI ATS

Interlocking
ZC ZC Interlocking

Data Communications System

Signals, Signals,
Switches MR MR Switches
Track circuits TOD VOBC TOD Track circuits
TI
TIA

A-tag A-tag B-tag

ATS Management Interface (AMI) provides a single interface

between the CBTC system and an existing ATS
Architecture for an Integrated System w/o Secondary
Detection
SelTrac® CBTC

ATS

Switches ZC ZC Switches

Data Communications System

MR MR

TOD VOBC TOD

TI
TIA

A-tag A-tag
 Architecture for an Integrated System with
Secondary Detection
SelTrac® CBTC

SelTrac® S&SS
ATS

Switches Switches
Signals, ZC ZC Signals,
Axle Counters Axle Counters

Data Communications System

MR MR

TOD VOBC TOD

TI
TIA

A-tag A-tag B-tag (Optional)

 Compatibility

– Both integrated and overlay architectures can be used together on

the same line
• e.g. An existing line could be re-signalled with the overlay solution, and
later an extension could be implemented with an integrated ZC.
• VOBC on the train will not see any difference

– Both SelTrac® SSS and SelTrac® CBTC systems can be used

together within a network
• e.g. A commuter rail network could be implemented with SelTrac® SSS
in branch lines and with SelTrac® CBTC in high capacity core lines.
• VOBC behaviour will adapt to the available level of functionality
 Need for Secondary Detection

• Detection of Unequipped Trains

➢ If unequipped trains are frequently travelling on the line
➢ If cutover/migration strategy warrants

• Backup for the CBTC system

➢ Fixed block train separation can be used if there is a
communication or onboard controller failure
 Key Data Exchange – All Configurations

•Train Position
•Platform Door Commands

Zone ATS
Controller

DCS
(IP secure)

Electronic
Interlocking VOBC
(optional)
 Key Data Exchange – All Configurations

Zone ATS
Controller

• Limit Of Movement Authority

• Temporary Speed Limits
• Platform Door Status DCS
(IP secure)

Electronic
Interlocking VOBC
(optional)
 Key Data Exchange – All Configurations

Zone ATS
Controller

DCS
(IP secure)

Electronic
Interlocking • Train Position for display VOBC
(optional)
• Train Alarms
 Key Data Exchange – All Configurations

Zone ATS
Controller

• CBTC status

DCS
(IP secure)

Electronic
Interlocking VOBC
(optional)
 Key Data Exchange – All Configurations

Zone ATS
Controller

•TSR create/delete
•Close / open track

DCS
(IP secure)

Electronic
Interlocking VOBC
(optional)
 Key Data Exchange – Overlay Configuration

Zone ATS
Controller

DCS
(IP secure)

Electronic
Interlocking VOBC
•Signalling Status
 Key Data Exchange – Overlay Configuration

Zone • Override Commands

ATS
Controller

DCS
(IP secure)

Electronic
Interlocking VOBC
 Key Data Exchange – Overlay Configuration

Zone ATS
Controller

•Route Request

DCS
(IP secure)

Electronic
Interlocking VOBC
 Key Data Exchange – Overlay Configuration

Zone ATS
Controller

DCS
(IP secure)
•Signalling Status

Electronic
Interlocking VOBC
 Key Data Exchange – Overlay Configuration

Zone ATS
Controller

DCS
(IP secure)
•Signalling Status

Electronic
Interlocking VOBC
 Key Data Exchange – Integrated Configuration

Zone ATS
Controller

• Route status

DCS
(IP secure)

VOBC
Data Communication System
 DCS Features

– End-to-end 802.3 Ethernet network

• Interface to all applications (onboard and wayside) is Ethernet

– Embedded 802.11 WLAN

– Self-managing

– Transparent to applications

– Expandable without interruption

 System Network Architecture

– Redundant ring fibre optic backbone

• Single mode fibre

– Network switches at each interlocking location

• Redundant connections for ZC and Local ATS

– Multi-mode fibre ring connection from backbone network

switches to wayside Access Points (APs)
 DCS – Radio Cell Management

– Onboard radio determines which wayside radio to

communicate with

• This is based on signal strength

• If signal of current radio cell falls below a defined threshold,

the onboard radio will switch to another wayside radio cell, of
acceptable signal strength

• Wayside radio cells can be designed with 100% overlap

• Failure of one wayside radio will not result in a loss of signal

by a train
 Redundant Radio Coverage

– Mobile radios at each end of the train

– Two APs visible at all times to each radio

– Four separate links have to fail before communications is lost

SPACING UP TO 700 m

AP AP AP AP AP AP AP

' MR MR
 Secure Access Across a Network

– Protection: Nothing on the trusted side can talk to anything inside

the untrusted network
– Data integrity: 802.11 retransmission protocol
– Source authentication: IPSec
– Source authentication: IKE dynamic key management
– Data privacy: IPSec encryption
 Protection from Inside the Network

– Safety: The untrusted side of the DCS can not talk to any
outside device
• Source authentication protects against intruder emulation
– Reliability
• Encryption and password protect
against denial of service attempts
SD
SD

NMS
NETWORK
HACKER
SNOOPER
The Untrusted Side of the DSC SD
SD
SD Network Cannot Talk to Any SD

Outside Device

COMPUTATIONALLY UNFEASIBLE
AP AP AP
TO BREAK ENCRYPTION CODES
RADIO
INTRUDER
' STA
SD
 DCS – Security

– DCS SECURITY - THREATS AND DEFENSES

• Design based on prEN 50159-2 CENELEC - Requirements for Safety
Related Communication Open Transmission Systems

Defenses / YES if provided

Sequence Time Time Feedback Source and Identification Safety code Cryptographic
Threats Number stamp out message destination Procedure techniques
identifier

YES NO YES YES YES YES YES YES

Repetition X X
Deletion X
Insertion X X X X
Re-sequence X X
Corruption X X
Delay X X
Masquerade X X X
Digital Communication Network (DCS)
 RADIO NETWORK
• Radio network Provides communication between wayside devices in
central/station locations (e.g. Zone Controllers, ATS server) and On-
Board devices (e.g. VOBCs, etc.).

• The radio network is formed by radio modules in Wayside Radio Units

(WRU) on the wayside and Mobile Radio Units (MRU) On-Board. The
MRU consists of the following modules:
➢ Radio module: used as 802.11 client in MRU and as 802.11 AP in
WRU, form the radio network.
➢ Untrusted switch module: layer 2 switch, enabled only in WRU,
provides access to/from the radio module to the AP ring. For On-
Board devices, this feature is not used.
➢ Security Gateway module: layer 3 On-Board security device (SD),
enabled only in MRU
➢ Trusted switch module: layer 2 switch, enabled only in MRU,
provides access to/from the Security Device module and local On-
Board layer 2 switching for trusted On-Board devices.
• The DCS provides infrastructure for the following traffic.

Class 1: ATC communication:

➢ Class 1 devices are train control devices, such as Zone

Controllers, VOBCs units.

Class 2: ATS, and network management communication:

➢ Class 2 devices are ATS devices, such as ATS servers

and workstations, NMS machines.

Class 4: External interfaces:

➢ Class 4 devices are devices external to the TCTS CBTC,

such as CCTV, AMS, Train Radio System, Master Clock,
and PIS / PAS.
 WAYSIDE NETWORK
• The wayside network is comprised of the following segments

➢ “Trusted” Backbones
➢ “Untrusted” Radio Backbone
 Security Devices
• The security system in DCS consists of three components:

➢ Security Device (SD), which acts as a border gateway device

standing between the untrusted and trusted network.

➢ The security device is responsible for authenticating and

encrypting/decrypting the message.

➢ Certificate Authority (CA), which supplies all SDs with X.509

authenticating certificate information and system configuration
information.

➢ Interface Filter (IF), which acts as a border gateway standing

between the DCS and external sub-networks provides Packet
filtering and flood control. 46
Security Architecture of the DCS
External
system
equipment

Wayside Wayside Wayside

Interface trusted network trusted network trusted network
Filter equipment equipment equipment
(LAN) (LAN) (LAN)

Trusted network
(backbones)

Security certificate
device(s) authority

On-board On-board
trusted network Security Untrusted network Security trusted network
equipment device (radio network & its backbone) device equipment
(LAN) (LAN)

Security
device

On-board Blue - Trusted

trusted network Red - Untrusted/External
equipment
(LAN)
 DCS Architecture Overview Train Radio
Depot– Uppal Receiving –
Depot Control Centre Uppal OCC Assess Management system Nagole Uppal Survey of India NGRI Habsiguda
Sub Station( RSS) - BOCC Depot Equipment Room Master Clock
Diag Printer x3 PIS/ PAS
Server Plotter x1 PTR x1
TC WS CCTV
x3 PPSx2
UNMS ECPC
WS x3 EXT-RTR1 EXT-RTR2
SRSx6 WS x39
IB x 2
DB2 DB2

MSA FW1 FW2 DR x1

MSA IB
DB1
LATS
DB1 MiMIC L- SW3 L- SW4 x2
TNMS OCC OPERATIONS
PLANNING CENTRE
ZC x 2
DSU CC WS CA SRV
CC Ws WS WS WS WS
SRS x3 SRS x2 DSU
WS x2
DR

MIMIC
x18
M/C M/C M/C M/C M/C M/C M/C M/C
Backup L- SW1 L- SW2
L- SW1 L- SW2 L- SW1 L- SW2 RAS L- SW1 L- SW2

L- SW1 L- SW2

RTR1 RTR2

RTR2
RTR1

C1- SW1 C1- SW1

Parakash Nagar C
1- SW1

Mettuguda C1- SW1

C2- SW1 C2- SW2 C2- SW1 C2- SW2 C2- SW1 C2- SW2
Paradise C2- SW1

Mettuguda C2- SW1

C2- SW1 C2- SW2

RTR- SD1 RTR- SD2

x4
SD- LDR SD SD SD SD

BB- SW1 BB- SW1 BB- SW2

Mettuguda BB- SW1

Parakash Nagar BB
- SW1
BB- SW1 BB- SW2

IR- SW1 IR- SW2

IR- SW1

WRU Ring( Leg A) IR- SW1 IR- SW2

WRU Ring( Leg A)

WRU Ring( Leg B) WRU Ring( Leg A)

WRU Ring( Leg B)

WRU Ring( Leg B)

 WRU Ring redundancy

Power 1

WRU RING
Ring redundancy

Power 2
Ring coupling
redundancy

UNTRUSTED BACKBONE
Ring redundancy

To the rest of the

WRU coverage in one direction (antenna 1) DCS via SDs

(not shown)
WRU coverage in the other direction (antenna 2)

Thales Radio (WRU) with 2 antennas

49
 AP Communication Topology
Access Point
(Wayside Radio)
AP AP Coaxial Cables AP

for Antennas (2)

Uni-Directional Uni-Directional
Antenna Antenna
Pointing Left Pointing Right

Horizontal
Coverage Area Horizontal
of Left Antenna Coverage Area
of Right Antenna
AP AP
 Standards & Regulations
• The 802.11 FHSS international standard is used in the radio design for DCS,
• The network consists of two basic components:
➢ AP (Access points) (radio modules within the WRUs)
➢ MRU clients (radio modules within the MRUs).
• The radios are fully compliant with the IEEE 802.11 FHSS (frequency
hopping spread spectrum) Wireless LAN standard.

• According to this standard, they utilise the ISM band at 2.4 GHz.

• This is a shared band and the use of the FHSS access method is a powerful
means of mitigating interference from co-users of this band.

• Other radio-based communications systems that operate on other frequency

bands do not interfere with the DCS because of the frequency filtering used
by the WRU and MRU radios.
Train-borne Architecture
 On-Board Network Architecture
MRU A Thales
MRURadio
B

Radio Radio

Security Security
Gateway Gateway

Switch Bank A Switch Bank A

1 2 3 4 4 3 2 1

Switch Bank B Switch Bank B

1 2 3 4 4 3 2 1

1 2
VOBC_1

2 1
VOBC_2

1 2
LDC

1 1
TOD_A TOD_B

DM T DM
 Antenna Configuration for On-Board

Front

Train

Rear
Spatial MRU Spatial
MRU
diversity (top view) diversity

54
Antenna Configuration for Wayside

WRU

55
Software defined Radio

56
AP Antenna

57
MRU Antenna

58
Lightning Arrester

RF Splitter

59
Band Pass filter 2.4 GHz

60
AP Assembly Unit

61
Thank You

62