US: GTFS - Secure Wireless Internet (ITS)

Description:

This solution is used within Canada and the U.S.. It combines standards associated with US: GTFS with those for I-M: Secure Wireless Internet (ITS). The US: GTFS standards include upper-layer standards required to implement public, transit-related communications. The I-M: Secure Wireless Internet (ITS) standards include lower-layer standards that support secure communications between two entities, either or both of which may be mobile devices, but they must be stationary or only moving within wireless range of a single wireless access point (e.g., a parked car). Security is based on X.509 or IEEE 1609.2 certificates. A non-mobile (if any) endpoint may connect to the service provider using any Internet connection method.

Relevant Regions:

• Canada
• United States

Comm Profile: I-M: Secure Wireless Internet (ITS)

Comm Class: WAN - Wide Area Network

Level	Standard
Access	Wireless Internet Alternatives (NA)
Mgmt	Bundle: SNMPv3 MIB
Security	Secure Session Alternatives
TransNet	Internet Transport Alternatives
TransNet	IP Alternatives

Data Profile: US: GTFS

Level	Standard
Facilities	IETF RFC 4180 CSV Files
Facilities	IETF RFC 7159 JSON
Facilities	IETF RFC 9110 HTTP Semantics
Facilities	IETF RFC 9112 HTTP/1.1
Facilities	ISO 21320-1 ZIP
ITS Application Entity	General Transit Feed Specification
ITS Application Entity	GTFS Realtime

Solution Issues Severity: 13

Solution Issues:

Default	Severity	Name	Type	Description
False	Medium	Option not standardized	Standardization Gap	The option set includes at least one option that is not (yet) defined in a standard.
False	Medium	Overlap of standards	Overlap	Multiple standards have been developed to address this information and it is unclear which standard should be used to address this specific information flow.
False	Medium	Regulatory Permission Needed	Standardization Gap	Deployment of this standard requires regulatory approval, which is currently subject to significant delays.
False	Medium	Uncertainty about trust revocation mechanism	Security Gap	The mechanisms used to prevent bad actors from sending authorized messages is unproven.
False	High	Regulatory Issue	Standardization Gap	Deployment of this standard is subject to regulatory approval, which is not currently expected to be granted for deployments in the near-term.
True	Low	Not a standard (minor)	Standardization Gap	The document is publicly available and widely used but it is not currently a formal standard.
True	Medium	Outdated security reference	Security Gap	The standard solution includes an outdated security reference.
True	High	Application specification not defined	ITS Info Gap	The logic, performance, and application security rules are not defined for this information flow.

Solution to Triples

Source	Flow	Destination
Transit Management Center	personal transit information	Personal Information Device
Transit Management Center	transit traveler information	Transit Vehicle OBE