IEC PAS 63062:2016

Overview

IEC PAS 63062:2016 is an essential publicly available specification developed by the International Electrotechnical Commission (IEC) that sets forth general requirements, testing methods, and required test results for removable external data sources (REDS) in maritime navigation and radiocommunication equipment. It specifically addresses removable data sources such as USB drives, compact discs, memory sticks, and Bluetooth devices used in shipborne radio and navigational equipment compliant with international safety conventions like SOLAS and the Torremolinos International Convention for Fishing Vessels.

This specification ensures secure and reliable management of external data inputs to critical maritime systems, promoting operational safety, data integrity, and protection against unauthorized access or malicious software execution.

Key Topics

• Scope & Applicability IEC PAS 63062:2016 targets removable external data sources integrated into shipborne radio and navigational equipment required for maritime safety. This includes global maritime distress and safety systems as well as other navigational aids.

• Physical Protection Requirements Devices must limit connection points (e.g., USB ports, disc drives) to the minimum necessary for system operation and maintenance. Unused connection points should be physically blocked from unauthorized or accidental user access.

• Operational Protection Measures Ports intended for peripheral devices like keyboards or printers must be protected to prevent unauthorized device connection. Data storage connection points must allow only USB mass storage devices (USB device class 08h) to connect. Manufacturers must document handling for other device classes or non-USB REDS.

• Executable File Verification Automatic execution of files on REDS (including autorun on USB or CDs/DVDs) is prohibited to mitigate cybersecurity risks. Manual execution requires authentication and verification, typically through digital signatures or special cryptographic keys, ensuring only validated code runs on maritime equipment.

• Non-Executable Data Verification All non-executable data from REDS must be verified before use based on manufacturer guidelines, enhancing data integrity and minimizing the risk of corrupted or malicious information compromising system function.

• Testing Methods and Compliance Verification The standard outlines tests including inspection of port access controls, enforcement of device recognition restrictions, prohibition of unauthorized auto-execution, and validation of manual file execution controls. Manufacturers must provide documented evidence demonstrating conformance to these protection requirements.

Applications

IEC PAS 63062:2016 is critical for maritime safety equipment manufacturers, system integrators, and ship operators who use removable external data sources in:

• Global Maritime Distress and Safety Systems (GMDSS) Ensuring that radio communication devices used for emergency communication strictly control external data inputs to prevent interference or unauthorized access.

• Shipborne Navigational Equipment Maintaining data integrity in navigation aids through secured removable data interfaces reduces risks related to corrupted navigational data or unauthorized software updates.

• Maritime Safety Compliance Supporting compliance with international safety conventions like SOLAS and the Torremolinos International Convention by enforcing rigorous protection and authentication standards on data sources connected to critical systems.

• Cybersecurity Risk Mitigation Preventing malware introduction via external media and unauthorized device connections protects against system compromise, supporting the overall resilience of maritime radiocommunications and navigation.

Related Standards

• IEC 61162-460 Specifies requirements for removable external data sources in maritime digital interfaces, serving as the technical foundation for IEC PAS 63062 requirements.

• ISO/IEC 10118-3 Defines security techniques related to dedicated hash-functions used in digital signature verification for executable file authentication.

• USB Specification (Revision 2.0 and 3.1) Provides standards for USB device class definitions and interfaces, critical for identifying permitted devices connected via REDS.

• IEC Electropedia & ISO Online Browsing Platform Resources for standardized definitions and terminology relevant to maritime navigation, radiocommunication equipment, and removable data interfaces.

Keywords: IEC PAS 63062:2016, removable external data source, REDS, maritime navigation equipment, radiocommunication, SOLAS, maritime safety, USB device security, executable file verification, digital signature, data integrity, shipborne radio equipment, Torremolinos Convention, IEC standards, maritime cybersecurity.