81 FR 45968 - Special Conditions: Gulfstream Aerospace Corporation Model GVII-G500 Airplanes; Isolation or Protection of Airplane Electrical-System Security From Unauthorized Internal Access

DEPARTMENT OF TRANSPORTATION
Federal Aviation Administration

Federal Register Volume 81, Issue 136 (July 15, 2016)

Page Range		45968-45969
FR Document		2016-16638

These special conditions are issued for the Gulfstream Aerospace Corporation (Gulfstream) Model GVII-G500 airplane. This airplane will have a novel or unusual design feature when compared to the state of technology envisioned in the airworthiness standards for transport-category airplanes. This design feature is a digital systems architecture requiring isolation or protection from unauthorized internal access. The applicable airworthiness regulations do not contain adequate or appropriate safety standards for this design feature. These special conditions contain the additional safety standards that the Administrator considers necessary to establish a level of safety equivalent to that established by the existing airworthiness standards.

Federal Register, Volume 81 Issue 136 (Friday, July 15, 2016)

[Federal Register Volume 81, Number 136 (Friday, July 15, 2016)]
[Rules and Regulations]
[Pages 45968-45969]
From the Federal Register Online [www.thefederalregister.org]
[FR Doc No: 2016-16638]

-----------------------------------------------------------------------

DEPARTMENT OF TRANSPORTATION

Federal Aviation Administration

14 CFR Part 25

[Docket No. FAA-2016-4237; Special Conditions No. 25-619-SC]

Special Conditions: Gulfstream Aerospace Corporation Model GVII-
G500 Airplanes; Isolation or Protection of Airplane Electrical-System
Security From Unauthorized Internal Access

AGENCY: Federal Aviation Administration (FAA), DOT.

ACTION: Final special conditions; request for comments.

-----------------------------------------------------------------------

SUMMARY: These special conditions are issued for the Gulfstream
Aerospace Corporation (Gulfstream) Model GVII-G500 airplane. This
airplane will have a novel or unusual design feature when compared to
the state of technology envisioned in the airworthiness standards for
transport-category airplanes. This design feature is a digital systems
architecture requiring isolation or protection from unauthorized
internal access. The applicable airworthiness regulations do not
contain adequate or appropriate safety standards for this design
feature. These special conditions contain the additional safety
standards that the Administrator considers necessary to establish a
level of safety equivalent to that established by the existing
airworthiness standards.

DATES: This action is effective on Gulfstream on July 15, 2016. We must
receive your comments by August 29, 2016.

ADDRESSES: Send comments identified by docket number FAA-2016-4237
using any of the following methods:
Federal eRegulations Portal: Go to http://www.regulations.gov/ and follow the online instructions for sending
your comments electronically.
Mail: Send comments to Docket Operations, M-30, U.S.
Department of Transportation (DOT), 1200 New Jersey Avenue SE., Room
W12-140, West Building Ground Floor, Washington, DC 20590-0001.
Hand Delivery or Courier: Take comments to Docket
Operations in Room W12-140 of the West Building Ground Floor at 1200
New Jersey Avenue SE., Washington, DC, between 9 a.m. and 5 p.m.,
Monday through Friday, except Federal holidays.
Fax: Fax comments to Docket Operations at 202-493-2251.
Privacy: The FAA will post all comments it receives, without
change, to http://www.regulations.gov/, including any personal
information the commenter provides. Using the search function of the
docket Web site, anyone can find and read the electronic form of all
comments received into any FAA docket, including the name of the
individual sending the comment (or signing the comment for an
association, business, labor union, etc.). DOT's complete Privacy Act
Statement can be found in the Federal Register published on April 11,
2000 (65 FR 19477-19478), as well as at http://DocketsInfo.dot.gov/.
Docket: Background documents or comments received may be read at
http://www.regulations.gov/ at any time. Follow the online instructions
for accessing the docket or go to Docket Operations in Room W12-140 of
the West Building Ground Floor at 1200 New Jersey Avenue SE.,
Washington, DC, between 9 a.m. and 5 p.m., Monday through Friday,
except Federal holidays.

FOR FURTHER INFORMATION CONTACT: Varun Khanna, FAA, Airplane and
Flightcrew Interface Branch, ANM-111, Transport Airplane Directorate,
Aircraft Certification Service, 1601 Lind Avenue SW., Renton,
Washington 98057-3356; telephone 425-227-1298; facsimile 425-227-1320.

SUPPLEMENTARY INFORMATION: The FAA has determined that notice of, and
opportunity for prior public comment on, these special conditions is
unnecessary because the substance of these special conditions has been
subject to the public comment process in several prior instances with
no substantive comments received. The FAA therefore finds that good
cause exists for making these special conditions effective upon
publication in the Federal Register.

Comments Invited

We invite interested people to take part in this rulemaking by
sending written comments, data, or views. The most helpful comments
reference a specific portion of the special conditions, explain the
reason for any recommended change, and include supporting data.
We will consider all comments we receive by the closing date for
comments. We may change these special conditions based on the comments
we receive.

Background

On March 29, 2012, Gulfstream Aerospace Corporation applied for a
type certificate for their new Model GVII-G500 airplane. The Model
GVII-G500 airplane will be a business jet capable of accommodating up
to 19 passengers. It will incorporate a low, swept-wing design with
winglets and a T-tail. The powerplant will consist of two aft-fuselage-
mounted Pratt & Whitney turbofan engines.

Type Certification Basis

Under Title 14, Code of Federal Regulations (14 CFR) 21.17,
Gulfstream must show that the Model GVII-G500 airplane meets the
applicable provisions of 14 CFR part 25, as amended by Amendments 25-1
through 25-129.
If the Administrator finds that the applicable airworthiness
regulations (i.e., part 25) do not contain adequate or appropriate
safety standards for the Model GVII-G500 airplane because of a novel or
unusual design feature, special conditions are prescribed under the
provisions of Sec. 21.16.
Special conditions are initially applicable to the model for which
they are issued. Should the type certificate for that model be amended
later to include any other model that incorporates the same or similar
novel or unusual design feature, the special conditions would also
apply to the other model under Sec. 21.101.
In addition to the applicable airworthiness regulations and special
conditions, Model GVII-G500 airplanes must comply with the fuel-vent
and exhaust-emission requirements of 14 CFR part 34, and the noise-
certification requirements of 14 CFR part 36. The FAA must issue a
finding of regulatory adequacy under Sec. 611 of Public Law 92-574,
the ``Noise Control Act of 1972.''
The FAA issues special conditions, as defined in 14 CFR 11.19, in
accordance with Sec. 11.38, and they become part of the type
certification basis under Sec. 21.17(a)(2).

Novel or Unusual Design Features

The Model GVII-G500 airplane will incorporate the following novel
or unusual design feature: A digital

[[Page 45969]]

systems architecture requiring isolation or protection from
unauthorized internal access.

Discussion

Networks, both in safety-related and non-safety-related
applications, have been implemented in existing commercial-production
airplanes. However, network security considerations and functions have
played a relatively minor role in the certification of such systems
because of the isolation, protection mechanisms, and limited
connectivity between these networks.
To provide an understanding of the airplane electronic equipment,
systems, and assets, these special conditions use the concept of
domains. However, this does not prescribe any particular architecture.
The aircraft-control domain consists of the airplane electronic
systems, equipment, instruments, networks, servers, software and
hardware components, databases, etc., which are part of the type design
of the airplane and are installed in the airplane to enable the safe
operation of the airplane. These can also be referred to as flight-
safety-related systems, and include flight controls, communication,
display, monitoring, navigation, and related systems.
The airline-information-services domain generally consists of
functions that the airplane operator manages or controls, such as
administrative functions, cabin-support functions, etc.
The passenger-information-services domain consists of all functions
required to provide the passengers with information.
The Gulfstream Model GVII-G500 airplane design introduces the
potential for access to aircraft-control domain and airline-
information-services domain by unauthorized persons through the
passenger-information-services domain; and the security vulnerabilities
related to the introduction of viruses, worms, user mistakes, and
intentional sabotage of airplane networks, systems, and databases.
For electronic systems-and-assets security in these domains, the
level of protection provided against security threats should be based
on a security-risk assessment, noting that the level of protection
could differ between domains and within domains, depending on the
security threat. For each security vulnerability and airplane
electronic asset, Gulfstream should identify in which domain the asset
will be addressed.
In addition, the operating systems for current airplane systems are
usually and historically proprietary. Therefore, they are not as
susceptible to corruption from worms, viruses, and other malicious
actions as are more-widely used commercial operating systems, such as
Microsoft Windows NT, because access to the design details of these
proprietary operating systems is limited to the system developer and
airplane integrator. Some systems installed on the Gulfstream Model
GVII-500 will use operating systems that are widely used and
commercially available from third-party software suppliers. The
security vulnerabilities of these operating systems may be more widely
known than are the vulnerabilities of proprietary operating systems
that the avionics manufacturers currently use.

Applicability

As discussed above, these special conditions are applicable to the
Gulfstream Model GVII-G500 airplane. Should Gulfstream apply at a later
date for a change to the type certificate to include another model
incorporating the same novel or unusual design feature, these special
conditions would apply to that model as well.

Conclusion

This action affects only a certain novel or unusual design feature
on one model series of airplanes. It is not a rule of general
applicability.
The substance of these special conditions has been subjected to the
notice and comment period in several prior instances and has been
derived without substantive change from those previously issued. It is
unlikely that prior public comment would result in a significant change
from the substance contained herein. Therefore, the FAA has determined
that prior public notice and comment are unnecessary, and good cause
exists for adopting these special conditions upon publication in the
Federal Register.
The FAA is requesting comments to allow interested persons to
submit views that may not have been submitted in response to the prior
opportunities for comment described above.

List of Subjects in 14 CFR Part 25

Aircraft, Aviation safety, Reporting and recordkeeping
requirements.

The authority citation for these special conditions is as follows:

Authority: 49 U.S.C. 106(g), 40113, 44701, 44702, 44704.

The Special Conditions

Accordingly, pursuant to the authority delegated to me by the
Administrator, the following special conditions are issued as part of
the type certification basis for Gulfstream Model GVII-G500 airplane.

Isolation or Security Protection of the Aircraft Control Domain and the
Airline Information Services Domain From the Passenger Services Domain

1. Gulfstream must ensure that the Model GVII-G500 series airplane
design provides isolation from, or airplane electronic-system security
protection against, access by unauthorized sources internal to the
airplane. The design must prevent inadvertent and malicious changes to,
and all adverse impacts upon, airplane equipment, systems, networks, or
other assets required for safe flight and operations.
2. Gulfstream must establish appropriate procedures to allow the
operator to ensure that continued airworthiness of the Model GVII-G500
series airplane is maintained, including all post-type-certification
modifications that may have an impact on the approved electronic-system
security safeguards.

Issued in Renton, Washington, on July 7, 2016.
Michael Kaszycki,
Assistant Manager, Transport Airplane Directorate, Aircraft
Certification Service.
[FR Doc. 2016-16638 Filed 7-14-16; 8:45 am]
BILLING CODE 4910-13-P

Federal Register / Vol. 81, No. 136 / Friday, July 15, 2016 / Rules and Regulations 45969

systems architecture requiring isolation historically proprietary. Therefore, they certification basis for Gulfstream Model
or protection from unauthorized are not as susceptible to corruption from GVII–G500 airplane.
internal access. worms, viruses, and other malicious
Isolation or Security Protection of the
actions as are more-widely used
Discussion Aircraft Control Domain and the
commercial operating systems, such as
Networks, both in safety-related and Airline Information Services Domain
Microsoft Windows NT, because access
non-safety-related applications, have From the Passenger Services Domain
to the design details of these proprietary
been implemented in existing operating systems is limited to the 1. Gulfstream must ensure that the
commercial-production airplanes. system developer and airplane Model GVII–G500 series airplane design
However, network security integrator. Some systems installed on provides isolation from, or airplane
considerations and functions have the Gulfstream Model GVII–500 will use electronic-system security protection
played a relatively minor role in the operating systems that are widely used against, access by unauthorized sources
certification of such systems because of and commercially available from third- internal to the airplane. The design
the isolation, protection mechanisms, party software suppliers. The security must prevent inadvertent and malicious
and limited connectivity between these vulnerabilities of these operating changes to, and all adverse impacts
networks. systems may be more widely known upon, airplane equipment, systems,
To provide an understanding of the than are the vulnerabilities of networks, or other assets required for
airplane electronic equipment, systems, proprietary operating systems that the safe flight and operations.
and assets, these special conditions use avionics manufacturers currently use. 2. Gulfstream must establish
the concept of domains. However, this appropriate procedures to allow the
does not prescribe any particular Applicability operator to ensure that continued
architecture. As discussed above, these special airworthiness of the Model GVII–G500
The aircraft-control domain consists conditions are applicable to the series airplane is maintained, including
of the airplane electronic systems, Gulfstream Model GVII–G500 airplane. all post-type-certification modifications
equipment, instruments, networks, Should Gulfstream apply at a later date that may have an impact on the
servers, software and hardware for a change to the type certificate to approved electronic-system security
components, databases, etc., which are include another model incorporating the safeguards.
part of the type design of the airplane same novel or unusual design feature, Issued in Renton, Washington, on July 7,
and are installed in the airplane to these special conditions would apply to 2016.
enable the safe operation of the airplane. that model as well. Michael Kaszycki,
These can also be referred to as flight- Assistant Manager, Transport Airplane
safety-related systems, and include Conclusion
Directorate, Aircraft Certification Service.
flight controls, communication, display, This action affects only a certain
[FR Doc. 2016–16638 Filed 7–14–16; 8:45 am]
monitoring, navigation, and related novel or unusual design feature on one
BILLING CODE 4910–13–P
systems. model series of airplanes. It is not a rule
The airline-information-services of general applicability.
domain generally consists of functions The substance of these special
that the airplane operator manages or conditions has been subjected to the PENSION BENEFIT GUARANTY
controls, such as administrative notice and comment period in several CORPORATION
functions, cabin-support functions, etc. prior instances and has been derived
29 CFR Part 4022
The passenger-information-services without substantive change from those
domain consists of all functions previously issued. It is unlikely that Benefits Payable in Terminated Single-
required to provide the passengers with prior public comment would result in a Employer Plans; Interest Assumptions
information. significant change from the substance for Paying Benefits
The Gulfstream Model GVII–G500 contained herein. Therefore, the FAA
airplane design introduces the potential has determined that prior public notice AGENCY: Pension Benefit Guaranty
for access to aircraft-control domain and and comment are unnecessary, and good Corporation.
airline-information-services domain by cause exists for adopting these special ACTION: Final rule.
unauthorized persons through the conditions upon publication in the
passenger-information-services domain; Federal Register. SUMMARY: This final rule amends the
and the security vulnerabilities related The FAA is requesting comments to Pension Benefit Guaranty Corporation’s
to the introduction of viruses, worms, allow interested persons to submit regulation on Benefits Payable in
user mistakes, and intentional sabotage views that may not have been submitted Terminated Single-Employer Plans to
of airplane networks, systems, and in response to the prior opportunities prescribe interest assumptions under
databases. for comment described above. the regulation for valuation dates in
For electronic systems-and-assets August 2016. The interest assumptions
List of Subjects in 14 CFR Part 25 are used for paying benefits under
security in these domains, the level of
protection provided against security Aircraft, Aviation safety, Reporting terminating single-employer plans
threats should be based on a security- and recordkeeping requirements. covered by the pension insurance
risk assessment, noting that the level of The authority citation for these system administered by PBGC.
protection could differ between special conditions is as follows: DATES: Effective August 1, 2016.
domains and within domains, Authority: 49 U.S.C. 106(g), 40113, 44701, FOR FURTHER INFORMATION CONTACT:
Deborah C. Murphy (Murphy.Deborah@
rmajette on DSK2TPTVN1PROD with RULES

depending on the security threat. For 44702, 44704.
each security vulnerability and airplane pbgc.gov), Assistant General Counsel for
electronic asset, Gulfstream should The Special Conditions Regulatory Affairs, Pension Benefit
identify in which domain the asset will Accordingly, pursuant to the Guaranty Corporation, 1200 K Street
be addressed. authority delegated to me by the NW., Washington, DC 20005, 202–326–
In addition, the operating systems for Administrator, the following special 4400 ext. 3451. (TTY/TDD users may
current airplane systems are usually and conditions are issued as part of the type call the Federal relay service toll-free at

VerDate Sep<11>2014 15:21 Jul 14, 2016 Jkt 238001 PO 00000 Frm 00007 Fmt 4700 Sfmt 4700 E:\FR\FM\15JYR1.SGM 15JYR1

Document Created: 2016-07-15 02:53:33
Document Modified: 2016-07-15 02:53:33

Category		Regulatory Information
Collection		Federal Register
sudoc Class		AE 2.7: GS 4.107: AE 2.106:
Publisher		Office of the Federal Register, National Archives and Records Administration
Section		Rules and Regulations
Action		Final special conditions; request for comments.
Dates		This action is effective on Gulfstream on July 15, 2016. We must receive your comments by August 29, 2016.
Contact		Varun Khanna, FAA, Airplane and Flightcrew Interface Branch, ANM-111, Transport Airplane Directorate, Aircraft Certification Service, 1601 Lind Avenue SW., Renton, Washington 98057-3356; telephone 425-227-1298; facsimile 425-227-1320.
FR Citation		81 FR 45968
CFR Associated		Aircraft; Aviation Safety and Reporting and Recordkeeping Requirements

81 FR 45968 - Special Conditions: Gulfstream Aerospace Corporation Model GVII-G500 Airplanes; Isolation or Protection of Airplane Electrical-System Security From Unauthorized Internal Access

DEPARTMENT OF TRANSPORTATIONFederal Aviation Administration

Federal Register Volume 81, Issue 136 (July 15, 2016)

DEPARTMENT OF TRANSPORTATION
Federal Aviation Administration