Secure ETCS Key Management for a Digital Infrastructure
Cryptographic keys are essential for secure communication between trackside systems and rolling stock in ETCS operations. With the Online Key Management Center (oKMC), DB InfraGO AG is modernizing key management for ETCS. Automated processes increase security, reduce manual effort, and provide the foundation for the continued expansion of the digital rail infrastructure.
The growing deployment of ETCS (European Train Control System) creates new requirements for cybersecurity. Increasing numbers of cryptographic keys must be generated, distributed, and managed reliably to ensure secure communication between trackside infrastructure and trains at all times. To date, many of these processes still involve manual steps.
The Online Key Management Center (oKMC) project is establishing a modern platform that automates the entire lifecycle of cryptographic keys, from application and generation through distribution and revocation to audit-proof documentation. Its objective is to efficiently meet the increasing demands of the ETCS rollout, reduce potential sources of error, and achieve a higher level of cybersecurity.
The project is being implemented in three stages. The first step is the modernization of the existing offline functionality. This is followed by the online integration of the Radio Block Centres (RBCs) and, finally, the automated provisioning of the ETCS onboard systems installed in trains. This approach ensures that existing systems remain operational while new digital processes are introduced.
The oKMC architecture follows modern security principles such as Security by Design and Zero Trust. Network segmentation, cryptographic authentication, Public Key Infrastructure (PKI), and tamper-proof logging ensure compliance with the stringent requirements of critical railway infrastructure.
With the oKMC, DB InfraGO AG is creating the foundation for future-proof, scalable, and secure key management in digital rail operations, thereby supporting the digitalization of railway infrastructure and the further expansion of ETCS in Germany.
In a recent technical article published in the August edition of the journal Signal + Draht, our expert Samet Bahadir Öztekin explains how the oKMC is being developed as the foundation for future-proof and scalable key management in digital rail operations. Read the article here: Technical Article in Signal + Draht.
