GMV launches Luís Valle R&D&I program

GMV has received approval from the Strategic Initiative for Innovative Public Procurement (IECPI) of the Spanish National Cybersecurity Institute (INCIBE) for the implementation of the Luís Valle R&D&I program. The program’s research proposal focuses on two projects: (1) the development of a self-sovereign digital identity solution, and (2) a security operations center (SOC) for the space industry.

A technological breakthrough that is redefining online security and privacy, self-sovereign identities (SSI) are emerging as a powerful solution for self-managing identity data in the digital age. SSI put control directly in the hands of individuals, allowing them to decide how and when to share their personal information online.

Unlike traditional approaches where third parties such as governments or corporations store and manage personal data and verify an individual’s identity, self-sovereign digital identities put users in charge of their own personal data, allowing them to disclose only as much information as is necessary at any given time. By not having to entrust our data to an identity provider, we avoid risks such as our data being traded or exposed to fraud or attacks on service availability. This minimizes threats to the security and privacy of personal data and the risks of unilateral changes to identity management policies. 

This innovative approach to digital identity has important applications in online services, financial transactions, healthcare, and other areas where identity verification is critical and privacy is essential.

Identity-based cryptography surpasses blockchain

At present, most self-sovereign identity solutions are developed using decentralized technology, known as blockchain, to bypass central identity issuing authorities. GMV’s research project aims to overcome the limitations of blockchain technology, such as scalability or energy consumption, by replacing it with an alternative technology called identity-based cryptography (IBC) and sometimes identity-based encryption (IBE). 

IBC schemes are public-key cryptosystems where, instead of randomly generating the public and private keys, the public key can be chosen at will. In these systems, once the public key is chosen, the private key is generated from the public key using a private key generator (PKG). If we use an identity as a public key, there is no need to link the two, as they are one and the same. These schemes can therefore run without certificates and without the need to use a blockchain to store the relationships between identities and public keys. Identity-based schemes have been around for years, and GMV in particular has extensive experience in the use of related cryptography in the mobile authentication environment, holding two patents in this area. 

Space industry SOC to mitigate potential cyberattacks on satellites

GMV’s second research project focuses on the development of a security operations center (SOC) for the space industry. SOCs are essential in managing and mitigating the risks associated with potential security incidents on satellites. As satellites play a critical role in many areas (communications, Earth observation, navigation, national security, etc.), a single incident can have major socioeconomic consequences. The disruption of critical services provided by satellites could have an impact on global connectivity, affecting emergency services, telecommunications services, or access to vital information. 

With this in mind, the European Union published Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022, which focuses on ensuring a high common level of cybersecurity across the EU, thereby strengthening cybersecurity and the availability of reliable and resilient services in critical sectors, including the space sector. 

Satellite centers have traditionally been isolated from the outside world, and traditional security has been based on physical protection of the perimeter, with strict security controls to ensure that only authorized personnel have access. What’s more, access to applications and systems remains virtually unrestricted for those responsible for operations. This raises certain cybersecurity issues that are not well managed by the vast majority of satellite operators. 

GMV’s research will provide a technological response to six major challenges:

 - Lack of traceability of operator actions within a control center.

-  Incomplete security of operating systems and applications in an environment without internet connectivity.

-  Manual, time-consuming and costly system bastioning.

-  Lack of dedicated monitoring tools for satellite control centers and lack of security information sharing with other control centers.

-  Lack of cybersecurity incident response teams trained and specialized in the characteristics of space organizations’ control centers.

-  The specific security accreditations to which these centers are subject, particularly in government environments.

The societal benefits of the two Luís Valle research projects that GMV is working on are undeniable and in line with INCIBE’s mission of educating and raising awareness among the public of the importance of cybersecurity research and innovation in improving their quality of life.

For more information:

Marketing & Communication
GMV Secure e-Solutions
[email protected]