SECURE ATC SURVEILLANCE FOR MILITARY APPLICATIONS
Larry Kenney
Joe Dietrich
Jerry Woodall
Raytheon Network Centric Systems
Towson, MD
This paper presents a system in concept development that
combines the integrity of the civil Automatic Dependant
Surveillance – Broadcast (ADS-B) system for air-to-air
conflict avoidance and air traffic management (ATM)
surveillance with the military secure Mark XIIA Mode 5
Identification Friend or Foe (IFF) system as the data link.
This new system, coined Military ADS-B (MADS-B),
expands the traditional IFF surveillance data of range,
azimuth, altitude, and identity (ID) to include each
platform’s dynamic state of motion and status. This self-
reporting system significantly improves positioning and
status data between Tri-Service platforms and with Allies –
who are also transitioning to the common Mode 5 system.
Beyond MADS-B’s securing of ADS-B data, it enables
overcoming other surveillance and navigation shortfalls
through future software based message additions. The
paper summarizes ADS-B operations, the conversion of
data to the Mode 5 Level 2 formats, and examples of
message extensions providing surveillance enhancements.
INTRODUCTION
The objective of the secure surveillance capability is to
bring all the benefits of the civil air traffic management
(ATM) Automatic Dependent Surveillance – Broadcast
(ADS-B) system to the military Identification Friend or
Foe (IFF) system. The proposed solution improves system
integrity, enables common flight procedures, and increases
link efficiency.
Civilian air traffic control (ATC) and military IFF share
dedicated communications channels, with an exclusive
international frequency allocation of 1030 MHz for the
interrogations (uplink) and 1090 MHz for the replies
(downlink). They have evolved from radar beacon based
question and answer systems. The initial civil component
is known as the Air Traffic Control Radar Beacon System
(ATCRBS). Legacy military IFF supplemented the
ATCRBS modes with an unsecured Selective
Identification Facility (SIF) for additional platform data in
addition to a secure ID only mode. As civil air traffic
density increased, an addressed interrogation mode, Mode
S, was developed to obtain platform data and reduce
system self-interference. It also introduced a self reporting
acquisition mode to supplement the question and answer
mode. Increasing traffic density continued to grow,
challenging the paradigm of question and answer ATM
978-1-4244-2677-5/08/$25.00 ©2008 IEEE
1 of 6
Authorized licensed use limited to: J.R.D. Tata Memorial Library Indian Institute of Science Bengaluru. Downloaded on December 29,2023 at 01:59:12 UTC from IEEE Xplore. Restrictions apply.
systems. ADS-B is the civil solution to the Mode S over-
interrogation and Traffic Alert and Collision Avoidance
System (TCAS) generated false replies unsynchronized to
interrogator transmissions (fruit) that jeopardize ATC
integrity. ADS-B is the affordable solution to safely
increase traffic density, ensure conflict avoidance with
free-flight, and manage self-interference.
IFF over-interrogation also generates excess fruit that not
only jeopardizes IFF operational integrity, but also
increases fratricide risk and produces surveillance gaps. A
secure form of ADS-B that complements IFF and offers a
common set of training, tactics, and procedures with
seamless process for military aviators to transition from
the peace-time civil airspace to the hostile battle space.
With self-reporting reducing interrogation rates, the ADS-
B can efficiently use the signal bandwidth at 1090 MHz to
transmit an increased amount of information about the
vehicle position, velocity, and status. A secure ADS-B like
system of surveillance and air-to-air conflict avoidance can
be can be the system that provides superior IFF
performance into the next century, overcoming the
operational utility shortfalls in the question and answer
component of the IFF system.
ADS-B OVERVIEW
The ADS-B system is strongly positioned in universal
situational awareness. It is based on the concept of aircraft
self-reporting their geodetic location, both in the air and on
the ground. It has been developed and peer reviewed
internationally over the last 20 years. ADS-B builds on
Mode S with requirements established by national
authorities such as the FAA, RTCA, EUROCAE, and
ICAO. RTCA/DO-260A [1] establishes the minimum
operational standards (MOPS) for airborne equipment for
ADS-B utilizing 1090 MHz Mode S Extended Squitter
(1090ES).
Since the goal is to routinely use the ADS-B self reports as
a primary source of aircraft surveillance, the US and other
nations plan to replace the majority of ATC interrogators
with ADS-B ground receiving stations by ~2018. Some
nations plan to bypass upgrades with Mode S interrogators
and go directly from the ATCRBS to ADS-B as the
designated surveillance upgrade for the future.
 ADS-B will be required internationally for civil
ATC/ATM. A clear case has been made for the installation
of ADS-B in military platforms [2, 3]. However, ADS-B
dictates that all surveillance be open, and therefore non-
secure. This is a recognized vulnerability, but civil
authorities accept it in civil environments. Note that
1090ES ADS-B messages are equally important military
surveillance input.
The open nature of the ADS-B data transmission is
incompatible with IFF objectives in a hostile environment.
It would be vulnerable to the classic IFF threats of
spoofing and exploitation. Spoofers could attack the
system by generating false reports containing contrived
position data. Exploiters could listen to the ADS-B reports
to easily track and then advantageously attack the
vulnerable aircraft.
MARK XIIA MODE 5 OVERVIEW
The new Mark XIIA Mode 5 waveform for airborne
Identification Friend or Foe (IFF) offers the first
significant upgrade to airborne cooperative identification
systems since the Mark XII Mode 4 development in the
1960s. The US military is preparing to field this new
international standard which features secure data
transmission in addition to providing high assurance friend
determination. Mode 5 uses minimum shift keying (MSK)
modulation and spread spectrum techniques to realize a
processing gain waveform. The waveform defined by
STANAG 4193 [4] includes error control and methods for
reducing self-interference. Security is provided by a Type
1 algorithm embedded in a programmable crypto engine.
IFF Mode 5 capabilities are defined for four levels. Levels
1 and 2 are well defined and are supported by equipment
being delivered now. Levels 3 and 4 have less definition
and are intended for capability growth.
Military Aircraft Transponder
Data from
GNSS/GPS
& Aircraft
ADS-B Class B
Register Data PPM Modulated
Generation
Added for ADS-B Added for MADS-B
Figure 1 MADS-B System Components
Authorized licensed use limited to: J.R.D. Tata Memorial Library Indian Institute of Science Bengaluru. Downloaded on December 29,2023 at 01:59:12 UTC from IEEE Xplore. Restrictions apply.
Mode 5 Level 1 (M5L1) is the synchronous question and
answer mode. It offers significant improvements in secure
friend determination over the legacy Mode 4, and includes
a secure data transmission capability. With M5L1, an IFF
interrogator can simultaneously determine friend status
and securely query altitude, mission code, platform
identification number (PIN), and national origin (NO).
M5L1 introduces the lethal interrogation mode, where a
reply is required from a transponder even when it is in
standby mode.
Mode 5 Level 2 (M5L2) is a new asynchronous mode for
secure self reporting. Report formats include ADS-B like
GPS data in 77 bit tactical data report messages. There are
two squittering (self-reporting) rates, a long term low rate
squitter, similar to the ADS-B squitters, and a short
duration high rate squitter, which can be triggered by a
scanning beam interrogator.
MILITARY SECURE ADS-B
For the military secure ABS-B (MADS-B), we recommend
combining the tracking accuracy and integrity of ADS-B
data with the security of the M5L2 waveform as the
available, secure-interoperable military communications
link. The ADS-B data would be reformatted into a subset
of the 8 unused M5L2 formats. The original formats would
be undisturbed. All of the M5L1 formats would also be
retained for interoperability and lethal use.
Figure 1 shows a simplified block diagram of a MADS-B
capable transponder. The core 1090ES, Mode S Enhanced
Surveillance, modes are current equipment capabilities
realized in the pulse position modulation (PPM) and
demodulation functions in the transponder transmitter and
interrogator receiver.
Military Aircraft Class A Transponder
or Ground/Surface Class C Receiver
M5 Encryption M5L2 MSK
& M5L2 MSK Demodulation & ADS-B
Waveform M5 Decryption and
MADS-B
Target Data
Tracking & Status to Display
Data over Either Path
Mode S DF-17 Mode S DF-17 ADS-B Class A
PPM Waveform Track & Display
Waveform Decoding Generation
2 of 6
 For ADS-B support, data is accepted from aircraft’s AIRBORNE POSITION
navigation and global navigation satellite system (GNSS) Figure 2 illustrates the mapping of the 1090ES, downlink
source, processed and loaded into the Comm-B Data format (DF) 17 airborne position from the BDS register
Select (BDS) registers. In ADS-B operation, data from (0,5) into the MADS-B M5L2 format 24. Recall that the
specified registers are sampled at random intervals payload for the M5L2 is limited to 77 bits and that the long
(~2/second rate) and used to create the 112 bit downlink 1090ES formats are 112 bits long.
message. For military-secure MADS-B operation, the data
in the 112 bit downlink message would be remapped into Mode S DF=17 MADS-B
Airborne Position (BDS 0,5)
the 77 bit tactical data field payload of the M5L2 message.
5 Format 24 Header
That M5L2 message would then be encrypted and 1
modulated in the same manor as any other M5L2 5 DF Code
3 CA Status
messages. 2
14 - MIL PIN
19 Address
On the receiving end, there is a MADS-B/ADS-B Class A 24
AA Mode S
5 - Nat Origin
Address

77 Bit Tactical Data Payload

track and report generator. It accepts data from either the 6 4 Add’l Addr
4 Type Code
demodulated 1090ES replies or the decrypted, 5 Type Code
3
2 Surv Status
demodulated, and reformatted data from selected M5L2 2 Surv Status
4
1 Single Ant
messages. The track and report generator function is 12 Altitude

Identical
essentially independent of the source of the ADS-B data. 12 Altitude

112 Bits
1 Time (T)
With judicious re-formatting of the data from the normal 1 Time (T) 1 CPR Format
1090ES payload to the M5L2 payload, MADS-B provides 1 CPR Format CPR
CPR 17 Encoded
all of the advantages of the civil ADS-B operational use 17 Encoded Latitude
and integrity, while providing critical military grade Latitude
CPR
security. CPR 17 Encoded
17 Encoded Longitude
Longitude
MADS-B MODE 5 LEVEL 2 FORMATS
5
PI
Mode 5 provides up to 16 level 2 message formats, 11 of 24 Parity
which are assigned to standard Mode 5 interrogate-reply Identity Code
functions and 5 are proposed for assignment to MADS-B
functions. The Mode 5 level 2 formats proposed for Figure 2 Airborne Position Report
MADS-B are shown in Table 1.
The most critical data which is the essence of the position
Table 1 Mode 5 Level 2 Message Formats 24 - 31 report is identically formatted in the MADS-B position
Squitter Transmission report. The 2 bit surveillance status field (Surv Status)
Format Sub- Used for Report Type signals emergency and identity pulse (IP) in four states.
format The 12 bit altitude is the GNSS height. The time flag field
24 None Air Surveillance Airborne Position signals the synchronization method. The compact position
25 None Surface/Ground Surface Position report (CPR) format flag signals whether the odd or even
Surveillance
26 0 Air Surveillance Airborne CPR data is included in this report. The latitude and
Velocity* longitude data are CPR encoded.
1 Platform Type Airborne The Mode S DF and civil aviation (CA) status codes (1)
& Status Capability**
are not mapped into the MADS-B report. The differences
2 Surface
begin with (2) the 24 bit aircraft address (AA) field being
Capability**
3 Reserved for IFF & Military Status dropped in favor of the 19 bits of the military platform
4-7 Unassigned MADS-B Subformats identification number (PIN) and national origin (NO),
27-28 Reserved for MADS-B*** along with (6) 4 additional bits reserved for military
* Required with Format 24. identifier expansion. The type code (3) is compacted from
** Supplements Formats 24 and 25. 5 bits to 4 bits to report all accuracy and integrity levels of
*** Formats 29-31 reserved for standard M5L2 future use ADS-B airborne position except for one type code. The
single antenna flag (4) is not mapped into the MADS-B
The airborne position and the airborne velocity report report because military aircraft typically have dual
types are explored in detail below to show the reformatting antennas.
of the ADS-B data into the M5L2 payload constraints.

3 of 6
Authorized licensed use limited to: J.R.D. Tata Memorial Library Indian Institute of Science Bengaluru. Downloaded on December 29,2023 at 01:59:12 UTC from IEEE Xplore. Restrictions apply.
 The parity identity code (PI) is dropped because the M5L2 The subtype defines whether the velocity is available and
has a CRC integrity check on the data within the whether it is in the normal or supersonic range. The intent
cryptography, and the waveform has Reed-Solomon error change flag is growth function to signal a planned flight
correction coding on the transmitted data. attitude change. The instrument flight rules (IFR) flag
signals the air navigation capability of the platform. The
The surface position report is mapped similarly, with the
navigation accuracy category for velocity (NACv) is a
movement, heading, and heading status fields being
look-up table for different velocity sources. The East/West
included in the identically mapped from the DBS register
(E/W) and North/South (N/S) velocities and direction flags
(0,6) to M5L2 format 25.
provides the amplitude and sign of the velocity vector
AIRBORNE VELOCITY components in those two dimensions. The vertical rate
source indicates whether a GNSS or barometric source is
MADS-B Airborne Velocity Format 26 Subformat 0 being used. The vertical rate and its sign provide the
information is contained in four different ADS-B velocity component of the velocity vector in a third direction. The
subtype messages. Except for modifications to the Type difference from barometric and its sign provide the index
Code field, it is completely included in MADS-B Format into a look-up table to determine the difference between
26. ADS-B Subtypes 1 and 2 give velocity over ground GNSS and barometric altitude.
for subsonic and supersonic velocities, respectively. Figure
3 illustrates the mapping of the 1090ES, DF 17 airborne These three formats, airborne position and velocity, and
position from the BDS register (0,5) into the MADS-B surface position constitute the core ADS-B position reports
M5L2 format 26 for supersonic platforms. that are supplemented by several status messages that
provide information on the type of aircraft, fixed obstacle,
Mode S DF=17 MADS-B or airport surface vehicle whose position is being reported.
Airborne Velocity (BDS 0,9)
Subtype 1 shown, also 2,3,4
5 Format 26 Header
Because these messages have certain redundant
5 DF Code
1 information and information that only applies to civil
3 CA Status transport aircraft, not military tactical aircraft, the ADS-B
3 Subformat
status message data can be compressed into a single
AA Mode S 14 - MIL PIN
24
Address 19 Address MADS-B message without the loss of essential safety and
5 - Nat Origin tracking information.
77 Bit Tactical Data Payload

5 Type Code 4 Add’l Addr

3 Subtype 3 Subtype These four message formats, three position-velocity and
1 Int Ch Flag
1
1
Int Ch Flag
IFR Flag 1 IFR Flag
one status message, may be thought of as level one of
3
1 NACv 3 NACv MADS-B in that it provides a secure air-to-air conflict
Identical

1 E/W Dir 1 E/W Dir

112 Bits

10 E/W Velocity 10 E/W Velocity

avoidance and airborne surveillance system that directly
1 N/S Dir 1 N/S Dir complements ADS-B and supports civil (ADS-B) and
10 N/S Velocity 10 N/S Velocity secure military (MADS-B) operations.
1 VR Source 1 VR Source
1 VR Sign 1 VR Sign
9 Vert Rate 9 Vert Rate
2 Reserved 2 Reserved
1 Diff Baro Sign 1 Diff Baro Sign
7 Geo Baro Diff 7 Geo Baro Diff

PI
24 Parity
Identity Code

Figure 3 Airborne Velocity Report

Similar to the airborne position report mapping, the DF

code and CA status (1) are not included in the mapping.
The convention of using the PIN and NO in place of the
AA data are also consistent with the MADS-B position
report. The subformat field uses 3 bits of the tactical data
payload space. The critical 51 bits of ADS-B velocity data
are mapped one for one into the MADS-B payload.

4 of 6
Authorized licensed use limited to: J.R.D. Tata Memorial Library Indian Institute of Science Bengaluru. Downloaded on December 29,2023 at 01:59:12 UTC from IEEE Xplore. Restrictions apply.
 1
Traditional and
M5L1 Q&A
Provides Track History
• Interrogator determines
track from past & current
position reports
Figure 4 Tracking Improvements with MADS-B
ADVANTAGES BEYOND SECURITY
Having the ADS-B velocity component advances the
quality of situational awareness in the critical air-to-air
case. Figure 4 illustrates the progression of track quality
improvement as the IFF system evolves from traditional
question and answer operation to a self reporting MADS-B
paradigm.
In the traditional Mode 5 Level 1 (1), a track history is
accumulated from past position reports. Each position
report is estimated by interrogating a target across a
beamwidth and centroiding multiple replies. With the
current Mode 5 Level 2 squittered position reports (2), an
estimate of the target position is self reported and the
tracker has a more accurate track history to extrapolate
future positions. However, the MADS-B squittered reports
(3) include both position and velocity measured by the
reporting platform – minimizing the complexity and
uncertainty in the receiver tracker.
An additional level of total friend situational awareness is
also enabled by the rich data content of the MADS-B
status messages derived from the ADS-B catalog. The self-
reporting form of surveillance building on ADS-B and
Mode S information exchanges also provides a mechanism
for communicating military-only messages that provide
state and status information on the ADS-B/MADS-B
communications channel at 1090 MHz and the
interrogation channel used by civil Mode S and M5L1 at
1030 MHz.
Knowing and mapping the interference levels – power and
message rate information – at the aircraft source can
enable the surveillance network to identify sources of
over-interrogation and jamming, and where and when
Authorized licensed use limited to: J.R.D. Tata Memorial Library Indian Institute of Science Bengaluru. Downloaded on December 29,2023 at 01:59:12 UTC from IEEE Xplore. Restrictions apply.
2 M5L2 with GPS 3 MADS-B Provides
Position Reports Position & Velocity
Reports + Status Data
Provides more Accurate Provides Accurate Predicted
Track History Track from Aircraft NAV
System – Best data source!
• Interrogator still tracks
from history data • Receiver tracker minimal!
alternative methods of friend identification and ATM are
required.
In addition to creating a ‘network view’ of the ATM/IFF
communications channels, there are additional
opportunities to expand MADS-B capabilities to meet a
number of unmet military surveillance and identification
needs using the self-reporting method to minimize self-
interference and exploit the interoperability advantage
offered within M5L2. These include providing greatly
expanded information on the state and status of each
friendly aircraft and its crew. This is a major leap from the
pre-Mode 5 IFF ID where the result of an interrogation
was simply whether you were a friend and your
approximate location, to MADS-B with extensive
information on aircraft and crew in real-time that would be
universally available to US and Allied militaries.
CONCLUSION
MADS-B is a robust, universal IFF upgrade that tracks the
most significant civil ATC surveillance update in the last
50 years. It provides a low-signal-density solution to the
IFF problem of self-interference losses due to over
interrogation. MADS-B provides for a transition to a
network enabled IFF system to solve the most severe IFF
operational problem of fratricide due to the IFF
transponder being ‘turned off’ because of excessive
interrogation. Performance and integrity are now
monitored largely within the system. Use of the existing
Mark XIIA Mode 5 Level 2 waveform and key ADS-B
tracking system elements assures that MADS-B
performance will remain current with any mandated civil
ADS-B tracking updates without need for additional
military interoperability coordination.
5 of 6
 REFERENCES
[1.] RTCA/DO-260A, Minimum Operational Performance
Standards for 1090 MHz Extended Squitter Automatic
Dependent Surveillance – Broadcast (ADS-B) and Traffic
Information Services – Broadcast (TIS-B), April 10, 2003

[2.] Frain, S., Van Sickle, G., “CNS/ATM for Tactical

Military Aircraft”, Digital Avionics Systems Conference,
2003, Indianapolis, IN, pp. 4.D.1-1 – 4.D.1-9.

[3.] Van Sickle, G. The Military Utility of ADS-B,

presented at the Air Traffic Control Radar Beacon System
(ATCRBS), Identification Friend or Foe (IFF), Mark XIIA
System (AIMS) Conference 2008, San Antonio, TX

[4.] STANAG 4193, North Atlantic Treaty Organization

(NATO) NATO Standardization Agency (NSA)
Standardization Agreement (STANAG), Technical
Characteristics of IFF Mk XA and Mk XII, Interrogators
and Transponders - Part V: Technical Description of the
Mk XIIA System, 2007

6 of 6
Authorized licensed use limited to: J.R.D. Tata Memorial Library Indian Institute of Science Bengaluru. Downloaded on December 29,2023 at 01:59:12 UTC from IEEE Xplore. Restrictions apply.