Back to news

April 22, 2020 | International, Naval, C4ISR

For the Navy’s hospital ships, networking is yet another challenge

Andrew Eversden

When the Navy hospital ship Comfort deployed to Haiti in 2010 following devastating earthquakes, media organizations broadcasting in the area ate up so much satellite bandwidth that the ship had to revert to paper processes and adjust its satellite communications for some ship-to-shore messaging.

While the outages weren't a widespread issue, said Sean Kelley, who served as the ship's top IT officer at the time, the problem highlighted a challenge these ships face: broadband.

Now, the hospital ships Mercy and Comfort are deployed to Los Angeles and New York, respectively, and are in the national spotlight as symbols of the coronavirus pandemic relief effort. But security and IT experts say the ships' mission presents the Navy with distinct networking problems, from cybersecurity to network connection for patients.

Onboard devices

When disaster strikes, the Navy's hospital ships deploy in a matter of days, mobilizing with a crew of about 100-1,200 personnel. But the influx of staff also leads to an incursion of devices, all of which must be secure and require bandwidth.

“You have a lot of different people going to a lot of different places that now have to be acclimated to this environment,” said Kelley, now executive vice president at Unissant, an IT and cybersecurity company. “So that's really one of the biggest challenges, is getting all those things turned on, all those things activated, making sure that they are all compliant with the latest patches and fixes, and making sure they're good.”

This process can be a “nightmare,” said retired Rear Adm. Danelle Barrett, former deputy chief information officer of the Navy and cybersecurity division director.

“The challenging part is always in the first couple days whenever this happens,” said Barrett, who oversaw communications and cyberspace for Operation Unified Response, the U.S. military's mission in Haiti following the 2010 earthquake. “The team is coalescing about how they want to operate, and they're getting their feet wet, getting new accounts on networks ... [getting] their logins.”

Cybersecurity aboard the ships is also complex. Both ships have 1,000 beds, 12 operating rooms, blood banks, labs, medical devices and a multitude of other “internet of things” devices connected to hospital beds. According to a 2018 survey by health care IoT security company Zingbox, each bed can have as many as 10-15 IoT devices.

“They have to be cyber-ready, or the mission of the Mercy is considered [degraded],” said Dean Hullings, global defense solutions strategist at Forescout, which handles Comply to Connect — a Defense Department framework created to ensure the cybersecurity of new devices — for the USNS Mercy.

Ensuring connectivity

For the devices to function, they need connectivity. When the ships arrived in ports in late March, technology firm CenturyLink “donated” connectivity to the Mercy, while Verizon provided connectivity to the Comfort.

Former and current Navy officials told C4ISRNET that adequate broadband is the most challenging IT consideration faced by these ships.

“Obviously you're going to be transferring imagery of X-rays or things like that that are more dense and require a ... higher data rate, so that bandwidth in port is important,” Barrett said.

And with the introduction of patients, bandwidth needs become more complex.

“The greatest communications challenge we are going to face during this deployment is the increased need for patients to communicate off the ship during their stay,” Tom Van Leunen, a spokesman for Military Sealift Command, told C4ISRNET. “Our hospital ships are designed to support official communication for the ship's crew and embarked medical community to complete their job. Adding a capability for patients to reach loved ones increases the risk of saturating the bandwidth off the ship.”

Aboard both ships, the Navy doubled the bandwidth, he said, adding that Navy personnel also set up separate networks for patients' communications.

While this solves one networking problem, it can also create an increased cybersecurity risk.

Securing the ships

Cybersecurity on the hospital ships follows the same standard practices as the rest of the Navy fleet. Since those aboard are largely Navy medical staff and personnel, they know what activities are acceptable on the network, Barrett said.

“You can't just go and plug anything into that network because of potential vulnerabilities that that system may bring that could affect not just the ship, but remember, the ship is then connected to the rest of the [Department of Defense Information Network],” Barrett said. “So risk by one is shared by all.”

ForeScout's Hullings said a hospital environment “epitomizes” why the Comply to Connect program is necessary. The ship has desktops, servers, routers, printers and other networks equipment, as well as mobile devices, such as tablets, that health care providers use to track patient care.

“The truly unique stuff is the mission systems of the hospital, like X-ray machines, MRI machines, the beds themselves in the post-operative recovery rooms, that are all sensors. And they are all passing data. They have to be protected,” Hullings said.

A spokesperson for the Navy told C4ISRNET that the ships are prepared for the cybersecurity challenges associated with their missions, but declined to address what additional cybersecurity challenges are introduced with the addition of private citizens.

“These ships have routinely deployed in humanitarian assistance missions such as Pacific Partnership (USNS Mercy) and Continuing Promise (USNS Comfort) that required them to operate in partner nation ports, with foreign national patients being brought to and from the ship,” said Cmdr. Dave Benham, a spokesman for the Navy's 10th Fleet. “In all operating locations, we take appropriate precautions to keep our networks secure, and we do not discuss specific measures in order to protect operational security.”

Cybersecurity on the hospital ships follow the same protocols as any other Military Sealift Command ship, said Benham.

“Protecting our networks is a continuous challenge, and the overarching concern is to ensure that the right information gets to the right place at the right time with the right level of protection,” he explained.

Cybersecurity aboard the hospital ships follow similar efforts to those recommendations made by the Centers for Disease Control and Prevention: Wash your hands.

“It's ‘wash your hands' with your computer, too,” Barrett said. “Do good hygiene with your computer.”

https://www.c4isrnet.com/it-networks/2020/04/21/for-the-navys-hospital-ships-networking-is-yet-another-challenge/

On the same subject

  • Contract Awards by US Department of Defense - February 05, 2021

    February 8, 2021 | International, Aerospace, Naval, Land, C4ISR, Security

    Contract Awards by US Department of Defense - February 05, 2021

    NAVY Sikorsky Aircraft Corp., a Lockheed Martin Co., Stratford, Connecticut, is awarded a $478,605,019 firm-fixed-price modification (P00102) to a previously awarded contract (N0001914C0050). This modification exercises options for the procurement of five Lot Three low rate initial production Presidential Helicopters Replacement Program (VH-92A) aircraft, and associated interim contractor support, two cabin interior reconfiguration kits, support equipment, initial spares, and system parts replenishment. Work will be performed in Stratford, Connecticut (50%); Coatesville, Pennsylvania (36%); Owego, New York (10%); Patuxent River, Maryland (2%); Phoenix, Arizona (1%); and Quantico, Virginia (1%), and is expected to be completed in December 2023. Fiscal 2021 aircraft procurement (Navy) funds in the amount $478,605,019 will be obligated at time of award, none of which will expire at the end of the current fiscal year. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity. Invicta Global LLC,* Fort Worth, Texas, was awarded a $14,600,550 indefinite-delivery/indefinite-quantity modification for the exercise of Option Three under a contract for base operating support services at various installations in the Naval Facilities Engineering Systems Command (NAVFAC) Washington area of operations (AO). After award of this option, the total cumulative contract value will be $39,316,621. The work to be performed is all labor, material, equipment, management and administration for utilities, transportation and facility support services to include fire protection services, facilities management and investment, base support vehicles and equipment, urgent, emergency and routine services for facility support services. Work will be performed in NAVFAC Washington AO, including but not limited to Bethesda, Maryland (40%); Washington, D.C. (40%); Indian Head, Maryland (10%); and Dahlgren, Virginia (10%). This option period is from Feb. 1, 2021, to Jan. 31, 2022. No funds were obligated at time of award. Operation and maintenance, (Navy); and fiscal 2021 Navy working capital funds in the amount of $6,488,840 for recurring work will be obligated on individual task orders issued during the option period. NAVFAC Washington, Washington, D.C., is the contracting activity (N40080-19-D-0311). (Awarded: Jan. 29, 2021) Opal Soft, Inc., Sunnyvale, California, is awarded an $11,979,099 cost-plus-fixed-fee bridge contract for software support services in support of Naval Undersea Warfare Center Division, Keyport. Work will be performed in Keyport, Washington, and is expected to be completed by September 2021. This contract includes an option which, if exercised, would bring the cumulative value of this contract to $19,049,565. Work is expected to be completed by December 2021. Fiscal 2021 service cost center (Navy) $3,154,151 (82.12%); 2015 shipbuilding and conversion (Navy) $246,982 (6.43%); 2017 shipbuilding and conversion (Navy) $246,982 (6.43%); 2021 defense working capital fund (Navy) $84,895 (2.21%); 2021 other procurement (Navy) $42,474 (1.11%) 2019 shipbuilding and conversion (Navy) $37,996 (0.99%); and 2018 shipbuilding and conversion (Navy) $27,092.45 (0.71%) funding will be obligated at award. No contract funds will expire at the end of the current fiscal year. This contract was not competitively procured in accordance with 10 U.S. Code 2304(c) (1) (only one responsible source and no other supplies or services will satisfy agency requirements). The Naval Undersea Warfare Center Division, Keyport, Keyport, Washington, is the contracting activity. (N0025321C0004) DEFENSE LOGISTICS AGENCY US Foods, La Mirada, California, has been awarded a maximum $114,700,000 firm-fixed-price, indefinite-delivery/indefinite-quantity contract for full-line food distribution. This was a competitive acquisition with two responses received. This is a five-year contract with no option periods. Locations of performance are California and Alaska, with a Feb. 4, 2026, ordering period end date. Using military services are Army, Navy, Air Force and Marine Corps. Type of appropriation is fiscal 2021 through 2026 defense working capital funds. The contracting agency is the Defense Logistics Agency, Troop Support, Philadelphia, Pennsylvania (SPE300-21-D-3307). ARMY Oshkosh Defense LLC, Oshkosh, Wisconsin, was awarded a $61,002,554 firm-fixed-price contract for 1,081 Underbody Armor Kit upgrade kits for the Family of Medium Tactical Vehicles. Bids were solicited via the internet with one received. Work will be performed in Oshkosh, Wisconsin, with an estimated completion date of June 30, 2022. Fiscal 2019, 2020 and 2021 European reassurance initiative funds in the amount of $61,002,554 were obligated at the time of the award. U.S. Army Contracting Command, Detroit Arsenal, Michigan, is the contracting activity (W56HZV-21-C-0084). Dyncorp International LLC, Fort Worth, Texas, was awarded a $42,000,000 modification (P00121) to contract W58RGZ-19-C-0025 for aviation maintenance services. Work will be performed in Afghanistan and Iraq, with an estimated completion date of Aug. 31, 2021. Fiscal 2021 operation and maintenance (Army) funds in the amount of $42,000,000 were obligated at the time of the award. U.S. Army Contracting Command, Redstone Arsenal, Alabama, is the contracting activity. Coastal Contractors Inc.,* Baton Rouge, Louisiana, was awarded a $9,450,839 firm-fixed-price contract for flood control of the Comite River. Bids were solicited via the internet with eight received. Work will be performed in Baton Rouge, Louisiana, with an estimated completion date of Apr. 8, 2022. Fiscal 2021 civil construction funds in the amount of $9,450,839 were obligated at the time of the award. U.S. Army Corps of Engineers, New Orleans, Louisiana, is the contracting activity (W912P8-21-C-0005). Escal Institute of Advanced Technologies Inc., North Bethesda, Maryland, was awarded a $9,443,000 modification (P00004) to contract W911S0-19-D-0009 to provide training and certifications as required to verify and validate student proficiency in cybersecurity roles. Work locations and funding will be determined with each order, with an estimated completion date of Feb. 5, 2022. U.S. Army Field Directorate Office, Fort Eustis, Virginia, is the contracting activity. Cottrell Contracting Corp., Chesapeake, Virginia, was awarded a $9,416,500 firm-fixed-price contract for maintenance dredging of Naval Submarine Base Kings Bay, Camden County, Georgia. Bids were solicited via the internet with two received. Work will be performed in Kings Bay, Georgia, with an estimated completion date of April 25, 2022. Fiscal 2021 operation and maintenance (defense-wide funds) in the amount of $9,416,500 were obligated at the time of the award. U.S. Army Corps of Engineers, Jacksonville, Florida, is the contracting activity (W912EP-21-C-0008). WASHINGTON HEADQUARTERS SERVICES Systems Planning and Analysis Inc., Alexandria, Virginia (HQ0034-21-F-0089), has been awarded a firm-fixed-price and time and materials contract in the amount of $34,891,509. This contract is to provide support to the Office of Industrial Policy in carrying out its mission to ensure robust, secure, resilient and innovative industrial capabilities within the Department of Defense. The contractor will provide program support for the Defense Production Act Titles I and III, Industrial Base Assessments, Industry Engagement/Outreach and Strategic Communications and Business Intelligence and Analytics. Work performance will take place at the Mark Center, Alexandria, Virginia; and the Pentagon, Washington, D.C. Appropriate fiscal 2021 operation and maintenance funds will be obligated at the award. The expected completion date is Feb. 6, 2026. Washington Headquarters Services, Arlington, Virginia, is the contracting activity. *Small business https://www.defense.gov/Newsroom/Contracts/Contract/Article/2495622/source/GovDelivery/

  • BAE Systems missile warning systems for US allies

    February 8, 2024 | International, Aerospace

    BAE Systems missile warning systems for US allies

    With the escalating challenges on contested battlefields, the demand for threat detection and countermeasure capabilities has surged.

  • France qualifies Serval armored patrol vehicle variant for its Army

    December 2, 2022 | International, Land

    France qualifies Serval armored patrol vehicle variant for its Army

    The green light signifies a step forward for realizing the ground service's large-scale Scorpion modernization program.

All news