Seattle Fire Department: Improving Firefighter and EMS Responses

• Centralize management of configuration changes, certificate re-provisioning, pre-shared keys or certificates (if viable) and password recycling, security updates, etc.
• Engineer for fast network switching and roaming.
• Implement connection management and security technology between Wi-Fi and broadband without loss of credentials, authentication or re-logging.
• Implement a security strategy that can be managed with existing IT resources and, at the same time, with minimal risk.

After carefully reviewing numerous technologies, Seattle Fire decided that the wireless technology to support their initiatives would be best provided by a mobile router. This preferred strategy would allow Wi-Fi/broadband coordination, integration and switching to ensure lower latency without losing important data. After a successful trial of the AirLink mobile routers in three vehicles, Seattle Fire implemented the full solution as their emergency vehicle communications platform.

The solution allows Seattle Fire to leverage new voice, video and data mobile wireless initiatives by providing secure, seamless, fast switching in real-time between multiple networks without the need for each end-user device to have multiple embedded radios. It also allows Seattle Fire to lower the total cost of owning mobile wireless technology because fork-lift upgrades to change radios are not required – the routers are upgradeable. The solution provides Seattle Fire with a secure, manageable end-to-end communications system to extend the enterprise network to the vehicle fleet. Seattle Fire now has a solution for mobile technology implementation in which their four key challenges have been addressed:

Overcome limited wireless bandwidth

With the router’s capability for operating on multi-networks, critical emergency communications can now be dedicated to the broadband network that is shared with Seattle Power while Wi-Fi can be used for high-speed file transfers and software maintenance such as pre-incident plans, security and package software updates.

Achieved business objectives

Dispatching and emergency communications can use photos and transmit larger data sets and have the flexibility of switching between Wi-Fi and broadband infrastructure within the router. A dispatch message goes to the fire apparatus most of the time over the Wi-Fi network to the mobile data terminal (MDT) because vehicles are usually in the station at the time of dispatch. When the vehicle responds and leaves the fire station, data transmissions switch automatically to the broadband network within the router.

Fleet wide software and file updates to MDTs and attached mobile devices such as medical vaults can now be done on a regular basis, starting in the station and automatically switching between Wi-Fi depots through the router. These updates are handled by the AirLink Mobility Manager (AMM) for configuration and security while the AirLink Connection Manager (ACM) handles the persistent connection and switching requirements.

During mass casualty situations such as earthquakes and natural disasters, smartphones or other handheld devices can connect to the Wireless Access Point (mobile hotspot) provided by the router to transmit bar codes and medical triage codes (red, yellow, green, white and black) to the emergency room before patients are transferred. The information is encrypted and sent through a VPN tunnel outside of the city network for HIPAA compliance/security.

Paramedics can now transmit EKG files from Physio Control defibrillators to hospital emergency rooms using the router through the ACM on a VPN tunnel outside of the city network for HIPAA compliance/security over the Physio Control network.

Provided an ongoing management strategy (governance)

The solution delivers effective mobility management technology that provides secure, fast network switching and roaming to maintain a persistent connection between Wi-Fi and broadband networks without loss of credentials, authentication or re-login. The router allows Seattle Fire to use diverse networks from 4.9 GHz to 2.4 GHz, Wi-Fi, mesh, and fixed wire to their primary carriers, Sprint and Verizon Wireless, that provide the network back-haul.

The AMM allows for central management of configuration changes, certificate re provisioning, pre-shared keys (PSKs), password recycling, security updates etc. Certificates work best for device authentication, but are very difficult to manage on a 24×7 mobile platform that does not support auto-enrolment. This can now be handled more efficiently with the use of PSKs and a second level of authentication with RADIUS. Seattle Fire initially provisions all devices in the laboratory with keys and IP addresses before deployment, so they can all be managed remotely and centrally.

By implementing the AirLink solution, Seattle Fire has a security strategy that can be managed with existing IT resources, and can support security for other devices through the router’s firewall, NAC and WPA2-PSK features. The solution allows the streamlining of current processes and policies for better IT management.

Met operational, business, security and use-case objectives

Seattle Fire has determined that employing the device is the preferred operational strategy for Wi-Fi/ broadband integration instead of using end-user devices with multiple embedded radios.

The solution offers unique broadband capabilities by allowing multiple network cards and switching automatically between networks. When Seattle Fire wishes to upgrade, they only need to replace the network card in the router, not each mobile device. This decreases the total cost of owning mobile wireless technology because fork-lift upgrades to change radios are not required.

Through the device, Seattle Fire can increase security by using PSKs across network devices coupled with a second level of authentication to provide two levels of security, instead of certificates on each device. Seattle Fire MDTs are always logged on, and only shut down for maintenance, with a reboot once every shift. Passwords and codes are hard-coded and encrypted on the MDT and used to log on.

Seattle Fire now has the ability to leverage the centralized management of all wired and wireless devices by using the router, providing data encryption through an end-to-end VPN connection for increased security.

The centralization of Wi-Fi/broadband management into the router allows fast switching between Wi-Fi and/or broadband without losing valuable information. The device can switch networks in under 8 seconds, rather than the longer switching times of 60-90 seconds provided by other technologies. Seattle Fire can’t afford to lose key information while responding to any emergency.