Why this environment matters
Security for train onboard control computers starts with the system's role: it coordinates speed supervision, braking interfaces, positioning and train-to-track communications. A key concern is that a software fault or unauthorised message could corrupt movement authority processing or interfere with safe speed enforcement. NØNOS offers a potential architecture based on signed capsules, explicit capabilities and strong isolation.
The security challenge
The threat model should assume that one component will eventually fail or be exploited. In this case, a software fault or unauthorised message could corrupt movement authority processing or interfere with safe speed enforcement. Transport systems often operate continuously, depend on specialised protocols and must preserve safe fallback behaviour while interacting with many operators, contractors and external data sources. The aim is to prevent that single failure from automatically gaining the keys, devices, records and network paths of the whole platform.
How the capsule model could help
A candidate NØNOS architecture would compartmentalise communications, diagnostics, passenger services and supervisory logic, limiting each component's access to braking and train-control interfaces. The design would prioritise compartmentalised protocol handlers and attested operator sessions, supported by least-privilege device access and rapid recovery to a known state. Each capsule would carry a declared policy for files, networks, devices and secrets, and unknown or altered software would not receive the same authority as an approved component.
Deployment requirements
NØNOS would need to sit beside, or be engineered into, existing certified systems without weakening deterministic behaviour, fail-safe modes, independent protection or operator procedures.
Current public-beta limitations, hardware support and application availability must be assessed before any pilot. Neither this use case nor an industry source establishes NONOS certification or a current customer deployment.
Who could buy or integrate it?
- Rolling-stock manufacturers integrating onboard computers
- Train-control suppliers delivering supervisory platforms
- Rail operators procuring fleet control-system upgrades
Industry examples: Hitachi Rail, Alstom. These are research prospects, not represented as NONOS customers, partners or endorsers.