Ship Communication Systems
Introduction: GMDSS architecture, satellite and radio communication equipment, and internal shipboard communication systems.
Regulatory Requirements: SOLAS Ch.IV, GMDSS mandatory equipment by sea area, ITU Radio Regulations, and Inmarsat service requirements.
Performance Standards: GMDSS alerting, EPIRB, SART, VHF/MF/HF performance requirements, and VSAT throughput standards.
Constraints: Bandwidth limitations, satellite outages, cyber vulnerabilities of VSAT/Inmarsat, and jamming/spoofing risks.
Market Trends: LEO satellite constellations (Starlink, OneWeb), GMDSS modernisation, and maritime broadband convergence.
Part 1 — Introduction to Ship Communication Systems
Ship communication systems serve two fundamentally different purposes that must never be conflated: safety and distress communications (mandated by SOLAS and primarily addressed by the GMDSS framework) and operational and commercial communications (VSAT, crew internet, fleet management data). The design, maintenance, and cybersecurity approach for these two categories must be kept entirely separate.
From a cybersecurity perspective, ship communication systems represent the primary interface between the vessel's internal IT/OT network and the external internet. VSAT terminals, LTE/5G gateways, and Inmarsat Fleet Broadband modems are the most common entry points for cyber attacks on commercial shipping — making communication system security one of the highest-priority concerns in maritime OT cybersecurity.
| System | Technology | Primary Use |
|---|---|---|
| VHF Radio (DSC) | 156–174 MHz, Ch.16 distress, Ch.70 DSC | Short-range distress, port, ship-to-ship |
| MF/HF Radio (DSC) | 1.6–30 MHz, DSC on 2187.5 / 8414.5 kHz | Medium/long-range distress & safety |
| Inmarsat (FleetBB / C / Fleet One) | L-band GEO satellite, global coverage | GMDSS SafetyNET, SSAS, data |
| VSAT (Ku / Ka / C-band) | GEO satellite broadband, 0.5–100 Mbps | Crew internet, fleet management, OT remote monitoring |
| LEO Satellite (Starlink, OneWeb) | Low Earth Orbit, <50ms latency, up to 350 Mbps | High-bandwidth broadband, real-time data |
| Iridium (GMDSS / SSAS) | LEO L-band, true global (pole-to-pole) | SSAS, GMDSS backup, polar routes |
| EPIRB / SART / AIS-SART | 406 MHz COSPAS-SARSAT, 9 GHz X-band, AIS VHF | Distress alerting & SAR location |
| SSAS (Ship Security Alert) | Inmarsat-C or Iridium covert alert | Piracy / security incident covert alert to CSO |
Part 2 — Regulatory Requirements
GMDSS (Global Maritime Distress and Safety System) is the cornerstone of maritime communication regulation, established under SOLAS Chapter IV. Equipment requirements are determined by the vessel's operating sea area (A1–A4).
| Equipment | Sea Area A1 | Sea Area A2 | Sea Area A3 | Sea Area A4 |
|---|---|---|---|---|
| VHF Radio (DSC / Ch.16) | ✔ | ✔ | ✔ | ✔ |
| MF Radio (DSC / 2187.5 kHz) | — | ✔ | ✔ | ✔ |
| HF Radio (DSC) | — | — | ✔ or Inmarsat | ✔ |
| Inmarsat / Iridium SES | — | — | ✔ | ✔ |
| EPIRB (406 MHz) | ✔ | ✔ | ✔ | ✔ |
| SART / AIS-SART | ✔ | ✔ | ✔ | ✔ |
| Navtex Receiver | ✔ | ✔ | ✔ | ✔ |
A1: VHF DSC range (20–50 NM) | A2: MF range (>150 NM) | A3: Inmarsat GEO coverage (70°N–70°S) | A4: Polar regions beyond Inmarsat coverage
VSAT and Inmarsat broadband terminals are the most common entry vectors for cyberattacks on shipping. IMO MSC-FAL.1/Circ.3 requires cyber risk management to cover all network interfaces, including satellite communication links. IACS UR E26 requires firewall controls at the boundary between the satellite communication system and all other shipboard networks (IT and OT). The SSAS must be maintained on a segregated, non-routable network to prevent its compromise or false activation.
Part 3 — Performance Standards
GMDSS equipment performance is regulated by IMO resolution and IEC/ITU standards. Broadband communication performance is driven by commercial SLAs and evolving crew welfare expectations.
GMDSS Equipment Performance
| Equipment | Key Performance Requirement |
|---|---|
| EPIRB (406 MHz) | Alert transmitted within 5 min; position accuracy <5km; battery life ≥48h; COSPAS-SARSAT detection <90 min |
| VHF DSC | Continuous watch Ch.70 (DSC); Ch.16 voice; range typically 15–40 NM; battery backup 6 hours (IEC 61097-3) |
| MF/HF Radio | DSC watch on 2187.5 kHz (MF), 8414.5 kHz (HF); transmit power ≥60W (MF) / ≥60W PEP (HF) |
| SART (9 GHz) | Detection range by SAR aircraft ≥5 NM; by ship RADAR ≥8 NM; battery life ≥96h standby / ≥8h transmit |
| Navtex | 518 kHz (international) / 490 kHz (national); print/display safety MSI within service area (100–300 NM) |
️ Broadband Satellite Performance Comparison
- Speed: 1–20 Mbps (shared)
- Latency: 600–700ms (GEO)
- Coverage: 70°N–70°S
- Cost: medium-tier
- Speed: 100–350 Mbps
- Latency: 20–50ms
- Coverage: global (incl. polar)
- Cost: high hardware, competitive opex
- Speed: 0.5–10 Mbps
- Latency: 400–600ms
- GMDSS certified
- Essential for small vessels
- Speed: up to 704 Kbps
- True pole-to-pole coverage
- GMDSS recognised
- Low data, high reliability
Part 4 — Constraints & Limitations
VSAT terminals provide direct internet connectivity to the vessel — and without proper firewall controls, to the ship's OT network. Documented incidents include ransomware delivered via VSAT to fleet management systems, and lateral movement from crew Wi-Fi (routed via VSAT) to navigation and engine control networks. The satellite modem's management interface is often exposed via default credentials.
⚠ Most maritime cyberattacks enter via the satellite communications link
GEO VSAT latency of 600–700ms makes real-time video conferencing and remote OT system control impractical. Rain fade, beam handovers, and solar outages can cause service interruption lasting hours. Vessels in high seas with heavy pitch and roll may experience antenna tracking failures. Dual-beam or hybrid LEO/GEO solutions address this but add complexity.
⚠ GEO blackout periods: up to 2 × per year around equinoxes
EPIRB hydrostatic releases, battery expiry, and antenna connections are common PSC deficiency items. GMDSS radio operator licenses require renewal. Many vessels operate with expired EPIRB batteries or unchecked SART condition. The GMDSS modernisation program (IMO MSC.1/Circ.1641) is introducing a revised equipment framework — requiring operational awareness from all officers.
⚠ Expired EPIRB battery is a detainable PSC deficiency
Crew internet usage (streaming, video calls) competes with operational data (weather routing, cargo documentation, condition monitoring uploads). Without proper traffic shaping and QoS policies, operational data can be starved of bandwidth. MLC 2006 amendments recognise crew communication as a welfare right, creating commercial pressure to provide adequate bandwidth. LEO constellations are resolving this tension.
✅ MLC 2006 Guidelines B4.4 — reasonable access to ship-to-shore communications
The satellite communications interface must be treated as an untrusted external network. All traffic from VSAT/Inmarsat/Starlink terminals should pass through a maritime firewall before reaching any shipboard network. Three separate network segments are best practice: (1) GMDSS/safety — standalone, no internet routing; (2) OT/operational — controlled, monitored access only; (3) Crew/IT — internet-facing with content filtering and bandwidth limits. Mixing these segments is the single most common cause of OT exposure on commercial vessels.
Part 5 — Market Trends
The maritime communications market is undergoing a structural disruption driven by LEO satellite constellations, GMDSS modernisation, and the convergence of IT and OT data flows over a single satellite link.
GMDSS safety communications and commercial broadband must be maintained on completely separate, non-routable network segments. Mixing them is the single most common maritime cybersecurity architecture error.
VSAT terminals are the primary cyber attack entry point for commercial shipping — IACS UR E26 mandates firewall controls at the satellite modem boundary separating it from OT and IT networks.
LEO constellations (Starlink, OneWeb) are rapidly displacing GEO VSAT for high-bandwidth applications — but also expand the cyber attack surface with higher-throughput, lower-latency internet connectivity.
EPIRB battery expiry is one of the most common PSC detainable deficiencies — a simple maintenance oversight with potentially life-threatening consequences during SAR operations.
GMDSS modernisation recognises Iridium and LEO services as approved providers — ship operators must review and update their radio equipment plans and GMDSS documentation accordingly.
Focused on the intersection of ship systems, OT/ICS security, and maritime regulatory compliance. Helping the industry navigate the digital transformation safely.
⚓ Join the ShipPaulJobs Community
Join →
Comments
Post a Comment