This feature permits key to be distributed to a radio when it roams to the non-home system or deleted by

1. Inter-MSO OTAR
This feature permits key to be distributed to a radio when it roams to the non-home system or deleted by
means of circular broadcast of packet data. The system adds key distribution management center
(KDMC), which can monitor all keys of Hytera soft encryption and DMRA soft encryption within the
system. For hard encryption of the third party, the system can transmit the key through the key
management center of the third party.
Scenario
When an encrypted radio roams to the non-home system, you can update or delete the key remotely
over the air interface.
Test 1 Key Distribution for a Roaming Encrypted Radio
This test is designed for the KDMC of the home system to distribute key to an encrypted radio that roams
to the non-home system.
Test Procedure: Prepare Radio A and Radio B, both of which belong to System 1 and have
successfully registered with System 2. During programming, Radio A and Radio B have been written the
same key file. Open the KDMC, fill the key that needs to be distributed in the key distribution
management pane, select Radio A and Radio B, and then click OK to finish key distribution. Read
configurations of Radio A and Radio B, and check that keys are distributed successfully.
Test 2 Key Deletion for a Roaming Encrypted Radio
This test is designed for the KDMC of the home system to delete key from an encrypted radio that roams
to the non-home system.
Test Procedure: Prepare Radio A and Radio B, both of which belong to System 1 and have
successfully registered with System 2. During programming, Radio A and Radio B have been written the
same key file and have been delivered keys by the KDMC of the home system. Open the KDMC, select
Radio A and Radio B from which keys needs to be deleted in the device management pane, and then
click OK to finish. Read configurations of Radio A and Radio B, and check that keys are deleted
successfully.
2. Inter-MSO OTAP
This feature allows a local subscriber to be programmed over the air interface when it roams to another
system. This feature is only applicable for the home-system subscriber.
Scenario
Inter-MSO OTAP allows users to read and write the configuration from/into a radio over the air interface
when it roams to the non-home system, which makes programming and updates easy and convenient.
Test 1 Reading Configurations from a Radio
This test is designed for a user to read configurations from a radio over the air interface when it roams to
a non-home system.
Test Procedure: Prepare Radio A, which belongs to System 1 and has successfully registered with
System 2. Start the NMC of System 1, click OTAP, and click Reading Task on the left. Click to add
a reading task. Select reading parameters, such as Group Call Contact, Individual Call Contact, and
Status Message. Click Next to set configurations step by step. Add Radio A from the left to the right. Set
Execution Time to Instant or Timed. Click Read to finish it. Click Reading Result to view the reading
results.
Test 2 Writing Configurations into a Radio
This test is designed for a user to write configurations into a radio over the air interface when it roams to
a non-home system.
Test Procedure: Prepare Radio A, which belongs to System 1 and has successfully registered with
System 2. Start the NMC of System 1, click OTAP, and click Writing Task on the left. Click Create
Writing Task. Select a template and select writing parameters, such as Group Call Contact, Individual
Call Contact, and Status Message. Click to save the template. Click Next to perform the
followings step by step: Check the writing task, add Radio A from the left to the right, and set Execution
Time to Instant or Timed. Then click Write to finish it.
OTAP - It allows you to program the MS over the air interface.
OTAP (over the air programming) allows you to remotely configure multiple MSs over the air. With OTAP,
there is no need to reclaim the MSs and program them one by one through wired connection.
It has the following features:
-Before OTAP, the BS and MS authenticate each other by Hytera Soft Authentication.
-Hytera Soft Authentication is carried out on the control channel before sending the data packets.
-The Hytera Soft Authentication is bound with Token. The MS accepts OTAP only when the Hytera
Soft Authentication succeeds and the Token matches, in order to reduce any security risk.
-Only MS of version 8.1 or later supports Hytera Soft Authentication. A programming task can be customized as per the needs and scheduled to be executed.
-The trunking system supports storage and forwarding of the OTAP parameters.
-If the storage and forwarding feature is enabled and the OTAP fails, the OTAP can be retried based
on the system configurations.
-Support cross-MSO OTAP.
OTAR - Over the Air Rekeying
Over the Air Rekeying (OTAR) is a method of distributing encryption keys to devices with encryption
feature in the system over the air. Keys used for Hytera soft encryption and DMRA soft encryption are
distributed and managed by the Key Distribution Management Center (KDMC).
OTAR has the following features:
-All radios, dispatch servers and MTU share one set of keys.
-The KDMC is stand-alone and capable of updating and revoking keys.
-The updating and revoking of keys must be manually performed, and the radios support built-in key
revoking feature.
-The keys are subject to dual encryption protection. In other words, the keys are encrypted with
Advanced Encryption Standard (AES) 256 for both storage and transfer.











1.1.5.9 OTAP (программирование по радиоэфиру)
Система транкинговой радиосвязи должна поддерживать возможность удаленного программирования радиостанции через систему управления сетью, по беспроводному интерфейсу.
Система транкинговой радиосвязи предусматривает возможность конфигурирования по радиоэфиру основных параметров радиостанций, таких как список контактов, статусные сообщения, список каналов, таймер и т.п.
Система транкинговой радиосвязи должна поддерживать передачу информации OTAP в реальном времени, ее хранение и пересылку, передачу временной синхронизации.


1.1.5.10 OTAR (смена ключей по радиоэфиру)
Система транкинговой радиосвязи должна поддерживать возможность программирования по радиоэфиру ключей шифрования «end to end» при помощи центра управления распределением ключей шифрования (KDMC).
шифрование 40бит - 10 символов - без лицензии
шифрование 128бит - 32 символа - требуется лицензия
особое шифрование 256бит - 40 символов - требуется лицензия
10 символов означают 10 шестнадцатеричных символов, каждый символ содержит 4 бита. Таким образом, 256 бит равны 40 символам.
символы [0, 9] и [a, f]