2.2 Roadside Unit Installation, GNSS Timing & SCMS Security

2.2 Roadside Unit Installation, GNSS Timing & SCMS Security

Roadside Unit (RSU) Physical Installation & Hardware Integration

The Roadside Unit serves as the physical and electrical bridge between the traffic signal controller cabinet and the wireless connected vehicle environment. Proper physical installation is critical to system longevity and RF performance.

+-----------------------------------------------------------------------------+
|                  ROADSIDE UNIT (RSU) PHYSICAL MOUNTING                      |
+-----------------------------------------------------------------------------+
|                                                                             |
|             [GNSS / GPS Antenna]       [5.9 GHz V2X Antenna]                |
|                      |                          |                           |
|               +------+--------------------------+------+                    |
|               |            RSU Enclosure               |                    |
|               |         (NEMA 4X / IP67 Rated)         |                    |
|               +-------------------+--------------------+                    |
|                                   |                                         |
|                         [Rigid Mast Arm Mount]                              |
|                       (20 - 25 ft Above Pavement)                           |
|                                   |                                         |
|      Shielded UV-Rated Cat6A      |  Grounding Conductor                    |
|      Outdoor Cable (PoE+ / PoE++) |  (#6 AWG Bare Copper)                   |
|                   \               |             /                           |
|                    +--------------+------------+                            |
|                                   |                                         |
|                                   v                                         |
|                         [Traffic Signal Cabinet]                            |
|                       - Ethernet Surge Protector                            |
|                       - Industrial Managed PoE Switch                       |
|                       - ATC Controller (ETH2 Port)                          |
|                       - Ground Bus Bar (Single Point)                       |
+-----------------------------------------------------------------------------+

Mast Arm & Luminaire Mounting Criteria

• Mounting Location: RSUs are mounted on the signal mast arm (typically adjacent to the luminaire arm or near the pole upright) at an elevation between 20 and 25 feet (6.1 to 7.6 m) above the roadway surface.
• Line of Sight (LOS): The antenna must maintain an unobstructed 360-degree Fresnel zone across all intersection approaches. Antennas must clear overhead mast arm structural tubing, luminaire brackets, guide signs, and foliage.
• Environmental Enclosure: Field RSUs must feature a NEMA 4X / IP67 weatherproof enclosure capable of operating within an ambient temperature range of -40°C to +74°C (-40°F to +165°F) per NEMA TS2 environmental specifications.

Antenna Selection & RF Link Budgeting

• Antenna Patterns: Typical deployments employ omnidirectional collinear array antennas with 5 to 9 dBi gain providing broad 360-degree azimuthal coverage. Where an intersection is approached by high-speed corridors along a single axis, dual directional sector antennas (e.g., 60-degree or 90-degree azimuth) may be utilized.
• Coaxial Feedline Losses: If the RSU transceiver is housed inside the cabinet rather than directly on the mast arm, coaxial feedline attenuation at 5.9 GHz becomes severe:
  • Times Microwave LMR-400: Attenuation is approximately 11.5 dB per 100 feet at 5.9 GHz.
  • Times Microwave LMR-600: Attenuation is approximately 7.3 dB per 100 feet at 5.9 GHz.
  • A 60-foot run of LMR-400 introduces a ~6.9 dB loss, absorbing nearly 80% of the transmitter's RF power! Consequently, industry standard design mandates mounting the transceiver unit directly on the mast arm, connecting antennas via short (<3 ft) low-loss pigtails, and running digital Power over Ethernet (PoE) down the pole.
• Coaxial Connectors & Weatherproofing: Connectors must be precision Type N (male/female) torqued to manufacturer specifications (typically 12 to 15 in-lbs). Field connections must be wrapped using the 3-layer weatherproofing method: one layer of vinyl electrical tape, followed by self-amalgamating rubber silicone mastic tape, topped with two overlapping layers of UV-resistant vinyl electrical tape extending 2 inches past the mastic.

Power over Ethernet (PoE) & Surge Suppression

• PoE Specifications: Modern RSUs draw between 15W and 45W depending on internal radio count and heating elements. Power is supplied via PoE+ (IEEE 802.3at Type 2, up to 30W) or PoE++ (IEEE 802.3bt Type 3/4, up to 60W/90W) from an industrial hardened DIN-rail switch located inside the cabinet.
• Cabling Requirements: Install outdoor-rated, UV-resistant, Shielded Twisted Pair (STP) Category 6A cable with an internal drain wire.
• Surge Suppression (NEC Article 800/810 Compliance):
  • An outdoor-rated RJ45 gas-discharge tube (GDT) surge arrestor must be installed at the RSU bracket.
  • A secondary DIN-rail Ethernet surge protector must be installed inside the cabinet immediately at the cable entrance.
  • Ground the RSU chassis and surge protectors using a #6 AWG solid bare copper conductor bonded directly to the cabinet single-point ground bus bar. Ground resistance must measure <10 Ohms (ideally <5 Ohms) to earth ground.

---

GNSS Synchronization & Precision 1 PPS Timing

Every connected vehicle RSU requires a dedicated Global Navigation Satellite System (GNSS) receiver operating continuously in view of the sky.

+-----------------------------------------------------------------------------+
|               1 PPS HARDWARE TIMING SYNCHRONIZATION                         |
+-----------------------------------------------------------------------------+
|  [GPS / GLONASS / Galileo Satellites]                                       |
|                   |                                                         |
|                   v (RF Carrier Signal L1 / L2)                             |
|      [Active GNSS Antenna on Mast Arm]                                      |
|                   |                                                         |
|                   v (Coaxial Lead)                                          |
|      [RSU Internal GNSS Timing Receiver]                                    |
|                   |                                                         |
|         +---------+---------+                                               |
|         |                   |                                               |
|         v                   v                                               |
|   [UTC Timestamp]    [1 PPS Hardware Pulse]                                 |
|   (Date, Hour,       - Exact rising edge every 1,000,000 microseconds        |
|    Minute, Sec)      - Jitter < 50 nanoseconds                              |
|         |            - Locks C-V2X TDMA subframe boundaries                 |
|         |            - Synchronizes ATC Controller SPaT message engine      |
|         +---------+---------+                                               |
|                   |                                                         |
|                   v                                                         |
|    Synchronous C-V2X Frame Transmission Across Entire Regional Network      |
+-----------------------------------------------------------------------------+

Why 1 PPS is Mandatory for C-V2X

1. TDMA Subframe Framing: In C-V2X Mode 4 direct sidelink, time is partitioned into precise 1-millisecond subframes. RSUs and OBUs must transmit within strictly defined time slots. Without microsecond-level synchronization across adjacent intersections, transmissions overlap, causing packet collisions that blind safety applications.
2. Hardware 1 PPS Pulse: The GNSS receiver generates a hardware 1 Pulse-Per-Second (1 PPS) square wave signal whose rising edge aligns with the start of each UTC second within ±50 nanoseconds.
3. Message Freshness & Replay Defense: High-resolution safety messages (such as SPaT and BSM) carry timestamps verified against UTC. If an RSU clock drifts by more than 50 to 100 milliseconds, in-vehicle safety algorithms reject the data packets as stale or invalid, suspecting a cybersecurity replay attack.
4. Field Verification: Technicians verify GNSS lock via the RSU management interface. A healthy deployment must track a minimum of 6 to 8 satellites, maintain a Horizontal Dilution of Precision (HDOP) < 1.5, and indicate an active "1 PPS Hardware Lock" state.

---

Security Credential Management System (SCMS) & IEEE 1609.2

Wireless transmissions in the connected vehicle space govern life-safety decisions. If an unauthorized actor could inject counterfeit "all green" indications into vehicle cockpits, catastrophic collisions would result. To prevent spoofing, eavesdropping, and message alteration, all V2X communications are authenticated via the Security Credential Management System (SCMS).

+-----------------------------------------------------------------------------+
|               IEEE 1609.2 / SCMS CRYPTOGRAPHIC FRAMEWORK                    |
+-----------------------------------------------------------------------------+
|                                                                             |
|             [Security Credential Management System (SCMS)]                  |
|             - National Public Key Infrastructure (PKI)                      |
|             - Enrollment Certificate Authority (ECA)                        |
|             - Pseudonym Certificate Authority (PCA)                         |
|             - Certificate Revocation List (CRL) Generator                   |
|                                   |                                         |
|        Secure Backhaul Link       | (Signed Device Certificates)            |
|        (VPN / Fiber Optic / TLS)  v                                         |
|                         [Field Roadside Unit (RSU)]                         |
|                         - Valid RSU Digital Certificate                     |
|                         - Asymmetric Private Signing Key                    |
|                         - Hardware Security Module (HSM)                    |
|                                   |                                         |
|                                   | 5.9 GHz Broadcast (10 Hz)               |
|                                   | - SPaT / MAP Message Payload            |
|                                   | - IEEE 1609.2 Security Header           |
|                                   | - ECDSA P-256 Digital Signature         |
|                                   v                                         |
|                         [Vehicle On-Board Unit (OBU)]                       |
|                         1. Receives packet                                  |
|                         2. Verifies ECDSA signature against RSU cert        |
|                         3. Checks CRL (confirms RSU not revoked)            |
|                         4. Confirms timestamp freshness (<100 ms)           |
|                         5. PASS -> Executes RLVW / GLOSA Advisory           |
+-----------------------------------------------------------------------------+

SCMS Architecture Principles

• IEEE 1609.2 Standard: Defines the cryptographic message formatting, digital signature schemes, and public key certificate encodings for vehicular communication.
• Elliptic Curve Cryptography (ECDSA P-256): Connected vehicle messages use ECDSA with the NIST P-256 curve (or Brainpool P-256r1). Elliptic curve cryptography provides equivalent 128-bit cryptographic security to RSA-3072 while generating dramatically smaller signature payloads (64 bytes), preserving wireless channel bandwidth.
• Asymmetric Signing: The RSU uses its securely stored private key to generate a cryptographic signature for every outbound SPaT, MAP, and TIM packet. The matching public key is embedded within the RSU certificate attached to the broadcast.
• Pseudonymity for Privacy: While RSUs possess permanent identifying certificates, private vehicles receive pools of pseudonym certificates from the Pseudonym Certificate Authority (PCA). A vehicle rotates its pseudonym certificate and randomize its MAC address frequently (e.g., every 5 minutes or every journey). This prevents traffic agencies, corporations, or adversaries from tracking an individual citizen's travel history through the road network.
• Hardware Security Modules (HSM): RSUs incorporate tamper-resistant physical Hardware Security Modules (compliant with FIPS 140-2 Level 2/3). If an unauthorized person physically steals an RSU from a mast arm, the HSM zeroes out the cryptographic keys, preventing key extraction.
• Certificate Revocation Lists (CRL): If an RSU or OBU is compromised or malfunctioning, its certificate is placed on a CRL distributed throughout the network. Receiving devices check the CRL and instantly discard messages originating from revoked hardware.

Latency Constraints in V2I Communications

Safety-critical applications dictate rigorous end-to-end latency thresholds:

• Collision Avoidance Latency: Total transmission and processing latency must not exceed 20 milliseconds.
• Message Delivery Window: Broadcasts must occur reliably at 10 Hz (every 100 milliseconds).
• Edge Processing Necessity: Because backhaul round-trip latency to a cloud server or centralized TMC often ranges from 50 to 200 ms, all safety-critical message assembly and signing must occur locally at the intersection edge (within the ATC controller and RSU).

---

Troubleshooting Field RSU Installations

When commissioning or servicing V2I installations, technicians should follow a systematic troubleshooting sequence:

1. Verify Physical Power & PoE Budget: Measure voltage at the switch PoE injector. Confirm that the switch port is supplying adequate wattage (PoE+ 802.3at minimum). A flapping RSU link often indicates power budget exhaustion when internal RF power amplifiers ramp up during transmission.
2. Check GNSS Satellite Lock: Access the RSU status screen. Verify tracking of $\ge 6$ satellites and confirm that 1 PPS lock is active. If satellites are missing, inspect the active antenna coax cable for physical pinches, water intrusion at the N-connector, or electromagnetic interference from adjacent high-voltage luminaire wiring.
3. Inspect Ethernet Packet Flow: Connect a laptop running a network protocol analyzer (such as Wireshark with the SAE J2735 dissector plugin) to the cabinet monitor port. Verify that the ATC controller is transmitting raw SPaT UDP packets to the RSU at 100 ms intervals.
4. Audit SCMS Certificate Validity: Confirm the RSU system clock is synchronized to UTC. Check the certificate expiration date in the RSU security management page. An expired certificate causes all approaching connected vehicles to reject intersection data.
5. Measure RF Radiated Power: Using a portable RF power meter or spectrum analyzer calibrated to 5.895–5.925 GHz, verify that output power does not exceed the FCC +33 dBm EIRP limit while ensuring the transmission pattern is clean of spurious out-of-band harmonics.