Public sector
Control room with several networks
Shared peripherals are the channel between the domains, and an ordinary KVM switch shares EDID, USB state and sometimes memory.
- Area
- KVM & VTC
- Architecture patterns
- 1
- Products used
- 4
The problem
What makes it hard
An operator has to see a situational picture on an open network, an agency-internal network and a network handling classified information — at the same time, under time pressure, without the networks ever touching, and without three sets of keyboards on the desk.
Domain switching by key combination rather than by a physical control, and the operator loses track of which domain is active. The active-domain indication sits in the wrong place in the field of view.
How it is built
Shared workstation with physical KVM switching
Four properties separate a secure KVM from an ordinary one: EDID emulation, one-way HID, no shared buffer, tamper indication.
See the full pattern- Data path
- Path that does not exist
In the catalogue
Equipment from the catalogue
Built from: Secure KVM Switch 60-00-7831, KVM Monitor 32" HDBaseT 60-00-7401, Thin Client 27" 60-00-9161 and 1 more below.
TEMPEST Level A · RÖS U1
KVM Monitor 32" HDBaseT
- Optical system budget
- Depends on type of SFP
- Fiber optic connector
- LC
Product no 60-00-7401
TEMPEST Level A · RÖS U1
Thin Client 27"
- CPU
- Intel CPU i3-N305
- Optimal (recommended) resolution
- 3840 x 2160
- Display area
- 596 x 335 (WxH) mm
Product no 60-00-9161
Standard
Secure USB Disconnect Desktop
- Dimensions
- 38 x 100 x 100 (HxWxD) mm
- Weight
- 300 Gram
Product no 60-00-0234
Reading and references
Explained in
Named customer references are not published. What we can show is the solution area this environment belongs to, and the reasoning behind the design.
Environments
Environments with the same problem
The technology is the same; the buying process usually is not.
- Emergency call centreRound-the-clock operation with no maintenance window: whatever is installed has to be replaceable while it runs.
- Operator station in process industryOT and IT on the same desk, with the operator responsible for keeping them apart.
- Vehicle and vessel installationThe rugged data diodes carry 810G and 461 data; no converter, extender or switch in the catalogue does.
- Remote workplace towards a classified environmentMoving the computer moves the problem; it does not remove it, because the desk becomes an extension of the computer.
Next step
Describe your environment
If yours is close to this one but not the same, that difference is usually where the design decisions are. Tell us what it looks like.
Verified credentials
All certifications- NATOCertified TEMPEST supplierSDIP-27 · Level A & B
- Government of SwedenSupplier to Swedish authoritiesPolice · FMV · FOI
- Swedish Armed ForcesM-numbered equipmentMain supplier, Total Defence
- ISO 9001 14001ISO certifiedQuality & environmentDownload certificate (JPG)
- SOFFDefence industry memberExport control frameworks
- Made in SwedenDesigned & built in StockholmSecure supply chain
