Public and private sector
Emergency call centre
Round-the-clock operation with no maintenance window: whatever is installed has to be replaceable while it runs.
- Area
- KVM & VTC
- Architecture patterns
- 1
- Products used
- 4
The problem
What makes it hard
The operator works with personal data and at times with protected personal data, in a system that must simultaneously reach maps, open traffic feeds and external parties’ systems. The threat is rarely close-range signals intelligence — it is unauthorised access and insider risk.
Shift change without ending the session, so a shared position is handed over with the previous operator’s domain still active. And the shared wall display fed from a computer in the most sensitive domain “because it has all the data” — which turns it into a presentation surface that everybody in the room, visitors included, can see.
How it is built
Shared workstation with physical KVM switching
Four properties separate a secure KVM from an ordinary one: EDID emulation, one-way HID, no shared buffer, tamper indication.
See the full pattern- Data path
- Path that does not exist
In the catalogue
Equipment from the catalogue
Built from: Secure KVM Switch 60-00-7831, Secure USB Disconnect Desktop 60-00-0234, HDMI Diode 60-00-9155 and 1 more below.
Standard
Secure USB Disconnect Desktop
- Dimensions
- 38 x 100 x 100 (HxWxD) mm
- Weight
- 300 Gram
Product no 60-00-0234
TEMPEST Level A · RÖS U1
Thin Client 27"
- CPU
- Intel CPU i3-N305
- Optimal (recommended) resolution
- 3840 x 2160
- Display area
- 596 x 335 (WxH) mm
Product no 60-00-9161
Reading and references
Explained in
Named customer references are not published. What we can show is the solution area this environment belongs to, and the reasoning behind the design.
Environments
Environments with the same problem
The technology is the same; the buying process usually is not.
- Control room with several networksShared peripherals are the channel between the domains, and an ordinary KVM switch shares EDID, USB state and sometimes memory.
- Operator station in process industryOT and IT on the same desk, with the operator responsible for keeping them apart.
- Vehicle and vessel installationThe rugged data diodes carry 810G and 461 data; no converter, extender or switch in the catalogue does.
- Remote workplace towards a classified environmentMoving the computer moves the problem; it does not remove it, because the desk becomes an extension of the computer.
Next step
Describe your environment
If yours is close to this one but not the same, that difference is usually where the design decisions are. Tell us what it looks like.
Verified credentials
All certifications- NATOCertified TEMPEST supplierSDIP-27 · Level A & B
- Government of SwedenSupplier to Swedish authoritiesPolice · FMV · FOI
- Swedish Armed ForcesM-numbered equipmentMain supplier, Total Defence
- ISO 9001 14001ISO certifiedQuality & environmentDownload certificate (JPG)
- SOFFDefence industry memberExport control frameworks
- Made in SwedenDesigned & built in StockholmSecure supply chain
