Private sector
Operator station in process industry
OT and IT on the same desk, with the operator responsible for keeping them apart.
- Area
- KVM & VTC
- Architecture patterns
- 1
- Products used
- 2
The problem
What makes it hard
The OT network must never be reachable from the office network, but the operator needs both on the desk: the process view in OT, and email, work orders and documentation in IT.
The supplier’s remote support becomes the path that bypasses the whole design. The USB stick for firmware updates wanders between domains. And the KVM solution is installed, but the operator keeps a personal laptop alongside it for email, because switching takes three seconds too long.
How it is built
Shared workstation with physical KVM switching
Four properties separate a secure KVM from an ordinary one: EDID emulation, one-way HID, no shared buffer, tamper indication.
See the full pattern- Data path
- Path that does not exist
In the catalogue
Equipment from the catalogue
Built from: Secure KVM Switch 60-00-7831 and Secure Data Tap 1 Gbit 60-00-7450.
Reading and references
Explained in
Named customer references are not published. What we can show is the solution area this environment belongs to, and the reasoning behind the design.
Environments
Environments with the same problem
The technology is the same; the buying process usually is not.
- Control room with several networksShared peripherals are the channel between the domains, and an ordinary KVM switch shares EDID, USB state and sometimes memory.
- Emergency call centreRound-the-clock operation with no maintenance window: whatever is installed has to be replaceable while it runs.
- Vehicle and vessel installationThe rugged data diodes carry 810G and 461 data; no converter, extender or switch in the catalogue does.
- Command and control centreSeveral networks meet at one desk, and the operator must never have to think about which one is in front of them.
Next step
Describe your environment
If yours is close to this one but not the same, that difference is usually where the design decisions are. Tell us what it looks like.
Verified credentials
All certifications- NATOCertified TEMPEST supplierSDIP-27 · Level A & B
- Government of SwedenSupplier to Swedish authoritiesPolice · FMV · FOI
- Swedish Armed ForcesM-numbered equipmentMain supplier, Total Defence
- ISO 9001 14001ISO certifiedQuality & environmentDownload certificate (JPG)
- SOFFDefence industry memberExport control frameworks
- Made in SwedenDesigned & built in StockholmSecure supply chain
