© Crypto AG / 6950-e-2.ppt / DA-HQ / 0004 / 1 ©2001 Crypto AG - all rights reserved.
HC-6950
Emission Protected
Security Workstation
Security Workstation
Security Risks:• Unauthorized change of data (Sabotage, Viruses)
• Unauthorized use of data • Data loss (deletion)
• Physical damage on storage medium
• Compromising emission of secret information
© Crypto AG / 6950-e-2.ppt / DA-HQ / 0004 / 3 ©2001 Crypto AG - all rights reserved.
secret
Compromising Emission - The Problem
Security Workstation
Compromising Emission - The Solution
EMISSION-proof equipment
Countermeasures to Compromising Emission:
ð Filters for interconnections ð Power lines are filtered ð Packed in metal casing ð Optical interfaces
© Crypto AG / 6950-e-2.ppt / DA-HQ / 0004 / 5 ©2001 Crypto AG - all rights reserved.
HC-6950 Emission Protected Security Workstation
Radiation Protection Access-Protection Data-Encryption
Security Workstation
HC-6950 General Application Server Router Router Private Data and Intranet Server Subnet A (Backbone) Subnet F Router HC-6950 with PC Sec and VPN HC-6950 with PC Sec HC-6950 with PC Sec HC-6950 with PC Sec© Crypto AG / 6950-e-2.ppt / DA-HQ / 0004 / 7 ©2001 Crypto AG - all rights reserved. HC-6950 General Application Public Web Server Web Page Router Router Internet IP Encryption IP Encryption Private Data and Intranet Server HC-6950 with PC Sec HC-6950 with PC Sec and VPN HC-6950 with PC Sec HC-6950 with PC Sec and VPN
Security Workstation
HC-6950 General Specifications• Ideal security workstation for all kind of electronic data processing applications, i.e. for secure E-Mail / PC
Security and VPN Encryption installed in the same system HC-6950
• Full protection against emission of compromising information
• Comprehensive Workstation Security including:
- Access control - User identification
- Disk, file and virtual memory encryption - VPN encryption
© Crypto AG / 6950-e-2.ppt / DA-HQ / 0004 / 9 ©2001 Crypto AG - all rights reserved.
HC-6950 Hardware / Software
• Hardware components
• Radiation protected workstation, state-of-the-art Pentium III,
≥64 MB RAM, ≥10 GB removable HDD, ≥24x CD-ROM, 3.5” 1.44 MB FDD, PC Card Slot (Type II), keyboard, mouse and 17" monitor. Including one parallel, two serial and one Ethernet fibre-optical interfaces.
• Microsoft Windows NT 4.0 or Windows 2000 operating system • Microsoft Office 2000 application with integrated secure
messaging
Security Workstation
HC-6950 Emission Protected Security Workstation
The entire System with optical interfaces for -Printer
-Hub
© Crypto AG / 6950-e-2.ppt / DA-HQ / 0004 / 11 ©2001 Crypto AG - all rights reserved.
Main Features
• Optical connection for
- LAN (Ethernet) - Parallel Interface - Two serial Interfaces
• Special filtering and cabling for
- Mains - Keyboard - Monitor - Mouse - SCSI (Option)
Security Workstation
HC-6950 Emission Protected Security Workstation
The emission protection starts with the metall shielding
© Crypto AG / 6950-e-2.ppt / DA-HQ / 0004 / 13 ©2001 Crypto AG - all rights reserved.
HC-6950 Emission Protected Security Workstation
The optical or shielded connections
Security Workstation
HC-6950 Emission Protected Security Workstation
© Crypto AG / 6950-e-2.ppt / DA-HQ / 0004 / 15 ©2001 Crypto AG - all rights reserved.
HC-6950 Emission Protected Security Workstation
The electro to optical converters
Security Workstation
HC-6950 Emission Protected Security Workstation
Power lines are filtered
© Crypto AG / 6950-e-2.ppt / DA-HQ / 0004 / 17 ©2001 Crypto AG - all rights reserved.
Main Features
• Emission protection by sliding front door covering
- Removable hard disk drive - CD drive
- Crypto card reader
• Full protection of the 17” monitor
• Special designed keyboard without traditional screening
• Switches off monitor, mouse and keyboard, when opening front door
Security Workstation
General Specifications
CD-ROM drive
PC Card Slot (Type II)
Removable HD
© Crypto AG / 6950-e-2.ppt / DA-HQ / 0004 / 19 ©2001 Crypto AG - all rights reserved.
Security Features
• Access protection
• Fully transparent disk encryption for extended hard disk and floppy disks
• File encryption for file storage or transmission over e-mail system
• Access to encrypted disks and to file decryption is locked during internet network access
• Using IP security standard (IPSec) for VPN encryption • ESP (Encapsulating Security Payload) tunnel
mode protocol
• Each secure tunnel has an individual communication key
Security Workstation
Our Products
HC-6950 PC Security
• Emission Protected Security Workstation with the
integrated PC Security, includes all features of PC Security
HC-6950 PC Security and VPN Encryption
• Emission Protected Security Workstation with theintegrated PC Security and VPN Encryption, includes all features of PC Security and
© Crypto AG / 6950-e-2.ppt / DA-HQ / 0004 / 21 ©2001 Crypto AG - all rights reserved.
Option COMPREM Laser Printer PEP-6900
• COMPREM prodected • Serial or Network Optical
Interface output
• Resolution 600 x 600 (600dpi) • Standard memory 4 MB • High print rate
Security Workstation
Option COMPREM Scanner PES-6900
• COMPREM prodected • Resolution 9600 dpi
(600 dpi optical)
• 36 bit colour scanning produces fast, accurate scans in over 16 milion colours; suitable for text and graphics
• Connects via COMPREM SCSI port to the PC (include cables) • 25 pages automated document
feeder simplifes processing of larger batch jobs