Case Study High Grade Secure KVM Switch

Background
BAE Systems commissioned approved supplier Teletest Ltd to design and manufacture the Secure KVM Switch used in the UK MoD’s Tactical Communications Project.

Their design was successfully evaluated against CESG Memo 36 (EAL6 equivalent) and supports the switching of Keyboard, Video and Mouse between computers with the protective marking Unclassified through to SECRET UK EYES ONLY.

The design combined Teletest’s PS/2 KVM switch technology with BAE Systems’ patented “secure KVM switch architecture” in the Patent Application No. GB2010/051450.

Security considerations
The design was required because existing “secure” KVM switches (certified to EAL4) only allow the switching of SECRET to RESTRICTED, so cannot be connected to an Unclassified domain such as an internet connection.

Bespoke designs
As Teletest now own the only licence to use BAE's Secure KVM intellectual property, Teletest can, working with the customer's development teams and with CESG, design and manufacture bespoke Secure KVM Switches to EAL6 or equivalent, with fast lead times and sensible prices under a List-X environment.

Local / Remote / Matrix versions
Teletest have designed and integrated CATx extenders into their KVM circuitry so that the switches can be used remotely. This allows PCs to be moved to server rooms, reducing heat, noise and rack space, while increasing productivity and also increasing PUE (Power Usage Effectiveness).

Bespoke designs can be made for single or multiple users, utlising matrixes to suit the application.
Picture
Rear view of the 'Local End'
Picture
Front view of the 'Remote End'
Picture
Rear view of the 'Remote End'
Local Option
  • An operator has a workstation with mixed classification PCs.
  • The desk clutter needs to be reduced.
  • A ‘Local’ High Grade Secure KVM Switch is used.
Remote Option
  • An operator has a workstation with mixed classification PCs.
  • Desk clutter needs to be reduced and the PCs moved to the server room.
  • A ‘Remote’ High Grade Secure KVM Switch with integrated CATx extenders is used.
Matrix Option
  • Operators ‘hotdesk’ on workstations, each of which has a mixed classification or task specific PC.
  • Personal workstations are now needed with ability to switch between any PC or share a PC in turn.
  • The PCs also need to be moved to another part of the room or to the server room.
  • A High Grade Secure KVM ‘Matrix’ Switch with (or without) integrated CATx extenders is used.