tce 621/b tce 621/c - crypto museum · tce 621/b tce 621/c ... thales norway as po box 6611...

2

Click here to load reader

Upload: lamdiep

Post on 26-Jun-2018

720 views

Category:

Documents


38 download

TRANSCRIPT

Page 1: TCE 621/B TCE 621/C - Crypto Museum · TCE 621/B TCE 621/C ... Thales Norway AS PO Box 6611 Etterstad ... The TCE 621 authenticates the source IP addresses of communication end systems

www.thalesgroup.com

TCE 621/B TCE 621/CCryptel®-IP High Capacity Encryption Devices

TCE 621/B and TCE 621/C are the high capacity

encryption units in the Cryptel®-IP family. TCE 621/B

offers 10 and 100 Mbit/s Ethernet interfaces while

TCE 621/C offers additional Gigabit interface.

Both TCE 621/B and TCE 621/C are available in three variants dependent on encryption algorithm:

NICE��

NATO NICE algorithm.

AES��

Public AES algorithm with possibility for customer specific vector.

Dual��

Equipped with both AES and NICE algorithms.

Selection of algorithm at initial configuration of equipment.

>O

���7221465�$16*� �8H�#0&� �8J���'064#.+<'&�/#0#)'/'06���.'%6410+%�#0&�/#07#.�-';�&+564+$76+10���4#052#4'06�61�0'6914-�5'48+%'�

���'%74'�/7.6+%#56���16�56#0&$;������5722146�j����'0%#257.#6+10k���1(69#4'�.1#&#$.'

Main Features

Page 2: TCE 621/B TCE 621/C - Crypto Museum · TCE 621/B TCE 621/C ... Thales Norway AS PO Box 6611 Etterstad ... The TCE 621 authenticates the source IP addresses of communication end systems

Thales Norway ASPO Box 6611 Etterstad 0609 Oslo - Norway

Tel.: +47 22 63 83 00 Telefax: +47 22 63 83 01

[email protected]

���*#.'5��149#;���T��'�#%%'26�01�.+#$+.+6;�(14�#0;�'4414�+0�52'%+(+%#6+105�#0&�16*'4�+0(14/#6+10�#0&�4'5'48'�6*'�4+)*6�61�/#-'�%*#0)'5�9+6*176�016+%'T�14�':#%6�52'%+(+%#6+105�#0&�+0(14/#6+10X�2.'#5'�%106#%6��*#.'5��149#;���

The TCE 621 crypto equipment securely interconnects

5+0).'�'0&�5;56'/5�14����5�18'4�705'%74'�0'6914-5�j6;2+%#.� 06'40'6k�(14/+0)�5'%74'�����j�+467#.��4+8#6'��'6914-kX�14�2418+&'�'0&g61g'0&�2416'%6+10�1(�6*'�communication between single hosts over standard

%1//'4%+#.�0'6914-5T

The TCE 621 protects the communication by adding

end-to-end security services to the IP protocol. All

security services are provided according to IPsec ESP

j0%#257.#6+10��'%74+6;��#;.1#&k�24161%1.�#5�52'%+(+'&�$;� �T

The TCE 621 authenticates the source IP addresses

of communication end systems. The access control

service may be used to prohibit communication

between end systems and subnets.

�10(+)74#6+10�6*417)*�(4106�2#0'.X�14�$;�75'�1(�#�dedicated software application. No day-to-day handling

is necessary during operation.

��2#46�1(�6*'�'37+2/'06�+5�6*'��4;261� )0+6+10��';�j� �k�+0�#��/#46g%#4&�(14/#6T��+6*�6*'�� ��4'/18'&X�6*'����JFE�+5�&'%.#55+(+'&T� 0�#&&+6+10X�#0�'/'4)'0%;�'4#574'�feature and a tampering protection mechanism are

included.

�*'����JKE�����j�'%74+6;��#0#)'/'06��'06'4k�+5�75'&�(14�#761/#6+%�-';�)'0'4#6+10X�-';�&+564+$76+10�and remote management of all IP crypto devices. The

���JKE�����(70%6+105�+0%.7&'�-';�/#0#)'/'06X�#%%'55�%10641.�/#0#)'/'06X�5'%74+6;�/10+614+0)�#0&�%10(+)74#6+10�/#0#)'/'06T�14�+0%4'#5'&�#8#+.#$+.+6;�5'8'4#.����5�+0�6*'�0'6914-�%#0�$'�%10(+)74'&�+0�a master/slave configuration with automatic data

replication. The TCE 621 may also be operated in

manual mode without need for of TCE 671 SMC or if

connection to TCE 671 SMC fails.

�7'�61�6*'�8'4;�.19�.#6'0%;�6+/'�+0641&7%'&�$;����JFEX�+6�+5�9'..�57+6'&�(14�2416'%6+10�1(�4'#.g6+/'�64#((+%X�'T)T��1 ��#0&�8+&'1�%10('4'0%'T

TCE�JFEf��#0&����JFEf�

Security level�� � ��8#4+#06U�������15/+%��12�

Secret

�� ��U�8#4+#06U������5'%4'6

Security Protocol�� �����FHNJ�h���

Security Management�� �#07#.��� .'%6410+%�8+#����JKE����

Software loadable�� �'/16'.;�(41/����JKE������ �1%#..;�(41/�(4106�2#0'.

Tempest�� �%%14&+0)�61������KFN��

Operational Security�� �'/18#$.'��4;261� )0+6+10��';�� �2'4#614�2#55914&�jF�.'8'.5k�� �#/2'4+0)�2416'%6+10�� /'4)'0%;�'4#5'�59+6%*

BLACK Network Interfaces�� �8H�j���KMEk�� �8J�j���FHJNk�� ENfENN�#0&��+)#$+6�j���JFEf�k�10���gHI�

connector

�� �26+%#.�ENN��$+65�#0&��+)#$+6�j���JFEf�k�10���g���14�����7.6+��1&'�+$4'�%100'%6145�

Red Local Interface�� �8H�j���KMEk�� �8J�j���FHJNk�� ENfENN�#0&��+)#$+6�j���JFEf�k�10���gHI�

connector

�� �26+%#.�ENN��$+65�#0&��+)#$+6�j���JFEf�k�10���g���14�����7.6+��1&'�+$4'�%100'%6145�

Fill Device Interfaces�� ��gENE�j��gHLIkY���f���gEN������ ��gENFY��� gEL�� �TFHf�TEN�j��gFGF�kY���� �/#46�%#4&�j ��f ��KLEJk

Technical dataSecurity Characteristics

Interfaces

Physical Characteristics

Temperature�� �2'4#6+0)U�N�61�x�HN�oC

�� �614#)'U�g�FN�61�x�KN�oC

Power Consumption �� �#:�FI���� �1/+0#..;�FN��

Power feeding�� EEN�n�FGN������� HKgJG��<�� �761/#6+%�#&#26#6+10

Installation�� EM�\�4#%-�/1706+0)

Dimensions �� �+&6*U�HHN�//�� �'+)*6U���HH�//�jE��k�� �'26*U��FIN�//

Weight�� HXE��)

EMC�� LMfGGJf��� ��IINFF�%.#55��

Reliability�� ���� �ENN�NNN�*�j%#.g%7.#6'&�X��+.������FEK�k

Environment�� ��JLgF�� �g�����NKgII

Performance Other support fucntions Support components

�� 7..�&72.':�&#6#�4#6'U�JNN��$+6f5�j���JFEf�k�#0&�ENN��$+6f5�j���JFEf�k�� FNN�NNN�2#%-'65f5�� �#6'0%;�6+/'�U���I� s

�� ��2�61�EI�NNN�5+/7.6#0175��'%74+6;��551%+#6+105�j��k�� �1����'56#$.+5*/'06�6+/'

�� �1��'0#$.'&�� ����'0#$.'&�j����'0%#257.#6+10k�� �'%74'�/7.6+%#56�� �'%'+8'�10.;�/1&'�� �10(+)74#$.'��'6914-�/#0#)'/'06�+06'4(#%'

�� �10(+)74#6+10��11.�#22.+%#6+10�� �1(69#4'��1#&'4�#22.+%#6+10�� �#$.'5�� �'&+#��108'46'45�� �10706+0)�$4#%-'65

WAN

R

TCE 671

�IG� CAPACIT� LAN

M�LTI LE�EL SEC��E LAN

TCE 671 SMC h SEC��IT� MANAGEMENT CENTE�

SINGLE �SE�