NSK 200 Secure Phone System KDC - Crypto Department - NC3A June 18, 2002

NSK 200 Secure Telephone System Basics principles & technology Product Range Different schemes and operation modes Key Management How to use Communications modes Encrypted File Transfer Customers Prices The connection between two base stations is plain text. No encryption is done here. The connection between a mobile phone and the base station can be encrypted, but doesn’t have to be. But...even if it IS encrypted, this encryption is very weak and you can even buy equipment from internet webshops to decrypt phonecalls done over the GSM network. If the network provider does encrypt this connection, he might even turn this encryption off at any time. What NSK 200 provides is _ end to end crypto _ ... Voice and data is encrypted in the phone and not decrypted before it reaches the other phone. 3. For key management we also have a Security Management Center...this is an option. 22/09/2018

Basics Principles & Technology The GSM system provides built-in encryption but: Only parts of the communication channel are encrypted The network operator may disable even this encryption The GSM crypto algorithm is cracked Intercepting equipment is commercially available The connection between two base stations is plain text. No encryption is done here. The connection between a mobile phone and the base station can be encrypted, but doesn’t have to be. But...even if it IS encrypted, this encryption is very weak and you can even buy equipment from internet webshops to decrypt phonecalls done over the GSM network. If the network provider does encrypt this connection, he might even turn this encryption off at any time. What NSK 200 provides is _ end to end crypto _ ... Voice and data is encrypted in the phone and not decrypted before it reaches the other phone. 3. For key management we also have a Security Management Center...this is an option. 22/09/2018

Basics Principles & Technology ….. Makes use of existing infrastructure; GSM network, terrestrial network (PSTN), satellite systems. Ordinary subscriptions (Requires separate data number on the GSM subscription) Plain-text calls are made through the ordinary voice service Encrypted calls are made through the transparent data service Connectivity: GSM voice and data (Plain and encrypted) DECT voice and data (Plain and encrypted) Compatible with NERA WorldCommunicator satellite modem & NERA F77 The separate data number is required to be able to send encrypted. Plain-text calls are made to the ordinary voice number, whereas secure calls are made to the data number. This way, in your address book, you have 2 GSM phone numbers to each recepient – one plain-text and one secure. 22/09/2018

Basics Principles & Technology ….. Security: EINRIDE algorithm SECAN approved up to level ’NATO Secret’ Key Loading from smart card or EKD (Electronical Key Distribution) Battery lifetime: 72 hours stand-by time about 3 hours talk time Primary users: Military Officers Politicians Official administration Industry leaders The separate data number is required to be able to send encrypted. Plain-text calls are made to the ordinary voice number, whereas secure calls are made to the data number. This way, in your address book, you have 2 GSM phone numbers to each recepient – one plain-text and one secure. 22/09/2018

System Components – Product Range NSK 200 Secure Phone NSK 201 DECT Adapter NSK 250 Security Management Center NSK 210 Key Generation Center You can, as a project start-up, set up a system with only phones, and get keys on smartcards form NODECA in Norway. Most authorities would like their own KGC though, to completely in charge of the key system. SMC is very conveniant for systems with many phones, or when there are particular requirements regarding management. More details on the next page. 22/09/2018

System Components - Different Schemes You can, as a project start-up, set up a system with only phones, and get keys on smartcards form NODECA in Norway. Most authorities would like their own KGC though, to completely in charge of the key system. SMC is very conveniant for systems with many phones, or when there are particular requirements regarding management. More details on the next page. NSK 210 (Off-line) Key Generation Center. Where red keys are generated NSK 250 (On-line) Security Management Center. For central management of keys and configuration. 22/09/2018

Key Management – Two Possible Modes With NSK 250 Security Management Center Centralised client management Remote deletion of keys Automatic key and phone book distribution Handles up to 10.000 phones and 1000 key requests per hour Without NSK 250 – the Group Key mode The phone has two key-modes. SMC and Group key mode. Keys and phones are easily managed from the smc. The SMC will also syncronize the clocks on all phones every time they connect to it. Lets say your number of phones exceeds 50...I would recommend using an SMC. Manual key management All phones within one group uses same key Conveniant for administration of a small number of phones 22/09/2018

Any client is given one NSK200 handset and one smart card. How To Use? Any client is given one NSK200 handset and one smart card. These two objects should be kept apart. Typically, the smart card is stored in the wallet. Every time the phone is turned on, the smart card is inserted for client authentication Otherwise, the phone is operated like any other GSM or DECT phone 22/09/2018

Communication Modes GSM DECT Satellite Dual band 900/ 1800 The NSK 201 DECT Adapter is used to connect to the PSTN Encrypted calls are done using a modem integrated in the NSK 201 Satellite Compatible with the NERA terminals WorldCommunicator and F77 Connects through NSK 201 DECT Adapter and PSTN/ ISDN converter, but direct connectivity is being built into the WorldCommunicator NSK 201 Converter 22/09/2018

Encrypted File Transfer IrDA IrDA Encrypted file transfer 22/09/2018

Customers Norway Germany Luxembourg Holland Czech Republic NATO / NC3A Greece Turkey UK Spain Poland 22/09/2018

Need more information? Please, contact: Prices NSK200 – starts at NOK 43 000 / EUR 5 800 NSK201 – NOK 9 000 / EUR 1 200 NSK210 – NOK 120 000 / EUR 16 000 NSK250 – NOK 1 600 000 / EUR 214 000 Need more information? Please, contact: Kongsberg Defence Communications AS Ernst Bye ernst.bye@kdefence.com Tel: + 47 66 84 08 36 Mobile: +47 930 48 779 22/09/2018