1. NSK 200 Secure Phone System
KDC - Crypto Department - NC3A June 18, 2002

2. NSK 200 Secure Telephone System
Basics principles & technology
Product Range
Different schemes and operation modes
Key Management
How to use
Communications modes
Encrypted File Transfer
Customers
Prices
The connection between two base stations is plain text. No encryption is done here.
The connection between a mobile phone and the base station can be encrypted, but doesn’t have to be.
But...even if it IS encrypted, this encryption is very weak and you can even buy equipment from internet webshops to decrypt phonecalls done over the GSM network.
If the network provider does encrypt this connection, he might even turn this encryption off at any time.
What NSK 200 provides is _ end to end crypto _ ...
Voice and data is encrypted in the phone and not decrypted before it reaches the other phone.
3. For key management we also have a Security Management Center...this is an option.
22/09/2018

3. Basics Principles & Technology
The GSM system provides built-in encryption but:
Only parts of the communication channel are encrypted
The network operator may disable even this encryption
The GSM crypto algorithm is cracked
Intercepting equipment is commercially available
The connection between two base stations is plain text. No encryption is done here.
The connection between a mobile phone and the base station can be encrypted, but doesn’t have to be.
But...even if it IS encrypted, this encryption is very weak and you can even buy equipment from internet webshops to decrypt phonecalls done over the GSM network.
If the network provider does encrypt this connection, he might even turn this encryption off at any time.
What NSK 200 provides is _ end to end crypto _ ...
Voice and data is encrypted in the phone and not decrypted before it reaches the other phone.
3. For key management we also have a Security Management Center...this is an option.
22/09/2018

4. Basics Principles & Technology …..
Makes use of existing infrastructure; GSM network, terrestrial network (PSTN), satellite systems.
Ordinary subscriptions (Requires separate data number on the GSM subscription)
Plain-text calls are made through the ordinary voice service
Encrypted calls are made through the transparent data service
Connectivity:
GSM voice and data (Plain and encrypted)
DECT voice and data (Plain and encrypted)
Compatible with NERA WorldCommunicator satellite modem & NERA F77
The separate data number is required to be able to send encrypted.
Plain-text calls are made to the ordinary voice number, whereas secure calls are made to the data number. This way, in your address book, you have 2 GSM phone numbers to each recepient – one plain-text and one secure.
22/09/2018

5. Basics Principles & Technology …..
Security:
EINRIDE algorithm
SECAN approved up to level ’NATO Secret’
Key Loading from smart card or EKD (Electronical Key Distribution)
Battery lifetime:
72 hours stand-by time
about 3 hours talk time
Primary users:
Military Officers
Politicians
Official administration
Industry leaders
The separate data number is required to be able to send encrypted.
Plain-text calls are made to the ordinary voice number, whereas secure calls are made to the data number. This way, in your address book, you have 2 GSM phone numbers to each recepient – one plain-text and one secure.
22/09/2018

6. System Components – Product Range
NSK 200 Secure Phone
NSK 201 DECT Adapter
NSK 250 Security Management Center
NSK 210 Key Generation Center
You can, as a project start-up, set up a system with only phones, and get keys on smartcards form NODECA in Norway.
Most authorities would like their own KGC though, to completely in charge of the key system.
SMC is very conveniant for systems with many phones, or when there are particular requirements regarding management.
More details on the next page.
22/09/2018

7. System Components - Different Schemes
You can, as a project start-up, set up a system with only phones, and get keys on smartcards form NODECA in Norway.
Most authorities would like their own KGC though, to completely in charge of the key system.
SMC is very conveniant for systems with many phones, or when there are particular requirements regarding management.
More details on the next page.
NSK 210 (Off-line) Key Generation Center. Where red keys are generated
NSK 250 (On-line) Security Management Center. For central management of keys and configuration.
22/09/2018

8. Key Management – Two Possible Modes
With NSK 250 Security Management Center
Centralised client management
Remote deletion of keys
Automatic key and phone book distribution
Handles up to phones and 1000 key requests per hour
Without NSK 250 – the Group Key mode
The phone has two key-modes.
SMC and Group key mode.
Keys and phones are easily managed from the smc.
The SMC will also syncronize the clocks on all phones every time they connect to it.
Lets say your number of phones exceeds 50...I would recommend using an SMC.
Manual key management
All phones within one group uses same key
Conveniant for administration of a small number of phones
22/09/2018

9. Any client is given one NSK200 handset and one smart card.
How To Use?
Any client is given one NSK200 handset and one smart card.
These two objects should be kept apart. Typically, the smart card is stored in the wallet.
Every time the phone is turned on, the smart card is inserted for client authentication
Otherwise, the phone is operated like any other GSM or DECT phone
22/09/2018

10. Communication Modes GSM DECT Satellite Dual band 900/ 1800
The NSK 201 DECT Adapter is used to connect to the PSTN
Encrypted calls are done using a modem integrated in the NSK 201
Satellite
Compatible with the NERA terminals WorldCommunicator and F77
Connects through NSK 201 DECT Adapter and PSTN/ ISDN converter, but direct connectivity is being built into the WorldCommunicator
NSK 201
Converter
22/09/2018

11. Encrypted File Transfer
IrDA
IrDA
Encrypted file transfer
22/09/2018

12. Customers Norway Germany Luxembourg Holland Czech Republic NATO / NC3A
Greece
Turkey UK
Spain
Poland
22/09/2018

13. Need more information? Please, contact:
Prices
NSK200 – starts at NOK / EUR 5 800
NSK201 – NOK / EUR 1 200
NSK210 – NOK / EUR
NSK250 – NOK / EUR
Need more information? Please, contact:
Kongsberg Defence Communications AS
Ernst Bye
Tel:
Mobile:
22/09/2018