High-Speed Networks Need High Protection

Crypto AG

Crypto offers encryption solutions suitable for confidential data transmission, even in remote locations. The company's products offer throughputs of up to 10 gigabits per second.

The modern communications world with its ever-growing requirements for availability and bandwidth is inconceivable without high-performance networks. The technology which is necessary for this is located in the infrastructure and is therefore usually hardly visible. The components which are used, such as multiplexers, switches, and routers, are far away from the actual user of the data and services, who relies or would like to rely on everything operating smoothly.

For data transmission the relevant layers of the OSI layer model are the lower ones, i.e. layers 1 to 3. Various technologies have been used for this in the past in order to fulfil the requirements for performance and interoperability at different times:

• PDH (Plesiochronous Data Hierarchy) for multiplexing many small communication connections, for example telephone lines on a single more powerful transmission line

• SDH (Synchronous Data Hierarchy) for multiplexing of higher transmission capacities with simpler enabling and disabling of individual services in combination with better redundancy design

• Ethernet, economical, and powerful technology with a wide spectrum of application

Ethernet Encryption Solutions

Ethernet is an attractive protocol suitable for wide application in high-performance networks. When sensitive data is sent through the network, confidentiality of the transmission must be guaranteed. Crypto AG offers suitable encryption solutions for this with throughput of up to 10 gigabits per second.

The general use of Ethernet in local up to worldwide networks, i.e. in LAN / MAN and WAN, makes the protocol attractive for a wide range of applications in high-performance networks. The different services (data, voice, fax, video conferencing, ...), which guarantee the operation of governments, administration, business and many other areas, are thus made available via a unified infrastructure. It is therefore important that the confidentiality of data transmitted using this technology can also be guaranteed.

Encryption on the lowest OSI layer, layer 1, ensures complete transmission security, which applies to all services which use the higher layers. At the same time, data encryption on the Ethernet protocol layer permits complete transparency for all applications and services which are used by higher communication layers. Securing the transmission is implemented without any overheads and is carried out in hardware modules; this guarantees one hundred percent performance when compared with network capacity.

1 Gigabit Per Second Data Communication

Different performance requirements exist depending on the application of the data communication. Inside buildings, lines which were 100 megabits per second until now have often been upgraded to 1 gigabit per second. This bandwidth is often equally sufficient for connecting small to medium-sized remote locations. A few years ago gigabit data connections represented state-of-the-art technology. With Ethernet Encryption HC-8440 1G, Crypto AG has offered a suitable encryption solution for many years.

Encryption Systems

This combination of a high-security solution with top performance and maximum availability has been successful from the beginning and has now been implemented by many satisfied customers. Installation is easy, using the Plug & Play principle, and is as simple as inserting the unit in the optical connection. Appropriate high-performance lasers are available for different transmission distances. They are integrated in exchangeable optical transceiver modules which permit easy adaptation to the current operational scenario.

10 Gigabits Per Second

To keep up with the constantly increasing demands made on services, network operators have been increasing performance capacities. 10 gigabits per second for longer distances in the areas of MAN / WAN and Inter-SAN (connection to computer centres) are now widespread. Crypto AG can also offer an ideal encryption solution for this transmission performance: the Ethernet Encryption HC-8555 10G.

Confidential Data Transmission

The successful approach of encrypting the data on OSI layer 1 with 100 percent data throughput and security is again put to use here. This means that the customer gets a powerful Ethernet encryption solution with a performance of 10 gigabits per second, which guarantees the highest confidentiality with complete transparency for all applications and services.

A great deal of attention has been given to high fault tolerance for the new solution. Maximum fault tolerance is guaranteed with the redundant power supply and cooling of the unit, plus the option of exchanging these modules during operation.

Besides the simple “bump-in-the-wire” installation, i.e. inserting the unit in the optical connection, operation of the equipment is also supported in numerous practical ways. This includes operation using a browser-based user interface which can be used either on site or from the head office.

Integrated test functions make it possible to ensure that the communication connection is functioning both in unprotected and encrypted mode, independently of the remaining infrastructure.

The units can be easily integrated in an existing network management environment using SNMP. This allows the use of established monitoring mechanisms.

The following applies to both Ethernet encryption products, and to all equipment from Crypto AG:

  • Customised hardware-based symmetric algorithms
  • Comprehensive Security Architecture
  • Sophisticated, secure process for agreeing on the encryption key between two units
  • User-specific access protection with passwords
  • Tamper-proof housing design
  • Emergency Clear function
RSS