Cross-domain use case: Naval frigate
The integrity of information systems on board military vehicles and vessels is of crucial importance. Hostile actors must never be able to gain control over vehicle or vessel systems or steal strategic information. The (wireless) connections between military vehicles or vessels and other networks must therefore be robustly secure. A Cross-domain interface can prevent unauthorized access to critical information and systems.
The use case described below shows how the systems on a naval frigate can be secured using a Cross-domain interface. More Cross-domain use cases.
The situation: Time synchronization on a frigate
Naval frigates are equipped with complex ICT infrastructure with a large number of mission-critical systems, such as the bridge, radar, propulsion and weapons. Many of these systems depend on precise time synchronization to coordinate actions with other units. This time synchronization is carried out through the so-called Network Time Protocol.
The risk: Access to mission-critical information and systems
The time synchronization requires a wireless connection between the frigate and an external system. This connection is a weak spot. Theoretically, it could provide access to the systems of the frigate – an unacceptable risk. The frigate’s central database contains top secret strategical information, which hostile actors could use to wreak considerable damage.
The solution: Cross-domain interfaces with data diodes and PrimeProxy Micro
Multiple PrimeDiode 5001s are used to create interfaces between the external time synchronization and the internal systems. This securely insulates information about operations and control of operational systems such as radar, propulsion and weapons from the outside world.
The PrimeDiodes are fitted on either side with a PrimeProxy Micro. Together, these ensure that all the frigate’s systems continue to work as they should. No additional server devices are required for this. Thanks to the compact casing of the PrimeDiode 5001, up to 12 diodes can be installed in 2U rack space. This means the interfaces take up very little of the frigate’s limited space.
