Overview of NATO Technology Trends

Transcription

1 Overview of NATO Technology Trends Interoperability MIL + GOV devices; ED FN and ED MC Roadmap Jan Leduc Rohde & Schwarz SIT Prague,

2 Agenda ı NATO Technology Trends & Interoperability SCIP NINE ı ELCRODAT Fixed Networks (ED FN) ı ELCRODAT Military Crypto (ED MC) ı ELCRODAT Migration Overview of NATO Technology Trends 2

3 NATO Technology Trends & Interoperability ı The SAVILLE Algorithm will be stepwise declassified by NATO ı NATO and Industries are working on cryptographic communication means for the future ı NATO Cryptographic Interoperability Strategy gives guidelines on how to achieve interoperability between nations Overview of NATO Technology Trends 3

4 NATO Technology Trends & Interoperability ı NATO Cryptographic Interoperability Strategy defines two protocols for interoperability Secure Communications Interoperability Protocol (SCIP) Networking and Information Infrastructure (NII) Internet Protocol Network Encryption (NINE) ı Both protocols are in standardization, but both have the same open points, when it comes to PKI, KMI and Algorithms ı One of the actual goals of this community in NATO is IP over everything, Everything over IP and Gateways to legacy systems only where absolutely necessary Overview of NATO Technology Trends 4

5 NINE vs SCIP Layer 7 - Application Layer 6 - Presentation Layer 5 - Session Layer 4 - Transport Layer 3 - Network Layer 2 Data Link Layer 1 - Physical NINE operates on Layer 3 Layer 7 Application Layer 6 - Presentation Layer 5 - Session Layer 4- Transport Layer 3 - Network Layer 2 Data Link Layer 1 - Physical SCIP operates on Layer 7 ı Hides (encapsulates) end-user IP address (infrastructure hiding) ı Encrypts Layer 3 and all layers above ı Signaling, encryption, rekey functions are not compatible with SCIP ı Does not allow to pass unencrypted information through higher layer (except TOS) ı Encrypts only Application layer ı Signaling, encryption, rekey functions are not compatible with NINE IS ı Allows equipment to support separate clear and secure applications Overview of NATO Technology Trends 5

6 NINE IS ı NINEs are system components that provide IPv4/IPv6 Traffic Protection, Networking, and Management features Wired, wireless, satellite, and hybrid networks Enclave or node protection (gateway or host) Standalone device or embedded in a terminal/host Host Enclave NINE NINE Enclave Host Cyphertext Wide Area Network Host Enclave NINE NINE Enclave Host In-Bound Out-Bound Overview of NATO Technology Trends 6

7 Secure Communications Interoperability Protocol ı SCIP, formally known as FNBDT (Future Narrow-Band digital Terminal) was developed by the US Government and national industry ı It has later been adopted by NATO to ensure secure end-to-end communications ı SCIP was first developed for circuit-switched networks, but was extended to also work over IP networks (SCIP over IP) ı It supports a Public Key Infrastructure, thus supports national sovereignty and interoperability in multi-national operations ı As it is an Application-Layer protocol (Layer 7), it is independent of the underlying physical link ı It supports HF-/VHF-/-UHF Radios, PSTN, IP (LAN, WiFi, 2G, 3G and 4G) Overview of NATO Technology Trends 7

8 NATO s Secure Voice Strategy Overview NATO HQ C 3 Staff NATO HQ C 3 Staff Overview of NATO Technology Trends 8

9 NATO Technology Trends & Interoperability ı For cryptographic interoperability NATO sets new standards: ı Different Crypto suites for different Applications Suite A algorithms are officially kept secret. Only and exclusively used for NATO and its member nations (MEDLEY und MERCATOR ) Suite B algorithms are public. Can be used for non-nato nations, Coalition partners, NGOs, etc. (AES) ı NATO focus is on certificate-based cryptos and automatic PKI Services Over-the-air keying/re-keying Overview of NATO Technology Trends 9

10 ED FN and ED MC for NATO ı NATO and Nations need for national and multinational Operations devices that implement SCIP and NINE ı There are two different devices needed (1) Tactical device which is fully ruggedized and has some legacy functionalities for green Applications (2) A sever room or desktop device which is multifunctional and flexible for white Applications ı Both of those capabilities can be offered by the successor products ELCRODAT Military Crypto (ED MC) ELCRODAT Fixed Networks (ED FN) ı Both devices offer similar, interoperable capabilities just for different environments Overview of NATO Technology Trends 10

11 ELCRODAT Migration Today 2020 ELCRODAT 4-2 Voice/Data encryption device ELCRODAT MC Voice/Data encryption device SCIP/NINE - IP based Maximum Synergy though R&S SIT Platform Concept ELCRODAT 6-2 Voice/Data encryption device ELCRODAT FN Voice/Data encryption device SCIP/NINE - IP based ELCRODAT 5-4 Voice/Data encryption device Overview of NATO Technology Trends 11

12 ELCRODAT Military Crypto (ED MC) ı Successor of ED4-2 Tactical, radio-detached joint, crypto device NINE for Data through IP Networks SCIP for Secure Voice und Data through heterogeneous Networks Minimal legacy functionality (To be discussed) Overview of NATO Technology Trends 12

13 ELCRODAT Fixed Networks (ED FN) ı Successor of ED5-4 und ED6-2 Tabletop / Server Room / Mobile Deployable Device SCIP for Secure Voice und Data through heterogeneous and insecure Networks NINE for Data through IP Networks No legacy Functionality in the device Gateway to the ED6-2 System Overview of NATO Technology Trends 13

14 Concept Study ED FN Overview of NATO Technology Trends 14