System of active protection of information from leakage through TEMPEST channels SEL-111K Chiffon. Operation manual

Transcription

1 System of active protection of information from leakage through TEMPEST channels SEL-111K Chiffon Operation manual 2017

2 1. PURPOSE AND OPERATION PRINCIPLE SEL-111K Chiffon is designed for protection of information, processed by technical means on the objects of Informatization, by radiation into the surrounding space electromagnetic field masking noise and for generating electrical masking noise signals to the power supply line and ground, outside of the controlled area. This device is an element of General system of information security of objects of Informatization, and provides maintenance-free operation, the following masking signals that comprise the possibility of information leakage through TEMPEST channels: Type «А» - informative electromagnetic side emissions from technical means and their communications, handling non-public information. Type «B» - guidance of the informative signal on the conductors, including the ground circuit and power supply, conductive lines and engineering communications outside of the controlled area CONTENT SEL-111K Chiffon consists of generator module (GM) connected to it finalizing emitters of interfering signals (IE), specialized Software for control by the operator. The main generator module of GM Chiffon presents itself as independent masking noise generators combined in a single unit with a singular control system. Device can be controlled from the PC by using a program from the PC(supplied with the device ) The final emitters of the noise signal are: 1) Antenna (type A) 2) Power supply cord (type B) built in to the device OPERATION MODES SEL-111K Chiffon has two operation modes- working mode and settings mode. The working mode automatically is set, when the device is turned on. In the operation mode are realized: forming of the noise signal of the set level at the exits of the generator; self-diagnostics and interfered control of parameters of the exiting signal and connected load; informing with text information and LED indication, and at the appearance of the malfunction with additional sound signal about the conditions of the SPI (Norm or Alert) Indication of work time counter of the total time of operation of NG ( by short press of the button ENTER (ВВОД) 2

3 The entrance to configuration mode is protected by password (set 4-digit) from unauthorized access. In the setup mode setting and saving of parameters of work of NG: Selection of controls of NG (ВКЛ(ON) / ОТКЛ(OFF) / ПК(PC) /ДУ(RC ); selection of configuration type of operation of SPI Chiffon (depending on the connected end means, type A, type B, or both A+B ); Changing of the set level of noise signal separately on all diapasons and types 1.4. MAIN TECHNICAL CHARACTERISTICS 1) As the driving sources of noise, a thermal noise shaper with a solid (continuous) spectrum in the frequency range of MHz multi-band frequency equalizer and a digital adjustment of the output level signal at least 20 db, separately for each subrange. 2) The values and adjust the output level of the noise signal at the antenna output "A" of the generator correspond to table 1: Table 1 Frequency Level of noise (db) (MHz) Sub-diapason Sub-diapason Sub-diapason Sub-diapason Sub-diapason Sub-diapason Sub-diapason Sub-diapason ) The values and adjust the output level of the noise signal at the output "B" for devices guidance generator correspond to table 2: Table 2 Frequency Level of noise (db) (MHz) Sub-diapason Sub-diapason Sub-diapason ) Counter of operating time in the mode of formation of the masking interference. 5) Detection and protection from unsanctioned access to the settings of the system. 6) Management and control directly from the keyboard to the housing of the generator or through network Ethernet. 7) Remote ON/OFF switch through jack ДУ (RC). 8) Automatic self-diagnosis, notification system status indication of normal operation and emergency situations: - light - 4 LED diodes; 3

4 - text - 2 line on the counter; - sound built-in sound zoomer. 11) Saving settings and passwords in the non-volatile memory of the device. 12) Power supply of the IPS is from the network of alternating current 220 V +10 %/ 15% or through a guiding device with AC power supply. 13) Maximum power consumption 13 watts. 2. D E L I V E R Y S E T Component name of the system Chiffon Quantity 1. Generator Unit 1 pcs 1 2. Telescopic antenna 1 pcs 1 3. Configuration software 1 pcs 1 4. User manual 1 pcs 1 1 basic set 3. C O N T R O L S A N D C O N N E C T I O N O F T H E G E N E R A T O R 3.1. CONTROL FROM THE PANEL ON THE GENERATOR SEL 111 «ШИФОН» ЖКИ СОСТОЯНИЕ СИСТЕМЫ Н О Р М А А А В А Р И Я Тип Б The control panel of the generator consists of settings keyboard and control indicators of IPS Chiffon condition. 4

5 Control keyboard of the NG «МЕНЮ» Menu - Button, entrance to the setup mode of the device, selection of parameter. «ВВОД» Enter- Button accept the selected parameter for configuration., - Buttons, changing of the parameter (more/less). Save settings- button, to save all the changed parameters made by the operator; I n d i c a t o r s «Screen» - 2-line indicator for text information input «НОРМА» OK green diodes of the normal system condition «АВАРИЯ» Alert red diodes А К ДУ БС Б МА А К ЛВС 3.2. INSTALLATION PANEL OF THE GENERATOR «ДУ» -RC connection to connect a remote control to the device; «БС» additional directional antenna connection; «Б» socket for connection of outer additional directional devices; «МА» socket for connection of additional magnetic antennae; «А» SMA socket for connection of emitting antennas; «К» - control socket of antenna emitting signals. «ЛВС» - RJ-45 socket for connection of the device to Ethernet 5

6 4.1. PRECAUTIONS 4. P R E P A R A T I O N F O R E X P L O I T A T I O N Before turning on the device please make sure that the device is properly grounded VISUAL INSPECTION Before turning the the device on device must be inspected visually for unsanctioned openings, mechanical damage, spills of liquids on the device IPS Chiffon 4.3. INSTALLATION OF GENERATOR IPS "CHIFFON" The installation location of the Generator should be protected from moisture, dust, vapors, corrosive liquids, etc. The generator must be installed on a flat surface (table, wall, ceiling, shelf, etc.) at least 1m from heating and heating devices using the fasteners supplied. Orientation of the generator may be arbitrary. ТИП «А+Б» - ДИАГНОСТИКА - 5. U S E A C C R O D I N G T O P U R P O S E 5.1. TURING ON THE DEVICE Device turns on automatically after connecting it to the power supply. After turning on, device makes automatic self-diagnostics of the generator and checks the connected accessories to it. After diagnostics completion device automatically switches I to operation mode, all green LEDs are glowing indication listed below: ТИП «А+Б» - НОРМА - 55 дбм If the device detects malfunction, it gives out an alert, sound signal and on display, following information can be seen: Диагностика СБОЙ - АВАРИЯ 101- ПОЛЕ/Обрыв/Замыкание АНТ - АВАРИЯ- 55 дбм 6

7 Meanings of codes and malfunctions are listed in the table of possible malfunctions below in the OM SETUP The setup of the device is done from the control panel on the face side of the device Attention! The entrance to the settings is protected with password (consisting of numbers), to protect from unsanctioned use SETUP OF THE CONTROL PANEL OF THE GENERATOR On the control panel of the device press button Menu«МЕНЮ», on the screen after writing a correct 4-digit digital password, further: By pressing «МЕНЮ» button, the selection of current digit is done (the selected one flashes). Buttons, change the number increase/decrease (from 0 to 9). Insert the password (supplied with the device). Press Button «ВВОД» to enter the settings menu. A t t e n t i o n! In case of wrong password input «!» in the right corner of the screen will show up and periodical sound signal will appear. Which is saved even after the device is switched of from the power supply and can be switched off after correct password insertion. 6. MENU OF PARAMETERS SETTINGS The adjustment of the parameters of the IPS Chiffon is intuitive and is performed using the buttons of the control panel keyboard according to the following algorithm: Use the "MENU" button to select the item (digit) in the menu (the selected one is blinking). Press the "ENTER" button to confirm the selected item to start editing. Press the buttons to change the parameter (decrease / increase). Press the "ENTER" button to end the editing cycle and go to the MENU item selection for further editing. Use the button to save all the settings made and exit to the operating mode. After memorizing the settings, IPS "Chiffon" automatically performs self-diagnostics with the new parameters set and switches to the "Operating mode" of the work. After this, "Chiffon" is ready for operation. Pressing the button in the operating mode always starts systems selfdiagnosis. 7. MANAGEMENT AND SETUP OF IPS "CHIFFON" VIA PC 7

8 IPS "Chiffon" allows monitoring and management from the PC of the operator's automated workstation via Ethernet through a wired LAN using the specialized configuration software of the CONFIGURATOR.exe system. For the functioning of the program, the following software hardware is required, installed on the operator's workstation: - Processor with a clock speed of not less than 2400 MHz; - The amount of RAM is not less than 512 MB; - The amount of free space on the hard disk is not less than 1 GB; - A monitor with a diagonal of at least 15 "and a video adapter, - Mouse; - Keyboard; - Operating system Windows XP and above; - Certificate of compliance of AWP to information security requirements. To start management of the system by the APM operator, connect it with an Ethernet cable (LAN) to the computer or laptop. On the computer, run the Configurator utility program application to work with the system via Ethernet CONFIGURATION.exe. To control the generator, in the lower left corner of the program, you need to enter the eight-digit current access password from the PC (listed on the form or passport). Assignment of the elements of the window of the configurator interface of the system during its operation via the Ethernet network - see Appendix 2. If the generator was previously controlled from the control panel, use the buttons in the CONTROL menu to select "PC" otherwise there will not be full access to the generator control. If the control mode "PC" has already been set, then on the LCD screen of the generator the word "CONTROLLED WITH PC" appears on the top line. To return to the control from the generator panel, use the buttons in the CONTROL menu to select the "ON" mode. 8

9 8. POSSIBLE TROUBLESHOOTING AND ACTIONS FOR THEIR ELIMINATION In the IPS "Chiffon" there is a built-in self-diagnosis of the status and control of the main parameters that determine its operability. The control is carried out by means of a lightemitting diode, an audible buzzer and text messages on the LCD panel of the Generator or on the PC screen through the interface of the software "Gateway". All possible abnormal situations are given in the table: Abnormal situation Possible reason Actions All LEDs on the panel are lit. Continuous sound signal. On the LCD screen: "Accident" code "101" or "102" Control blocked. Malfunction of the microcontroller controller or the memory of the Generator. Red LEDs are on. Intermittent sound signal. On the LCD screen: "Accident" Code from "01" to "011" The control is locked. One or both of the "Alarm" LEDs are lit on the panel. Intermittent sound signal. On the top line of the LCD: "FIELD / Closure Open / ANT". On the bottom line: "Accident" Malfunction of the shaper of one or more bands. The discrepancy between the selected type of operation of the IPS and the connected protection endpoints. Level change in the field of the control antenna. The working impossibility of the IPS. Disconnect the Generator. Contact the manufacturer. The working impossibility of the IPS. Disconnect the Generator. Contact the manufacturer Check the connection of antennas and guidance devices to the outputs of the Generator in accordance with the type of configuration of the IPS. Check the location of the antennas. 9

10 One or both of the "Alarm" LEDs are lit on the panel. Intermittent sound signal. On the top line of the LCD: "Short-circuiting NC / MA / ANT". On the bottom line: "Accident" Unplugged connecting cable between the Generator and the end protection devices. Change of the output signal parameters. Antenna system or signal guidance device is damaged. Check the connection of the connectors. Check the condition of the cables from the generator outputs to antenna systems and signal guidance devices. Check the position of the radiating antennas in space. Repeat the diagnosis of IPS. If, as a result of the above described actions, the "Alarm" signaling is not removed - turn off the Generator and contact the manufacturer. The antenna system or the signal guidance device is damaged. Check the system and the guidance device for the absence of mechanical damage. Repeat the diagnosis of IPS. If, as a result of the above described actions, the "Alarm" signaling is not removed - turn off the Generator and contact the manufacturer. 10

11 9. DESIGNATION OF INTERFACE ELEMENTS OF THE SEL-111K "CHIFFON" CONFIGURATOR SYSTEM 1. The degree of access to the management of the NG (noise generator) depends on the selected management mode on the NG panel and also on the firmware: - "Full access" - (in the NG panel the "PC" control mode is selected), it is possible to fully control the generator, incl. Turn on, turn off the noise, adjust the parameters and control the noise level in real time (to speed up the setting during installation in the room). - "Monitoring" - (on the NG panel the "ON" or "DN" control mode is selected) only for monitoring the generator status and alarm conditions. At the same time, it is not possible to configure and control over the network (it is controlled only from the generator panel). 2. The Status window displays the current state of the NG (disabled, normal, level). 3. Window Serial number, unique for each NG and sewn into the memory of the device. 4. The Self-Diagnosis window displays the result of continuous diagnosis of the NG and the type of fault detected (red, for example, "ANT Break") or "NORM" (green) when operating in normal mode. The "Network" window displays and allows you to change: 5. Line IP address of NG 6. Line Number of the TCP port (TCP / IP communication, default is 5040) 11

12 7. Line Network Mask 8. Line Network Gateway 9. Read the initial network settings from the device memory, canceling any changes made (factory settings sewn into the device). 10. Apply factory default network settings. When changing the address, do not forget to select a new address in field 23, after the application. Because the device will immediately stop responding to the old address. The "Name" window displays the assigned NG name and allows you to change it: 11. Line "name" NG for display in the PAK software "Gateway". (For example, the number of the cabinet or others can be sewn into the device's memory). 12. Read the "name" from the device's memory. It is also available in Monitoring mode. 13. Write the "name" in the device's memory. It is also available in Monitoring mode. The "Noise" window is intended for turning the NG on or off: 14. Turn on the noise generation. 15. Turn off the noise generation. 16. Flag "Settings" - when activated, the device goes into a special mode, when changes in noise level settings are automatically applied instantly, allowing you to quickly select the desired levels, guided by an external spectrum analyzer. 17. Flag of the presence of a connected magnetic antenna "MA". 18. Flag for activating the mode of monitoring the levels of the output noise signal over the field. 19. Window "Type" - selection of the included sources of noise signals of the generator (A-antenna, B - guidance on wires, or both - АВ). 20. Window Levels Adjustment in each sub-band (when you hover over the ruler of the selected controller with the mouse cursor, a pop-up window of the sub-band number is displayed), the minimum down is the maximum upward. 21. Button "Read" the settings of noise levels from the device's memory. 22. "Set" button - apply the preset level and record the noise settings in the device memory. 23. The "Password" window allows you to provide access to NG settings and change passwords: The "Current" line - the current password is registered. "New" line - when changing, a new password value (8 characters) is entered. The "Confirmation" line - the value is duplicated the same as in the "New" line. The "Set" button - changes the current password to a new one and inserts it into the NG memory. 24. Drop-down list to select the device. 12