AT&T Encrypted Mobile Voice Solution Overview
AT&T Encrypted Mobile Voice Problem Need for increased security for confidential and sensitive mobile voice calls Solution AT&T Encrypted Mobile Voice is a hardware & software service bundle for smartphones. Calls are connected over the data network, providing both a cellular and Wi-Fi capability. Unique Benefits/Value Proposition TrustChip (a purpose-built microsd card) provides hardwareanchored protection, while the One Vault Voice application provides intuitive user interface Uses standard BlackBerry, Windows Mobile smartphones AT&T TrustGroup embedded in TrustChip Global Reach: Operates in 150+ countries worldwide 2
AT&T Encrypted Mobile Voice WHAT IS REQUIRED? Each smartphone device requires a TrustChip a purpose-built microsd card with an embedded AT&T TrustGroup SRA International s One Vault Voice application software for easy, authenticated, encrypted calling Ability to create and manage multiple TrustGroups via Managed Hosted TrustCenter Delivers encrypted voice capability into every user s pocket with exceptional convenience and cost-effectiveness 3
AT&T Encrypted Mobile Voice RESULT. A powerful, flexible and convenient way to provide secure mobile voice for enhanced information security With the AT&T TrustGroup, users can make encrypted voice calls to other AT&T Mobility users (sharing a common relay sever) over the cellular data or a Wi-Fi network Calls secured by the TrustChip system are encrypted with a 256-bit AES cipher, meeting or exceeding security standards for Controlled Unclassified Communications (FIPS 140-2) Certified on popular BlackBerry, Android or Windows Mobile smartphones (see your account team to determine specific device capability) 4
Do you need AT&T Encrypted Mobile Voice Service? Protection of sensitive information is essential Information value/confidentiality dictates the level of security solution required Does your organization handle sensitive information? Is talk around used to avoid communicating sensitive information? How is critical information communicated when normal operations are disrupted? Do you travel internationally? What impact could intercepted calls have on your mission? Is your client s organizations governed by information classification standards or policy directives? 5
HOW ARE THEY LISTENING?
Mobile Intercept Attack Vectors
Just How Easy Is It? Question: What Would it Take for Someone to Intercept Your Mobile Communication? Answer: $250 (+S/H) About $800 Place of Origin: Fujian China (Mainland) Brand Name: SEMGGAMG Model Number: Jet-990
Voice Intercept Becoming Easy Barriers/Costs to Attack Attacker Sophistication Mobile Voice Vulnerability Today State Sponsored Organized Crime Open Source Community Any Criminal
AT&T is working with KoolSpan and SRA International to provide an end-to-end voice encryption service Encrypt mobile voice end-to-end using standard smartphones via GSM and Wi-Fi for both BlackBerry and GSM for Android Smart Phones 10
Solution #1 Encrypted Mobile Voice - Blackberry One Vault Voice (handset application) Optimized for secure calling Support 3G and Wi-Fi Networks FIPS 140-2 Validated Supports Standard Handsets Bold 9000 Bold 9700 Bold 9900 Torch 9810 Torch 9860 (coming soon) Relay Server (call set up) TrustChip (call security) TrustCenter (provisioning & management) Open, Hosted or Private Deployment
Solution #2 Encrypted Mobile Voice - Android One Vault Voice: Support 3G FIPS 140-2 Validated Relay Server (call set up) TrustChip (call security) TrustCenter (provisioning & management) Cross Platform Cross Carrier Open, Hosted or Private Deployment Supports Standard Handsets HTC Inspire HTC Sensation Galaxy S II *additional handsets available 12
Solution #3 Encrypted Mobile Voice Mobile Encryption Response Kit (MERK) Fully Configured Turnkey offering for dynamic deployments EMV Solutions in 10 and 20 packs Ideal for International travel, Law enforcement investigations and task force operations
Open Solution Components At HQ In Each Mobile Device Service Relay Server and Relay Software Each company/agency can own/manage their own private infrastructure via relay servers or software Creates trusted talk groups and serves as a bridge to initiate and connect secured voice calls Available from authorized KoolSpan resellers 14 + + TrustChip and OneVault Voice application bundle Hardware-anchored protection end-to-end Simple-to-use solution Works with BlackBerry or Windows Mobile smartphones Available from authorized KoolSpan resellers Cellular voice & data plans TrustChip encrypted calling feature Coverage not available in all areas Wireless data service subject to rate plan limitations Provides standard cellular voice & data across the US + globally Encrypted Mobile Voice calling feature add-on to standard data service provides UNLIMITED encrypted voice calls Available from AT&T
Private Solution Components Relay Server and TrustCenter Server In Each Mobile Device Service Managed Relay Server and Relay Software INCLUDES Managed TrustCenter Fully manages multiple TrustGroups: can be hosted or managed onsite Available from authorized KoolSpan resellers 15 + + TrustChip and OneVault Voice application bundle Hardware-anchored protection end-to-end Simple-to-use solution Works with BlackBerry or Windows Mobile smartphones Available from authorized KoolSpan resellers Cellular voice & data plans TrustChip encrypted calling feature Coverage not available in all areas Wireless data service subject to rate plan limitations Provides standard cellular voice & data across the US + globally Encrypted Mobile Voice calling feature add-on to standard data service provides UNLIMITED encrypted voice calls Available from AT&T
The BlackBerry User Experience Select Contact Call placed... Incoming... Connected! Open Menu Place Secure Call 16
Encrypted Mobile Voice Call Process Making the connection: 1 2 3 Caller 1 places call, automatically logged into Relay Server A signal (SMS or BB PIN) is automatically sent to Caller 2 Caller 2 accepts call, automatically logged into Relay Server, TrustChip System then establishes an authenticated, 256 AES encrypted FIPS 140-2 session 1 2 3 Relay server Only connected during the call (minimizes battery use) Relays secure voice communication 17
TrustGroups for Trusted Talk Groups and Encrypted Communications AT&T TrustGroup: Global Trusted Talk Group Customer private Talk Groups All AT&T customers can choose to interoperate within their own group or across organizations No separate TrustCenter required, but requires common relay server Managed, hosted TrustCenter Multiple, completely private trust groups 18
Product Solution Network Architecture Scalable Architecture Call Notification Call Communications Management Notification & Communications
AT&T Encrypted Mobile Voice Expectations Application has been optimized for AT&T Improvements in Call Set Up, Latency and Overall Performance Utilize 3G or WiFi whenever possible 2G reduced performance and increased latency, but will offer secure communication if required Average call set up 15-30 seconds Average latency.75 1.75 seconds Set Up application to call forward to voice mail (ensures secure calls not interrupted with non-secure) 20
Pricing and Provisioning Pricing AT&T Encrypted Mobile Voice requires qualified AT&T corporate responsible AT&T cellular wireless voice and certified smartphone data plan. $24.99 per month per Encrypted Mobile Voice subscription (Required TrustChip with application software, relay server/software must be purchased separately from KoolSpan authorized reseller. Optional Managed TrustCenter services also available from KoolSpan authorized reseller.) No term agreement required. Provisioning and Implementation KoolSpan Authorized Reseller will order TrustChips and monthly AT&T subscription, and set implementation project timelines. 21
What Are the Key Advantages of the AT&T Encrypted Mobile Voice Solution? Combination Hardware & Software Solution The hardware delivers strong security The software provides an intuitive user experience Network optimization Application enhanced for optimum performance on the AT&T Mobility network Interoperable encryption possibility With the AT&T TrustGroup embedded on the TrustChip by the manufacturer, users can talk securely with other AT&T Encrypted Mobile Voice users sharing a common relay server Blackberry to Blackberry and Android to Blackberry connectivity available User Interface Provides intuitive commands for calling other encrypted users and many other advanced features 22
What Are the Key Advantages of the AT&T Encrypted Mobile Voice Solution? Broad coverage Not limited by availability of legacy Circuit Switched Data (CSD) coverage, different than other encrypted voice systems Global reach Can operate in the more than 150 countries worldwide where AT&T provides data roaming (performance may vary) Enhanced power management: Application remains dormant when not in use so battery is not drained Single source for support and billing A single monthly feature from AT&T incorporates service costs Provides a single contact for care and billing 23
24