Table of Contents
Advertisement
oVerVIew
oVerVIew
SECTIONS
Table of Contents
security features
The product is designed, manufactured and delivered in security-controlled environments.
Below is a summary of the main advanced features incorporated in product:
advanced isolation between computers and shared peripherals
The emulations of keyboard, mouse and display EDID, prevent direct contact
between computers and shared peripherals. Product design achieves maximal
security by keeping the video path separate with keyboard and mouse switched
together, purging the keyboard buffer when switching channels. All these features
contribute to strong isolation between computer interfaces, maintained even when
product is powered off.
Unidirectional data flow: Usb, audio and video
Unique hardware architecture components prevent unauthorized data flow, including:
• Optical unidirectional data flow diodes in the USB data path that filtrate and
reject unqualified USB devices;
• Secure analog audio diodes that prevent audio eavesdropping with no
support for microphone or any other audio-input device;
• Video path is kept separate from all other traffic, enforcing unidirectional
native video flow. EDID emulation is done at power up and blocks all EDID/
MCCS writes. For DisplayPort video, filtration of AUX channel exists to reject
unauthorized transactions.
Belkin
Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM Switch
®
1
1
2
3
Isolation of power domains
Complete isolation of power domains prevents signaling attacks.
secure administrator access & log functions
The product incorporates secure administrator access and log functions to provide
auditable trail for all product security events, including battery backup life for anti-
tampering and log functions. Non-reprogrammable firmware prevents the ability to
tamper with product logic. Configuration of front panel LEDs and CAC (if equipped)
are covered in the PP4.0 Admin manual.
always-on, active anti-tamper system
Active anti-tampering system prevents malicious insertion of hardware implant such
as wireless key-logger inside product enclosure. Any anti-tampering attempt causes
isolation of all computers and peripheral devices rendering product inoperable and
showing clear indications of a tampering event to the user.
Holographic security tamper-evident labels are placed on the enclosure to provide a
clear visual indication if product has been opened or compromised.
Metal enclosure is designed to resist mechanical tampering with all microcontrollers
protected against firmware-read, modification and rewrite.
4
4
5
6
7
baCK To Table of ConTenTs >
baCK To Table of ConTenTs >
Advertisement
Table of Contents
