KVM Infrastructure secured EAL4+ multi-domain for classified environments
Multi-domain and classified environments
In a classified environment, the coexistence of systems with different security levels requires strict separation of flows, data, and access. The multi-domain meets this requirement by allowing the operation of multiple isolated environments — classified, restricted, or unclassified — within the same infrastructure, without interconnection of networks.
IHSE multidomain KVM and cybersecurity
IHSE multidomain KVM and cybersecurity
KVM IHSE and network security
Secure KVM multidomain infrastructure certified EAL4+ IHSE
Secure real-time transmission, with no latency, via a non-IP protocol over a dedicated link
Multi-domain access from a standardized user position with screen, keyboard, mouse
Channel switching and isolation between unidirectional data streams.
Low power consumption FPGA hardware architecture, certified EAL4+
In a modern command center, the KVM IHSE infrastructure allows for the centralization of IT sources in a secure rack and provides each operator with controlled access to authorized systems from a single workstation, regardless of the classification level. The secure Draco tera matrix ensures limitless scaling switching, from embedded applications to large multi-operator C2, while the CC EAL4+ certified extenders guarantee the integrity of flows between domains. This architecture directly meets the requirements for operational redundancy and NATO/allied interoperability, without compromising security.
IHSE Infrastructure and IEC 62443 standard
An IHSE infrastructure fully meets the recommendations of the IEC 62443 standard by applying, by design, the principles of segmentation, reducing the attack surface, and defense in depth.
By physically isolating systems from operator stations and limiting exchanges to only the necessary KVM flows (video, keyboard, mouse).
This approach ensures strict compartmentalization of security zones, prevents the propagation of attacks from IT technology to defense systems, and enhances the availability of critical systems, even in high-security level environments (SL3/SL4), in accordance with the spirit and requirements of IEC 62443.
KVM Draco Matrix
The IHSE Draco KVM matrix enable hardware and real-time routing of video and KVM streams between numerous sources and consoles, with no latency and over dedicated copper or fiber networks. Their modular and non-IP architecture ensures secure centralization of IT resources, suitable for control rooms and sensitive or classified environments.
The technology based on target security profiles descriptions attached to the units (deports and matrices) prevents any potential intrusion and allows the positioning of the receiving unit in an unclassified location.
Presentation (FR) : Download
Flex matrix specifications (EN) : Download
Entreprise Matrix Specifications (EN) : Download
Secure KVM extenders Vario certified EAL4+
The isolated KVMA Draco vario from IHSE is a secure hardware KVM extender that allows the extension of keyboard, video, mouse, and audio streams without IP and with complete isolation between source and console. Certified Common Criteria EAL4+, it relies on hardware isolation mechanisms that ensure strict separation of streams and unidirectional transmission, suitable for classified environments and multi-domain architectures with high security constraints.
Presentation (FR) :Download
Specifications for extenders series 487/497 (EN) :Download