The Belkin Secure KVM Peripheral Sharing Switches (PSS) allows the secure sharing of a single set of peripheral components such as keyboard, Video Display and Mouse/Pointing devices among multiple computers through standard USB, DVI, and DisplayPort interfaces. Belkin Third-Generation Secure KVMs products are using multiple isolated microcontrollers and optical data diodes to protect from data leakages between connected computers.
\r\nProducts are ranging from 2-Ports to 16-Ports to support 2 to 16 computers respectively.
\r\nSome evaluated KVM products also support CAC (user authentication) function as shown in the table below. This function enables secure connection of smart-card reader USB devices.
\r\nAnalog audio out switching is supported by all evaluated products. Stereo audio signals are passed through audio data diodes to enforce unidirectional flow of audio signals from the selected connected computer to the connected audio peripheral device.
\r\nCAC may be switched to a computer other than the one selected for keyboard and mouse through the use of front panel CAC enable – disable slider switches.
\r\nSingle-head products are used to switch video from computers having a single video output (for example 4:1) while dual-head models are used to switch parallel computers having two video outputs (for example 8:1 + 8:1).
\r\nAll evaluated products support a USB keyboard and USB mouse or touchscreen.
\r\nBelkin secure KVM products support a single user having a single or multiple display/s based on the table below:
\r\n| \r\n Model \r\n | \r\n\r\n Computers supported \r\n | \r\n\r\n Display/s supported \r\n | \r\n\r\n Display I/F Protocol \r\n | \r\n\r\n Computer video I/F Protocol \r\n | \r\n\r\n Video switching function \r\n | \r\n\r\n CAC Port \r\n | \r\n\r\n Analog audio out \r\n | \r\n
| \r\n F1DN102F-3 \r\n | \r\n\r\n 2 \r\n | \r\n\r\n 1 \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n Switch 2:1 \r\n | \r\n\r\n No \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN102N-3 \r\n | \r\n\r\n 2 \r\n | \r\n\r\n 1 \r\n | \r\n\r\n HDMI \r\n | \r\n\r\n DisplayPort \r\n | \r\n\r\n Switch 2:1 \r\n | \r\n\r\n No \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN102V-3 \r\n | \r\n\r\n 2 \r\n | \r\n\r\n 1 \r\n | \r\n\r\n VGA \r\n | \r\n\r\n VGA \r\n | \r\n\r\n Switch 2:1 \r\n | \r\n\r\n No \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN102H-3 \r\n | \r\n\r\n 2 \r\n | \r\n\r\n 1 \r\n | \r\n\r\n HDMI \r\n | \r\n\r\n HDMI \r\n | \r\n\r\n Switch 2:1 \r\n | \r\n\r\n No \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN104P-3 \r\n | \r\n\r\n 4 \r\n | \r\n\r\n 1 \r\n | \r\n\r\n HDMI \r\n | \r\n\r\n DisplayPort \r\n | \r\n\r\n Switch 4:1 \r\n | \r\n\r\n Yes \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN104W-3 \r\n | \r\n\r\n 4 \r\n | \r\n\r\n 2 \r\n | \r\n\r\n HDMI \r\n | \r\n\r\n DisplayPort \r\n | \r\n\r\n Switch 4:1 + 4:1 \r\n | \r\n\r\n Yes \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN104B-3 \r\n | \r\n\r\n 4 \r\n | \r\n\r\n 1 \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n Switch 4:1 \r\n | \r\n\r\n No \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN104C-3 \r\n | \r\n\r\n 4 \r\n | \r\n\r\n 1 \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n Switch 4:1 \r\n | \r\n\r\n Yes \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN104E-3 \r\n | \r\n\r\n 4 \r\n | \r\n\r\n 2 \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n Switch 4:1 \r\n | \r\n\r\n No \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN104F-3 \r\n | \r\n\r\n 4 \r\n | \r\n\r\n 2 \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n Switch 4:1 \r\n | \r\n\r\n Yes \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN104Q-3 \r\n | \r\n\r\n 4 \r\n | \r\n\r\n 3 \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n Switch 4:1+4:1+4:1 \r\n | \r\n\r\n Yes \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN108C-3 \r\n | \r\n\r\n 8 \r\n | \r\n\r\n 1 \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n Switch 8:1 \r\n | \r\n\r\n Yes \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN116C-3 \r\n | \r\n\r\n 16 \r\n | \r\n\r\n 1 \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n Switch 16:1 \r\n | \r\n\r\n Yes \r\n | \r\n\r\n Yes \r\n | \r\n
| \r\n F1DN108F-3 \r\n | \r\n\r\n 8 \r\n | \r\n\r\n 2 \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n DVI-I \r\n | \r\n\r\n Switch 8:1 + 8:1 \r\n | \r\n\r\n Yes \r\n | \r\n\r\n Yes \r\n | \r\n
The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the product meets the security requirements contained in the Security Target. The criteria against which the Belkin Secure KVM was evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1, Revision 4. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1, Revision 4. Computer Sciences Corporation determined that the product is conformant to requirements for Peripheral Switch Protection Profile version 3.0. The product satisfies all of the security functional requirements stated in the Security Target. Four validators, on behalf of the CCEVS Validation Body, monitored the evaluation carried out by Computer Sciences Corporation. The evaluation was completed in February 26, 2016. Results of the evaluation can be found in the Assurance Activity Report for Belkin Secure KVM prepared by CSC Global Cybersecurity.
","environmental_strengths":"\r\n\r\nKeyboard and mouse security
\r\nIsolated keyboard and mouse USB device emulators per connected computer to prevent direct interface between the TOE shared peripheral devices and connected computers.
\r\nTOE uses host (computer) emulators to interface with connected keyboard and mouse peripheral devices, thus isolating external peripherals from TOE internal circuitry and from connected computers.
\r\nKeyboard user data is not stored on TOE non-volatile memory. All USB stacks are implemented in the TOE using SRAM (Static Random Access Memory) – a volatile memory that clears data once TOE is powered down.
\r\nTOE external interface security
\r\nThe TOE supports only the following external interfaces protocols:
\r\n• USB keyboard and mouse;
\r\n• Analog audio output;
\r\n• User authentication device or other assigned USB devices (TOE model specific);
\r\n• Power (AC or DC); and
\r\n• Video (VGA, DVI, HDMI, DisplayPort or MHL video only).
\r\nAudio Subsystem security
\r\nThe TOE audio data flow path is electrically isolated from all other functions and interfaces to prevent signaling data leakages to and from the audio paths.
\r\nVideo subsystem security
\r\nVideo input interfaces are isolated from one another. Isolation is achieved through the use of different power and ground planes, different electronic components and different emulated EDID chips per channel.
\r\nTOE supports Display Port 1.1, 1.2 and 1.3. TOE video function filters the AUX channel by converting it to I2C EDID only. DisplayPort video is converted into HDMI video stream.
\r\nUser authentication device subsystem security
\r\nTOE supports User Authentication Device function (called CAC). These products are configured by default as FDF (Fixed Device Filtration) with filter set to qualify only the following devices:
\r\n• Standard smart-card reader USB token or biometric authentication device having USB smart-card class interface complying with USB Organization standard CCID Revision 1.1 or ICCID Revision 1.0.
\r\nNote that device must be bus powered
\r\nUser control and monitoring security
\r\nTOE is controlled and monitored by the user through front panel illuminated push-buttons and switches. These controls and indications are coupled to the TOE system controller function.
\r\nTampering protection
\r\nAlways-on anti-tampering system mechanically coupled to the TOE enclosure to detect and attempt to access the TOE internal circuitry.
\r\nTOE is equipped with special holographic Tampering Evident Labels that located in critical location on the TOE enclosure.
\r\nSelf-testing and Log
\r\nTOE is equipped with self testing function that operating at TOE power up prior to normal use. The self-test function is running independently at each one of the TOE microcontrollers following power up.
\r\nTOE is equipped with event log non-volatile memory that stores information about abnormal security related events.
","features":[]}