Technical White Paper Discussing
The TCC CipherX Network Security Advantage
The Expert in Data Security
TCC has over 35 years of voice, fax and data security experience. TCC is one of the earliest companies to offer security solutions for large global data networks. With a large installed base and continual research and development efforts, TCC offers the most technically advanced and secure solutions available.
CipherX History
TCC introduced the first protocol sensitive data security product, the CipherX 5000, in 1986. The data security market was just emerging and only link encryptors, (encryptors that do not recognize protocols) were available. A cost effective, efficient and fully secure way to protect the growing number of large global X.25 networks was in demand.
The CipherX 5000 was the world's first protocol sensitive X.25 security solution. Initially it was installed by the U.S. Air Force, and today, a modified version is still the only X.25 solution endorsed and certified by NIST and NSA. Other customers include U.S and international government agencies, international public carriers and financial institutions.
As shown below, link encryptors had to decrypt and re-encrypt the data at each switch/node throughout the network causing security gaps, whereas the protocol sensitive intelligence in the CipherX 5000 enabled end-to-end network security from source to destination. The protocol sensitive CipherX 5000 also saved a lot of money by requiring 80% fewer encryption devices.
Since the first CipherX product's inception, TCC has continually invested in research and development to improve the technology and to add to its data product offering. KEYNETTM, a centralized key and network management system for a CipherX network, was introduced in 1991 and has been an important part of the CipherX family's success. With its automated error and alarm logs, auto polling, remote diagnostics and configuration, KEYNET is the best centralized management solution available. It saves money by automatically keeping a global network up and running, and by limiting security management to a single crypto officer. With the CipherX family's proven security as well as the superior functionality of KEYNET, today TCC has over 3,000 installations worldwide.
The Next Generation . . . CipherX 7000 Series
The need for security is skyrocketing. Frame Relay and IP Security are in great demand by organizations such as public carriers, financial institutions, legal firms, and health care companies. Due to network advancements, more electronic information is being communicated worldwide. As the amount of electronic communication increases, the percentage of confidentiality also rises, thus spurring a greater demand for security.
To meet the ever growing need for security, TCC has developed the CipherX 7100 series. It is a family of high speed data security systems that provide leading edge encryption protection for wide area networks (WANs). It is based on a new state-of-the-art architecture designed to be fast, cost effective, and easily adapted to support various protocols. It also supports the proven security measures used in TCC's established CipherX products. Frame relay and IP will first be available, but given the modular architecture of the CipherX 7000 series other protocols such as link and X.25 encryption at speeds up to 2.048 Mbps can easily be implemented as well. The CipherX 7000 series acts as a network overlay, so no network modification is required.
The similarity across the CipherX family minimizes user training. All CipherX products are easily and centrally managed by TCC's technically superior KEYNETTM management system, and support fully automated key management. The automated architecture ensures ease of use, minimizes user action and maintains constant and reliable network security. The U.S. Government-backed DES (and 3-DES) and international proprietary encryption algorithms are also supported.
Frame Relay
Frame Relay network sales are rising due to the higher speed and lower cost as compared to X.25 networks. The growth of frame relay directly reflects the demand for frame relay security as security today is a standard network component. By drawing upon its past expertise, TCC's CipherX 7100 provides a high end, easy to use and efficient security solution for global frame relay networks. TCC's installed base of customers who are migrating their networks from X.25 to frame relay, will also gain great cost efficiencies by simultaneously managing their established X.25 network and new frame relay network with the same KEYNETTM system. The CipherX 7100 operates at speeds up to 2.048 Mbps and supports 976 virtual circuits.
IP/IPX
The need for security is spanning the globe. As a result, TCC developed the CipherX 7200, a high speed IP/IPX encryptor that secures communications on most data networks. IP is the most prominent protocol in internetworking today. By supporting it, as well as having the intelligence to recognize other common IP utility protocols, i.e., ARP and ICMP, the CipherX 7200 will be able to operate on most LANs and WANs worldwide. The CipherX 7200 is an ideal solution for security segmentation across a LAN and/or WAN, i.e., securing only the sales or finance departments. It is also designed to secure LAN and WAN hybrid networks that support a mix of protocols. The CipherX 7200 supports data rates at up to 10 Mbps.
KEYNETTM Release 2
TCC's KEYNETTM key and network management system is the most comprehensive centralized security management system available. It powerfully and automatically manages a large global network of CipherX security devices from a single location. It currently has the "best-in-market-functionality."
It supports ANSI X9 based automated key management, automated error and alarm polling, remote diagnostics and configuration, as well as discretionary access control. A single KEYNET system can also simultaneously manage CipherX devices on leased lines, frame relay, IP as well as other network protocols. Additionally, it has graphical user interface (GUI) and open systems support. The GUI fosters ease-of-use, and open (HP) systems support, i.e., SNMP support, enables KEYNET's tighter integration into existing network management systems.
Cipher X Data Security Products
| Product | Description |
| CipherX® 850 PS | X.25 protocol sensitive, up to 64 Kbps, proprietary algorithm |
| CipherX® 850 PT | Link encryption, sync and async, up to 64 Kbps, proprietary algorithm |
| CipherX® 7100 | Frame relay protocol sensitive, up to 2.048 Mbps, 3-DES and international proprietary algorithms |
| CipherX® 7200 | IP/IPX protocol sensitive, up to 10 Mbps, 3-DES and international proprietary algorithms |
| KEYNET | Centralized security and network management, On-line and automated key management, Diagnostics and error/alarm polling, Open systems support |