Read more about Using Cellcrypt over BGAN
Contents
1. 9 Further Details and Support rrrnnnnnnrrnnrrnnnnnnnrrnnrrnnnnnnnsrnnnrnnnnnnnnsennnnnnnnsnnnsnnnn 10 1 Overview Cellcrypt enables standard smartphones to connect to BGAN terminals and make voice calls secured with government level encryption Cellcrypt Mobile is an easy to use mobile software application that runs on standard mobile phones RIM BlackBerry and Nokia Symbian S60 and uses the data IP network to deliver unparalleled voice quality high strength security and low voice delay Because Cellcrypt Mobile runs on popular smartphones all the latest market leading phone features are available and a single device is also used for making encrypted calls over cellular networks GPRS CDMA 1xRTT and above as well as BGAN terminals 2 Network Topology Cellerypt Mobile client application 3 Typical Users Government agencies Central Switch Server Military and defence organizations Police and Security Forces Oil Gas and Mining organizations Global Internet Oeliceyp Banks Finance and multinational corporations Vessels and Maritime NGOs and Aid agencies Using Cellcrypt Voice Call Encryption over BGAN y 26 2 56 3G 3 56 Celicrypt Mobile client appli ation Page 1 Key Features Security Strong end to end encryption between any two devices running Cellcrypt Mobile including 2048 bit RSA and Diffie Hellman DH for strong authentication2. and key exchange and 256 bit AES wrapped in 256 bit RC4 for voice encryption US Government FIPS 140 2 certification in progress Smartphone amp BGAN Support WiFi enabled versions of RIM BlackBerry Bold Nokia Symbian S60 N series E series and Windows Mobile smartphones Supports any WiFi enabled BGAN terminal Land and Maritime Easy to use Simple application as easy to use as making a standard phone call Integrates with device phonebook for single contact address book Minimal configuration of BGAN terminal only WiFi access point setup Low latency and unparalleled voice quality Useable Beyond BGAN Terminals Make standard cellular calls and use all smartphone features Make encrypted calls on any IP enabled network including cellular 2G GPRS EDGE 1xRTT 3G UMTS HSDPA EV DO and standard WiFi Call between any combination of endpoints BGAN cellular WiFi 5 Benefits to BGAN users Cellcrypt Mobile offers the following benefits No specialist equipment required to make encrypted voice calls use popular off the shelf smartphones from leading cell phone manufacturers Use the same smartphone to make encrypted calls on Wi Fi and cellular networks use a single device with a single contact address book e Uses the IP network to reduce the cost of voice calls Highly convenient allowing multiple devices to call simultaneously all connected wirelessly with no specialist configuration of the BGAN te
3. Cellcrypt Voice Call Encryption over BGAN Page 9 f Once the channel has been secured between the two g The recipient of the call will be notified devices the mobile originating by the device a secure call is being call will ring the other device received from an Unknown Contact Cellcrypt Mobile e Online WiFi Ringing NM Ho Unknown Contact 7001 h The recipient of the call will be notified an incoming secure call has been received and clicking the BlackBerry BB button will give the user option to answer the call and on Nokia select the green phone icon Cellcrypt Mobile Cellcrypt Mobile Online WiFi Online WiFi Ringing Incoming secure call N Answer ig End Call Unknown Contact Mute Activate Speakerphone Switch Application Close 7001 i Selecting Answer on the device will connect the two users and they will be able to make a secure call j To end the call click the BlackBerry BB button and select End Call and on Nokia select the Hang Up button or select the red phone icon k On ending the call the user will be able to enter the contact details in the next window First Name Last Name and Contact Number On Nokia select Options Create New Contact or if the contact already exists in your standard address book select Options Copy Name from Phone Cellerypt Mobile First Name Jack Last Mame Bauer Contact Number 7001 l Enter the contact details a
4. DY inmarsat Cellcrypt Using Cellcrypt over BGAN BlackBerry and Nokia Voice Encryption Version 1 0 08 10 2009 The mobile satellite company Contents Hd a RK O PN OVEIVICW oo eccccccccceeeeeecceeeeceeeeeeeceeeeesaeeseeceeeeeeseeeeeeeceeeeseeaeeeeeeeesseeaseeeeeeesssaaaeeeeeeees 1 Network TOD QIOOY sep ee 1 TANN e arcsec Sea oc eee ce atta ctpesioe gs eseiee A EN bes caeuseeadest ees esase 1 FANS ee 2 Benefits to BGAN uSers mmmmmrrrsssrrrrrvvvrrrnnnrrrrvvnnsrnnnnnrsrevnnsnnnnnnnrsennnnnnnnssevennnnnnn 2 Security Architecture cccccccccccccesesseeceeeceeeeeseeceeeeeseeeeeeeeeeeesssaeeeeeeesseaaaeeeeeeees 3 6 1 CellCrypt TECHnOlogy cccecccccccecceeeseeeceeeeeeeeeeeeeeeeesseeeeeeeeeeesseeeeeeeeees 3 6 2 Cryptography amp Random Number Generation ccccccsccceeeesseeeeeeeeeees 3 STG UD sesa EEA a ES EEEE EAEE EREE 3 7 1 Cellcrypt Configuration cccccccccsssseeeeceeeeeseeeeeeeeceeeesaeeeeeeeeeessaeeeeeees 3 7 2 Configuring Cellcrypt Mobile Client for access to BGAN terminal 4 7 3 Making a Secure Call rrrnnnnnnnnnnnnnnnnnrrnnnnnnnnvnnnrrnnnnnnnnrnnnrnnnnnnnnsennnnnnsnnnee 5 TE EE EEE EN 7 BGAN Step by Step Setup rrrrrnrrrrrrrrrrrnnnnnrrrrnrrrnnnnnrnrrrrrrnnnnnnnnsrnnnnnnnnsssennnnnnnnn 7 8 1 Thrane EXPLORER 300 500 700 and 527 rrrrnrnrrrnnnnnnnrrrrvnnnnnrrrrrrrenn 7 82 FINS 9201 400 9250 oscar occustdasiserntneinciccusdnrscumantic aeaa EE i
5. Packet Switched connection with the BGAN system After registration the LCD main screen will show DATA ACTIVE See LCD below Now you need to configure your NOKIA of BLACKBERRY phone to connect to the terminal via WiFi with the security settings you configured 8 2 HNS 9201 and 9250 Standard service should be initiated from the BGAN terminal and needs to be configured from the Hughes HNS9201 s built in web server via a PC s web browser a Open your internet web browser and type the following IP address in the address bar 192 168 128 100 Properties Windows Internet Explorer E BK Ge y v E http 192 168 128 100 42 ac Live search al w r Properties X Stop Esc dh Page 3 Tools i b Click on WLAN c Click on the WLAN Power drop down menu and select ON d Configure your SSID if you want to change it from the default BGAN e Select your region f Select your channel g Click APPLY Using Cellcrypt Voice Call Encryption over BGAN Page 9 MUNES COMOT Pd cm DOT Wireless LAN BELM Unknown O WLAN Power BATT WLAN On WEF SSID BGAN Region X10 FCC 1 11 Y Channel ee E WEP Security Enabled 64 bit SETUP l l STATISTICS Edit WLAN Security Settings PDP CONTEXTS WLAN p E WEP SECURITY i Apply Cancel ACA h Click on WEP SECURITY on the left menu i Click on WEP Protection status drop down menu and select ON j Sele
6. ase review your Smartphone s user manual on how to successfully configure and connect to Wi Fi access points 7 2 Configuring Cellcrypt Mobile Client for access to BGAN terminal Configuring the Cellcrypt Mobile Client for access to Inmarsat s EXPLORER 700 or the HNS 9201 requires little to no interaction with the client software provided that you are using Cellcrypt s Central Switch If you posses your own Cellcrypt Central Switch then you will need to change the SIP Server Address and Server Port by following these basic instructions a Launch the Cellcrypt application by clicking on the Cellcrypt Mobile icon C The change the Server Address and Server Port to your private Cellcrypt Central Switch You may need to b Click the Blackberry button and coordinate with your IT staff to get this on Nokia please select Options information Tools Settings Cellerypt Mobile Online GPRS a Manual Dial Go Offline License Switch Application Close d Select the Blackberry button again and then select the Save button and on Nokia select the Server Address Eipm cellcrypt com Server Port 443 Auto Start Enabled Display phone contacts Enabled Diagnostics Disabled Server Address cipm cellcrypt com Select Check Spelling Clear Field Save Show Symbols switch Input Language Switch Application Close Back button e Ensure you activate your BGAN Standard IP connection connect your S
7. ct 64 bit or 128 bit encryption k Configure your key and select your DEFAULT key by selecting the radio button Click APPLY m Click on ACA on the menu on the left n Select ACA settings for TEs using DHCP assigned IP address ON o Click Apply p Then Click Restart Terminal q Now register the terminal by pressing the Audio button until the signal strength lights go off r The terminal will automatically recognize the DHCP Request and start the Background service automatically s Now you need to configure your NOKIA of BLACKBERRY phone to connect to the terminal via WiFi with the security settings you configured 9 Further Details and Support Inmarsat Contact Email customer careQinmarsat com Cellcrypt Contact Email info cellcrypt com Website www cellcrypt com Using Cellcrypt Voice Call Encryption over BGAN Pagel 0
8. martphone via Wi FI to the BGAN terminal and click on the Cellcrypt Mobile icon via the Smartphone s user interface Using Cellcrypt Voice Call Encryption over BGAN Page 4 7 3 Making a Secure Call A secure call can be made in two different ways Dial the contact manually e Selecting an existing contact from the Cellcrypt address book A secure calls recipient must also be online Dial the contact manually a If you do not have the contact details already stored on the b Click the BlackBerry BB button and er aes the lieth ae select Manual Dial and on Nokia press ar NG Numoer manday Pen the right button on the silver D pad to the Cellcrypt application and verify you are online get to the main Cellcrypt status screen then select the Options button and then Cellcrypt Mobile Manual Dial GPRS m Black Blackberry Cellcrypt Mobile Manual Dial Go Offline License Settings About Switch Application Close c Enter the known Phone Secure Number d Click the BlackBerry BB button again and Select Cellcrypt Mobile Secure Call and on Nokia select the Secure Call Online GPRS 7001 button Cellcrypt call to Salsidu vene R 7001 D Secure Call Select Clear Field Show Symbols Switch Application Close e Cellcrypt application will now Secure a Channel to the dialled number as it is the first time the two devices have called each other Using
9. ndom Number Generation A 2048 bit seed pool is generated during the installation and is periodically updated The initial seed measures the fluctuation of the least significant bit of the microphone noise the phone s internal random number pool and the timestamp The pseudo random function is implemented according to the IPSec specification defined in RFC 4306 7 Setting up 7 1 Cellcrypt Configuration This section describes how to setup Cellcrypt s Mobile voice encryption application for use over Inmarsat s BGAN terminals Cellcyrpt s Mobile application was tested over the EXPLORER 700 and the HNS 9201 terminals using the built in Wi Fi access points While the other BGAN terminals do not have built in Wi Fi access points it is anticipated that the Cellcrypt Mobile application will work just as well via an external Wi Fi access point Simply connect the Wi Fi access point and BGAN terminal to a standard router This should provide the user the ability to use Cellcrypt s Mobile application over other terminals It is noted that some of the other Using Cellcrypt Voice Call Encryption over BGAN Page 3 terminals do not support some of the higher bandwidths so call latency may be affected as the number of simultaneous calls increases Before you start Ensure you install and license the appropriate Cellcrypt Mobile application on a Cellcrypt supported Smartphone and then simply connect the device to the BGAN terminal via Wi Fi access Ple
10. onsult your EXPLORER T manual for more detailed information d Now your terminal is configured to start a Standard connection after you register on the network e Weneed to configure the WLAN by clicking on SETTINGS and then WLAN on the left menu f WLAN interface should be Enabled Using Cellcrypt Voice Call Encryption over BGAN Page 7 sem mm en BT CH TO INTERFACE STATUS DASHBOARD WLAN Interface Enabled Disabled PHONE BOOK E a AT MESSAGES Country BE CH CALLS DE 4 SETTINGS Apply Cancel kj g Change the SSID to desired name and enable security options as desired h Restart your terminal and click OK after properly pointing the terminal Once the Explorer is register on the BGAN network you will be connected automatically with a Standard connection Connecting to BGAN via LCD MMI When Automatic Activation is disabled The screenshot below shows the settings required as configured via the EXPLORER LCD MMI To initiate a connection from the LCD MMI go to the main view of the LCD a Press Arrow Down button until CONNECT menu is selected b Press OK c Select Standard and press OK button START STOP Using Cellcrypt Voice Call Encryption over BGAN Page 8 d Select START and press OK button ARE YOU SURE J CANCEL e Press OK button to confirm Standard connection and wait a minute or two to allow the EXPLORER to register the
11. rminal required Using Cellcrypt Voice Call Encryption over BGAN Page 2 6 Security Architecture 6 1 CellCrypt Technology Cellcrypt s advanced solution leads the industry in delivering multi layered security to establish a high performance encrypted voice call between trusted devices Cellcrypt utilises Encrypted Mobile Content Protocol EMCP a set of standards based protocols for optimising delivery of encrypted real time content between mobile phones over low bandwidth wireless networks Cellcrypt s products are undergoing certification to FIPS 140 2 standard approved by the US National Institute of Standards amp Technology NIST 6 2 Cryptography amp Random Number Generation Public Cryptography RSA amp DH all 2048 bits RSA is used for authentication The key pairs are generated on the phone during the installation and are unique to each phone A private key is never shared The Diffie Hellman DH and RSA algorithms are used for key exchange The session key is only valid for one phone call and securely destroyed after use Symmetric Cryptography AES amp RC4 both 256 bits Both encryption algorithms are used at the same time The data packet is first encrypted with AES and the crypto data is then encrypted again with RC4 using the exchanged session key and are used in Counter Mode CTR Hashing Algorithms SHA512 MD5 Two industry standard hashing algorithms are used for increased integrity assurance Ra
12. s shown above and save the details by clicking the BlackBerry BB button again and selecting Save and on Nokia select Done m This contact has now been added to the Cellcrypt address book and will appear with a green closed padlock denoting a secure contact connection Using Cellcrypt Voice Call Encryption over BGAN Page 6 Cellcrypt Mobile a Online WiFi Find 7 4 Latency Latency is subject to network conditions bandwidth signal strength congestion on all segments between the devices particularly if a segment is cellular but typical one way latency between a device connected to a BGAN terminal and a receiving device on another network are shown below Receiving Device Latency Connectivity GPRS 2 000 Ms EDGE 1 500 Ms 3G 1 200 Ms WiFi 800 Ms 8 BGAN Step by Step Setup 8 1 Thrane EXPLORER 300 500 700 and 527 Background IP service should be initiated from the BGAN terminal and can be configured from either the EXPLORER TV 700 s built in web server via a laptop s web browser or using the LCD MMI a Open your internet web browser and type the following IP address in the address bar 192 168 0 1 gt System Status Windows Internet Explorer Gr Mitrynszsoy b Click on Settings and then LAN c Now you should see the web server interface The screenshot below shows the settings required as configured via the EXPLORER M s web server interface ensure you click apply before leave the web page Please c
Download Pdf Manuals
Related Search