RU2443017C1 - System of data protection from unauthorized access to the data that constitutes national security information - Google Patents

Abstract

FIELD: computational engineering.

SUBSTANCE: system of data protection from unauthorized access to the data that constitutes National Security Information contains the systems of user data protection from unauthorized access, automated workplaces, functional servers, a backbone network, a domain controller server, a security server, a security server database, a data control and interchange bus of the domain controller server, an automated data administrator workplace equipped with an internal data control and interchange bus and the system of administrator data control, safety agents and the system for user or administrator access isolation system, trusted platform hardware-software modules, the trusted platform hardware-software modules that encrypt USB data storage devices, the trusted platform hardware-software modules generating and checking electronic digital signatures, data cryptographic protection devices.

EFFECT: enhanced data protection due to the shared use of discretional and mandate access isolation regulations.

1 dwg, 1 dwg

Description

The invention relates to protection against unauthorized access to information stored both on local computers (automated workstations of users or functional servers) and on the computer network as a whole, and can be used in automated information processing systems containing information constituting a state secret.

Modern automated systems are created on the basis of a computer network in which all domain computers — user workstations, functional servers, and a domain controller server — are connected to each other via a network backbone.

For the comprehensive protection of information containing information constituting a state secret in automated systems, it is necessary to ensure the security of information stored both on each local computer (user's automated workstation or functional server) and on the computer network as a whole.

The security of information containing information constituting a state secret is ensured by authorized access of each user in an automated system to authorized local and / or network resources - files, disks, applications, printers.

A device for protecting against unauthorized access to information stored in a personal computer, containing a system for protecting user information from unauthorized access, which is connected to the control bus and data exchange of one local computer (user's workstation) [1].

The known device for protecting against unauthorized access to information stored in a personal computer provides protection against unauthorized access to local resources of an automated system by performing identification and authentication of users realizing verification of their identification data and the availability of access rights to a personal computer (user's workstation).

Identification and authentication is carried out at each user login. To do this, when you turn on or restart the personal computer, the BIOS expansion program from the software for protecting against unauthorized access to information stored in the personal computer intercepts the boot control of the personal computer and authenticates the user by reading the user’s name (registration number) from an external storage medium and reconciling it with the control information recorded in advance in the registration files and determining the access rights of each user Vatel to a personal computer resources.

Then, the specified BIOS expansion program authenticates the user by checking the password entered by the user from the keyboard of the personal computer with the control information recorded in advance in the registration files, and checks the integrity of the monitored objects (files and / or boot sectors of the hard disk) for this user.

After that, the BIOS expansion program transfers control to the standard firmware of the personal computer to complete the BIOS boot, load the operating system from the hard disk of the personal computer, and execute the modified system files CONFIG.SYS and AUTOEXEC.BAT, as a result of which the resident program module from software protection against unauthorized access to information containing information constituting a state secret stored in a personal computer, oliruyuschy user rights to run a variety of programs in accordance with the registration user data recorded on the hard drive of a personal computer, and starting for the user program.

However, the known device for protecting against unauthorized access to information stored in a personal computer does not provide protection against unauthorized access to network resources of an automated system.

Closest to the proposed is a system for protecting information from unauthorized access to information containing information constituting a state secret, containing many systems for protecting user information from unauthorized access, each of which is connected to the control and data exchange bus of one of the many automated workstations of users or functional servers in a computer network that are connected to each other and to the server-domain controller on a network backbone [2].

The well-known system for protecting information from unauthorized access to information containing information constituting a state secret in the automated system is implemented programmatically when installing on the domain computers (user workstations or functional servers in the computer network) the base operating system Windows XP Professional, and on the server domain controller - the base operating system of Windows 2000 Server or higher.

The well-known system for protecting information from unauthorized access to information containing information constituting a state secret provides protection against unauthorized access to network resources of an automated system by performing authentication and authorization of users.

During authentication, a user can enter the automated system from his workstation (client computer) using his name and a single password or smart card and gain access to other domain computers (workstations of users or functional servers) and all network resources.

Using the base operating systems in a computer network with an active directory (Active Directory), you can control the security of information using the group policy settings.

When authorizing users, the use of access control lists (ACLs) and NTFS access rights ensures that the user only gets access to resources that are allowed to him, such as files, disks (including network drives), applications, and printers.

The well-known system for protecting information from unauthorized access to information containing state secret information using security groups, user rights and access rights allows you to simultaneously manage information security both at the level of network resources and at the level of files, folders and individual user rights.

However, the well-known system for protecting information from unauthorized access to information containing information constituting a state secret provides protection against unauthorized access to network resources of an automated system only through the use of discretionary rules for distinguishing access.

The technical result consists in increasing the security of information containing information constituting a state secret from unauthorized access in an automated system based on the joint use of discretionary and mandatory rules for restricting access.

To achieve the specified technical result, a system for protecting information from unauthorized access to information containing state secret information containing many systems for protecting user information from unauthorized access, each of which is connected to the control and data exchange bus of one of the many automated workstations of users or functional servers in a computer network that are connected to each other and to a domain controller server via a network master In addition, a security server and a security database have been introduced, which are connected to the control and data exchange bus of the domain controller server, as well as at least one workstation of the information security administrator and the system of protecting the administrator information from the information management and data exchange bus unauthorized access, each system of protecting user information from unauthorized access contains a security agent and a system for restricting user access, connected connected to the control bus and data exchange of the corresponding workstation of the user or functional server, and the system for protecting administrator information from unauthorized access contains a security administrator-agent and a security administrator access control system connected to the control bus and data exchange of the corresponding workstation of the information security administrator while automated workstations and functional servers, server-con the domain scooter and the workstation of the information security administrator contain the hardware-software modules of trusted download installed on them, devices for cryptographic protection of information transmitted over a local area network via Ethernet, and devices for cryptographic protection of information transmitted over IP, which are connected to control buses and data exchange of relevant workstations and functional servers, domain controller server and automata of the security administrator’s workstation, all cryptographic protection devices for information transmitted over the local area network via Ethernet, and cryptographic protection devices for information transmitted over IP, are connected to each other via a network backbone, and at least one automated workstation contains installed on it and the hardware-software module of trusted loading connected to its bus for control and data exchange, encrypting storage media Connected via the USB interface, and hardware-software module trusted boot generating and checking digital signatures.

The proposed system for protecting information from unauthorized access to information containing information constituting a state secret provides information protection in an automated system at the operating system, network and application levels by identifying and authenticating users and devices, implementing both discretionary and credential rules for access control, registration of protection events (audit), integrity control of program files and data, protection against input / output and alienated media, as well as providing work in closed software environment that provides a positive technical result - increasing information security containing information constituting state secrets, from unauthorized access on the basis of sharing and discretionary mandates, rules of access control.

Figure 1 presents a structural diagram of a system for protecting information from unauthorized access to information containing information constituting a state secret.

The system for protecting information from unauthorized access to information containing state secret information contains many systems 1 for protecting user information from unauthorized access, many having workstations 3 for managing and exchanging data for workstations 3 and functional servers 4 in a computer network, which connected to each other via a network highway 5, to which a server-controller 6 of the domain is connected, as well as a security server 7 and a security server database 8, which are lyucheny bus exchange control 9 and a domain controller server 6 data.

In addition, the system for protecting information from unauthorized access to information containing information constituting a state secret contains at least one automated workstation 10 of the information security administrator having an internal bus 11 for managing and exchanging data connected to the network backbone 5, and at least at least one administrator information protection system 12.

Each system 1 for protecting user information from unauthorized access contains a security agent 13 and a user access control system 14 connected to the control and communication bus 2 of the corresponding workstation 1 or functional server 4, and the system 12 for protecting administrator information from unauthorized access contains security agent administrator 15 and security administrator access control system 16 connected to control and data exchange bus 11, respectively Tweeter workstation 10 administrator information security.

At the same time, automated workstations 3 and functional servers 4, a server-controller 6 of the domain, and automated workstations 10 of information security administrators contain hardware and software modules 17 for trusted download, as well as devices 20 for cryptographic protection of information transmitted over a local area network via Ethernet protocol, and the device 21 cryptographic protection of information transmitted over IP, which are connected respectively to the bus 2 control and data exchange auto atizirovannyh jobs 3 and 4 functional server, to the bus 9 and the exchange control domain controller server 6 and data buses 11 to control and exchange data of workstations 10 information security administrators. All devices 20 cryptographic protection of information transmitted over a local area network via Ethernet, and device 21 cryptographic protection of information transmitted over IP, are connected to each other via a network highway 5.

In addition, at least one workstation 3 contains installed on it and connected to its bus 2 control and data exchange hardware-software module 18 trusted boot, encrypting storage media connected via USB, and hardware-software module 19 trusted downloads that generate and verify an electronic digital signature.

The network backbone 5 has at least one gap, on each side of which is included one means 22 of cryptographic protection of information transmitted via open communication channels through an uncontrolled territory 23.

The system of protecting information from unauthorized access to information containing state secret information can include several workstations of 10 information security administrators and several security agents and administrators 15 connected to their buses 11 for managing and exchanging data. In this case, each of the information security administrators can quickly monitor the operation of users on the network. If it is necessary to control the work of security administrators with the control and communication buses 11 of the corresponding workstations 10, information security administrators connect the corresponding security agents 13.

The proposed system for protecting information from unauthorized access to information containing information constituting a state secret works as follows.

The security agents 13 that are part of systems 1 to protect user information from unauthorized access, the security agents 15 that are part of systems 12 to protect administrator information from unauthorized access, as well as the security server 7 connected to the control and data exchange bus 9 of server-controller 6 of the domain server 7 and security database 8 forms a system for monitoring and managing profiles.

Included in systems 1 for protecting user information from unauthorized access, systems 14 for restricting user access, as well as systems for protecting information for administrators against unauthorized access, systems 16 for restricting access for the security administrator form a system for restricting access.

The system of control and management of profiles performs the following functions: management of security profiles of users, user groups and computers; differentiation of user access to the functions of the Explorer program (Run command, control panel, taskbar in the Start menu, display settings, etc.); determining the list of applications allowed to run (providing a closed software environment) by forming a user menu in the Explorer program and controlling the launch of unauthorized applications; monitoring the status of computers on the network, collecting work statistics (start time, continuous operation time); control of the session of interactive users and network users who gained access to shared resources; logging the actions of the information security administrator and users; differentiation of powers of information security administrators at workstations of 10 information security administrators (operator, administrator); notification of the security administrator of information about unauthorized access attempts, violations of the integrated system for protecting information from unauthorized access and other critical network situations.

The profile control and management system implements the functions of differentiating access to applications (programs) launched on workstations 3 and functional servers 4, recording security events (auditing), monitoring the integrity of program files and data, and protecting against input / output to an alienable medium.

The input data for the control and profile management system are: information on the composition of registered users in the central database 8 of the security data of the automated system (on the domain controller), entries in the system and security logs of the user's workstation 3 or the functional server 4, and information security administrator commands .

The outputs of the control and profile management system are protocols of actions of administrators at workstations 10 security administrators of information and events - attempts of unauthorized access to information, integrity control, work with external media in an automated system, information about the status of computers, services, applications and policy settings security.

The profile control and management system uses an object ideology, i.e. the entire structure of the computer network and control information is presented as control objects. All devices operate with control objects (SMS objects). All management objects are stored in database 8 of the security server.

The security server database 8 contains the main root management object, which contains such management objects as domains or workgroups of the base operating system, which in turn contain such objects as computers, user applications, user profiles, user group profiles, security profiles and devices (drives, ports, etc.).

Each control object is characterized by basic attributes and its own specific set of additional attributes, access and control methods for this control object.

Security server 7 provides synchronization of management objects with security agents 13, security administrative agents 15 and other security servers 7: establishing logical connections with security agents 13 and security agents 15, checking for logical connections with security agents 13 and administrative agents 15 security, receiving and processing requests from the administrator agent 15 security for adding / excluding management objects in the profile database and modification their attributes, receiving and processing requests from security agents 13 to obtain a user profile and the composition of applications available to him, generating responses to these requests, receiving and processing messages from security agents 13 and security agent-administrators 15, when events-attempts of unauthorized access to information in the system logs of security agents 13, maintaining a protocol of actions of security administrators at workstations 10 security administrators of information regarding Olya and profile management.

Between the security server 7, the security agents 13 and the security administrative agents 15, logical connections are established. Each established logical connection has its own identifier, which allows the security server 7 to determine with which security agents 13 or security administrative agents 15 the information is exchanged. Upon successful connection, an identifier is assigned to it, and a corresponding message is sent to security agents 13 or security administrative administrators 15

The security server 7 checks for logical connections with the security agents 13 and the security administrative agents 15 by timer. A request to disconnect from the security server 7 is sent by the security agents 13 or the security administrators 15. In this case, the connection is deleted from the database 8 of the security server.

After the connection is established, the security server 7, the security agents 13 and the security administrative agents 15 exchange messages containing requests and responses.

Security agents 13 send the following types of requests to security server 7: information about the underlying operating system, to disconnect, to check the connection, to list user applications, to receive a user profile, to process an event on a computer, to receive computer devices, to get a list of files for check. In this case, the security agents 13 transmit information about the computer, the current user and events, and the security server 7 transfers information to the security agents 13 about profiles, about the composition of applications, scanned files and devices.

Security administrative agents 15 send the following types of requests to security server 7: to register a connection, to transfer domains, to add a domain, to remove a domain, to list computers of a domain, to add a computer, to delete a computer, to list domain applications, to add an application , to delete an application, to transfer domain users, to add a user, to delete a user, to change the state of a computer in the database, to change user properties, to change computer properties, to change the properties of a domain, to change the properties of an application, to remotely control a computer, to list user groups, to add a user group, to delete a user group, to change the properties of a user group, to write an administrator’s log of work, to read an administrator’s log of work , to get a list of running applications, to terminate an application, to clear the administrator’s protocol, to clear an alarm, to set properties for a group of users, to read e event protocol, for listing security profiles, for adding a security profile, for deleting a security profile, for changing the properties of a security profile, for listing devices, for changing device properties, for adding a device, for deleting a device, for changing the list of files for checking, for cleaning up the event log, to obtain the properties of the HDD (flash memory, LD), to read the archive, the protocol of events, to read the archive of the protocol of work.

The security server 7 polls the status of the security agents 13 (on the composition of running applications, the current user), and also performs reboot, shutdown computers, log off, start / stop applications.

The security server 7 sends requests to the security agent-administrator 15 about the status of the computers of the security agents, the composition of the running applications, the launch of the application, and events that have occurred.

Security agent 13 performs the following functions: monitoring the state of the user's workstation or functional server, monitoring the session state of the interactive user, setting up the user's working environment and setting restrictions, monitoring the status of applications and processes, monitoring the contents of system logs, executing commands on behalf of the security administrator (reboot, start / stop applications, system lock).

The security agent 13 establishes a connection (registration) with the security server 7 and then periodically sends the security server 7 a request to check for a connection and processes the response. Interaction with the security server 7 after establishing a logical connection is based on a request-response mechanism.

Security agent 13 is responsible for monitoring events - attempts of unauthorized access to information, collecting statistical information (username, start and end time of a user’s work session, turn on and turn off a computer, etc.), information about the status of tasks and running processes, control file integrity on the user's workstation or functional server.

Security agent 13 executes control commands received from administrator agent 15 through the security server 7 over the network and transmits information about the computer, the current user, profiles, application composition, the results of the integrity control of the scanned files and about events - unauthorized access attempts to the security server 7 to information.

Security agent 13 after establishing a logical connection with security server 7 receives from him a message with the computer system policy. Security server 7 receives information about the type of base operating system.

When a user logs on to the system, the security agent 13 transmits the user information (user name, session start time) to the security server 7. The security server 7 transmits system policy information to the user. When you install the system policy of the computer and the user, the security agent 13 changes the values in the registry.

Next, the security agent 13 generates and sends to the security server 7 requests for listing user applications, for obtaining a profile, for receiving computer devices and a list of files for verification. User applications include the main executable modules launched through the Start menu, and auxiliary executable modules launched from the main applications. Responses from the security server 7 are processed by the security agent 13, the user profile is installed in the registry, the composition of the main applications available to him in the Start menu, and the composition of the auxiliary applications launched from the main applications.

Security agent 13 performs integrity monitoring by calculating checksums of information protection system files, system and user files and comparing them with the corresponding reference values. The integrity control function allows you to detect any change (deletion, addition, replacement) of the file data and the file structure as a whole. Integrity control is performed by calculating the insert. When changing the checksums of the files or the absence of any file, a message is generated for the security server 7 about integrity violation.

Security agent 13 monitors the processes running in the system. Information about process files is collected, process windows are searched, and process information is transmitted to security server 7. The processes start and stop upon request from the security server 7, which is formed in turn by the command of the security administrator-administrator 15.

Security agent 13 monitors system events by monitoring the contents of system logs and, when events occur, attempts to unauthorized access to information and other critical events, transmit messages about their occurrence to security server 7.

Security agent 13 controls the launch of all applications and determines whether the primary or secondary application is allowed to run. If not, then the application does not start, and a message about the event is sent to the security server 7 - an attempt to unauthorized access to information.

In addition, the security agent 13 monitors messages about the start of the access control system. Upon successful start of the access control system, the corresponding settings are saved in the registry. Otherwise, the settings of the access control system in the registry are restored and the computer is restarted. If the recovery does not lead to a successful start of the access control system, an administrator record is created about the failed system recovery and the initialization of the security agent 13 is blocked.

Security agent 13 monitors the installation of external storage media according to messages from the file system monitor (drivemon.sys) about mounting the volume. Next, the security agent 13 generates a request for the security profile (descriptor) of the device to the security server 7. After receiving the security profile, the access control system performs access control of the user working on the computer to the device. When access is granted, operations with an external storage medium are carried out. After that, access to the device is closed. When copying to media, the fact of copying is transmitted to the security server 7. The security server 7 transmits facts of operations with the storage medium, including events - attempts of unauthorized access to information at the workstations of 10 information security administrators in the registration log.

Security agent-administrator 15 performs the following functions: maintaining a security server database (creating, changing, deleting objects), monitoring the status of objects (computers, applications), managing a computer and user sessions, logging the actions of administrators and operators, displaying and printing protocols of actions of administrators and operators.

Security agent-administrator 15 is the main module for implementing control functions, setting basic parameters and monitoring events in the network.

Security manager agent 15 interacts with security server 7. The exchange involves management and configuration information about tasks, processes and events at workstations of 3 users or functional servers 4.

The display of information and the user interface are carried out in graphical form.

When you enable the security agent-administrator 15, the process of establishing a connection (registration) with the security server 7 is initialized. Security administrator agent 15 generates a request for registration (establishment) of a connection with security server 7 and processes the response. Periodically, the security agent administrator 15 sends a request to the server 7 to check for a connection and processes the response. The interaction of the security agent-administrator 15 with the security server 7 after establishing a logical connection is mainly carried out on the basis of a request-response mechanism.

The administrative agent 15 implements the following groups of functions.

The group of functions for working with objects of the database 8 of the security server database allows the administrative agent 15 to generate requests for the security server 7 to receive a list of objects, to add, delete, and change the properties of objects (domains, computers, users, user groups, applications, security profiles) . Requests are generated by the command of the security administrator through the graphical interface and the responses received are processed. The RAM stores information on the composition and status of managed objects, their attributes and parameters, similar to information in the database 8 of the security server data. Upon receipt of a response from the security server 7, the state of the database in the random access memory of the workstation 10 of the information security administrator changes. Storing objects in RAM allows you to increase the speed of operations for graphically displaying the state of objects. For example, for a computer, this group of functions includes: requests / responses for obtaining a list of domain computers, for adding a computer, deleting a computer, changing computer properties.

The group of functions for working with the protocol (log) of events allows you to process requests / responses to view and clear the protocol of events, to receive an archive of the protocol of events.

The group of functions for working with the protocol (log) of the work of the information security administrator allows you to process requests / responses to view and clear the protocol of the information security manager, to receive the archive of the protocol of the information security administrator.

A group of computer management functions provides the generation of requests to the security server 7 and processing responses to information, the list of running applications, remote reboot, shutting down the computer or logging off, remote application launch, generating requests to remotely terminate the application, and receiving information about the current computer user .

A group of functions for processing requests from the security server 7 about the state of objects provides the processing and display of information about changes in the status of computers, users launching applications, events - attempts to unauthorized access to information.

The integrity control function group is designed to formulate requests to the security server 7 and process responses to receive or modify the list of files to check checksums for domain computers.

The access control system is an addition to the mandatory access model built into the basic operating system of the security system, which implies the existence of hierarchical attributes (secrecy stamp) and non-hierarchical attributes (access categories) for each subject and access object.

The basic principle of the security system of the base operating system is the concentration of central procedures for checking access rights in the security monitor, which is an integral part of the core of the base operating system. The security monitor functions are called by the object manager of the base operating system when accessing any system object in order to confirm the authority of the contacting entity. In this case, all the information necessary for the analysis of the security attributes of the subject and access object is transmitted to the security monitor.

The main method for changing the security system of the base operating system in the proposed access control system is to intercept the function of checking access rights in the security monitor and add security descriptors for objects and access subjects with mandatory attributes without violating the internal structure of descriptors. In this case, the descriptor is compared to the object, its storage and access restriction to it are realized by standard functions of the base operating system.

In the security descriptor of the access subject (access token, Token), credentials are entered at the stage of user registration in the system and are located in specially marked elements of the list of groups to which the user belongs. These attributes consist of a privacy stamp represented by a security identifier (SID) predefined when creating the system, and several access categories, each of which is represented by the security identifier of user groups defined in the security agency (such identifiers are unique for each agency). This information is stored in the database 8 of the security system of the base operating system, while each user of the system has several entries in the database:

a base record containing standard user attributes in the base operating system, and one record for each privacy stamp, which the user is allowed to work with, containing a list of categories for the corresponding signature stamp and user.

In the security descriptor (security descriptor) of the access object (Security Descriptor), credential attributes are entered in the Discretionary Access Control List (DACL) in the form of specially marked elements (Access Control Element, ACE), while the security identifiers of these elements correspond to those described above . The storage of security descriptors of access objects is assigned to the system 14 for restricting user access and the system 16 for restricting access for the security administrator.

The access control system implements an access control verification algorithm created on the basis of the standard security monitor algorithm and supplemented by checking the credential attributes of the object and subject.

The processing of the mandatory attributes of the subject and object is carried out according to the following rules:

The subject has access to the object if all the access categories listed in the security descriptor (security descriptor) of the object are included in the subject's access token.

The subject has access to read and change the object, if the secrecy of the object has a value of no more than the secrecy of the subject.

If the secrecy of an object is greater than the secrecy of the subject and the object is containerized (contains other objects), the subject has access to add subobjects to the object.

If access is allowed in accordance only with the mandatory rules for restricting access, but is not allowed for discretionary (or vice versa), access is denied.

Hardware and software modules 17 for trusted download, hardware and software modules 18 for trusted download, encrypting USB-connected storage media and hardware and software modules 19 for trusted loading, generating and verifying electronic digital signature, provide control of the integrity of the file system of automated workstations 3 and functional servers 4, as well as the procedure for downloading software to them in accordance with the selected level of access to information.

Devices 20 for cryptographic protection of information transmitted over a local area network via Ethernet, and devices 21 for cryptographic protection of information transmitted over IP, provide encryption of information transmitted over a network highway 5 between workstations 3, functional servers 4, server-controller 6 domain and workstations of 10 information security administrators.

Means 22 cryptographic protection of information transmitted over open communication channels, provides encryption of information when it is transmitted through areas outside the controlled zone.

When using the proposed system for protecting information from unauthorized access to information containing information constituting a state secret, an increase is achieved in the security of information from unauthorized access in an automated system based on the joint use of discretionary and mandatory access delimitation rules.

Literature

1. RU 2263950 C2 (Borodaky Yu.V., Dobrodeev A.Yu., Sviridyuk Yu.P., Tereshkin N.L.), 10.11.2005.

2. Security in Windows XP. - www.hardtek.m / sistem / winxp_security.shtml.

Claims (1)

A system for protecting information from unauthorized access to information containing state secret information containing many systems for protecting user information from unauthorized access, each of which is connected to the control and data exchange bus of one of the many workstations of users or functional servers in a computer network, which are connected to each other and to the domain controller server via a network backbone, characterized in that the security server is introduced a te and a security database that are connected to the control and data exchange bus of the domain controller server, as well as at least one automated workstation of the information security administrator and a system for protecting the administrator’s information from unauthorized access connected to his control and data exchange bus, each system protecting user information from unauthorized access contains a security agent and a user access control system connected to the control and exchange bus data of the corresponding automated workstation of the user or the functional server, and the system for protecting administrator information from unauthorized access contains a security administrator agent and a security administrator access control system connected to the control and data exchange bus of the corresponding automated workstation of the information security administrator, while the automated workstations and functional servers, domain controller server and automation The workplace of the information security administrator contains the hardware and software modules for trusted loading installed on them, devices for cryptographic protection of information transmitted over the local area network via Ethernet, and devices for cryptographic protection of information transmitted over IP, which are connected to the control and data exchange buses relevant workstations and functional servers, domain controller server and admin workstation security saver, all cryptographic protection devices for information transmitted over a local area network via Ethernet, and cryptographic protection devices for information transmitted over IP, are connected to each other via a network backbone, and at least one workstation contains installed on it and hardware-software module of trusted loading connected to its control and data exchange bus, encrypting storage media connected via an interface su USB, and a hardware-software module of trusted boot, generating and verifying electronic digital signature.