RU2636092C1 - Device of hardware and software complex for generating key information and radio data for radio station - Google Patents

Abstract

FIELD: radio engineering, communication.

SUBSTANCE: device comprises a computing module (MB) made from a video output unit, an external device interface, a data stream decompression unit for transmitting to external devices, a storage unit and a data exchange unit of noise sequence, a key generation and storage unit and encryption masks, a memory controller, a state manager, an encryption unit, masking, demasking and decoding of data, a control and indication control module (CICM) configured from a power battery state controller, a power supply voltage control unit, a body opening control unit, a unit for controlling elements of additional indication, a controller of data input from the keyboard, a module of interfaces (MI) configured from external devices- a unit of interaction with radio equipment, a controller of interaction with a radio data input device (RIDD), an interaction unit with personal computer- computer (PC), the keyboard and a display.

EFFECT: increased data transmission security.

1 dwg

Description

The invention relates to radio engineering and computer engineering, in particular to specialized computing tools for a radio station, providing for the generation, storage, loading of generated data into a radio station, destruction of key information and radio data, storage and destruction of configuration data, data of the original sequence (IP) and data of verification keys the integrity of the software of the radio station (DKRC), the destruction of key information (KI) and cryptographically dangerous information (KOI) in emergency situations Barrier-unauthorized access (unauthorized access), as well as the operator's command.

From the patent of the Russian Federation RU 2321055 (published March 27, 2008; IPC G06F 21/20, G06F 12/14), a device for trusted loading and protection of information from unauthorized access for computers of information and computing systems is known. This device contains a controller for exchanging information with a computer, a user identification and authentication processor that operates independently of the computer’s central processor, a control bus and computer data blocking module when an unauthorized person tries to access it, an information exchange controller with an external storage medium, non-volatile memory blocks with accounting user data, device settings and an electronic journal, as well as a power control device. The external main input / output of the controller for exchanging information with the computer is connected to the control and data exchange bus of the computer, its control input is connected to the control output of the control bus and computer data blocking module, and its internal main input / output is connected to the local bus of the device. The internal trunk I / O of the user identification and authentication processor via the local bus of the device is connected to the trunk I / O of non-volatile memory and to the input of the control bus and computer data blocking module. The external main input / output of the processor is connected to the controller for the exchange of information with an external storage medium, and the signal input of the processor is connected to the output of the power control device. The device includes a block of interfaces of external devices, including the intermodular interface of the hardware encoder and the management interface of network adapters, the inputs of which are connected to external trunk inputs / outputs of the identification and authentication processor, and the outputs are connected to the inputs of the hardware encoder and network adapters, respectively. The external device blocking module contains devices for locking and controlling hard disks, the electromagnetic latch of the computer case, the RESET and POWER signals of the computer, the inputs of which are connected to the additional control outputs of the control bus and data exchange blocking module of the computer and the control output of the identification and authentication processor, and the outputs inputs / outputs of the respective controlled and blocked devices. Non-volatile flash memory with storage blocks of a trusted operating system, software for monitoring the integrity of device components, remote administration and device management, monitoring of all critical time intervals for starting and loading a computer, the client part of the thin client software, the main input / output of which is connected to the local bus backbone of the device. The microcontroller of the tamper sensors and the extraction of computer components with its own independent power source, the external inputs of which are connected to the outputs of the respective sensors, and the output to the signal input of the identification and authentication processor. A hardware random number sensor whose output is connected to the input of the control bus lock module and computer data exchange. Random access memory device, the main input / output of which is connected via the local bus of the device to the internal main input / output of the identification and authentication processor. The identification and authentication processor additionally includes a module for continuous user authentication, a module for managing keys for loading a hardware encoder, and a module for managing network adapters that implement interaction with an external storage medium, a hardware encoder, and network adapters, respectively, through an interface block of external devices. The module for checking the integrity and condition of the hardware components of the protection device, which carries out their diagnostics through the communication channels of the internal trunk inputs / outputs of the identification and authentication processor with the components of the device. A module for interacting with an access control system that provides informational connections between the identification and authentication processor through the local device bus, a computer information exchange controller, and a computer control and data exchange bus with a computer access control system. A module for interacting with servers of an information-computing system, which ensures computer operation in remote control mode or a thin client using software loaded into the computer’s RAM from the corresponding blocks of non-volatile flash memory through its main input / output, local device bus, controller exchange information with a computer and a control bus and exchange computer data.

The specified known device is intended for trusted computer boot and protection against unauthorized access (unauthorized access) to information processed and stored in personal computers and computer information and computing systems, and cannot directly be used by a device of a hardware-software complex for generating key information and radio data for a radio station . The device cannot perform the destruction of key information and radio data, the storage and destruction of configuration data, the data of the initial sequence (IP) and the data of the integrity keys of the software of the radio station (DCRC), the destruction of key information (CI) and cryptographically dangerous information (CFI) in emergency situations , unauthorized access (unauthorized access), as well as at the command of the operator.

Also known is a device for creating a trusted environment and protecting information from unauthorized access for computers of information and computing systems (see RF patent RU 2538329, published January 10, 2015; IPC G06F 21/57, G06F 12/14). It contains a control microcontroller, large capacity non-volatile flash memory with device software storage units, a non-volatile high-speed memory with an electronic journal for recording events during device operation, a unit with user credentials and a unit with settings and with remote control keys, a switch block for selection the operating mode of the device, an audio device for additional information about detected unauthorized actions, the unit inter of external devices, as well as a computer power lock device. The control microcontroller includes a user identification and authentication module, modules for checking the integrity and condition of hardware and software components of the protection device, a module for monitoring all critical time intervals for starting and loading a computer, a module for managing keys for downloading hardware encryption, an interaction module with an access control system, a module for interacting with servers of an information-computing system, a device settings module, a random number sensor. A non-volatile flash memory of large capacity contains a trusted operating system, modules for monitoring the integrity of the device components, remote administration and device management, the client part of the thin client software, and the internal main input / output of the microcontroller through the local bus of the device is connected to the main I / O of non-volatile flash memory and high-speed memory, and external trunk I / O micro the controller is connected to the inputs of the block of interfaces of external devices, including the USB Host interface, the iButton interface of the Touch Memory type identifier and the inter-module interface of the hardware encoder. The device includes a drive based on a flash memory chip with an SPI interface, which connects to the SPI bus of the computer motherboard chipset and contains in its write-protected area of the computer BIOS with additional built-in commands that provide interaction with the control microcontroller and verify the integrity of the downloaded software , and a controllable high-speed electronic key installed on the SPI bus of the motherboard between the computer chipset and the drive. The microcontroller is equipped with an electronic key control channel that connects the control output of the I / O port of the microcontroller to the control input of the electronic key, as well as the SPI interface controller, which allows the microcontroller to be connected to the SPI bus and operate in direct access to the drive’s memory and in the mode of command control from the chipset to the drive via the SPI bus, thus forming a hardware node that monitors the BIOS integrity in the drive before loading it with the possibility of subsequent control on the SPI bus chip set to the accumulator and lock by an electronic key. To implement the microcontroller’s communication channels with hardware components and the chipset, it is additionally equipped with USB and SMBus interfaces, and to block the computer from starting in case of BIOS integrity violation or other unauthorized actions, the main power supply of the computer is integrated into the microcontroller, which is built into the corresponding control channel of the chipset, the device itself is connected to the standby power source of the computer.

This device, as well as the previous one, is intended for trusted computer boot and protection against unauthorized access (unauthorized access) to information processed and stored in personal computers and computer information and computing systems and cannot directly be used in a device of a hardware-software complex for generating key information and radio data for the radio station. The device cannot perform the destruction of key information and radio data, the storage and destruction of configuration data, the data of the initial sequence (IP) and the data of the integrity keys of the software of the radio station (DCRC), the destruction of key information (CI) and cryptographically dangerous information (CFI) in emergency situations , unauthorized access (unauthorized access), as well as at the command of the operator.

No analogues of the claimed device of the hardware-software complex for generating key information and radio data for the radio station were found.

The problem to be solved by the invention is the creation of a specialized computing tool (hardware and software complex) that provides the formation, storage, destruction of key information and radio data, storage and destruction of configuration data, data of the original sequence (IP) and data of the keys for checking the integrity of the software of the radio station (DCRC), destruction of key information (CI) and cryptographically hazardous information (CMI) in emergency situations, unauthorized access (unauthorized access) and at the command of a prator, as well as loading the generated data into a radio station.

The technical solution relates to the field of workstations for generating key information for a radio station. The solution is based on a modular digital programmable hardware platform and hardware-independent modular software.

A hardware-software complex for generating key information and radio data (PAK-KR) can be used in radio stations.

The technical result is to increase the reliability of protection of key information and radio data.

To solve this problem with achieving a technical result, a device of a hardware-software complex for generating key information and radio data for a radio station comprises a computing module, a control, control and indication module, an interface module, a keyboard and a display. The computing module is made up of a video information output unit, an external device interface, a data stream decompression unit for transmission to external devices, a noise sequence data storage and exchange unit, an encryption key and mask generation and storage unit, a memory controller, a state manager, an encryption, masking unit, unmasking and decrypting data. The control, control and indication module is made of a power battery status controller, a power supply voltage control unit, a case tamper control unit, an additional indication control unit, a keyboard data input controller. The interface module is made of external devices: an interaction unit with radio equipment, an interaction controller with a radio data input device, an interaction unit with a personal electronic computer. The keyboard output is connected to the input of the keyboard input controller. The output of the power battery status controller, the output of the power voltage control unit, the output of the tamper control unit, the output of the control unit for additional display elements, the output of the data input controller from the keyboard of the control, control and indication module via the data bus are connected to the input of the state manager of the computing module. The first input / output of the state manager via the data bus is connected to the first input / output of the encryption, masking, unmasking and decrypting unit. The second input / output of the encryption, masking, unmasking and decryption unit of the data via the data bus is connected to the first input / output of the memory controller. The second input / output of the memory controller via the data bus is connected to the input / output of the noise sequence data storage and exchange unit, and the third input / output of the memory controller is connected via the data bus to the input / output of the block for generating and storing keys and encryption masks. The second input / output of the state manager via the data bus is connected to the first input / output of the decompression unit of the data stream for transmission to external devices. The second input / output of the decompression unit of the data stream for transmission to external devices via the data bus is connected to the first input / output of the external device interface, and its third input / output is connected to the first input / output of the video information output unit. The second, third and fourth input / output of the interface of external devices, respectively, via data buses, is connected to the inputs / outputs of the unit for interacting with radio equipment, the controller for interacting with the radio data input device, and the unit for interacting with the personal electronic computer of the interface module. The second input / output unit for issuing video information via the data bus is connected to the input / output of the display.

These advantages, as well as features of the present invention are explained with the help of a variant of its implementation with reference to the figure.

The figure depicts a functional block diagram of the claimed device of a hardware-software complex for generating key information and radio data for a radio station.

The device comprises a computing module 1, a control, indication and control module 2, an interface module 3, a keyboard 4 and a display 5. Module 1 is made of a video information output unit 6, an external device interface 7, a data stream decompression unit 8 for transmission to external devices, a unit 9 storing and exchanging data of a noise sequence, a block 10 for generating and storing encryption keys and masks, a memory controller 11, a state manager 12, an encryption, masking, unmasking and decrypting unit 13. The control module 2 is made of a power battery state controller 14, a power supply voltage monitoring unit 15, a case tamper control unit 16, an additional indication control unit 17, a keyboard data input controller 18. The interface module 3 is made up of external devices — a unit 19 for interacting with radio equipment, a controller 20 for interacting with a radio data input device (UVRD), and a unit 21 for interacting with a personal electronic computer (PC) (USB / RS232C).

The output of the keyboard 4 is connected to the input of the controller 18 data input from the keyboard. The output of the controller 14 of the state of the battery, the output of the block 15 control voltage supply, the output of the block 16 control the opening of the housing, the output of the block 17 control the elements of additional indicators, the output of the controller 18 of the data input from the keyboard of the control unit 2 via a data bus connected to the administrator input 12 states of the module 1 computational. The first input / output of the state manager 12 is connected via the data bus to the first input / output of the data encryption, masking, unmasking and decryption unit 13, the second input / output of which is connected via the data bus to the first input / output of the memory controller 11. The second input / output of the memory controller 11 is connected via the data bus to the input / output of the noise sequence data storage and exchange unit 9, and the third input / output of the memory controller 11 is connected via the data bus to the input / output of the block 10 for generating and storing keys and encryption masks. The second input / output of the state manager 12 via the data bus is connected to the first input / output of the decompression unit 8 of the data stream for transmission to external devices, the second input / output of which via the data bus is connected to the first input / output of the interface 7 of external devices, and its third input / output - with the first input / output of the block 6 issuing video information. The second, third and fourth input / output of the interface 7 of external devices, respectively, via data buses, is connected to the inputs / outputs of the unit 19 for interacting with radio equipment, the controller 20 for interacting with a radio data input device (UVRD), and the unit 21 for interacting with a personal electronic computer (PC) module 3. The second input / output of the block 6 for issuing video information via the data bus is connected to the input / output of the display 5.

Computing module 1 provides:

- software integrity control (software);

- the formation of operator authentication keys, the formation of key information (CI) and radio data (RD);

- data exchange with display 5 via SPI;

- control of the data flow via the UART0, UART1 interfaces, blocking the transmission in case of a data sequence violation and the generation of an error signal;

- masking of keys received from the keyboard, decryption of the initial data of the CI formation;

- formation of masks, development of operator authentication keys, storage keys, pseudo-random frequency tuning keys (PFRCH), sync packets using random number sensors (PRSP);

- destruction of masks and CI in the event of a tampering event, when the internal supply voltage deviates from the norm, when the emergency erase buttons are pressed or by command;

- storage of configurations of the source data for the formation of CI and RD in encrypted and imitated form on the storage key;

- receiving the data of the integrity check of the software (software) of the radio station, their decryption using keys and storage in encrypted and encrypted form on the storage key, as well as the initialization of the integrity check mode in the radio. Receiving from the radio station the results of the integrity check, their analysis and display on the display 5 of the reference and control groups of the integrity check received from the radio station, as well as an indication of the result of their comparison;

- the formation of CI and RD through the menu on the display 5 of the indicator or by command, informing about the results of the formation, as well as displaying on the display 5 the stage of formation during the operation of the algorithm and information about the success of the formation;

- automatic logging of events and providing the operator with the opportunity to view the log from display 5 or through special information display software (SPO-OI) installed on the PC.

Module 2 control, management and display provides:

- power management and control module 1 computing and module 3 interfaces;

- management and control of the internal battery charge;

- processing data entered from the keyboard 4 and transmitting information about the pressed keys of the keyboard 4 to the computing module 1.

Interface module 3 provides:

- exchange of configuration data with a PC via USB or RS232 interfaces, depending on the connected cable;

- data exchange with air traffic control or radio station via RS485 interface;

- sending formed KI and RD to R-187P1 via RS-485 interface;

- receiving from the PC cryptograms of the source data for the formation of CI and RD.

The device operates a hardware-software complex for generating key information and radio data for a radio station as follows.

The state manager 12 is continuously powered by the battery and always monitors the status of the controller 14, blocks 15, 16, 17 and the controller 18 of the control module 2 in the low current consumption mode. If the signals of the controller 14, blocks 15, 16, 17, of the controller 18 are outside the acceptable range or the keyboard data input controller 18 issued an emergency erase command, then the state manager 12 erases the memory areas with critical information and blocks the PAK-KR operation. If the signals of the controller 14, blocks 15, 16, 17 and the controller 18 are within acceptable limits, then the state manager 12 expects the power-on command from the keyboard input controller 18 to be activated by the operator by pressing and holding the power key.

Upon receipt of an enable command from controller 18, the state administrator 12 tests the integrity of his own software using a cryptographic algorithm and, if successful, starts a timer to wait for a signal from the encryption block 13 and supplies power to all blocks of modules 1 and 3. If the integrity test of the administrator’s own state software 12 states completed with by mistake, the administrator of 12 states erases memory areas with critical information and blocks the PAK-KR operation, notifying the PAK-KR operator about an accident by a signal to control unit 17 Avleniya elements of additional indications.

When power is supplied to the encryption unit 13, unit 13 tests the integrity of its own software using a cryptographic algorithm and, in case of an error, issues an emergency erase command to the administrator of 12 states, as a result of which the administrator of 12 states erases memory areas with critical information and blocks the PAK-KR operation, notifying operator PAK-KR about the accident signal to block 17.

If the integrity testing of the proprietary software with the cryptographic algorithm of the encryption unit 13 is successful, the unit 13 tests the memory controller 11. If the testing of the controller 11 by the encryption unit 13 failed, the unit 13 stops its operation, as a result of which the state manager 12 switches off the signal from the encryption unit 13 and the state manager 12 disconnects the power from all blocks of modules 1 and 3.

If the testing of the memory controller 11 by the encryption unit 13 is successful, the encryption unit 13 loads the operating software into the memory of the controller 11, instructs the display 5 to turn on, tests the unit 10 for generating and storing encryption keys and masks, as well as the interface 7 of external devices, unit 19 interaction with the radio equipment, the interaction controller 20 with the radio data input device (UVRD) and the interaction unit 21 with the PC. If the testing of the above blocks (block 10, or 7, or 19, or 20, or 21) failed, the encryption block 13 displays the cause of the error on display 5, block 13 goes into emergency mode and blocks the execution of the program, resulting in administrator 12 states the timer is activated for the absence of a signal from block 13 encryption, and administrator 12 turns off the power from all blocks of modules 1 and 3.

If the testing of the above blocks (blocks 10, 7, 19, 20, and 21) was successful, the encryption block 13 requests the result of the integrity check from the administrator of 12 states, which is a signal to turn off the timer of the administrator of 12 states. If the requested integrity check result from the state manager 12 does not match the expected one, the encryption unit 13 generates an emergency erase command to the state manager 12 and terminates, while the state manager 12 erases the memory areas with critical information and blocks the PAK-KR operation.

If the full PAK-KR test was successful, display 5 displays a date and time input dialog box, and the encryption unit 13 expects the keyboard and controller 18 to enter data from the keyboard, administrator 12, the date and time entered by the operator.

After the operator enters 4 dates, times and time zones from the keyboard, their values are stored in the controller 11 and transmitted to the encryption unit 13 for each request. Block 13 using block 10 generates temporary masks of the software integrity check keys of the PAK-KR unit and the key of the initial noise sequence (IP) and passes them to the state manager 12, after which the display 5 shows a menu with the ability to check the software integrity of the PAK-KR unit or boot IP.

When the operator selects the IP boot menu item, the encryption block 13 gives the command to prohibit the display of the values of the pressed keys of the keyboard 4 on the display 5, as a result of which any keystroke is displayed on the indicator by some symbol, for example, the symbol "*", and instead of the value in the encryption block 13 the pressed key is sent from the administrator 12 value "C". Display 5 displays a dialog with an invitation to enter the block code of the IP key.

After entering the last digit of the IP key, the encryption unit 13 requests the administrator of the 12 states the checksum of the entered IP key and displays it on the display 5. If the operator does not confirm the checksum of the IP key, the menu is displayed on the display 5 with the option to cancel the key entry or enter the IP key again. If the operator confirms the checksum of the IP key, the state manager 12 masks the IP key and transfers it to the encryption unit 13, after which a message is displayed on the display 5 waiting to load the IP.

The operator, using the SPO-OI program, transmits the IP from the CD-ROM through the PC interaction unit 21, the external device interface 7, the data stream decompression unit 8, the state manager 12, the encryption unit 13 to the original noise sequence to the memory controller 11. After the IP is fully loaded into the controller 11, the integrity of the IP is checked by the block 13 in a cryptographic manner using the IP key. If the verification of the integrity of the IP gives a negative result, the corresponding notification is displayed on the display 5 with the transition to the menu for selecting the repeated loading of the IP or canceling the procedure for entering the IP. If the integrity check of the IP was successful, the encryption unit 13 using the IP and the block 10 for generating and storing keys and masks generates new keys for storage, authorization and mask keys, re-encrypts the IP on a new storage key and stores the IP in block 9, encrypts the keys on the main key storage and stores them in non-volatile memory of the memory controller 11. The main storage key is encrypted on the authorization key and stored in the external radio data input device (ATRM), having passed the path from block 10 through block 13, administrator 12, block 8, interface 7, the controller 20 for interaction with the UVRD, and the masked authorization key is stored in cryptographically important volatile administrator memory 12 states.

When the PAK-KR power is turned off, the administrator 12 saves a masked authorization key in non-volatile memory, the memory controller 11 in non-volatile memory stores the keys encrypted on the main storage key, and the noise sequence data storage and exchange unit 9 stores the encrypted IP.

When the power is turned on, the integrity of the software is monitored and the hardware is tested as described above. Upon successful testing, the encryption unit 13 reads the authorization key from the administrator 12 of the states and displays on the display 5 an invitation to the operator to authorize by attaching the air-traffic control device to the connector of the controller 20 of interaction with the radio data input device. If the storage key read from the connected ATCM can be decrypted with the authorization key, the operator is given access to the PAK-KR control, otherwise the PAK-KR operation is blocked by the state manager 12 for a sufficiently long time, for example, for 30 minutes.

The controller 11 memory in non-volatile memory stores a log of events and actions of the operator PAK-KR. Access to the event log is possible only after successful authorization of the operator.

An operator using an SPO-OI on a personal computer can create a radio communication circuit and load it together with the radio data through the connector of the PC interaction unit 21 into the non-volatile memory of the controller 11. After loading the memory of the radio communication circuit into the controller 11, the PAK-KR operator using the keyboard 4 selects the appropriate item the menu starts the key generation procedure for radio stations in the block 10 for generating and storing keys and encryption masks. The source data for generating the keys is the IP stored in the block 9 for storing and exchanging data of the noise sequence. The generated key information and radio data (CIRD) in encrypted form are stored in non-volatile memory of the controller 11.

If the KIRD is formed, the PAK-KR operator connects the radio station to the connector of the unit for interacting with the radio equipment using the appropriate cable and, using the keyboard 4, selects the appropriate menu item and starts the procedure of downloading the KIRD from the controller 11 to the radio station.

The PAK-KR operator can erase KIRDs only from the keyboard 4 by selecting the appropriate menu item and only with the help of an additional confirmation of the erase operation, by attaching the air-traffic control device to the connector of the interaction controller 20 with the radio data input device.

The generation of key information in block 10 and block 13 is duplicated at the hardware level, and its correctness is controlled by constant comparison of the results of the main and backup generators.

When transmitting information from block 10 for the formation and storage of keys and encryption masks and memory controller 11 to devices connected to the connectors of block 19 for interacting with radio equipment, controller 20 for interacting with air traffic control, block 21 for interacting with PC, two data streams are created: one from the selected main, the other from the selected duplicate block from the above. The redundant block modifies the stream according to a given law, which is known to block 8 decompression of the data stream for transmission to external devices. Having received two streams for transmission, block 8 compares the data of the streams, and if they are not correct, the interface 7 of external devices is blocked, which prevents the unintentional transfer of cryptographically important information to external devices. If the flow data is correct, the data stream decompression unit 8 passes the main data stream to the interface 7 of the external devices with constant control of the modified data stream, which leads to a decompression of the total output stream.

Thus, through the use of the above-described functional blocks in the circuit of the claimed device and the relationships between them, it is possible to achieve the claimed technical result, namely, to increase the reliability of protection of key information and radio data.

The most successfully declared device of a hardware-software complex for generating key information and radio data for a radio station is industrially applicable in radio engineering when generating, storing, loading generated data into a radio station, for destroying key information and radio data, for storing and destroying configuration data, data of an initial sequence (IP) and data keys of the integrity check of the software of the radio station (DKRC), for the destruction of key information (KI) and is cryptographically dangerous information (CFI) in emergency situations and during unauthorized access (unauthorized access), as well as at the command of the operator.

Claims (1)

A device of a hardware-software complex for generating key information and radio data for a radio station, comprising a computing module, a monitoring, control and indication module, an interface module, a keyboard and a display, the computing module being made of a video information output unit, an external device interface, a data stream decompression unit for transmission to external devices, a unit for storing and exchanging data of a noise sequence, a unit for generating and storing keys and encryption masks, a memory controller, and state administrator, data encryption, masking, unmasking and decryption unit, monitoring, control and indication module is made of a power battery status controller, power supply voltage control unit, case opening control unit, additional display elements control unit, keyboard data input controller, interface module made of external devices - a unit for interacting with radio equipment, a controller for interacting with a radio data input device (UVRD), and a unit for interacting with personal electronic computer (PC) (USB / RS232C), and the keyboard output is connected to the input of the data input controller from the keyboard, the output of the power battery status controller, the output of the power voltage control unit, the output of the tamper control unit, the output of the control unit for additional indicators , the output of the data input controller from the keyboard of the control, control and indication module via the data bus is connected to the input of the state manager of the computing module, the first administrator input / output through the data bus is connected to the first input / output of the data encryption, masking, unmasking and decryption unit, the second input / output of which is connected via the data bus to the first input / output of the memory controller, the second input / output of which is connected to the input / output via the data bus unit for storing and exchanging data of the noise sequence, and the third input / output of the memory controller is connected via a data bus to the input / output of the unit for generating and storing keys and encryption masks, the second input / output of the administrator a state tractor is connected via the data bus to the first input / output of the decompression unit of the data stream for transmission to external devices, the second input / output of which via the data bus is connected to the first input / output of the external device interface, and its third input / output - to the first input / the output of the video information issuing unit, the second, third and fourth input / output of the external device interface, respectively, is connected via data buses to the inputs / outputs of the interaction unit with the radio equipment, the interaction controller with a radio data input device (UVRD), an interaction unit with a personal electronic computer of an interface module, a second input / output of a video information issuing unit via a data bus is connected to an input / output of a display.

Images