RU2711018C1 - Method of protecting information from leakage through a channel of secondary electromagnetic radiation and pickup and an information protection device for realizing said method - Google Patents

Abstract

FIELD: information technology.SUBSTANCE: invention relates to communication engineering and can be used to protect information processed by a technical means having a video system operating on the basis of DVI, VGA, Display Port, HDMI and similar standards, from leakage of information on a channel of secondary electromagnetic radiation and pickup (SEMRP). In order to achieve the technical result in the method consisting in the vehicle formation on the additional information input/output port, to which the information input/output device of the structured non-information signal is connected, wherein as an information input/output port, where the vehicle generates a non-information four-channel signal, an additional video port of the vehicle is used, as an information input/output device an information security device is used.EFFECT: eliminating human factor influence on the process of technical protection of information from leakage through the SEMRP channel and improving efficiency of using interference energy due to its adaptivity on the spectrum width, level and time of radiation relative to the informative signal.4 cl, 5 dwg

Description

The proposed method and device for protecting information for implementing this method relate to the field of technical protection of information, radio engineering, electronics and can be used to protect information processed by technical means (TS), which incorporates a video system (BC) operating on the basis of DVI standards, VGA, Display Port, HDMI and similar, from information leakage through the channel of spurious electromagnetic emissions and interference (PEMIN).

One of the main threats to the security of limited access information processed by a TS is information leakage through technical channels, which is understood as the uncontrolled distribution of an informative signal from its source through a physical medium to a TS that intercepts information.

Information input / output devices (data transmission channel), when processing TS information, create secondary electromagnetic radiation (PEMI), which spreads on the air and creates interference on the ground and power circuits, conductive lines and engineering communications that go beyond the controlled area . By receiving and decoding these signals, it is possible to restore information processed by the vehicle.

The most dangerous (from the point of view of information leakage due to PEMIN) operating mode of the vehicle is the output of information on the monitor screen.

To protect information from leakage through the PEMIN channel, it is necessary at the point of possible interception of informative signals to reduce the signal-to-noise ratio to make it impossible to intercept, process and analyze informative signals in order to extract information. This can be achieved in two ways.

Firstly, by reducing the level of informative signals at the point (place) of a possible interception of information. The implementation of the passive method consists in shielding the radiation source, improving the structural, technological and circuit design, filtering signals in the lines, as well as equipping the perimeter of the room with special materials that absorb electromagnetic fields.

Secondly, an increase in the noise level on the air, grounding and power supply circuits, conductive lines and engineering communications at the point (place) of a possible interception of information. The implementation of the active method consists in creating, using a noise generator, spatial broadband electromagnetic interference on the air and linear interference in the grounding and power supply circuits, conductive lines and engineering communications that go beyond the controlled zone, providing information signals with a level and frequency band overlapping.

The use of masking interference leads to a decrease in the probability of the correct detection of an informative signal, a decrease in the accuracy of measurement of its parameters, and an increase in the probability of false alarm. The effectiveness of masking interference depends on the time and frequency structure of both the interference and the signal, as well as on the energy ratio of the interference to the signal at the input of the intelligence receiver.

To protect information from leakage through the PEMIN channel, masking interference is redundant, because:

the parameters of the signals (structure, duration, frequency) that flow in the vehicle's data transmission channels, and the PEMIN parameters are known to the attacker, because the data transmission channels work on the basis of open standards;

 masking interference has a frequency spectrum bandwidth and levels significantly exceeding the bandwidth and levels occupied by the informative signal;

masking interference can have a negative effect, in terms of electromagnetic compatibility, on the functioning of radio facilities.

To protect information from leakage through the PEMIN channel, it is enough to use imitation noise created using a non-information signal generated by the TS, because:

1. simulation interference contains false information and causes maximum information damage to a potential attacker, since simulation interference and an informative signal are synchronized with each other and have the same parameters;

simulation noise and informative signals have mutually overlapping frequency energy spectra and comparable intensity levels and can be realized by a low-power interference transmitter.

imitation interference has a minimal impact on the functioning of the radio;

From the current level of technology known "Generator of noise signals" [1].

A noise signal generator (GHS), containing contacts for connecting a power source, a printed circuit board containing the first and second oscillators, third and sixth variable resistors, fourth, fifth and seventh capacitors, each of the oscillators made on two transistors according to the scheme with a common emitter, and the bases of the first transistors of the first and second oscillators and the bases of the second transistors of the first and second oscillators are connected, the second constant resistor and the third variable resistor included in the limitation circuit then as the base of transistors, the fourth constant resistor is included in the current limiting circuit of the collectors of transistors, and in the level control circuit of the generated noise signal, the seventh capacitor with the sixth variable resistor connected in series is connected to it, the semiconductor diode is connected to the transistor bases and through the series-connected limit resistors to the positive terminal of the power source, and the anode of the diode - to the housing, a coil is installed in the power circuit of the noise generator Single inductors with distributed parameters attached to the third contact and GSHS limiting resistor R4, resistors R1, R2, terminal power amplifier and a capacitor C1.

The disadvantages of this technical solution are:

1. high cost and complexity of the technical implementation of the device;

non-optimal use of masking interference due to their excessive values of the level and width of the spectrum to protect the information circulating in the data transmission channels of the vehicle, which includes a video system, from leakage through the PEMIN channel.

Also known from the existing level of technology is the “Method of protecting information being processed by means of computer technology by suppressing informative spurious electromagnetic radiation and interference, an information protection device for implementing the method” [2], which consists in generating a broadband noise signal and mixing it with an additional signal, with subsequent use received as a result of mixing the signal as a masking broadband noise signal, as an additional signal form a clock signal to an information processing system (SOI), forming a masking broadband noise signal is performed using two noise signals with the division of frequency spectrum signals and then summing the electromagnetic field.

The disadvantages of this technical solution are:

1. high cost and complexity of the technical implementation of the device;

non-optimal use of masking interference due to their excessive values of the level and width of the spectrum to protect the information circulating in the data transmission channels of the vehicle, which includes a video system, from leakage through the PEMIN channel.

Closest to the claimed invention is the well-known "Method of protecting computer equipment from information leakage through the channel of spurious electromagnetic radiation and interference" [3], selected as a prototype.

This method consists in generating a masking signal, and also in the fact that N files are generated whose contents do not need to be protected, then the first part of the files from the general list corresponding to 0.5N is recorded on the first digital storage device, and the second part of the files from the general list corresponding to 0.5N - to the second digital drive, after that a file selected from the list according to a random law is read from the first digital drive and written to a second digital drive and simultaneously from the second digital drive they randomly select a file from the list and write it to the first digital storage device, write and read files repeatedly for the time required to mask the informative signal, while the same files are repeatedly written to the same place in digital drives to fulfill the condition of not exceeding the total size of all copied files, the size of the memory of the digital drive on which the generated files are recorded, when passing through the connecting lines of typical nodes s and blocks of computer equipment having its own uninformative side electromagnetic radiation spectrum informative signal coincidence with the maximum intensity of the spectrum uninformative side electromagnetic radiation is provided by correcting the spectrum envelope uninformative side electromagnetic radiation by changing the bit sequence formed structure in the files.

The disadvantages of this method are:

1. operator’s participation in the process of technical protection of information;

lack of synchronization between the simulation noise and the informative signal;

the high cost and complexity of the technical implementation of the device;

the method can be used to protect information circulating in only one input / output device (data transmission channel) - USB.

The technical result obtained from the introduction of the invention in terms of the method and device is to eliminate the influence of the human factor on the process of technical protection of information from leakage through the PEMIN channel.

An additional technical result is an increase in the efficiency of using interference energy due to its adaptability to the spectral width, level and time of radiation relative to an informative signal, reducing the complexity and cost of technical implementation of the device and work on technical protection of information processed by the vehicle from leakage through the PEMIN channel, expanding opportunities, namely, that the information protection device in addition to imitation noise, providing protection of information circulating in the form in the TS system, it creates masking interference with the level and width of the spectrum sufficient to protect the information circulating in other data channels of the TS responsible for the input / output of information, in particular USB, PS / 2, COM, LPT.

The technical result is achieved due to the fact that in the known method, which consists in the formation of a vehicle on an additional port for input / output of information, to which a device for input / output of information, a structured non-information signal, is connected, when it passes through the connecting lines of typical nodes and blocks of technical equipment own non-informative secondary electromagnetic radiation, providing the hiding of informative radiation signals from the input / output information device, is connected It is new to the main input / output port of information that the additional video port of the vehicle is used as the information input / output port, on which the vehicle generates a four-channel non-information signal, and the information protection device, which is a monitor emulator, is used as an input / output device defined by the TS as a video display device that creates, by means of a noise emission system (SIP), imitation and masking noise, providing the concealment of informative radiation signals, created by the video display device connected to the main video port and other data transmission channels, respectively.

The way to protect information processed by the vehicle from leakage through the PEMIN channel is universal for all vehicles that have a video system and does not require the operator to participate in the process of technical protection of information.

The information protection device used in the method is an individual means of protection for each individual vehicle, has compact dimensions, simple design.

The video adapter TC is used as a source of non-information signal:

1. software operating on the vehicle periodically generates a digital image in which the color of each pixel has a random value;

the video adapter converts the image into a four-channel signal (3 color components independent of each other and synchronization) and outputs it to an additional video port to which an information protection device is connected.

An information protection device using a non-informational four-channel signal generated by a video adapter on an additional video port creates imitation and masking interference.

The width of the spectrum and the interference frequency created by the information protection device depend on the EDID (Extended display identification data) firmware received from the main video display device in the information protection device and the digital image generated by the program.

The level of interference caused by the information protection device depends on the design, technology and circuitry of the video adapter and the interference emission system in the information protection device.

Simulated noise provides the concealment of informative signals generated by the main device for video broadcasting on the air and interference in the grounding and power supply circuits, conductive lines and engineering communications.

Simulated noise created by the information protection device and PEMIN from the main video display device have the same parameters, because the video adapter generates a synchronized signal with the same parameters on the additional and main ports: signal structure, pulse duration, synchronization period, signal frequency, spectrum width and amplitude.

Masking interference provides the overlapping of informative signals generated by other data channels of the vehicle (USB, PS / 2, COM, LPT) on the air and interference in the ground and power circuits, conductive lines and engineering communications.

To create masking interference for a specific data channel, an additional information protection device with modified EDID firmware for specific radiation frequencies can be used.

To implement the patented method, a device for protecting information is shown in figure 1, where:

1 - connector for connecting to an additional video port;

2 - interference emission system;

3 - block emulation video display device;

4 - non-volatile memory;

7 - information protection device.

An example of connecting a vehicle to an information protection device is illustrated in figure 2, where:

5 - technical tool;

6 - the main video display device;

7 - information protection device;

8 - video adapter;

9 - the main video port;

10 - additional video port.

The information protection device 7 includes a connector for connecting to an additional video port 1, SIP 2, an emulation unit for a video display device 3, containing non-volatile memory 4 of the EEPROM type (Electrically Erasable Programmable Read-Only Memory, an electrically erasable reprogrammable read-only memory device) into which the firmware is written EDID EDID includes basic device information read from the primary video display device.

As connectors are used, connectors type "father" standards DVI, VGA, HDMI, Display Port and similar. Non-volatile memory 4 is connected by a two-way communication channel to connector 1. The SIP input 2 is connected to the output of connector 1.

SIP 2 is designed to create simulating and masking interference. As a radiating element are used, for example, wire lines matched by the load, connected to the return line, grounded on the vehicle body or antenna. With insufficient interference radiation to protect against leakage through the PEMIN channel, a signal amplifier is introduced into each SIP 2 channel. For ease of use, SIP 2 can be combined into one cable with a video cable through which the protected information is transmitted to the main video display device 6.

The proposed device information security works as follows.

The main video display device 6 is connected to the main video port 9, to which information to be protected is displayed. TC 5 defines it as “monitor-1”. Then, an information protection device 7, defined by the TS 5 as another monitor-2 video display device, is connected to the additional video port 10.

The information security device 7 and the main video display device 6 are defined by the TS 5 as two identical devices having the same resolution settings and refresh rates.

The software installed on the TC 5 periodically generates a digital image in which the color of each pixel has a random value. Video adapter 8 converts a digital image into a four-channel signal and outputs it to an additional video port 10.

The information protection device 7, using the signal generated by the video adapter 8 on the additional video port 10, creates a simulation and masking interference.

To decide on the use of a method and device for protecting information to protect information processed by a particular vehicle, which includes a video system, it is necessary to conduct experimental studies to identify and determine the levels and frequencies of informative PEMIN created by the main video display device and other data transmission channels, and interference created by the information protection device. Based on the results obtained, evaluate the signal-to-noise ratio level for a specific protected vehicle.

As evidence of the effectiveness of the proposed method and device for protecting information, experimental studies have been conducted to determine the levels of informative PEMIN and simulation interference.

Experimental studies were carried out using equipment and technical means:

- spectrum analyzer;

- antenna: AI5-0;

- monitor: DELL P2217H;

- a system unit containing a video adapter: Nvidia geforce GTS 450.

The digital standard for data transfer is HDMI.

The signal source for the monitor and information protection device is a PC (System unit - video card).

The distance from the vehicle to the antenna is 1 m.

The signal for the information protection device is “a picture with a random color of each pixel”.

In figures 3, 4 and 5 shows the amplitude spectra obtained as a result of the experiment. In figures 3, 4, and 5, gray is the PEMIN spectrum from the monitor, and black is the spectrum of the total PEMIN signal from the monitor and simulation noise from the information protection device.

In figures 3, 4 and 5 it is seen that the simulation noise and PEMIN have mutually overlapping frequency spectra. The level of intensity of imitation interference exceeds PEMIN from the video display device in the maximum radiation mode of the monitor using a test signal of the "meander" type (Fig. 3), output of text (Fig. 4) and graphic (Fig. 5) information.

Thus, by using the proposed method and device, the influence of the human factor on the process of technical protection of information from leakage through the PEMIN channel is eliminated.

In addition, the efficiency of using the interference energy is increased due to its adaptability to the spectral width, level and time of radiation relative to the informative signal. The complexity and cost of the technical implementation of the device and the technical protection of the information processed by the vehicle from leakage through the PEMIN channel are reduced. There is an expansion of functionality, consisting in the fact that the information protection device, in addition to imitating interference protecting the information circulating in the TS video system, creates masking interference with the level and width of the spectrum sufficient to protect the information circulating in other TS data transmission channels that are responsible for input / output of information in particular USB, PS / 2, COM, LPT.

References

1. "Noise generator", RF patent No. 2519565, published: 06/10/2014.

2. "A method of protecting processed information by means of computer technology by noisy informative spurious electromagnetic radiation and interference, an information protection device for implementing the method," RF patent No. 2493594, published: 09/20/2013.

3. "A method of protecting computer equipment from information leakage through the channel of spurious electromagnetic radiation and interference", RF patent No. 2479022, published: 04/10/2013.

Claims (4)

1. A method of protecting information from leakage through the channel of secondary electromagnetic radiation and interference, which consists in forming a technical means (TS) on an additional input / output port of information to which an input / output device of information is connected, a structured non-information signal, which passes through the connecting lines typical nodes and blocks of technical equipment have their own non-informative secondary electromagnetic radiation, providing the concealment of informative radiation signals from an information input / output device connected to the main information input / output port, characterized in that an additional video port of the vehicle is used as the information input / output port on which the vehicle generates a non-informational four-channel signal, and a protection device is used as the input / output device information, which is a monitor emulator, defined by the TS as a video display device that creates, by means of a noise emission system (SIP), simulation and masking interference, providing rytie informative radiation signals produced by a video display device connected to the main video port or other data communication channels respectively. 2. An information protection device for implementing the method, comprising a connector for connecting to an additional video port, an SIP, an emulation unit for a video display device including non-volatile memory, the connector for connecting to an additional video port being connected by a two-way communication channel with non-volatile memory, and the SIP input being connected to the output of the connector connection to an additional video port. 3. The information protection device according to claim 2, comprising a signal amplifier in each SIP channel. 4. The information protection device according to claim 2, comprising an interference emission system integrated into one cable with a video cable, through which the protected information is transmitted to the main video display device.

Images