Black Box Explains

EAL4+

Common Criteria (EAL4+) defines a common set of tests regarding the process of the design, testing, verification, and shipping of new security products. Common Criteria enables customers to assess a level of trust in how a product has been designed, tested, built, and shipped.

The ServSwitch™ Secure with USB and DVI, or VGA, or VGA and a Card Reader, is being evaluated for Common Criteria Evaluation Assurance to Level 4+ (EAL4+). Common Criteria is an international standardised process for information technology security evaluation, validation, and certification. The Common Criteria scheme is supported by the National Security Agency through the National Information Assurance Program (NIAP). The ServSwitch™ Secure KVM Switch with USB surpasses the security profiles of most other KVM switches. Along with the tamper-evident seals and other security features already mentioned, ServSwitch™ Secure KVM Switch with USB models feature these security measures:

• The flow of keyboard and mouse data is unidirectional, so it’s not possible for the computer to send data along the keyboard and mouse signaling channels.
• Keyboard and mouse devices can only be enumerated at the keyboard and mouse ports. Any other USB peripherals connected to these ports will be prohibited from operating, preventing, for example, a USB thumb drive from uploading or downloading unauthorised data.
• At each channel switchover, the USB host controller circuit, which controls shared peripherals, erases its entire RAM. This prevents residual data from remaining in the channel after a channel change and being transferred to another computer.
• Every time the channel is changed, shared USB peripherals are powered down, reset, and re-enumerated.
• Every time the channel is changed, the USB host controller is also powered down and reset, further ensuring no transfer of residual data.
• Dedicated DDC bus and EDID memory emulation at each port prevent the shared monitor link from being used as a covert attack channel.
• With only one selection button per channel, the ServSwitch™ Secure models enable direct and unambiguous channel selection.
• Hotkey and mouse switching are excluded, preventing remote control of the switch.
• Ports are powered through the computer’s USB ports, while the shared keyboard, mouse, and monitor are powered by the switch’s power supply. The lack of a common power supply minimizes electronic signaling.
• The switches with card readers have additional features, including active authentication verification and active tamper detection.