The Approach: Ultra-Secure Product Solutions Through Modularity
Aegis Secure products are Encrypting Retransmission Devices focusing on securing the kernel, data, and network as the baseline for our approach. This approach is the most robust and cost-effective method of delivering products that meet the demand of the Ultra-Secure Mobility market.
By using a foundational approach to modularity, we can isolate critical components on the connected device through hardware isolation or by leveraging Type-1 Virtualization. Assured through formal methods, Aegis Secure builds in a defense-in-depth resilience, including an architecture that is layered, isolated, and modular. This creates a many-layered multiplicity of defensive lines on connected devices.
This approach also allows Aegis Secure products to extend to further isolate specific applications, operating systems, or services, resulting in a true commercial Ultra-Secure Mobility product.
Aegis Secure Products for Ultra-Secure Mobility in Government Agencies
Dirty Network Protection
The hard reality is that in today’s world, the carriers can push updates to your device through to the Baseband chip without your prior approval. This is a bona fide and proven attack vector.
Whitelist/Blacklist IP Address
Sometimes you have to protect users from themselves. By forcing the traffic of the end-user device through a particular IP address, you can ensure that the device is only getting approved network traffic.
Non-Bypassable VPN
Communicating over your end-user device is one thing, doing it in the clear is another. Leveraging products developed by Riverside Research enables you to enforce encrypted communication between the end user and the corporate network.
The Aegis R51 ERD
Added layers (Firewall & Protocol Break) with a simple device you tether to your connected devices
The Aegis R51 is the world’s first Enhanced Retransmission Device (ERD) designed to supplement your existing VPN per the latest requirements published with the MACP 2.5 standards. It’s unique in that it provides a secure separation kernel, enabling MILS architectures that support applications with privacy and mutual distrust.
The Aegis R51 is the only device available on the market today that is fully compliant with CSFC’s MACP 2.5 Standards:
- Non-Bypassable Protocol Break on most devices
- Firewall controls access to End-user Device (EUD)
- Connect Direct to EUD via USB
- Admin / User Portal
- Separation Kernel Protection – SeL4
- Secure Boot
- Multiple Virtual Machines separate key functions
- USB Mux separates admin, data, and power
These requirements have evolved, and the Aegis-branded R52L will comply with the newest standards to be published as part of CSFC’s MACP 2.7 Standards for an Encrypted Retransmission Device. Riverside Research is the first-to-market and the sole provider of equipment that supports the full set of associated requirements aligned with MACP 2.7, as defined here:
- Complete hardware isolation between LAN and WAN
- Encrypt all traffic from the End-user Device (EUD) through the LAN interface
- Dedicated outer VPN client
Aegis Secure delivers Secure IoT, CSfC compliance, and Ultra-Secure Mobility with this suite of Encrypting Retransmission Devices.
Download the Aegis Secure Products Data Sheet