Military Communications and Information Technology: A Trusted ...

468 Military Communications and Information Technology...
the information relations will be less in number than it results from the simple
calculation being 867*866/2 = 375 411.
Unfortunately, the amount of cryptographic data needed to ensure the system
security will be equal to the number of information relations (assuming
the symmetric encryption methods). The calculation of information relations
is presented in Table 1. The number of information relations is not as dramatically
high as for the “peer-to-peer” system, nevertheless their number amounts
to nearly 20 thousand.
Table I. Estimation of information relations in a system
No. Relations Calculations Subtotal
1 Central (57*56)/2 +(57*15)/2 + (15*14)/2 2128
2 Including voivodeship level 2128*16 17024
3 Voivodeship relations (11+15)*16 208
4 Between voivodeships (16*15)/2 120
5 Voivodeship-poviat relations 16*24/2 193
Total 19673
III. Generation of cryptographic data for large IT systems
The cryptographic information generation subsystem for special networks
consists of one or several combined computer station. These center perform various
functions within a system:
• Center for Special Network Planning and Cryptographic Data Distribution.
Proper functioning of a secret data information system requires designing
of a network made up of encryption devices and software as well as providing
cryptographic data to every device and user (keys, passwords). This
operation is carried out regularly at certain time intervals (every few/
several months). When planning, the need to immediately generate data
in particular emergency situations should be taken into account. Once
generated, the cryptographic data should be combined into sets and distributed
to loading stands or directly to the devices. The data ought to be
delivered in a safe manner, so as to preclude its disclosure and unauthorized
modification.
• Cryptographic Data Generation Center (CDGC). The station serves
the cryptographic data generation for every cryptographic device operating
within a communication network. The data is secured within the distribution
period.