|
|
All electrical and electronic equipment produces unintentional radiation,
which could be intercepted by a receiving device some distance away
from the equipment. TEMPEST is defined as the study of the emission
of unintentional protectively marked data (usually Confidential and
above) from an equipment or system. If these emissions were intercepted
and analysed they could reveal compromising emanations and thus the
protectively marked data.
TEMPEST Control
It is not possible to eliminate this potential weakness of an equipment
or system, but the UK national standards for TEMPEST testing and control
provide a very high standard of integrity for protectively marked
data. The standards which the UK require for the suppression of TEMPEST
signals carry a protective marking and are in the SDIPS (SECAN Doctrine
and Information Publications). Information can also be obtained from
CESG Memorandum Number 32 (UK Requirements for TEMPEST Countermeasures).
TEMPEST Certification
TEMPEST Certification in the UK is carried out by CESG accredited
test facilities. The test results from these facilities are endorsed
by CESG against the SDIP TEMPEST standards.
The developer of the product or system funds the TEMPEST evaluation
and certification of the product or system.
Once endorsed by CESG and a certificate issued to the relevant standard
the product can be entered on the (NRPL) NATO Recommended Products
List. The developer is then mandated to maintain the configuration
control of the certified product and undertake production assurance
testing during the production life of the product.
Further information can be obtained from CESG
Enquiries. |