ARMY MIL-HDBK-232 A NOTICE 1-1988 RED BLACK ENGINEERING-INSTALLATION GUIDELINES《红 黑工程安装指南》.pdf

1、_- . ,i ?ex. - MIL-HDBK-232A NOTICE 3 SL 7977970 0032844 b i5 -/-o/ MIL-HDBK-232A 20 MARCH 1987 SUPERSEDING 14 NOVEMBER 1972 MIL-HDBK-232 MILITARY HANDBOOK RED/ BLACK ENGINEERING-INSTALLATION GU I DELI N ES AMSC NO. NIA AREA SLHC/TCTS DISTRIBUTION STATEMENT A: Approved for public release; distributi

2、on is unlimited. THIS DOCUMENT CONTAINS /y3 PAGES. Copyright Communications - Electronics Command Provided by IHS under license with CRAI Not for Resale No reproduction or networking permitted without license from IHS -,-,-. - MIL-HDBK-232A NOTICE I SL m 7797970 0032845 8 M *.-A MIL-HDBK-232A i DEPA

3、RTMENT OF DEFENSE WASHINGTON, DC 20301 RED/BLACK ENGINEERING-INSTALLATION GUIDELINES 1. This standardization handbook was developed by the Department of Defense with the assis- tance of the Military Departments and Federal Agencies. 2. This handbook provides fundamental guidance to engineer and inst

4、all electranic systems that process or communicate classified information. It contains guidance which will, When usedin conjunction with departrhent/agency directives, aid in the protection of such information by reducing the probability of hostile interception and exploitation. 3. Beneficial commen

5、ts (recommendations, additions, deletions) and any pertinent data which may be of use in improving this document should be submitted to Commander, US. Army Information Systems Engineering and Integration Center, ATI“: ASBI-SST, Fort Huachuca, AZ 85613-7300 by using the self-addressed Standardization

6、 Document Improvement Proposal (DD Form 1426) appearing at the end of this document or by letter. ii Copyright Communications - Electronics Command Provided by IHS under license with CRAI Not for Resale No reproduction or networking permitted without license from IHS -,-,-MIL-HDBK-232A NOTICE L SL H

7、 7777770 OOL28LIb T M MIL-HDBK-232A FORWORD This revision has been prepared to satisfy a need for an unclassified document describing the fundamental ccHw-To? of RED/BLACK engineering and installation. Its principles and guid- ance stress sound engineering practices to produce a safe environment to

8、process or communicate classified defense information. Its unclassified nature permits its distribution to the lowest operating level to enhance an awareness of RED/BLACK and TEMPEST principles. This document includes metrication. The handbook is not measurement sensitive. See the current edition of

9、 MIL-STD-962 for a discussion of mehsurement-sensitive metrication. The following conversion factors have been used for simplicity. c 1 inch = 25 millimeters 3 feet = 0.9 meters iii ._ -. Copyright Communications - Electronics Command Provided by IHS under license with CRAI Not for Resale No reprodu

10、ction or networking permitted without license from IHS -,-,-MIL-HDBK-232A NOTICE 3 SL 9 9799970 0032847 3 9 MIL-HDBK-232A THIS PAGE INTENTIONALLY LEFT BLANK iv Copyright Communications - Electronics Command Provided by IHS under license with CRAI Not for Resale No reproduction or networking permitte

11、d without license from IHS -,-,-MILITARY HANDBOOK MIL-HDBK-232A Notice 1 25 July 1988 RED/BLACK ENGINEERING-INSTALLATION GUIDELINES TO ALL HOLDERS OF MIL-HDBK-232A: 1. THE FOLLOWING PAGES OF MIL-HDBK-232A HAVE BEEN REVISED AND SUPERSEDE THE PAGES LISTED: NEW PAGE DATE SUPERSEDED PAGE DATE Cover 20 M

12、arch 1987 Cover 20 March 1987 ii 20 March 1987 ii REPRINTED WITHOUT CHANGE 2. RETAIN THIS NOTICE AND INSERT BEFORE TABLE OF CONTENTS. 3. Holders of MIL-HDBK-232A will verify that page changes and additions indicated above have been entered. This notice page will be retainep as a check sheet. This is

13、suance, together with appended pages, is a separate publication. Each notice is to be retained by stocking points until the military handbook is completely revised or canceled. Custodians: Army - SC Navy - EC Air Force - 90 Preparing Activity: Army - SC (Project SLHC-2323) Review Activities: Army -

14、CR Navy - EC, MC Air Force - 17, 89 DoD - DC, NS, JT AMSC N/A AREA SLRC DISTRIBUTION STATEMENT A: Approved or public release, distribution is un 1 imi t ed . Copyright Communications - Electronics Command Provided by IHS under license with CRAI Not for Resale No reproduction or networking permitted

15、without license from IHS -,-,-MIL-HDBK-232A NOTICE L SL 9799970 OO12dLl 5 Paragraph , 1. 1.1 1.2 2. 2.1 2.1.1 2.1.2 2.2 3. 3.1 3.1.1 3.1.2 3.1.3 3.1.4 3.1.5 3.1.6 3.1.7 3.1.8 3.1.9 3.1.10 3.1.11 3.1.12 3.1.13 3.1.14 3.2 4. 4.1 4.1.1 4.1.2 4.1.3 4.1.4 4.1.5 4.1.6 4.2 4.2.1 4.2.2 4.2.2.1 4.2.2.2 MIL-H

16、DBK-232A CONTENTS Page 1 1 1 SCOPE . Purpose Applicability . . . . . . . . . . . . . . . . , . . . . . . . . . . . . . . . . . . . . . . . . . . 3 3 3 4 5 REFERENCED DOCUMENTS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Government documents . . . . . . . . . . . . . . . . . . . . . .

17、 . . . . . . . . . . . . Specifications, standards, and handbooks . . . . . . . . . . . . . . . . . . . . . Other Government documents, drawings, and publications . . . . . . . . Other publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DEFINITIONS . Terms and de

18、finitions . . . . . . . . . . :. . . . . . . . . . . . . . . . . . . . . . . . . BLACK equipment area (BEA) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Bulk filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Cognizant TEMPEST agency . . . . . .

19、. . . . . . . . . . . . . . . . . . . . . . . . . Collateral . Controlled access area (CAA) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Controlled BLACK equipment area (CBEA) . . . . . . . . . . . . . . . . . . . Controlled space (CS) . . . . . . . . . . . . . . . . . . . . . . . . .

20、 . . . . . . . . . . . Equipment radiation TEMPEST zone (ERTZ) . . . . . . . . . . . . . . . . . . Hardened cable path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Limited exclusion area (LEA) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Protected distribution

21、 system .- (PDS) . . . . . . . . . . . . . . . . . . . . . . . . RED equipment area (REA). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . TEMPEST approved equipment or systems . . . . . . . . . . . . . . . . . . . . Uncontrolled access area (UAA) . . . . . . . . . . . . . . . . . . . . .

22、. . . . . . . Acronyms and abbreviations . . . . . . . . . . , . . . . . . . . . . . . . . . ._. . . . GENERAL REQUIREMENTS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . General . System design verification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Environment .

23、 . Areaboundaries Processing requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Equipment and layout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . , . . . Power, signal, and ground runs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . General

24、guidance for power distribution . . . . . . . . . . . . . . . . . . . . . . Source . Power systems . Nontechnical system . . , . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Technical system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 7 7 7

25、7 7 7 7 7 7 7 7 7 8 8 8 8 11 11 13 13 13 13 13 13 13 14 14 14 15 Y 6 i Copyright Communications - Electronics Command Provided by IHS under license with CRAI Not for Resale No reproduction or networking permitted without license from IHS -,-,- MIL-hDBK-232 A CONTENTS . Continued Paragraph Page 4.2.3

26、 4.2.4 4.2.5 4.3 4.3.1 4.3.2 4.3.3 4.3.3.1 4.3.3.2 4.3.3.3 4.3.3.4 4.3.3.5 4.3.3.6 4.3.3.7 4.3.4 4.3.4.1 4.3.4.2 4.4 4.4.1 4.4.1.1 4.4.1.2 4.4.2 4.4.3 4.4.4 4.4.5 4.4.6 4.4.7 4.4.7.1 4.4.7.2 4.4.7.3 4.5 4.6 4.6.1 4.6.2 4.6.3 4.6.3.1 4.6.3.2 4.7 4.7.1 4.7.2 4.7.3 Filtering 15 Power panels 15 Ducting

27、15 General guidance for equipment RED equipment 15 General types of RED equipment 17 General techniques for RED equipment 17 Teletypewriter devices . 17 Secure voice systems 17 Facsimile devices . 18 Video devices . 18 Computers 18 Ancillary devices . 18 Storagedevices . 18 Local area networks (LANs

28、) . 18 Point-to-point topology . 18 Multipoint topology . 20 General guidance for signal distribution 20 Analog signaling . 22 Digitalsignaling 22 Facility entrance plates . 22 . Distribution frames (DFs) 22 Distribution planning 22 Special considerations 23 Patch and test facilities (PTFs) 23 Admin

29、istrative telephones . 24 Fiberoptics . 24 General guidance for the use of filters and isolators 24 General guidance for grounding. bonding. and shielding (GBS) . 24 Grounding 27 Bonding 27 Shielding . 27 Facility shields . 28 Cable shields . 28 General guidance on physical security . Objectives of

30、physical security . 28 Facility security 28 15 Signal types . 22 Patching 22 Filtering 23 . 28 Scope 28 . 1 h vi Copyright Communications - Electronics Command Provided by IHS under license with CRAI Not for Resale No reproduction or networking permitted without license from IHS -,-,-MIL-HDBK-232A N

31、OTICE I SL = “19999970 0032853 3 a Paragraph c 4.7.4 4.7.5 4.7.6 4.8 5 . 5.1 5.1.1 5.1.1.1 5.1.1.2 5.1.1.2.1 5.1.1.2.2 5.1.1.2.3 5.1.1.2.3.1 5.1.1.2.3.2 5.1.1.2.3.3 5.1.1.2.3.4 5.1.1.2.3.5 5.1.1.2.3.6 5.1.1.2.4 5.1.1.2.5 5.1.2 5.1.2.1 5.1.2.2 5.1.2.3 5.1.2.4 5.1.2.5 . 5.2 5.2.1 5.2.1.1 5.2.1.2 5.2.1

32、.3 5.2.1.3.1 5.2.1.3.2 5.2.1.3.3 5.2.2 5.2.2.1 5.2.2.2 5.2.2.3 5.2.3 5.2.4 MIL-HDBK-232A CONTENTS . Continued Audio security . 28 Intrusion detection . 28 Technical security 28 Administrative telephones 30 DETAILED GUIDANCE . RED/BLACK system design . Physical and electromagnetic (EM) barriers Physi

33、cal barriers EM barriers . EM barrier functions EM barrier components . Perimeter EM barrier . Facility entrance plate . Power entry . Signalentry . . Utility entrance . Facility ground system Earth electrode subsystem (EESS) Internal RED/BLACK EM barrier Internal EM environmental barrier Facility d

34、esign and layout . Facility entry plate . Power conditioning room Main distribution frame (MDF) . Equipment areas Equipotential ground plane Self-generated power . Uninterruptible power . Base power . Power distribution Source . Dedicated service . Pole power Sharedpower . Power systems . Nontechnic

35、al power . Technical power Distribution . Power panels Terminations . 31 31 31 31 31 31 31 31 32 32 32 32 32 32 33 33 33 33 33 33 33 35 35 35 35 35 35 38 38 38 38 38 38 38 40 40 - . vii -I Copyright Communications - Electronics Command Provided by IHS under license with CRAI Not for Resale No reprod

36、uction or networking permitted without license from IHS -,-,- 1 MIL-HDBK-232A NOTICE L SL m 9999770 0032852 5 W MIL-HDBK-232A CONTENTS . Continued Paragraph 5.2.5 . 5.2.6 5.3 5.3.1 5.3.2 5.3.3 5.3.3.1 5.3.3.2 5.3.3.3 5.3.3.4 5.3.3.5 5.3.3.6 5.3.3.7 5.3.3.8 5.3.4 5.3.4.1 5.3.4.2 5.3.4.3 5.4 5.4.1 5.4

37、.1.1 5.4.1.1.1 5.4.1.1.2 5.4.1.1.3 5.4.1.1.4 5.4.1.1.5 5.4.1.1.6 5.4.1.2 5.4.1.2.1 5.4.1.2.2 5.4.2 . 5.4.2.1 5.4.2.2 5.4.2.3 5.4.3 5.4.3.1. 5.4.3.2 5.4.3.3 5.4.3.4 5.4.3.4.1 5.4.3.4.2 Grounding ContiguousLEA Special considerations Interface to other equipment Interface among RED equipment . Low-risk

38、 technology . Magnetic disk memories Secure telephone switches Filters WD equipment installation . Equipment separation Electromagnetic interference (EMI)/electromagnetic compatibility (EMC) . Converted equipment Video devices BLACK equipment installed in RED areas . Telephone networks and instrumen

39、ts RED voice systems Secure voice terminals . Signal distribution . Treatment of signal types . Wire-line modems Radio Administrative telephones Securevoice . Video Local area networks (LANs) . Balancedsignals Installation Twisted pair . Coaxial cable Variations . Terminations Analog signals . I i S

40、ensitive compartmented information facilities (SCIFs) Nondevelopmental items (NDIs) 62 Filters and isolators 6 . 62 Filters . I i . Patch and test facilities (P.TFs) . 63 General . I . i . 64 Physical separation i Dissimilar patches 64 Dedicated switching . i 64 Troubleshooting 64 . Local area netwo

41、rks . (LANs) . 64 PABX LAN 65 BasebandLAN . 65 . Fiber optics i i. 66 Filters . . . 66 Lawpass filters 68 . Powerrline filters . . . 68 Voice frequency (VF) filters . . Highpass filters . i Bandpass filters 68 .Bandstop filters 71 . Filter parameters . i 71 -! 61 Routing 61 . 62 62 Isolators . . !.

42、63 Cpecia1.considerations . 63 64 Dissimilar wiring 64 Broadband LAN i 65 Filter and isolator requirements and installation . 66 68 68 Filter installation i 71 Neutral filtering 71 . Active filters 72 Isolators 72 . Relay isolation 72 Optical isolation . 72 ix c . . . Copyright Communications - Elec

43、tronics Command Provided by IHS under license with CRAI Not for Resale No reproduction or networking permitted without license from IHS -,-,-. MIL-HDBK-232A NOTICE 3 SL M 7977770 0032854 7 - I MIL-HDBK-232A CONTENTS - Continued Paragraph 5.6 5.6.1 5.6.1.1 5.6.1.2 5.6.1.2.1 5.6.1.2.2 5.6.1.3 5.6.1.4

44、5.6.1.5 .5.6.2 5.6.3 5.6.3.1 5.6.3.2 5.6.3.3 Grounding, bonding, and shielding (GBS) . i,. . . . . . . . . . . . . . . , . . . . . Grounding . . . . . . . . . ;. . , .i . , . . . . . . . . . . . . . . . . . . i , ! . . . . . , Earth electrode subsystem (EESS) . . . . . . . . . . . . . . . . . . . .

45、. . , . . . , . Signal reference subsystem . . . . . . . , . . , . . i . . . . , . Li . . . . . . . . . , . . Construction of the equipotential plane . . . . . . . . . . . . . . . . . . . . . , . . , Connections to the equipotential plane . , . . . . . . . . . . . . . . . . . . . . . . . . . . Fault

46、 protection subsystem (FPSS) . . . , . . . . . . . . . . . . . . . . . . . . . . . , . :. Lightning protection subsystem . . . . . . . . . , . . . . . . . . . . . . . . . . . . . . . . . Building structural members , , , . , . . . . . , . . . . . . . . . . i., , . . . . . . . . . . . . Bonding , . ,

47、 . . , . . . . . . . . , . . . :. . , . . . . . . . . . . . ;. . . . . . . . . . . . . . . .; . , , . Shielding , . . , . . . . ., . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Facility shielding . . . . . , , : . , . , , . . , . . . . . . . . . . . . . . .

48、. ,. . . , . . . . . . . , , Two-sided shields . . , . . , , , - . , , . , . . . . . . . . . . . . . . . . . . , . . . . . . . , , . . Utilities . . . . . . . . .: . . . . , . . , . . . . . . . . . , . . . . . . . . . . , . , . . . . . , . . . . . , . -. . Page 72 72 72 73 73 73 73 74. , 74 74 76 76

49、 . 76 7? . 5.7 5.7.1 5.7.1.1 5.7.1.2 - . 5.7.1;3 - 5.7.1.4; 5.7.1.5 Security . . , . . . . . . . i . . . . . . . . . , . . . . . . . . . . . . . . . . , . . . . . . . . . . . Physika1 security . . . . . , . . , . . . ;. . . . . . . . . . . . . . . . . . . , . . . . . . . , . . .; . . Uncontrolled access area (UAA) . . . . . . . . . . . . . . . . . . . . . , . i . . .