Skip to content

Government and military networks often utilize the concept of unclassified networks vs classified networks to manage levels of information security. Since a complete “air-gap” around a highly sensitive network is not practical, every data connection is evaluated as a security risk.

When it comes to accurate synchronization traceable to time standards on a classified network, we lose the ability to deploy a GPS receiver due to restrictions on wireless connections. The best choice for a “wired” connection is fiber optics since they do not emit nor receive electromagnetic energy. In its SecureSync synchronization platform, Orolia has deployed fiber optics for the transfer of any digital synchronization signal that can be utilized for synchronization of isolated networks.

A pair of SecureSyncs are deployed on opposites sides of a security boundary. The unit on the unclassified network is deployed with a GPS receiver and transmits highly accurate timing data to the unit on the classified network via IRIG time code. Then this “IRIG slave” operates as the master clock for all time-sensitive devices on the classified network. In this scheme, a single master can serve many isolated networks via multiple IRIG ports.

The IRIG connection is one-way. IRIG time code is not a communication protocol therefore, there are no requests nor hand-shaking. A time and date message is streamed point-to-point. The transmitter of IRIG data cannot receive any information and the receiver cannot transmit any information to comply with the practices of network isolation.

At the time of this writing, Orolia utilizes Avago Technologies’ fiber optic ports (transmitter P/N = HFBR-1414TZ; receiver P/N = HFBR-2416TZ). However, if further qualification is required contact us to verify the current configuration.

Accurate Time with Network Isolation

  • Compatible with SIPRNET and NIPRNET
  • No wireless connection (GPS receiver)
  • One-way communication via IRIG timing protocol does not allow unauthorized access
  • Fiber optic connections protect against unauthorized access

SecureSync as a Flexible Time and Frequency Reference

  • GPS master deployed on unclassified network
  • IRIG slave deployed on classified network
  • IRIG signaling via 820 nm multi-mode ST fiber connectors)
  • IRIG DCLS option with 4 outputs (model 1204-1E) on master
  • IRIG DCLS option with 1 input and 2 outputs (model 1204-27) on slave

Related Posts

Upcoming Webinar: Show Me the Record: Turning Cyber Controls into Bill C-8 Evidence

Upcoming Webinar: Show Me the Record: Turning Cyber Controls into Bill C-8 Evidence

Bill C-8 (which enacts the Critical Cyber Systems Protection Act) became law in June 2026, shifting Canadian critical infrastructure from…
SecureSync PHP2Shell vulnerability: what to do now

SecureSync PHP2Shell vulnerability: what to do now

Safran has confirmed that the SecureSync PHP2Shell vulnerability affects the SecureSync 1200 and 2400, VersaSync, NetClock 9400 series and White…
In an OT Network, Something New Is the Alert

In an OT Network, Something New Is the Alert

OT network change detection sounds like a compliance checkbox. In practice, it is one of the most precise detection methods…
Understanding Suricata: The Open-Source Engine Inside Your Security Stack

Understanding Suricata: The Open-Source Engine Inside Your Security Stack

There is a good chance Suricata already runs somewhere in your network, even if nobody on your team has ever…
Addressing 5G Timing Challenges with Timebeat: What Canadian Carriers Can Fix at the Source

Addressing 5G Timing Challenges with Timebeat: What Canadian Carriers Can Fix at the Source

Most 5G timing challenges trace back to one rule. Canada’s mid-band 5G, in the 3500 MHz and 3800 MHz bands,…