ARDACO: SILENTEL – Enterprise solutions

Who is it for?

Are you looking for a comprehensive system of mobile security for your organization?
Do you require a solution that will be under your own management and control?
Do you have your own computer infrastructure on which such system can be operated?
Do you want to independently organize secure communication groups and allocation of individuals into the groups according to your needs?
Do you want to be sure the information will be only delivered to authorized persons?
Do you require secure mode that can be applied not only on a phone, but also on your corporate computers?
Do you want end users to be provided with a user-friendly application for secure phone calls or sending messages?
Do you consider a support for up-to-date devices important?
Are you looking for a certified solution with the latest safety standards at a reasonable price?

If you have answered the most questions affirmatively, some of Silentel services offered are surely designed for you.

Which product to choose?

A common feature of Silentel products is that you as a customer hold a full control over the entire system. All server, administration and management modules are installed directly on your server computer, and you use your own administrator’s rights to manage all user accounts in your organization. Server modules and demands on their hardware equipment are same for both products. The difference mainly consists in use of specialized encryption hardware on the side of end devices in the case of Silentel Premium product.

Silentel Business
silentel_box Software solution for mobile security, designed especially for private sector and business organizations. Encryption of communication takes place directly in the end devices’ software. No additional encryption hardware is used on the user’s side. Users log into the system using their usernames and passwords, which allows flexible change of an end device at any time during the day.

Silentel Premium

Hardware and software implementation of mobile security. In addition to end devices for encryption purposes it also uses encryption SD card Silentel Mobile Security Card, which is inserted into SD slot of the end device. It serves for secure storage of secret keys and random number generator. In high security mode, it encrypts transmission of voice in real time. Users must always hold it at hand when changing device. Premium Silentel solution is certified by the Ministry of Defence and it is under certification by the NSA SR.

How to start?

After purchase of selected product you will receive an installation package for your system’s administrator. You can also order installation and training services for the package..

Content of the installation package:

Software for server modules and client applications
Administrator’s manuals and user manuals
Necessary hardware equipment in the scope corresponding to product type

Installation and launch of server modules

The Silentel system administrator shall install following modules on a dedicated server computer in accordance with Administrator's manual:

Silentel Communication Server
Silentel Certification Authority
Silentel Operator Studio

The last of the modules, used for creation and administration of user accounts in the system, may not necessarily be managed by the general system administrator, but it can be alternatively managed by another appointed person, also called Silentel operator. The roles of the administrator and operator in the Silentel system are separate; account management application requires no special computer skills. Silentel Operator Studio can even be installed on other than server computer and use remote access to the communication server.

Setting up user accounts and user rights

The authorized operator creates all necessary settings for each individual user through Silentel Studio Operator application. He establishes a list of contacts for the users that they can see in their lists after logging in and assigns the users rights to use of respective secure mode (call, chat, text messages, instant messages, picture messages, etc.). The operator can also assign individual users into a predefined conversation group and set an access password for the users. In the case of the product Silentel Premium the operator personally gives MSC Silentel cards to the users along with a user‘s certificate generated for a specific person.

Installations of client applications

The system administrator typically also provides for an installation of all applications for all users in accordance with used devices. However, client applications can be also installed by end users. If all server modules are installed correctly, all users can login to the server and start to use Silentel applications.

How does it work?

User Presence displaying

Your secured phone book or contact list in Silentel application displays not only the names of other group members, but also their current presence status.

You can immediately see, which member of your group is logged in, logged out or does not want to be disturbed at given moment.
You can distinguish whether he/she is logged on a computer or phone. These statuses are displayed with well-arranged colourful differentiation and legible status icons.
Updates of and displaying the graphic symbols are provided for by the communication server at regular intervals.

Secure Text Messages

You can send an unlimited amount of text messages with sizes up to 1000 characters from your phone or computer to individuals or to whole groups from a contact list in your Silentel applications.

After launching the application in your phone or computer, you can log in to the communication server using your user account.
An encrypted connection, protected by random AES 256 key resulting from 2048 DH key exchange method is created between the communication server and your application.
After establishing connection with server, the application will offer you an opportunity to generate the so-called user token. You only need to confirm the option and the entire process of generating, sending a request and its processing in the server takes place automatically. The token encrypts and decrypts all messages and it is used to prove a user’s identity in relation to other members of his group. The user token is composed of private and public encryption 2048 RSA key and a certificate.
After the token has been created, a secured deposit box for text messages becomes available in your device. The box contains folders for received and sent messages and creation of new messages. A record of the time of dispatch, receipt and reading by a recipient is generated for each sent and received message.
A user can send messages to any recipient contained in his safe list, even if Silentel application is not currently running on the recipient’s device. A message will be delivered to the recipient at his/her next login into the application. If the sender and the recipient are logged in the application at the same time, messages are delivered immediately.
You can delete messages from your Inbox and Outbox one by one or in mass. You always keep full control over your text messages.
Before sending a message, your application generates a random one-time AES 256 key, different from the key used for encrypting communication between applications and servers. The new key is used to encrypt the content of the message you are sending. The key shall not be ever used for encryption of another message. Therefore, it is necessary to deliver to your partner a decryption key in addition to the actual content of a message. Since it is the case of a symmetric encryption, same key is used both for encryption and decryption. However, as the decryption key can not be sent via network in an open form, the AES 256 key is encrypted by the recipient’s RSA 2048 certificate.
A text message composed of an encrypted content and a secret encryption key is then sent to the server in a standardized CMS format and saved in the recipient's inbox. This encryption process ensures that neither any other user nor Silentel communication server can decrypt the message.
Silentel application on the recipient’s side downloads all new messages from the server. Using the private RSA 2048 key the application first decrypts secret AES 256 key from a received message. Then the application decrypts content of the message using the decrypted secret key and displays the content on the screen of your phone or computer.

Secure Voice Calls

Silentel application enables secure internet voice calls from your mobile phone or computer without limitation of call length, provided that both parties to are connected to Silentel communication server at the same time. In the case of Silentel secured calls, both parties must be logged in the application.

After launching the application on your phone or computer you can log on the communication server using your user account.
An encrypted connection, protected by the AES 256 random key that results from 2048 DH key exchange method, is created between the communication server and your application.
AES 256 encryption key, encrypting the connection between your application and the server, is used during entire time you are logged on the server. The key is unique and will not ever be used in the system again.
You choose a partner from the secured contact list, who is also connected to the server, highlight the partner and call him/her using the talk button.
The phone rings on the side of your partner, based of which the partner can, but may not confirm acceptation of the call.
If your partner does not take a call, his list of unreceived calls will display the time of the missed call as well as name of the party that has called him.
If your partner takes the call, your Silentel application along with the application on the part of your partner, both running in the background, will start to use DH 2048 key exchange for generation of secret AES 256 key, whereby your call will be encrypted. The key creation process is very fast and delay in arranging the call is minimal.
In case of matching applications on the encryption key a voice connection encrypted by the agreed key is established between the two parties.
When the connection is finished, the key is permanently destroyed and it will be never used again for any voice communication. Since the server is not involved in generation of the key, it can’t decrypt any call..

Sales

Silentel products