The secure isolator prevents vulnerable peripherals from mediating between compromised and secure computers by ensuring that video and audio flow in a single direction. By preventing host-to-peripheral direct access the secure isolator eliminates data leakage. The secure isolator is designed to provide the highest possible computer & peripheral isolation as demanded by government agencies, military, financial institutions, and similar security-sensitive customers. The isolator perfectly suits scenarios where vulnerable peripherals or computers may impose a security threat. For example, in a secure meeting room, when an unsupervised (non-secure) guest laptop has to be connected to a display which is shared with a classified computer. By isolating the classified computer from the displays the secure isolator protects the classified computer from being infected by the guest computer compromising any display’s vulnerability.

To prevent bi-directional communication via the EDID channel, numerous mechanisms were set forth to protect EDID transactions:

• EDID is read from the display only once the user presses the EDID capture button. This is to prevent continuous EDID transformation between the display and the source.
• EDID information is parsed to assure that only legitimate information is passed between the display and the source. The Isolator is used as a buffer to protect transferring malicious through the EDID channel.
• EDID information is limited to the basic essentials. Instead of passing the full EDID and MCCS, HSL’s Isolators limit the EDID to the minimum required, in order to restrict the EDID data passed.

Additionally, by allowing sound to travel only in one direction from the PC to the speaker, the isolator protects against eavesdropping attempts hence prevent intruders from compromising a computer’s security and re-tasking the audio line-in (headset/speaker) into a microphone line. The embedded digital audio via HDMI/DP is also protected due to unidirectional video transfer.

How does it work?

• Connect the computer’s display and audio ports to the isolator.
• Connect the isolator to the display and audio peripherals.
• Computer and peripherals are fully isolated from each other.
• User can securely use the peripherals.

Running an EDID Capture Before using the isolator, run a one-time EDID capture. This prevents the continuous transfer of potentially malicious data – from the display to the PC – that could infect the PC, cause data leakage, and so on.