fishbowl is a mobile phone architecture developed by the u.s. national security agency ( nsa ) to provide a secure voice over ip ( voip ) capability using commercial grade products that can be approved to communicate classified information .

it is the first phase of nsa 's enterprise mobility architecture .

according to a presentation at the 2012 rsa conference by margaret salter , a technical director in the information assurance directorate , “ the plan was to buy commercial components , layer them together and get a secure solution . it uses solely commercial infrastructure to protect classified data . " government employees were reportedly testing 100 of the phones as of the announcement . the initial version was implemented using google 's android operating system , modified to ensure central control of the phone 's configuration at all times . to minimize the chance of compromise , the phones use two layers of encryption protocols , ipsec and secure real-time transport protocol ( srtp ) , and employ nsa 's suite b encryption and authentication algorithms . usmobile has implemented commercial enterprise version of fishbowl technology via the scrambl3 mobile apps that run on both android and ios platforms . the phones are locked down in many ways . while they use commercial wireless channels , all communications must be sent through an enterprise-managed server . no direct voice calls are allowed , except for 9-1-1 emergency calls . only nsa approved applications from the nsa enterprise app store can be installed . nsa has published a 100-page overview specification for the mobility capability package . in tandem with the capability package there are a series of protection profiles . these protection profiles list out the requirements a commercial product must meet to be used in the mobile phone architecture .

fishbowl ( secure phone )

the national security agency discussed project fishbowl this week — a project to build out a secure voip network for android devices .
usmobile ' s scrambl3 has implemented the most salient security features of nsa ' s ' fishbowl ' ( secure phone ) initiative secure voice over internet protocol ( voip ) architecture , and has a number of unique characteristics that put it in a class ahead of existing commercial secure voip techniques ,
said dr .
users of the fishbowl phone will even be able to utilize a special security - centric app store created and managed by the u . s . defense information systems agency . whether or not the fishbowl phone actually goes into large scale production , and whether it remains tagged with that rather interesting moniker , will be up to enterprising manufacturers .
all traffic from the phone is routed through the enterprise as a primary security design goal .
the fishbowl phone came about as an offshoot of the nsa mobility program , an effort to ensure scalable secure mobile communication frameworks based on commercial technologies . and , in case any major manufacturers are interested in producing fishbowl - style handsets for the government on a large scale , the nsa has conveniently provided online specifications detailing how off - the - shelf components were used to construct the device .
the law enforcement community is a prime target customer for scrambl3 because public cell phone networks don’t meet heightened police security standards , and photographic evidence requires a secure uploading process .
the nsa created a super secure smartphone using google ' s android operating system .
several other compromises were made but none that reduced the security of the phone , salter said .
the national security agency ( nsa ) has developed an ultra - secure android phone built using off - the - shelf kit that allows us government staff to discuss top secret materials .
called scrambl3 , the app creates a secure virtual - private network that connects bring - your - own devices to an agency server to send messages using end - to - end encryption . irvine , calif . - based usmobile developed the scrambl3 technology when team members worked with the national security agency to create “fishbowl , ” a secure phone network available only to defense department users via the dod information network .
nsa’s vendor of choice , for now , is motorola . but that’s because the voice app fishbowl needed ran on that motorola phone first . “it worked , but… android is not android ! ” salter proclaimed . “android is whatever the handset vendor or the oem chooses to put on the phone ! and that is another one of the rude surprises we had when we were going through all this .
according to the agency ' s margaret salter , building the new phone was done using simple off - the - shelf technology . speaking to it security journal secure business intelligence , salter said ,
the plan was to buy commercial components , layer them together and get a secure solution it uses solely commercial infrastructure to protect classified data .
# . / build - key - server fishbowl # . / build - key client1 # . / build - key client2 # . / build - dh
in 2011 , usmobile staff began meeting with the national security agency ( nsa ) on a new generation of secure mobile architecture . the
fishbowl
( secure phone ) initiative was designed to protect government top secret classified communication . scrambl3 , developed using the latest nsa standards for that new generation , is the world ' s first and only commercial implementation of those standards . the nsa , for national security reasons , has encouraged commercial development of secure mobile communications in large part to help american businesses protect their valuable intellectual property ( ip ) from theft , estimated to result in billions of dollars worth of stolen trade secrets and ip .
the aim , salter said , was to produce secure devices that had the ease - of - use at a low cost .
the division’s head , margaret salter , said anyone can reproduce the phone using specifications published online today because it uses off - the - shelf components .
the phone is part of a wider nsa mobility program to design all communications technologies used for classified discussions from commercial off - the - shelf components .
today ' s leading solutions / protocols to secure mobile communications ( e . g . - srtp and zrtp ) are missing the first step , which is the most critical and differentiating feature of ' fishbowl , ' the creation of a top secret grade vpn
dark internet tunnel
to cloak encrypted communication .
scrambl3 employs encryption algorithms and internet protocols , approved for top secret classified communication , to create encrypted voice , video and data communication . all encrypted communication is
cloaked
by placing it within usmobile
dark internet tunnels ,
which are virtual private networks that employ u . s . national security agency ' s ' top secret ' suite b encryption and authentication parameters , part of the nsa ' s new generation
fishbowl
( secure phone ) initiative .
the nsa fishbowl ( secure phone ) project became the architectural foundation of the current nsa “mobility capability package , ” which has been deployed within the department of defense for top secret classified mobile communication . the most salient feature of the “fishbowl” project was to protect encrypted voip ( application layer ) within a vpn ( transport layer ) where both of these layers / tunnels are independently secured by employing nsa suite b encryption algorithms and internet protocols that the nsa approved for top secret applications . usmobile is the first commercial application to implement this architecture for mobile voice and text , which offers the highest available security for individuals who are high - value targets for hackers .
dubbed the
fishbowl ,
these devices make fully - encrypted calls that are secure enough to allow the discussion of even the most classified information . the handsets will rely on an unidentified voip app , similar to skype , that routes calls through nsa servers ( kind of like what they already do with everybody else ' s ) .
about 100 of the fishbowl phones were developed and released to government staff . they were designed to comply with the nsa’s tough information security rules yet be as cheap as possible and easy to use .
“we’ve implemented fishbowl in the form of a software - defined network , so all of those typical hardware components that you’d find in a mobile network - - routers , vpns , gateways , firewalls , proxy servers - - all of those components are expressed or implemented in our system in the form of software , ” said jon hanour , usmobile’s president and ceo . “we’ve made an affordable version of fishbowl . ”
the era of smartphones has been a boon for consumers , but when government officials need to use such devices , things get tricky in terms of information leakage . to address this concern , the u . s . national security agency ( nsa ) came up with project fishbowl , an initiative to create a super secure smartphone using the android operating system .
the ideal fishbowl phone would need a securable voip app and a securable data transfer app . if at all possible , it should not have to be tied to any single carrier . it needed to be capable of connecting to the wi - fi network supplied by “the ranch” ( headquarters ) . it would need to be remotely manageable using policy , and all of the traffic through the phone must be routed through the enterprise manager . “because if we allowed it to go all kinds of different places , we lost all control , ” salter said .
fishbowl phones do exist now – in fact , two of salter’s nsa colleagues in the audience had some . but the working models made significant compromises , which salter appeared to hold out hope could be remedied .
the new handsets , limited to about 100 units , will allow agency workers to communicate without needing to
speak in code .
encrypted using nsa protocols ipsec and srtp , conversations on the phone can be monitored using a special app , and the agency believes the device is even secure enough for top - secret telephone conversations .
“the plan was to buy commercial components , layer them together and get a secure solution , ” salter said . “it uses solely commercial infrastructure to protect classified data . ”
“we didn’t pick any of these vendors because we think they’re sensationally better than the other vendors , in any of these classes , ” salter explained to one questioner , who had asked whether fishbowl’s choices were indicative of any degree of hardware or software superiority among smartphone standards . “we picked these vendors because we were trying to put a puzzle together . and as we picked certain puzzle pieces , other puzzle pieces fell into place… why is the fishbowl phone an android phone ? because ios is lousy ? no , that is not at all the reason why . it turned out that , because of certain controls that we needed , we were actually able to do modifications to the android os , and we didn’t have that control over the other oses in the space… but it is not our intention to only use android . it is our intention to use any os that meets our requirements . ”
individuals . android phone users , from celebrities to anyone who desires protection from surveillance of sensitive personal matters , from health and medical information to finances to relationships , will find peace of mind with scrambl3 .
the nsa ( national security agency ) is the premier agency responsible for protecting government communications . their traditional approach is using proprietary hardware and software , that is secure but very expensive .
the phones were designed and built by the nsa’s 40 year - old information assurance directorate , which is responsible for providing secure communications to the us government , including the department of defence .
she said the android operating system and key store were customised to be made secure enough for top secret conversations , and a “kind of police app” was designed to monitor operations on the device .
recently , they have been working on a plan to use ready - made commercial standards and equipment for their secure technology needs , instead of reinventing the wheel in their own labs . the idea hasn’t quite worked out as expected , which you can read about in this article , but it has lead to the development of the “fishbowl . ” these are souped - up , super - secure android smartphones , that nsa agents can feel safe using to send even the most sensitive information . information sent through these handsets are double - encrypted as well as screened through nsa servers . please see our security article on why securing real - time communication is hard .
the possibilities are truly endless when it comes to customizing these configurations . one thing that is nice to have is an analog phone converter like the linksys pap2t . this type of device allows you to use a normal telephone with the same secure setup . ensure that your converter supports both tls and srtp , if you ' re going to use this setup . experiment with adding phone bridges , trunking multiple asterisk boxes together across the vpn . this article should have provided you with enough information to get you up and running . if you want more specific details , go to the respective wiki links as both asterisk and openvpn have great support networks .
for additional peace of mind , no messages , voicemails or call data are stored on scrambl3 servers , or any other servers . encryption is maintained end - to - end , providing uninterrupted security of communication traveling between two communicating parties . scrambl3 users have several deletion and security options to keep private scrambl3 messages on their phone , including auto - delete and integration with samsung knox ™ , which will encrypt the messages until they are deleted from the phone .
all of the mobility program is still in its early stages , and the nsa has said it isn ' t necessarily tied to android — the platform was selected because it was easy to modify — but it does think this system is the future for its mobile communications . the agency wants to develop a closed app distribution system , get secure voip working over wi - fi , and hopefully get industry partners on board before it ' s fully ready to rollout project fishbowl .
agents will also be able to install national defense - related apps from an app store run by the us defense information systems agency , ensuring that only secure applications are installed ( sorry path ) .
this configuration can be used for secure communication with end to end pcs and cellular telephones alike ( ios and android both have voip clients in their respective stores that support srtp and sip + tls . )
“if we let it go to all kinds of places , we lost control of figuring out what the phone was doing . if i want pizza , i have to go through the enterprise which has to route me to pizza hut . ”
but at first , nist suggested not srtp but dtls . nsa had no reason to question that recommendation , so it went shopping for a phone with both dtls and srtp , using the “rule of two” as justification for both . “we couldn’t buy one . we could pay someone to make it , but that wasn’t the plan . the plan was to be able to buy commercial components , layer them together , and get a secure solution . ”
inside usmobile ' s
dark internet tunnels ,
calls and texts made with scrambl3 ' s private mobile network are private and secure . and for additional privacy and security , a user ' s private network is not interconnected to standard mobile phone numbers , landlines or any other segment of the publicly switched telephone network ( pstn ) – thus avoiding u . s . government bulk surveillance programs that include prism and calea . while usmobile collaborated with the nsa on this new secure mobile architecture , the company then went on to independently develop its implementation of the architecture and source code ; the nsa does not have a
back door
to usmobile ' s private mobile network .
speaking at the rsa conference in san francisco , margaret salter , a technical director in the nsa’s information assurance directorate , outlined the beefed - up phone : it runs a stripped - down version of android with multiple layers of encryption , has a custom voip app , and a
police app
that logs everything done on the device . salter didn ' t reveal much about the hardware , but based on the agency ' s wish list of features , it seems like there may be modifications at that level as well . the nsa hopes to use project fishbowl as a reference design for manufacturers to incorporate the systems the agency needs into consumer devices . this would allow the same off - the - shelf phone used by a civilian to be authorized for use on the nsa ' s secured network , which is the other side of the equation .
the craziest thing about a typical “top secret” u . s . government phone is that you can probably spot it from a football field away . if your mental picture of a hollywood - style nsa agent drives a black amc ambassador , wears a polyester suit and ray - bans , and smokes luckies , then his phone may either be maxwell smart’s shoe or a general dynamics sectera edge ( pictured left ) . at any distance , it looks like one of the pocket football games my junior high school vice principal used to confiscate and collect in his back drawer .
late last year we heard rumblings that the national security agency was testing android phones for use on a secured networ k , and now we ' ve got confirmation that this is indeed happening . one hundred customized motorola android phones are in use by various employees at the nsa as part of project fishbowl . the project is part of the agency ' s mobility program , a two - pronged approach to developing secure mobile solutions without sacrificing the user experience of the modern smartphone . the nsa also wants to shift away from costly government - developed systems to inexpensive off - the - shelf solutions , which is where the android handsets come in .
the national security agency wants a real - world smartphone , not the one it has now – not the one you see here . of course , it must fulfill the dept . of defense’s requirements for session encryption and data retention . but beyond that fact , the nsa wonders why its secure phone can’t have multitouch , apps , and speed just like the civilians have . based on looks alone , you’d think the civilians are a couple of pegs ahead of the g - men . this is a story of looks being more deceptive than even a security agency could have anticipated .
users will be able to install defence applications on the device from an enterprise app store run by the us defence information systems agency . this would ensure only secure applications were installed , and remove the need for nsa staff to otherwise vet the integrity of third party applications .
the above configuration will dial client1 if anyone dials extension 100 and client2 if anyone dials extension 200 . the 1 here indicates that it is the first step in the call process . asterisk allows you to setup extensive voice prompts and menus for callers as well as setup conference bridges , fax documents , voice mails , call parking lots etc etc . this will however meet our bare requirements in making secure phone calls over a vpn with fully encrypted svoip . keep in mind that we need to safeguard keys when transferring them , and client1 . pem / client2 . pem both contain private keys along with the client certificates .
“we needed a voice app that did dtls ( datagram transport layer security ) , suite b and srtp ( secure real - time transport protocol ) and we couldn’t buy it , ” salter said . “but the industry was thinking more about session description … so we went with that . ”
salter’s team considered whether it was feasible for nsa to utilize a real , commercial smartphone – one like all the kids are using nowadays – but with software that made the device perhaps more secure than the sectera edge . “the phones are so popular and exploding all over the place , because we can play angry birds on them , and do whatever you want . but we needed enterprise management – some control over it , because honestly , we didn’t really want you to be able to go load angry birds on your ts [ top secret ] phone… that was not a business model that we could support , or even defend . ”
voice traffic needed to be encrypted twice – once through ipsec and once again on the voip layer through srtp . this was in keeping with a design principle the nsa calls “the rule of two : ” as margaret salter described it , “two independent bad things have to go wrong in order for an adversary to take advantage of your phone or data . ”
the national security agency , america ' s eyes and ears , constantly deals with highly - sensitive data . problem is , discussing that data over unprotected airwaves represents a huge security risk , often requiring agents to communicate in code . that ' s why the agency has developed its own super - secure android handset .
it is important to note that each private key ( file type ends in . key ) must be protected in order to maintain network integrity . key exchanges must be conducted across secure lines of communication . this could involve directly handing over the keys in person on an encrypted device , it could be a prearranged symmetric
“the advantage of this architecture is that the communication that the mobile device management software would typically have with the device , that communication can now run inside the vpn , so it makes that even more secure , ” hanour said . “it creates value for the mobile device management system as well because you can protect it inside the vpn . ”
now that cyberspace is the primary arena in which we protect information , we are working toward shaping an agile and secure operational cyber environment where we can successfully outmaneuver any adversary . a key step in building confidence in cyberspace is a willingness to offer what we know . please visit our site at urltoken to learn more about our unique experiences and capabilities .
over time , it became more difficult over time for the agency to define “ease of use” on a comparative scale . in just the last five years , the consumer universe appeared to leave the nsa’s secure market behind . “the world everyone wants is , i want to get what i want , when i want it , where i want it . ”
salter describes the “shopping” process for commercial products capable of meeting this frankly ordinary level of encryption , as “hard… we went shopping , we had our little bag and our little list , and we were wandering around looking for stuff . and one of the things we were wandering around looking for was a suite b ikev2 ipsec app that ran on a phone . that was a difficult shopping list to maintain . ”
scrambl3 users remain anonymous when they sign - up for an account and choose their private scrambl3 name . new users only need a valid email address and an android phone to use this privacy technology – no credit card information is required for the public beta . scrambl3 further extends the level of privacy of its users by preventing
public lookups
and
friend requests ,
which are typical of other mobile networks .
the real face of the national security agency looks more like margaret salter . at the rsa conference in san francisco last wednesday , salter told attendees the story of the nsa’s secure mobility strategy . she leads a department called the information assurance directorate . for the better part of four decades , iad has been tasked with securing secret government communications , and building specifications for the tools to do it . the nsa contracts with private suppliers to build a class of devices it calls gots ( government off - the - shelf ) . the gestation cycle for each of these devices – from the conceptual stage , to development , to deployment – typically consumes years . perhaps the best - known gots product is still in wide use today – 1987’s stu - iii secure telephone , which looks about as home on an agent’s desk today as an ibm pc .
instead of dialing up using traditional public phone numbers , scambl3 users call or text using a private scrambl3
black book
contact listing available only to them and other users with whom they have privately shared their scrambl3 name . a private mobile network is only formed after both parties add each other ' s scrambl3 names to their respective black books . and for even further privacy , the contacts in each user ' s black book will disappear when users log out of the scrambl3 app on their phones .
surprisingly , the devices employ off - the - shelf components and run on openly - available protocols .
the plan was to buy commercial components , layer them together and get a secure solution ,
margaret salter , head of the nsa ' s information assurance directorate , said .
it uses solely commercial infrastructure to protect classified data .
calls will be double - encrypted through both ipsec and srtp , per nsa policy .
but their ease of use ranked right up there with a world war ii cipher machine . “once you get something in the hands of an individual user who’s not a cleared comsec custodian , someone who knows what they’re supposed to be doing with this stuff and understands all the details , ease of use became incredibly freakin’ important . and it turned out that , although our stuff was incredibly secure , it was not incredibly easy to use . ”
the part was not to be found , for reasons salter attributes to the industry paying attention to a feature that nist hadn’t considered , called session descriptors – headers that describe the content of media being exchanged in a voip traffic session . “unified communications is more than just making a phone call , ” she explained . “there’s presence , conference calls , and all these cool things they show you they can do… and the only way to do that really is to use that session descriptors protocol rather than break up the dtls . ”
nsa set out to endow fishbowl with support for public cryptographic standards that were good enough , in combination with one another , to enable classified - level communication . nsa calls these standards suite b . “for encryption , it’s aes at the 128 - and 256 - bit strength . for key exchange , it’s elliptic curve diffie - hellman – and we’ve got two nist curves , the p256 and the p384 . for the signatures , it’s elliptic curve dsa , with those same parameters . and we add a hash function , which is the sha - 2 series . we needed those , because they’re the cryptography that’s strong enough to protect classified . ”
they launched project fishbowl , a pilot to produce a smartphone made of mostly commercial parts and infrastructure ( more cots than gots ) , capable of supporting classified voice and data , while remaining as easy to use as its civilian counterpart and staying inexpensive . the historical significance of the nsa embracing commercial crypto standards cannot be stressed enough . anyone familiar with how rsa came to be in the first place will recall the fights its engineers faced keeping the government from classifying it , taking its power out of the public’s hands . perhaps the whole point of the rsa standard and the rsa conference is to promote the power of security for everyone through manageable encryption .
the information assurance ( ia ) mission at the national security agency ( nsa ) serves a role unlike that of any other u . s . government entity . national security directive ( nsd ) 42 authorizes nsa to secure national security systems , which includes systems that handle classified information or are otherwise critical to military or intelligence activities . ia has a pivotal leadership role in performing this responsibility , and partners with government , industry , and academia to execute the ia mission .
now we will generate the required keys in order to use tls to encrypt our sip signalling . first we need to create the directory to store our keys in . similar to openvpn , asterisk also comes with its own scripts to help ease the task of creating cryptographic keys . the script comes in
contrib / scripts / ast _ tls _ cert .
in case you ' re using the debian packages , i ' ve included a copy in the github repository . you ' ll be asked for a password to be using with the certificate authority for signing additional keys . pick something secure that you ' ll be able to remember in the future as well .
salter said she would previously need to “speak in code” if using a commercial mobile device to discuss classified information .
the information assurance directorate ran into a string of problems during the build due to a lack of interoperability between vendor products .
salter said a lack of interoperability between ssl vpn options forced designers to use ipsec .
designers were also challenged by the functionality in commercial products . vendors were chosen not by reputation or preference , but by their support of required functionality . each was plotted on a grid and chosen by “drawing a line through the list” .
salter said the security specifications , such as those sought for the voice application , would be useful to everyone .
“we need to send a message [ about ] standards , interoperability and plug and play ,
she said .
voice calls are encrypted twice in accordance with nsa policy , using ipsec and srtp , meaning a failure requires “two independent bad things to happen , ” salter said .
got a news tip for our journalists ? share it with us anonymously here .
you must be a registered member of itnews to post a comment . log in | register
all rights reserved . this material may not be published , broadcast , rewritten or redistributed in any form without prior authorisation . your use of this website constitutes acceptance of nextmedia ' s privacy policy and terms & conditions .
note : the iad . gov website uses tls 1 . 2 , supported by a department of defense ( dod ) pki certificate , to ensure confidentiality and integrity for all users . iad . gov website users will need to have the current dod root and intermediate certificate authorities ( ca ) loaded into their browsers to avoid receiving untrusted website notifications .
install dod root and cas please visit the information assurance support environment ( iase ) site to download the dod root ca certificates . select the trust store tab and choose the latest installroot : nipr windows installer .
the security platform will also be applied to tablets , another nsa official told the technology review . so far , 100 of the devices have been developed and distributed to government officials .
what ' s more , the nsa is hoping that carriers and mobile manufacturers will adopt some of the same concepts for their own products . that is , run all data from its voip app through its own servers , which i ' m sure consumers would have absolutely no qualms with . there ' s no word on how well this device protects its sensitive contents from being left it in a bar . [ sc magazine via technology review ]
kinja is in read - only mode . we are working to restore service .
to make a call , users dial out using the voip app , which then sends encrypted data over any given carrier ' s data network . however , instead of routing directly to another device , the data goes through the nsa ' s servers to be verified , logged , and re - encrypted , before being sent back out to the data network and on to its destination . just like its android phones , the nsa is building this infrastructure with existing enterprise - level equipment .
by signing up , you agree to our privacy policy and european users agree to the data transfer policy .
this article has a component height of 4 . the sidebar size is short .
pcmag reviews products independently , but we may earn affiliate commissions from buying links on this page . terms of use .
for the top stories in tech , follow us on twitter at @ pcmag .
this newsletter may contain advertising , deals , or affiliate links . subscribing to a newsletter indicates your consent to our terms of use and privacy policy . you may unsubscribe from the newsletters at any time .
© 1996 - 2018 ziff davis , llc . pcmag digital group pc , pc magazine and pc urltoken are among the federally registered trademarks of ziff davis , llc and may not be used by third parties without explicit permission .
html public
- / / w3c / / dtd xhtml 1 . 0 transitional / / en
urltoken
the only term being thrown around government more than “2016 elections” these days is “cybersecurity , ” particularly following a rash of damaging and high - profile data breaches . with that focus on protecting information top of mind in agencies , usmobile officials hope to find a ready market for their commercial app , which lets government workers use their personal smartphones for top - secret communications .
when the turnkey solution comes to market in october , it will work with android and apple ios devices . it uses the security - enhanced linux operating system and a defense - in - depth approachthe layered approach uses a vpn connection with an encrypted voip call travelling within . when an agency deploys scrambl3 enterprise , administrators will set up what usmobile calls black books , or lists of contacts that each user can communicate with via the vpn .
“a lower - level person wouldn’t necessarily have the director of that particular agency listed , ” hanour said . “conversely , the director of that particular agency would have [ a ] contact list populated with people that are at the higher levels of management . ”
when a user logs into the app on a smartphone , it creates a vpn that connects to the agency’s server , whether it’s in the cloud or on premises . currently , scrambl3 enterprise software is deployed only on ibm power systems linux servers .
a two - rack server can handle up to 3 , 000 concurrent calls , hanour said , a capacity “that would handle comfortably an agency of 50 , 000 people . ”
once connected , users can see who in their black book is also logged in , as indicated by a green dot next to the name , and then select the mode of communication : email , voice call or text . both senders and recipients would need to have scrambl3 installed .
“once you establish this powerful vpn , you can run anything through it , ” hanour said . “anything that you can put on a server , you can use scrambl3 to communicate with . ”
calls are highly encrypted until they reach the recipient , where the app decrypts them . that communication happens at a top - secret - grade level as specified by nsa . despite that encryption / decryption process , hanour said , latency is unnoticeable .
for additional protection , nothing is recorded – users can’t even leave voicemail – unless an agency specifies otherwise . for instance , hanour said , some law enforcement regulations require that all communication among officers be recorded .
to use scrambl3 , agencies don’t need mobile device management systems , but it integrates with any that might exist .
licensing fees for scrambl3 depend on the number of users , but typically start at $ 5 per user per month . the most it would cost , hanour said , is about $ 10 per user per month .
right now , scrambl3 for android is available in beta form in the google play store for testing . scramble3 for ios will be available next month .
the beta version does not include all scrambl3’s features , such as conference calling . when the release version is up and running in october , scrambl3 will offer the only top - secret - grade conference call capability outside dod’s network , hanour said . users will be able to initiate a conference call by touching a few people’s names and pressing the call button .
besides law enforcement , hanour sees potential customers in several types of government operations , including health care , the state department when conducting diplomatic relations and even individual politicians , who might want to communicate in absolute privacy .
“the whole idea is to create trusted communications over untrusted networks ( i . e . , the internet ) , ” hanour said .
guys weak up . do you really think nsa would creat an app that they can ' t control ? ? ? pleaseee stop to dream .
so i use ironsocket vpn and hooray ! it has been a success to be able to have ironsocket that gives 100 % protection from hackers or whoever . ! we can ' t avoid unwanted networks that ' s why we have to be more careful . i connect to any wifi zones anywhere i go and i feel safe on anything i scan , download , etc . in my mobile .
ban on encryption is impossible . this is understatement made by people that doesn ' t even have a clue that whole internet is practically encrypted . though i doubt that you can expect a complete privacy and security from free applications . only companies like urltoken and urltoken provide complete privacy and security on mobile communications .
please post your comments here . comments are moderated , so they may not appear immediately after submitting . we will not post comments that we consider abusive or off - topic .
8251 greensboro drive , suite 510 mclean , va 22102 703 - 876 - 5100 © 1996 - 2017 1105 media , inc . all rights reserved .
samsung has taken the ‘make in india’ initiative to another level by launching ‘ . . .
copyright © 2018 bennett , coleman & co . ltd . all rights reserved . for reprint rights : times syndication service
still , as salter told the rsa attendees , for the better part of half a century , the nsa explicitly defined its own market , a private universe of products made for its own exclusive consumption . “that was cool for us , for the longest time . we kinda had a monopoly on this from the very beginning , ” she remarked . “we were mostly building things like radios for combat , [ and ] big link encryptors to hook one site up to another site . ”
“so one of the things i harp on most is , why was that so hard ? ” remarked salter .
what appeared at first to be the protocol of choice for digital voice was srtp . “turns out , getting the key management scheme nailed down for that was hard , ” she said . finally , iad was able to work out a way to do this using transport layer security – which it also discovered was preferable to ssl for every other conceivable purpose as well .
none of these standards are unfamiliar to the security community . six years ago , said salter , nsa announced suite b as good enough for classified level . “then there was a big asterisk next to that , ” she added , “that said , ‘by the way , your key management has to be reasonable , and nsa has to look at it to make sure it’s all good . ’ we were trying to give the industry a lead time , to say eventually , if you’ve got these algorithms in your products , we’ll be able to use them in solutions… to protect classified information . ”
but none of the session descriptors protocols in use supported the upgraded tls 1 . 2 – the substitute for the deficient ssl – and few of these protocols enabled client authentication . this was necessary in order to avoid an engineering technique called split tunneling , which salter described as a kind of intentional leak that might be acceptable for some businesses but not for national security .
“one of the things we should be demanding , ” she stated at another point , “is that voice apps that do these protocols interoperate with one another . why in heaven’s name don’t they ? ”
later , a questioner from the audience offered an answer : he noted that , despite the rapidly accelerating changes in mobile technology , the customer does not appear to be in charge of what those changes are , who’s in control of them , or where they are leading . perhaps any large group of companies , whether in private industry or the government , should be capable of laying down the law when it comes to the foundations and standards they’ll accept for phones purchased in mass quantities .
“i think for us , our mechanism is going to be to publish everything as widely as humanly possible , ” replied the employee of a government secrets agency , “and hope to heck that this makes sense to people… we’ll say , ‘this is our architecture that we’re doing for mobility , ’ and other corporations will say , ‘hey , somebody did all this work for us ! ’ and hopefully just take it , show it to their vendor , and say , ‘i want one of these . ’ that’s our hope . ”
scrambl3 is built on a new generation of technology that provides a quantum leap in mobile privacy and security for businesses , government and individuals .
when scrambl3 users communicate with each other , scrambl3 creates a
dark internet tunnel
between their smartphones . this tunnel cloaks the calls and texts by making them invisible on the internet .
business executives . scrambl3 protects publicly - traded company insider information ; substantially reduces the risk of theft of trade secrets and intellectual property , of particular concern in overseas markets ; safeguards customer and personnel information , and communications related to litigation and contract negotiations matters ; and demonstrates management and governance ' best practices ' approaches to protecting company information .
government officials . scrambl3 protects global leaders , government employees , law enforcement personnel , and elected officials at a top secret and below top secret level for classified and sensitive official as well as personal communications .
effective today , the scrambl3 app for android - based phones is available for a 60 - day free beta offering from the google play store . following the beta test period , usmobile will offer individual scrambl3 subscriptions for approximately
– charlotte , dr . zheng conducted an independent analysis of scrambl3 . ( see his complete analysis at
the white house has said publicly that it is reviewing use of android - based smartphones that incorporate the same top secret standards and technology that scrambl3 employs in its private mobile platform .
scrambl3 users can make calls on their private mobile network using both cellular 3g / 4g data plans and wi - fi .
in our brave new world , where the details of our lives and businesses are becoming increasingly public through social media , sophisticated marketing techniques and government surveillance , we are seeing a trend toward protecting our privacy ,
hanour said .
we believe privacy is the future , and while people are connecting in positive ways through social networks , we are also seeking privacy solutions to keep our mobile calls and texts confidential .
computing platforms . with scrambl3 enterprise , businesses and governments can create their own top secret grade mobile communications network and mobile intranet that runs exclusively on their private servers . this disruptive technology will start at just
per month for up to 50 users . usmobile and ibm will jointly market scrambl3 enterprise solutions to businesses and governments around the world beginning in 2015 q3 .
- based company founded by a team of engineers with the mission to provide a private mobile network with the highest level of mobile communications privacy and security for its customers .
copyright © 2018 pr newswire association llc . all rights reserved . a cision company .
with all the media attention about government spying , nsa data collection and intercepts , fisa courts , snowden , etc . . . people are finally waking up and realizing that they need to take steps to actively protect themselves on the internet . as society becomes more and more connected , the possibility of data theft and corruption grows even more . be honest though . are you really surprised ?
now with that out of the way , what technologies are out there that can help safeguard us safe from the government , crooks , and nosy neighbors ? the obvious answer is encryption , and layered security . how can we apply this to telecommunications that will work for us on the go and at home ? the nsa actually was kind enough to provide us with the specifications needed to build our own clone of an infrastructure that is trusted to protect up to top secret classified material and communications .
. in order to spare you the details of 116 pages of agency and technical speak , here are the basic components of mcp .
the web browser on the user equipment is configured to prohibit the storing or caching of any data in non - volatile memory .
for the time being , we ' re going to disregard the requirements for web , email etc . we ' re solely focused on the svoip and vpn setup . i know that the requirements now state the use of an ipsec vpn , but the original requirements they planned on using an ssl based vpn . due to inter - operability issues with proprietary ssl vpns , the nsa elected to go with ipsec . for ease of setup and use , we ' re going to use
whether you choose to run openvpn and asterisk from your desktop , on a raspberry pi , in a virtual instance , on a vps , or a dedicated solution , go ahead and prep your environment . for consistency sake , i ' m going to show the commands to do the setup on a
we already discussed that pki is a requirement for our little project , because we ' re not going to use a static configuration due to security concerns . this allows each client to have his / her own public / private key pair . the first step is to setup our own local certificate authority ( ca ) . fortunately , openvpn comes with a tool suite designed to keep pki management simple . it ' s called
easy - rsa .
now , depending upon your distribution and packaging system , it may be installed in various directories . for debian , it ' s / usr / doc / openvpn / examples / easy - rsa / 2 . 0 . go ahead and copy that directory into your vpn user ' s home directory .
# cp - r / usr / doc / openvpn / examples / easy - rsa / 2 . 0 ~ / easy - rsa # cd ~ / easy - rsa
as you can see , you can define key length and other variables associated with the keys that will be generated while using the easy - rsa suite . go ahead and make any changes that you feel necessary for this step . you will be asked again if you want to change any of the variables listed at the bottom during the key building process .
now we ' re going to build the actual ca certificates with the following commands .
follow the prompts and change anything that you may have forgotten about in the vars file .
again , follow the prompts for each command in order to generate the required key pairs .
. if you ' d like to change any of the variables , please do so at this time . you can change listening address , lan ip space , key locations and so on . save the server . conf file to / etc / openvpn / server . conf . now we need to pull in the keys we previously created using easy - rsa .
as previously discussed , transferring private key requires a great deal of thought and security . you should have a chosen method for key distribution ( one that involves physical mediums and not transmitting the keys over plaintext protocols ) , and sent the clients the following files .
. you will need to change the server ip address in order to match it back to your own openvpn server .
you now have a fully functional vpn configuration . generate as many client keys as needed , and send them the appropriate configuration files . now , its time to move on to asterisk .
asterisk is a full featured , open source pbx solution that includes all of the supported features that we require for this exercise . first of all , we ' re going to go ahead and install asterisk onto our respective servers . again , you can host this on the same box as the vpn or on any number of platform choices . if you ' re going to run it on another computer , you ' ll need to generate vpn keys so that it can connect through the vpn . use the previous steps to set this up . i am again giving the commands for installing this on a debian based system . for my configuration , i ' ll be placing the asterisk box on the same server as openvpn . keep this in mind , and change your ips / network segments accordingly .
# mkdir / etc / asterisk / keys # . / ast _ tls _ cert - c 192 . 168 . 77 . 1 - o
fish bowl communications
- d / etc / asterisk / keys
this created quite a few files under / etc / asterisk / keys . the ca . crt is important , because it will be required in order to distribute to the clients . we also still need to create additional keys for the clients in order for them to be able to communicate with asterisk . go ahead and create two certificates for client1 and client2 respectively .
# . / ast _ tls _ cert - m client - c / etc / asterisk / keys / ca . crt - k / etc / asterisk / keys / ca . key - c client1 - o
fish bowl communications
- d / etc / asterisk / keys - o client1 # . / ast _ tls _ cert - m client - c / etc / asterisk / keys / ca . crt - k / etc / asterisk / keys / ca . key - c client2 - o
fish bowl communications
- d / etc / asterisk / keys - o client2


schweitzer engineering laboratories , inc. ( sel ) designs , manufactures , and supports products and services ranging from generator and transmission protection to distribution automation and control systems .

founded in 1982 by edmund o. schweitzer iii , sel shipped the world 's first digital protective relay .

presently , the company designs and manufactures embedded system products for protecting , monitoring , control , and metering of electric power systems .

the company serves a variety of industries , including utilities , pulp and paper , transportation , water and wastewater , education , healthcare , government , mission-critical facilities , and oil , gas , and petrochemical operations .

sel is 100 percent employee owned , headquartered in pullman , washington , with about 2,300 based in there in addition to 2,700 employees in field offices and other manufacturing facilities in about 15 national locations , in addition to another 45 international .

schweitzer engineering laboratories

schweitzer engineering laboratories , inc . jobs , employment in moscow , id | urltoken
company :
schweitzer engineering laboratories , inc .
jobs in moscow , id
schweitzer engineering laboratories headquarters in pullman . ( jesse tinsley / the spokesman - review )
flyer type sdr distribution recloser controller with optional schweitzer engineering laboratories , inc . control relays
owler has collected 11 screenshots of sel - schweitzer engineering laboratories ' website since apr 2015 . the latest sel - schweitzer engineering laboratories website design screenshot was captured in sep 2017 .
congratulations to schweitzer engineering laboratories for winning one of awb ' s 2014 better workplace awards .
schweitzer engineering laboratories b . v . - filing history ( free information from companies house )
schweitzer engineering laboratories , inc . sel - 3620 and sel - 3622 | ics - cert
schweitzer engineering laboratories , inc . jobs in moscow , id ( about 277 jobs ) .
2 schweitzer engineering laboratories , inc . operations manager jobs , including salaries , reviews , and other job information posted anonymously by schweitzer engineering laboratories , inc . operations manager employees . find schweitzer engineering laboratories , inc . operations manager jobs on glassdoor . get hired . love your job .
the owler community has estimated the number of employees of sel - schweitzer engineering laboratories to be one .
tags : ceo , change , executive team , luis d’acosta , schweitzer engineering laboratories . pullman , sel
microplanet is the top competitor of sel - schweitzer engineering laboratories . microplanet is a public company that was founded in woodinville , washington in 1995 . microplanet has 3 more employees vs . sel - schweitzer engineering laboratories .
the owler community has estimated the revenue of sel - schweitzer engineering laboratories to be less than $ 1m .
i have been working at schweitzer engineering laboratories , inc . part - time ( less than a year )
i have been working at schweitzer engineering laboratories , inc . full - time ( more than 3 years )
glassdoor gives you an inside look at what it ' s like to work at schweitzer engineering laboratories , inc . , including salaries , reviews , office photos , and more . this is the schweitzer engineering laboratories , inc . company profile . all content is posted anonymously by employees working at schweitzer engineering laboratories , inc . .
schweitzer engineering laboratories , inc . has filed h1b lcas and green card perm applications for different fiscal years . the applications filed by schweitzer engineering laboratories , inc . could have been certified , denied or withdrawn during the same period . please click on the links below to view the detail h1b lca and green card perm certification history of schweitzer engineering laboratories , inc . including the status , offered salaries , work locations , job titles and nationalities at schweitzer engineering laboratories , inc . . schweitzer engineering laboratories , inc . 2350 ne hopkins court pullman , wa 99163 , usa
sel is engaged in the protection , control , monitoring , automation and metering of electric power systems . sel - schweitzer engineering laboratories is a private company . sel - schweitzer engineering laboratories ' s top competitor is microplanet , led by wolfgang struss , who is their interim - ceo . sel - schweitzer engineering laboratories has 38 followers on owler .
sel is seen as one of sel - schweitzer engineering laboratories ' s biggest rivals . sel was founded in pullman , washington } in 1982 . compared to sel - schweitzer engineering laboratories , sel generates $ 679 . 4m more revenue .
the search company :
schweitzer engineering laboratories , inc .
jobs in moscow , id did not match any jobs
supported devices : schweitzer engi . . . schweitzer engi . . . schweitzer engi . . . schweitzer engi . . . more . . .
luis d’acosta is no longer ceo at schweitzer engineering laboratories in pullman after the palouse region’s largest private employer reorganized its executive team .
g & w is perceived as one of sel - schweitzer engineering laboratories ' s biggest rivals . g & w was founded in 1905 , and is headquartered in bolingbrook , illinois . g & w generates $ 100m more revenue vs . sel - schweitzer engineering laboratories .
schweitzer engineering laboratories ( sel ) seeks a firmware engineer to be continually challenged , resulting in new efforts to truly “make . . .
i applied online . the process took a week . i interviewed at schweitzer engineering laboratories , inc . ( pullman , wa ) .
i applied in - person . i interviewed at schweitzer engineering laboratories , inc . ( jeddah ( saudi arabia ) ) in may 2017 .
sel is engaged in the protection , control , monitoring , automation and metering of electric power systems . sel - schweitzer engineering laboratories was founded in 2000 . . . .
how much do schweitzer engineering laboratories , inc . employees make ? glassdoor has salaries , wages , tips , bonuses , and hourly pay based upon employee reports and estimates .
dr . schweitzer is an ieee fellow and member of the u . s . national academy of engineering . in 2012 he was awarded the ieee medal in power engineering for his
leadership in revolutionizing the performance of electrical power systems with computer - based protection and control equipment .
he is currently president and chief executive officer of schweitzer engineering laboratories , pullman , wash .
are you ready to be part of a highly motivated and well - equipped team ? are you a quick learner who likes new challenges ? if so , then you are ready to join us at schweitzer engineering laboratories .
schweitzer engineering laboratories , inc . ( sel ) has a reputation for quality , reliability , integrity , and service , which has enabled us to expand both within the electric utility market and into industrial , international , and oem markets .
“the passenger who flew the most last year wasn’t ed schweitzer , ” wray disclosed . ed schweitzer wasn’t even in the top 10 , according to wray .
schweitzer engineering laboratories ( sel ) seeks a firmware engineer to be continually challenged , resulting in new efforts to truly “make electric power safer , more reliable and more economical” . people throughout the world now rely on our products to help them efficiently and safely receive / deliver . . .
the top 10 competitors in sel - schweitzer engineering laboratories ' competitive set are microplanet , sel , g & w , abb , siemens , s & c , schneider electric , eaton , rockwell automation and emerson electric . together they have raised over 8 . 9m between their estimated 856 . 3k employees .
“we’re constantly evolving , ” said schweitzer , “everything we do is a continuous learning experience . ”
dr . edmund o . schweitzer iii delivered the first commercial digital protective relay in 1984 . under his technical , managerial , and fiscal leadership , schweitzer engineering laboratories has expanded to over 1800 employees . ed understands and supports the need for investing in employees . in return , he expects that we hire only the best , most highly motivated team members , and that we deliver simple , reliable , and cost - effective products and solutions .
that makes the story of ed schweitzer , founder of schweitzer engineering laboratories , all the more remarkable . the company , which makes sophisticated equipment for the global electrical power industry , is based in pullman , washington , population about 32 , 000 . more than half of that count comes from the students at washington state university , so schweitzer’s 2 , 000 local employees ( out of a total worldwide of about 3 , 800 ) account for more than one in ten permanent residents , powering the local economy , hiring wsu grads and many others , and supporting local institutions .
from the spokesman review in 1997 . i started just before christmas and at my first friday lunch ed schweitzer
note : before schweitzer engineering laboratories , inc . can hire foreign nationals , it must file labor certifications with dol ( department of labor ) . the application can be approved , withdrawn or denied by the dol . to hire a candidate temporarity , h1b lcas are filed . for permanent hiring , green card perm applications are filed by the employer on behalf of the candidate .
the opc server for schweitzer engineering laboratories sel - 3354 is opc certified ! opc certification is the process of ensuring that applications meet the standards specified by the opc foundation . opc certification requires extensive testing to ensure true interoperability . opc certification means multi - vendor system interoperability is guaranteed . if your opc products are not certified , you need to ask your vendor what sort of guarantees they offer .
a stalwart industry supporter , ed schweitzer also serves as one of the faces of the no plane no gain campaign .
“one of the things we’ve always done is provide every employee with the tools they need to do their job well , ” said wray , aviation department manager at schweitzer engineering laboratories ( sel ) , which offers products and services for the protection , monitoring , control , automation and metering of electric power systems . “we’ve saved so much money with that one tool , and we’ve accomplished projects we couldn’t have performed without it . ”
while others outsource , schweitzer goes diy . while others establish a tightly focused definition of work history and skills they’re looking for , schweitzer focuses on fundamentals : “i like to hire smart people with good values and strong fundamental education , ” says founder ed schweitzer , who started the company in his basement 35 years ago . today , it employs just over 5 , 000 and has revenue of nearly $ 1billion .
an ipo would have kept schweitzer engineering , which had 2014 sales of more than $ 600 million and has been profitable each of its 31 years , independent , at least temporarily . but as a public company , its board of directors would have been compelled to consider any outside offer for the company , and schweitzer’s enviable market position and record of growth ( it expects to exceed $ 1 billion in revenue within 5 years ) would certainly have made it a target of larger companies . it doesn’t take too much musing to see a big offer , reluctantly accepted , and the buyer moving schweitzer’s operations out of pullman .
if security and reliability are important factors for your engineering systems , opc server for iec 61850 offers you a secure and reliable connection to a wide range of automation systems .
sel engineering services , inc . ( sel - es ) seeks a professional , innovative and detailed individual for our project engineer i / i , / iii – automation . . .
but is there another way ? the projected shortfall in manufacturing workers – the u . s . is expected to come up a full 2 million employees short of its required 3 . 4 million new workers in the sector in the decade ending 2025 , according to a study by the manufacturing institute and deloitte – is so significant that no approach should be ignored . and today , i want to recommend to every manufacturing ceo the very different experience of schweitzer engineering laboratories , a maker of sophisticated equipment for the global power industry based in pullman , wash .
i’m not suggesting that ed schweitzer’s way is the only way . but his company’s startling success at attracting , developing and retaining devoted employees shouldn’t be ignored . schweitzer engineering competes against far more glamorous technology companies for electrical engineering graduates , and more than holds its own . and given its remote location , about 75 miles south of spokane near the idaho border , conventional thinking suggests the company would long ago have exhausted the local labor market , where it employs more than one - in - ten residents ( aside from the students at washington state university ) . but a recent push to hire 100 assemblers , expected to take three months of concentrated recruiting , instead was completed in three weeks . ( more on that below . )
schweitzer engineering laboratories ( sel ) ongoing commitment to community engagement , and their giving efforts , ranging from financial , material , and volunteer - driven support . their employees can be found on several local boards , volunteering at local events , and supporting organizations throughout the palouse . sel’s role as the largest private employer on the palouse helped stabilize the palouse’s economy and sustain local efforts , such as funding science programs at the local public schools , pullman - moscow regional airport , and the palouse discovery science center . their long - standing efforts to support and foster the palouse region’s growth has earned them this year’s business entrepreneur of the palouse award .
dave whitehead , a 23 - year veteran of sel , is chief operations officer . he is leading global operations as well as research and development . he also is overseeing quality , sales , engineering services and manufacturing .
pullman sits about 75 miles south of spokane , in eastern washington , and it’s safe to say that , without the university and schweitzer , it would be a far smaller and less interesting place to live .
the bravo turned a three - day trip to fergus falls into a one - day trip . “when something comes up , it’s priceless to be able to be there in a few hours , ” said schweitzer .
critical system solutions the sel advantage the sel advantage what advantage can you expect from sel products and services ? application , protection , and integration engineering support we have experienced field application engineers and integration application engineers available to answer our customers’ technical questions . these engineers are located throughout our 55 offices in the united states and 46 offices in an additional 22 countries worldwide . sel engineering professionals provide an array of services , including cost - effective solution designs , application and operation of sel or other . . .
bob morris , who joined sel 26 years ago , is chief engineering services officer . tony lee is chief manufacturing officer . he started at sel in 1991 . joey nestegard , who has been with sel since 2002 , has been named chief finance officer .
schweitzer and d’acosta are two of six executives involved in the restructuring , which leaves no one with the title of ceo and puts people with at least 15 years of experience at sel in charge of key areas of the business .
schweitzer has been president and is now also chief technology officer of sel , which manufactures high - tech equipment for electric power transmission and distribution that’s sold to utilities and large - volume power users . the company employs 2 , 330 people in pullman and 475 in lewiston .
sel engineering services , inc . ( sel - es ) seeks a professional , innovative and detailed individual for our project engineer i / i , / iii – automation in king of prussia , pennsylvania . sel serves electric power utilities and industrial companies worldwide through the design , manufacture , supply , and suppor . . .
there are only three commercial flights a day from pullman , and they all go to seattle . that means visiting sel’s very first customer – otter tail power company in fergus falls , mn – took “three [ airline ] legs and you started by going 250 miles the wrong way , ” said schweitzer .
“quality is really intertwined with safety , ” added wray . in the flight department , hazard reports are an opportunity to identify issues , measure them and improve . similarly , schweitzer officials say products returned by customers and handed over to the r & d lab “are worth their weight in gold” for identifying faults .
if you ' re going to be an intern here it is a very professional environment depending on the department you work in . you always need to be on your game because you never know if you ' re going to be introduced to do a schweitzer or not . you should always have your elevator pitch ready .
ed schweitzer founded the company in 1982 after inventing the first digital relay for protecting electrical power systems as part of his phd project at washington state university ( wsu ) . being in pullman – next door to wsu and 15 minutes from the university of idaho – provides sel with a strong pipeline of interns and recruits every year .
today , sel has thousands of different products for monitoring , automating and protecting power grids in 147 countries . to grow beyond hand - soldering circuit boards in schweitzer’s basement , the company needed to be able to respond to customer outages more quickly than was possible via airline travel . that’s why the company decided to obtain a business airplane .
“as we expand our reach , we want to ensure that we maintain our commitment to quality , innovation and customer service , ” company founder edmund o . schweitzer iii said in the news release . “this new structure will focus our company on those objectives , while broadening the experience of our executive team and providing opportunities to develop the next generation of leaders throughout the company . ”
“i’m convinced we would not be a company of 3 , 700 people without business aviation , ” said schweitzer . “recently some of our engineers and assemblers flew to new york to look at the latest electronic assembly - line equipment . as employee - owners , they’re using the company’s tools – the airplanes – to make an investment decision on the tools they use on the manufacturing floor . ”
critical system solutions sel product application guide sel product application guide central offices sel engineering services and power management solutions • graphical settings software • state measurement software • sel display clocks • model power system testing • protection and automation services • arc - flash hazard services ® • powermax power management and control systems • remedial action schemes • autosynchronization systems • distribution automation enterprise event viewing software synchrophasor visualization software settings software application design software sel university substation . . .
the year 2009 , then , was crucial for pullman . ed schweitzer had already sold 49 % of the company , beginning in 1994 , to workers through an employee stock ownership plan . ed was nearing retirement age and selling his remaining and controlling stake was on his mind . over the years , “i have considered all the possibilities – going public , selling to a strategic buyer , ” ed tells me .
critical system solutions sel safety sel safety improve safety by applying sel technology 2 . work with sel engineering services to identify and categorize arc - flash hazards and mitigation solutions . 3 . apply wireless fault indication system to reduce the need to enter underground vaults . 4 . install sel bluetooth® to serial adapter to communicate wirelessly without entering hazardous areas . 1 . install sel relays with arc - flash detection that can operate as fast as 2 milliseconds after an arc - flash event . with sel arc - flash detection ten simple ways to improve safety with sel technology : without . . .
so , ask yourself , under your company’s recruiting system , would you have hired leo ressa , known widely in pullman as the guy who owned the shoe repair shop for 30 years ? how about terry troyer , who spent 20 years running a couple of drive - thru espresso shops in nearby lewiston , idaho ? today , ressa is 64 and troyer is 60 , and each is a manufacturing supervisor at schweitzer , overseeing crews of 20 or more fellow employees , after having worked their way through a variety of departments and job functions .
critical system solutions table of contents sel product application guide . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 example industrial plant one - line diagram . . . . . . . . . . . . . . 10 automation and integration overview . . . . . . . . . . . . . . . . . . . . 12 example industrial automation diagram . . . . . . . . . . . . . . . . 14 . . maximum performance . minimum space . . . . . . . . . . . . . . . . . 16 fault indicators and sensors . . . . . . . . . . . . . . . . . . . . . . . . . . 58 . . general engineering services . . . . . . . . . . . . . . . . . . . . . . . . 60 sel - 849 . . .
thanks to the city of moscow’s sponsorship , be the entrepreneur bootcamp™ ( bte bootcamp™ ) announces the first annual palouse pitch event followed by the awards ceremony for the entrepreneur of the palouse awards ceremony , sponsored by the university of idaho executive mba program .
the entrepreneur of the palouse award recognizes local entrepreneurs in three categories . recipients receive a $ 1 , 000 grant and are selected based on their commitments to serving our region’s businesses , residents , visitors , and students . this year’s awardees are :
latah trail association was selected due to their continued commitment to regional development on the palouse , and reflects their commitment to the community and what this award honors .
their efforts in 2015 included organizing “over 1 , 800 volunteer hours in fundraising , clerical work , trail cleanup , and promotional activities” said tom carroll , the nominator . “we have been instrumental in the creation and promotion of the latah trail , a well - loved and used community resource . ” their commitment to community development continues in their planned efforts over the next two years for improving the 16 - mile trail .
jennifer harbour nominated poppy , an eco - friendly salon , because of its commitment to the community and employees , support of local artisans and small business owners , as well as to green business practices . since opening in june of 2012 poppy has grown exponentially . poppy also “regularly hosts fundraisers for local and national charities and causes . ” poppy’s continual commitment to regional development , local businesses support , and local causes embodies the entrepreneurial spirit of the palouse .
meet these incredible community members and entrepreneurs . the event is limited to 150 people , and hors d’oeuvres will also be served at this free event .
html public
- / / w3c / / dtd html 4 . 0 transitional / / en
urltoken
notes : n . a . : not available . u . s . employees includes part - timers as of time of survey . job growth , new jobs , and voluntary turnover are full - time only . revenues are for 2010 or latest fiscal year . all data based on u . s . employees . * average annual pay : yearly pay rate plus additional cash compensation for the largest classification of full - time salaried and hourly employees .
these top employers have at least 700 openings each , totaling more than 56 , 000 jobs . what are they looking for ? see them all
devon energy engineers take home an average $ 178k annually . who else offers big paychecks ? see them all
these best companies are stepping it up to keep their employees happy . here are 12 firms with unusual perks . see them all
these 14 employers survived a struggling economy while staying loyal to their workers . see them all
interesting assignments , mentoring , even losing 20 pounds : no wonder these folks love their workplaces . see them all
the internet giant is well - known for showering its employees with envy - worthy benefits . see them all
these best companies are using facebook , linkedin , twitter and other social media to get even better . see them all
google , no . 1 on the list , brings its famously fun work culture to a town of 9 , 000 in the middle of oklahoma . watch
salesforce ' s ceo is funding a new children ' s hospital in san francisco that he expects to be the best in the world . watch
find my top perks select benefits you want and see instantly which best companies offer them .
what qualities are you looking for in a great employer ? use our tool to find the companies on our list that suit you best .
- - - - - - not important - - - - - - alabama alaska arizona arkansas california colorado connecticut delaware dist . of columbia florida georgia hawaii idaho illinois indiana iowa kansas kentucky louisiana maine maryland massachusetts michigan minnesota mississippi missouri montana north carolina north dakota nebraska nevada new hampshire new jersey new mexico new york ohio oklahoma oregon pennsylvania rhode island south carolina south dakota tennessee texas utah vermont virginia washington west virginia wisconsin wyoming
rei employees need to be outdoor enthusiasts who spend as much time outside as they do in the stores . watch
marc benioff is funding a new children ' s hospital in san francisco that he expects to be the best in the world . watch
to pick the 100 best companies to work for , fortune partners with the great place to work institute to conduct the most extensive employee survey in corporate america ; 280 firms participated in this year ' s survey . more
one of the best parts of our weekly friday lunch meeting is getting to meet recent hires from our 100 + locations worldwide .
it looks like you may be having problems playing this video . if so , please try restarting your browser .
meet jaycie poitra , a senior at washington state university studying business management . jaycie started with sel in 2015 as a human resources intern and was recently promoted to human resources associate in pullman , wa .
one of jaycie’s favorite memories at sel was the manufacturing hiring push , where the team recruited over 100 assemblers in two weeks . “i really loved seeing everyone come together to help get this task done . all of the late nights and hard work paid off . ”
side from recruiting , jaycie has been working on various internal websites for human resources . she helped create the sites , provided custom design work , enabled permissions , and more . when she started , not many employees knew how to use the site , so jaycie took initiative to provide helpful learning aids .
at first i want to give thanks to almighty allah that he gave me a chance to join in sel family in saudi arabia at dammam . i joined in sel 21st may 2017 as a technician
less of whether you like the job or not . sel has proven that idea wrong tenfold ! i now work for a company that not only cares about it ' s employees ,
but our families too ! i cant ever imagine going back to a job that i ' m not proud to be a part of . our commitment
i have worked for sel now 1 year , 4 months and i ' m still loving it . every year we invent something that revolution
izes the power industry . people that i chat with are amazed at what we have accomplish
ed in just 32 short years . makes me wonder what we will do in the next 32 years .
t to learn and grow like i ' ve never been able to before . i am constantly
plus , the company has taken great care of my son and i with the awesome benefits package . saying i ' m proud to work for this world class company is an understate
great benefits , wonderful people . . . i know it sounds cliché , but i love my job and i love working for sel !
were in places such as the united arab emirates , spain , brasil , france or colombia .
i thought since it was my first week with the company that i wouldn ' t receive it , but it was in my first paycheck . the company had aprox 400 employees at that time . they now boast 3800 . ed stopped and introduced
longer in use ) . i received a nice esop when i retired labor day weekend in 2007 .
one of the best companies i worked with and wonderful people . mabuhay sel !
great place to work . i am impressed with how we work together and identify measure improve our processes .
one of the best parts of our weekly friday lunch meeting is getting to meet recent hires from our 100 + locations worldwide . check out the video to hear why these employees chose sel !
red , white and bloom—thanks to our facilities team for the creative flower flag . wishing all a safe and happy independence day from sel !
the national renewable energy laboratory ( nrel ) invited five teams to compete in a two - part , 21 - week microgrid controller competition . one of the teams was from sel . check out the video to learn about the microgrid that earned them first place .
peoria , ill . , without caterpillar ( cat ) ? benton harbor , mich . , without whirlpool ( whr ) ? columbus , ind . , without cummins engine ( cmi ) ?
one of america’s under - appreciated relationships is the one between smaller cities and bigger companies , an often - happy exchange of quality - of - life for the combination of well - paying and skilled jobs , economic growth and stability , and corporate generosity to support cultural and educational institutions .
for every cummins engine , approaching its 100th anniversary in 2019 as civic benefactor to columbus , however , there are scores of middle market and larger companies , based in smaller cities , that have sold to larger competitors and then packed up their factories and left town . the effect is devastating .
this page was last modified on 22 january 2016 , at 15 : 38 .
appointment of diego florencio rodas as a person authorised to represent uk establishment br013897 on 26 may 2016 .
appointment of diego florencio rodas as a person authorised to represent uk establishment br013897 on 26 may 2016 . - link opens in a new window - 4 pages
appointment of prashant julka as a person authorised to represent uk establishment br013897 on 26 may 2016 .
appointment of prashant julka as a person authorised to represent uk establishment br013897 on 26 may 2016 . - link opens in a new window - 4 pages
appointment of carlos arthuro quecan as a person authorised to represent uk establishment br013897 on 25 may 2016 .
appointment of carlos arthuro quecan as a person authorised to represent uk establishment br013897 on 25 may 2016 . - link opens in a new window - 4 pages
mindsphere connects real things ( e . g . industrial machinery and equipment ) to the digital world . . .
ernest w . marshall jr . has joined power management company eaton as its chief human resources officer . . .
abb has developed the jfbd nylon conduit to feature a corrugated design especially for the food and b . . .
html public
- / / w3c / / dtd xhtml 1 . 0 transitional / / en
urltoken
enter your email address below to receive urltoken ' s free email newsletters and periodic updates on h1b and employment sponsored greencards .
visadoor is a central visa database of employment based green cards , h1b visa , student visa , immigration attorneys etc . visadoor is the visa search engine where you will find your visa sponsor .
critical system solutions industries we serve industries we serve at sel , our more than 30 years of experience providing highly reliable , innovative solutions have made us a valued business partner for power management , process control , and factory automation . sel products are designed to meet the rigorous environmental and operational demands of facilities that must operate flawlessly , 24 hours a day , seven days a week . commercial buildings consumer products renewable energy life sciences electric utilities
critical system solutions sel overview sel overview who we are our mission at sel is to make electric power safer , more reliable , and more economical . to accomplish this mission , sel designs , manufactures , and supports a complete line of products and services for the protection , monitoring , control , automation , security , and metering of electric power systems . sel solutions range from comprehensive generator protection to distribution automation and control systems . sel customers come from a wide variety of industries and include government agencies , airports , universities , water treatment facilities , . . .
critical system solutions sel commitment to quality sel commitment to quality what does sel quality mean to customers ? ·· sel products and service conform to its published specifications and meet or exceed the customer’s expectations . “reliability is a big issue due to the exposure a public utility has , and the utility made the decision to change out the other relays and go exclusively with the sel - 351 relays . when i heard that , it was all the testimony i needed . when i showed my people what our local power supplier down at yates had gone through , that was all it took . my recommendation wasn’t . . .
critical system solutions sel commitment to quality how does sel achieve quality ? robust designing the sel design process is documented , controlled , and certified under the iso 9001 : 2008 standard , quality management systems requirements . the sel research and development ( r & d ) division applies this process to new product development and product enhancement projects . r & d works with manufacturing to create robust designs that adhere to the sel design for manufacturability ( dfm ) , design for test ( dft ) , and design for automation ( dfa ) guidelines . sel designs products for a service life of over 25 years . . .
critical system solutions sel product application guide transmission lines comprehensive generator protection ( sel - 300g , sel - 700g ) real - time synchrophasor vector processor ( sel - 3378 ) subcycle distance relaying ( sel - 421 ) line differential ( fiber , digital channels ) ( sel - 311l , sel - 411l ) synchrowave® pdc with archiving distributed generation intertie / wind generator protection ( sel - 700gt , sel - 700gw ) synchrowave central software field / stator ground module ( sel - 2664 , sel - 2664s ) real - time automation controller ( sel - 3505 ) zero - settings line differential ( sel - 387l ) power transformers five - winding transformer . . .
fiber - optic communications critical motor medium - voltage substation * main medium - voltage substation * sel - 451 high - voltage industrial substation synchronous motor * local integration not shown 1 fast motor bus transfer ( fmbt ) 2 main - tie - main ( mtm ) scheme 3 the sel - 3355 computer drives a display unit and supports the rtac image hmi . active arc - flash protection control wire connection mirrored bits communications via wire mirrored bits® communications via fiber differential communications via fiber fiber - optic communications communications type example industrial plant one - line diagram critical system . . .
for inquiries related to this message please contact support . for sales inquiries , please visit urltoken
if you believe this to be in error , please confirm below that you are not a robot by clicking
i ' m not a robot
below .
please make sure your browser supports javascript and cookies and that you are not blocking them from loading . for more information you can review the terms of service and cookie policy .
convert protocols with highly reliable , robust sel protocol gateways . apply the sel - 3301 protocol gateway to convert scada protocols . government and industry personnel are increasingly aware that scada data links are part of the mission - critical infrastructure . the sel - 3301 is . . .
protect scada links , maintenance ports , i & c systems , and other serial links from unauthorized access and control . install sel - 3021 serial encrypting transceivers to prevent eavesdropping or unauthorized control via serial communications links . protect critical operating , f . . .
problem with dispensing on a potato chip board or an uneven surface ? find out the solution to this . . .
all information products included in urltoken are provided
as is
for informational purposes only . the department of homeland security ( dhs ) does not provide any warranties of any kind regarding any information contained within . dhs does not endorse any commercial product or service , referenced in this product or otherwise . further dissemination of this product is governed by the traffic light protocol ( tlp ) marking in the header . for more information about tlp , see urltoken .
this behavior could result in unauthorized communications through the sel - 3620 and sel - 3622 to configured nat port forwarding destinations .
sel has determined that , when nat port forwarding is not used , all routed traffic is filtered properly through the firewall access control lists . if nat port forwarding is required , sel recommends that users of affected products contact their sel sales representative or customer service representative to obtain a no - cost firmware upgrade cd - rom packet including upgrade instructions .
nccic / ics - cert recommends that users take defensive measures to minimize the risk of exploitation of this vulnerability . specifically , users should :
minimize network exposure for all control system devices and / or systems , and ensure that they are not accessible from the internet .
locate control system networks and remote devices behind firewalls , and isolate them from the business network .
when remote access is required , use secure methods , such as virtual private networks ( vpns ) , recognizing that vpns may have vulnerabilities and should be updated to the most current version available . also recognize that vpn is only as secure as the connected devices .
ics - cert reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures .
ics - cert also provides a section for control systems security recommended practices on the ics - cert web page . several recommended practices are available for reading and download , including improving industrial control systems cybersecurity with defense - in - depth strategies .
additional mitigation guidance and recommended practices are publicly available in the ics‑cert technical information paper , ics - tip - 12 - 146 - 01b - - targeted cyber intrusion detection and mitigation strategies , that is available for download from the ics - cert web site .
organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to ics - cert for tracking and correlation against other incidents .
the device does not properly enforce access control while configured for nat port forwarding , which may allow for unauthorized communications to downstream devices .
cve - 2017 - 7928 has been assigned to this vulnerability . a cvss v3 base score of 7 . 2 has been assigned ; the cvss vector string is ( av : n / ac : l / pr : n / ui : n / s : c / c : l / i : l / a : n ) .
the nccic continuously strives to improve its products and services . you can help by choosing one of the links below to provide feedback about this product .
glassdoor will not work properly unless browser cookie support is enabled . learn how to enable cookies .
upload a resume to easily apply to jobs from anywhere . it ' s simple to set up .
copyright © 2008–2018 , glassdoor , inc .
glassdoor
and logo are proprietary trademarks of glassdoor , inc .
several years ago , mark wray’s maintenance manager came to him and said the flight department could do more work in - house if they only had a borescope . to be useful , it needed to be a very advanced borescope , one that could turn 90 - degree corners and record video of the airplane’s internal components .
that way of doing things is integral to sel’s culture . it’s why the company recently built a three - story r & d lab at its pullman , wa headquarters so sel engineers have the facilities to test every new product for resistance to high temperatures , humidity , physical damage and electrostatic shock . and it’s why sel bought its first airplane , a cessna citation bravo , in 1999 .
one of the things we’ve always done is provide every employee with the tools they need to do their job well .
on most flights , sel’s aircraft go to customer sites , carrying engineers or “sel university” instructors – specialists who train customers to integrate digital technologies into their power systems . salespeople and supply chain managers also fly . in the last 15 years , more than 2 , 200 different employees – over half of the people who work at the company – have flown on the company airplanes .
sel is 100 - percent employee owned , and business aviation is just another tool employees need to do their jobs . so many different employees fly to so many different offices ( sel has more than 100 around the world ) and customer sites , that the company has added three citation sovereigns and a citation x since acquiring the bravo . the company also opened a second aviation base in charlotte , nc , where one of the sovereigns transports people between customer support offices from nashville to philadelphia .
while the sel aircraft are available to every employee with a business need , the flight department still has to educate some workers on the value of business aviation .
when sel first opened the charlotte base , utilization of the sovereign based there was initially low , said wray . “one of our biggest challenges was educating the employees in those offices that the airplane was available to them . ”
to show all sel employees how the airplanes have contributed to the company’s growth and remind them that the aircraft is there for them to use , wray has made presentations at sel staff meetings live - streamed to national and international offices .
meanwhile , the flight department’s schedulers aim to fill seats on all the company aircraft by working alongside the people in the corporate travel department , which handles employees’ airline travel . they all sit together in a single office , where there’s a large white board that lists sel’s largest facilities , along with the name of every employee who needs to visit those locations .
“when we have an aircraft going to one of those offices , we call those people [ listed on the board ] to see if they’d like a seat , ” said kori whitcomb , sel’s dispatch manager . if the company aircraft can’t meet an employee’s travel schedule , the corporate travel department arranges airline flights for them .
when the schedulers have run through all the names on the white board and there are still empty seats , “we’ll send an email to each department to let them know where the aircraft is headed , ” said whitcomb .
using this scheduling technique , the charlotte - based sovereign had the highest utilization of all sel’s airplanes within three years , flying nearly 500 hours annually .
“we call that process ‘identify , measure , improve , ’” said wray , and it guides everything sel does , from the flight department to the manufacturing floor . for example , if a supplier cannot deliver a component that meets sel’s standards , sel will manufacture that component in - house .
sel is so vertically integrated because many of the company’s products are custom - built to customer specifications and are designed so that every product meets their high standards of quality .
the company’s emphasis on quality “rubs off on everything , ” said wray . in addition to its safety management system , the flight department has also put in place a quality management system focused on measuring and improving the passenger experience .
when harris corporation , the lead contractor on the faa’s data communications ( datacomm ) initiative , needed highly reliable computers for the project , it turned to sel .
as part of the nextgen air traffic management system , datacomm eventually will replace many two - way radio voice transmissions by enabling pilots and air traffic controllers to send text messages to each other . in 2014 , harris worked with sel to develop a solution to the faa’s need for dependable computers at base stations around the country – the ground units that communicate with aircraft in flight .
that solution is the sel - 3355 rugged computer , which has no fans , vents or moving parts . instead , it uses solid - state memory and copper heat pipes to manage the temperature of its components . “we designed the sel - 3355 to last for 20 years , ” said dave whitehead , sel vice president of r & d . “engineers can even remotely monitor and mediate its systems . ”
sel will provide more than 300 sel - 3355 computers for the nextgen project .
“for nexgen , it’s vital to have extremely reliable communications with aircraft as they’re traveling across the country , ” said whitehead . “it’s been really exciting for us to take the products we build for the electric utility industry and apply them to critical infrastructure in other industries , such as aviation . ”
bases : headquartered on pullman - moscow regional airport ( puw ) . a second base is located at charlotte douglas international airport ( clt ) .
aircraft : one cessna citation bravo , three citation sovereigns , one citation x .
personnel : 14 pilots ( including a department manager who flies ) , four maintenance technicians , two line technicians , two dispatchers , three corporate travel coordinators , one administrative assistant .
nbaa has redesigned business aviation insider to provide a more engaging reader experience , both in print and online .
the magazine ' s digital edition is now optimized for tablet app users . learn more about nbaa ' s magazine app .
all member employees are eligible to receive their own printed copies of business aviation insider free of charge . to subscribe , update your communications preferences .
html public
- / / w3c / / dtd html 4 . 0 transitional / / en
the iec 61850 opc server from matrikonopc provides connectivity to any iec 61850 compliant rtu , ied ( intelligent electronic device ) , plc , meter , transducer , relay , etc . this opc server enables you to monitor and control electrical substations and wind turbines located far in the fields securely and reliably . it connects to multiple devices at the same time , where the read and write operations with these devices are optimized to deliver the necessary data in time for the protective relaying . the opc server for iec 61850 supports :
the ability to control remote device operations by performing structured writes to control blocks .
enables opc clients that don ' t support structured writes to perform structured write operations by automatically building the custom structure .
iec 61850 7 - 2 ( acsi ) , 7 - 3 , 7 - 4 , and 8 - 1 ( scsm ) .
interoperable with hmi and historians systems such as citect , osisoft pi and any opc client application .
multiple communication channels at the same time for iec 61850 ethernet access ( tcp / ip ) .
do you have iec 61400 - 25 wind turbines ? use the opc server for iec 61400 - 25 .
here at matrikonopc , we stand behind our products . included in your purchase price is all software updates , 24 / 7 access to matrikonopc’s world - class support from our highly trained professionals around the globe and more for 1 year . we ' ll support you or your money back !
do you require multiple protocol support in one single opc server ? learn more about the matrikonopc universal connectivity server .
© 2018 honeywell international inc . home | search | site map | privacy policy | terms of use | contact
the skills gap bedeviling u . s . manufacturers has given rise to hundreds of programs to train workers . and most of these efforts , though varied in other ways , share one important trait : the schooling that occurs happens offsite , not at the factories for which workers are being trained . it could be at a community college , regional or local “workforce development” agency , or other independent organization .
the aim is to develop and sharpen skills of a potential assembly worker , or higher skilled manufacturing player , and then plug them in to an ongoing company operation with as little ramp - up time as possible .
many employers prefer this model . given the narrowing of the mission at many companies – to a core competency of a relative handful of tasks , letting others handle less - central requirements of the workplace – it makes sense to them . the very nature of training and integration of new workers – some drop out , some don’t make the cut , even the best can slow down the operation with questions and adjustments – seems antithetical to some operations designed to run 24 hours a day , 365 days a year , at flat - out 100 % of capacity , with minimal layers of management .
d’acosta , who was named ceo in 2014 , now serves as chief sales officer , according to a news release sel issued tuesday afternoon .
he originally was hired by sel in 2005 to lead the company’s mexican operations . he moved to pullman in 2012 to become vice president of sales and customer service and was promoted to chief operating officer just prior to being named ceo .