Security apparatus to house a device

According to an example, a security apparatus to house a device may include a chassis, a front stop having a front stop wall and a front stop opening, a rear stop having a rear stop wall and a rear stop opening, a front cover to be positioned in front of the front stop having a front cover opening, in which the front stop wall blocks direct line of sight into the front opening of the chassis through the front cover opening when the front cover is positioned in front of the front stop, and a rear cover to be positioned behind the rear stop having a rear cover opening, in which the rear cover blocks direct line of sight into the rear opening of the chassis through the rear cover opening when the rear cover is positioned behind the rear stop wall.

BACKGROUND

The Federal Information Processing Standard (FIPS) Publication 140-2 is a U.S. government computer security standard designed to coordinate the requirements and standards for cryptography modules that include both hardware and software components. FIPS 140-2 defines four levels of security, in which level 1 provides the lowest level of security and level 4 provides the highest level of security.

DETAILED DESCRIPTION

Disclosed herein are a security apparatus to house a device and a method of assembling a security apparatus. The security apparatus disclosed herein may include a chassis, a front stop, a rear stop, a front cover, and a rear cover. In one regard, the security apparatus disclosed herein may comply with level 2 of FIPS 140-2. FIPS 140-2, level 2 includes an opacity requirement, in which an enclosure is considered to be opaque only if the device housed in the enclosure cannot be determined by visual inspection within the visible spectrum using artificial light sources shining through the enclosure openings or translucent surfaces. That is, the manufacturer, model number, design, and/or composition information of the device housed in the enclosure cannot be determined through visual inspection through the enclosure or through an opening of the enclosure. As discussed in detail below, the security apparatus disclosed herein may be formed of an opaque material and may include various features that may prevent direct line of sight into the security apparatus while also enabling air to flow through the security apparatus.

FIPS 140-2, level 2 also includes a tamper evident requirement, in which an external indication that an attempt has been made to compromise the physical security of the device housed in the enclosure is required. As discussed below, the security apparatus disclosed herein is formed of a relatively rigid material and thus, attempts at bypassing locks on the security apparatus may be evident. FIPS 140-2, level 2 further includes a requirement that locks be tamper evident or pick resistant. As discussed below, the security apparatus disclosed herein may include locks that require the use of unique and controlled keys and may thus be tamper evident or pick resistant.

The security apparatus disclosed herein may house devices of various sizes and dimensions and may thus enable users to configure and install the security apparatus on an as needed basis. In one regard, therefore, the security apparatus may accommodate multiple types of products and may thus have relatively broad applicability.

With reference first toFIG. 1, there is shown an isometric view of a security apparatus100to house a device, according to an example. It should be understood that the security apparatus100may include additional elements and that some of the elements depicted therein may be removed and/or modified without departing from a scope of the security apparatus100.

Generally speaking, the security apparatus100may house a device, such as a server, an intrusion prevention system, an intrusion detection system, a router, a network switch, etc., with a level of protection that at least meets level 2 security requirements of FIPS 140-2. Thus, for instance, the security apparatus100may be formed to be opaque, i.e., formed of an opaque material and/or coated with an opaque material. By way of example, the security apparatus100may be formed of sheet metal, plastic, etc., through any suitable fabrication process. In addition, the security apparatus100may include various openings for air to flow into and out of the security apparatus chassis110and for cables to be run into the interior of the chassis110. However, and as discussed in greater detail below, various opaque walls may be positioned either in front of or behind the openings to prevent a direct line of sight through the openings and into the interior of the chassis110.

The security apparatus100may be formed of a material and into a configuration that indicates, for instance, becomes damaged, when an attempt is made to compromise the security of the security apparatus100. That is, access to the interior of the security apparatus100without the appropriate key may require that the security apparatus100be visibly damaged. Moreover, the chassis110includes a front cover120that may be removably attached to and locked to the chassis110through a tamper evident or pick resistant lock122. That is the lock122may require a unique and controlled key to be locked and opened. Although not shown, the lock122may include arms that extend into a front stop that is secured to the chassis110. The chassis110also includes a rear cover130that may include a lock (not shown) similar to the lock122. The lock in the rear cover130may also include arms that extend into a rear stop that is secured to the chassis110.

As also shown inFIG. 1, the front cover120includes a front cover opening124, in which a mesh structure126is positioned within the front cover opening124. Although not shown, the rear cover130may also include a rear cover opening, in which a mesh structure is positioned within the rear cover opening. In other examples, the mesh structure126may be omitted from either or both of the front cover opening124and the rear cover opening. In one example, air is to flow into the interior of the chassis110through the front cover opening124and to flow out of the interior of the chassis110through the rear cover opening. As such the front cover opening124and the rear covering opening may enable air to flow through the chassis110and cool the components of a device housed in the chassis110.

As further shown inFIG. 1, cable exits112,114may be formed in the side walls116,118of the chassis110. Only the cable exits112,114formed in the side wall116are depicted inFIG. 1. As discussed in greater detail herein below, the cable exits112,114enable cables, such as power cables, data cables, etc., to be run into and out of the interior of the chassis110while a device is securely housed, i.e., locked, within the security apparatus100.

Turning now toFIG. 2, there is shown an exploded view of the security apparatus100depicted inFIG. 1. InFIG. 2, the front stop210and the rear stop220of the security apparatus100are more readily visible. According to an example, the front stop210and the rear stop220may generally prevent direct line of sight into the chassis110through the front cover opening124and a rear cover opening while still enable air to flow through the chassis110. The front stop210and the rear stop220may also abut a device inserted into the chassis110to hold the device in place within the chassis110. In addition, inFIG. 2, along with the side walls116, the chassis110is depicted as including a bottom wall202and a top wall204, in which the walls116,118,202, and204form a structure having a front opening206and a rear opening208. The side walls116and118are as depicted as being formed with notches at opposite ends thereof to provide spaces for the cable exits112,114.

As shown, the front stop210includes a front stop wall212and a front stop opening214. The front stop wall212is also attached to two front stop side panels216. As shown inFIG. 2, when the front cover120is positioned in front of the front stop210, the front stop wall212blocks direct line of sight into the front opening206of the chassis110through the front cover opening124. The front stop wall212also blocks direct line of sight into the front opening206of the chassis110through the cable exits112. Although not clearly visible inFIG. 2, the rear stop220also includes a rear stop wall and a rear stop opening that are respectively similar to the front stop wall212and the front stop opening214. The rear stop wall may also be attached to two rear stop side panels222. Thus, for instance, the rear stop wall blocks direct line of sight into the rear opening208of the chassis110through the rear cover opening.

As also shown inFIG. 2, the side walls116and118of the chassis110and the front and rear stops210,220include mounting slots for receipt of fasteners. Particularly, for instance, fasteners may be inserted and through interiors of the front and rear stops210,220such that the fasteners may not be disengaged from an exterior of the chassis110. The side walls116and118of the chassis110and/or the front and rear stops210/220may also include mounting holes for receipt of fasteners of mounting hardware (not shown) to mount the security apparatus100on an electronics rack.

FIG. 2further shows arms240of a lock provided on the rear cover130. The lock122in the front cover120may include similar arms. In any regard, the arms240in the rear cover130include features that are to mate with compatible features in the rear stop220and the arms in the front cover120include features that are to mate with compatible features in the front stop210when the respective locks122are moved into a locked position. In one regard, therefore, because the front stop210and the rear stop220may be securely fastened to the chassis110and the front cover120and the rear cover130may be securely fastened to respective ones of the front stop210and the rear step220, access to a device housed within the security apparatus100may substantially be prevented when the security apparatus100is assembled and locked.

With reference now toFIG. 3, there is shown a cross-sectional side view of the front cover120and the front stop210, in which the front cover120is positioned, for instance, in a locked arrangement with the front stop210, according to an example. As shown therein, the front stop wall212is positioned behind the front cover opening124to therefore block direct line of sight into the front opening206of the chassis110. In addition, the front stop wall212is spaced from the front cover opening124and includes a cutout302to enable input airflow to flow into the chassis110through the front cover opening124, as denoted by the arrow304. As such, the arrangement of the front cover120and the front stop210may enable cooling airflow to flow into the chassis110, while blocking the interior of the chassis110from being visible through the front cover opening124. Moreover, the front stop wall212and front stop side panels216are shaped to enable the cable exit112to be maintained between the front cover120and the front stop wall212. In one regard, cables may be inserted through the cable exit112and through the front stop opening214for insertion into appropriate ports of a device housed in the security apparatus100.

Turning now toFIG. 4, there is shown a cross-sectional side view of the rear cover130and the rear stop220, in which the rear cover130is positioned, for instance, in a locked arrangement with the rear stop220, according to an example. As shown therein, the rear stop wall402is positioned behind the rear cover opening404to therefore block direct line of sight into the rear opening208of the chassis110. In addition, the rear stop wall402is spaced front the rear cover opening404and includes a cutout405to enable exhaust airflow to flow out of the chassis110through the rear cover opening404, as denoted by the arrow406. As such, the arrangement of the rear cover130and the rear stop220may enable heated airflow to be exhausted out of the chassis110through the rear stop opening408and through the rear cover opening404, while blocking the interior of the chassis110from being visible through the rear cover opening404. Similarly to the front cover120, the rear cover opening404has been depicted as including a mesh structure410. In other examples, however, the mesh structure410may be omitted or removed without departing from a scope of the security apparatus100disclosed herein.

Moreover, the rear stop wall402is shaped to enable the cable exit114to be maintained between the rear cover130and the rear stop wall402. In one regard, cables may be inserted through the cable exit114and through the rear stop opening408for insertion into appropriate ports of a device housed in the security apparatus100. The cables may include, for instance, power and/or data cables.

The rear stop220is also depicted as including a movable bracket420that may be slidably attached to the rear step220through a fastener422slidably held in a slot formed in a side wall of the rear stop220. That is, the fastener422may include a first end that is larger than the slot424and a second end that is smaller than the slot424, in which the second end is attached to the movable bracket420. The second end of the fastener422may also be threaded to enable the movable bracket420to be locked into position as desired. A second movable bracket420may be slidably attached to the other wall of the rear stop220in a similar manner.

By way of example, the movable brackets420may be positioned to contact a device following insertion of the device and the rear stop220into the chassis110. In one regard, the movable brackets420may apply force onto the device to substantially prevent the device from being shifted inside of the chassis110.

Although the front cover120has been depicted as being separate from the front stop210, it should be understood that the front cover120may instead be movably attached to the front stop210. Thus, for instance, the front cover120may be attached to the front stop210through a hinge. Likewise, the rear cover130may be attached to the rear stop220through a hinge. In this example, the front cover120and/or the rear cover130may be rotated to enable access to the interior of the chassis110. In addition, the front stop210and/or the rear stop220may include devices (not shown), such as loops, rings, cable ties, etc., to hold cables that extend into the chassis110interior through the cable exits112/114.

Turning now toFIG. 5, there is shown an isometric view of the security apparatus100mounted to the posts502of an electronics rack (not shown), according to an example. InFIG. 5, only portions of the posts have been depicted for purposes of simplicity. It should thus be understood that the posts502may extend for substantially the entire height of the electronics rack. In any regard, the security apparatus100may be mounted to the posts504through a plurality of brackets506and mechanical fasteners.

By way of particular example, the security apparatus100is 3 U tall, may house a 1 U or a 2 U electronic device, and is sized to be mounted on a conventionally sized electronics rack. In this example, the security apparatus may have a length of about 34.8 inches, a width of about 18.2 inches, and a height of about 5 inches.

With reference now toFIG. 6, there is shown a flow diagram of a method600of assembling a security apparatus100, according to an example. It should be apparent to those of ordinary skill in the art that the method600represents a generalized illustration and that other operations may be added or existing operations may be removed, modified or rearranged without departing from a scope of the method600. In addition, although particular reference is made herein to the security apparatus100depicted inFIGS. 1-4, it should be understood that the method600may be implemented in security apparatuses having other configurations.

At block602, a device may be inserted into the chassis110through one of the front opening206and the rear opening208. The device may be an electronic device, such as a server, a network switch, an intrusion detection system, an intrusion prevention system, etc. In one example, the security apparatus100may be attached to the posts502of an electronics rack prior to insertion of the device into the chassis110. In addition, following insertion of the device into the chassis110, a cable, such as a power cable, data cable, etc., may be attached to the device.

At block604, a front stop210may be inserted into the front opening206. As shown, for instance, inFIG. 2, the front stop210may have a slightly smaller size as compared with the front opening206such that the front stop210fits relatively securely inside the front opening206. In the example in which a cable is inserted into the device, the front stop210may be inserted into the front opening206while causing the cable to extend through the front stop opening214.

At block606, the front stop210may be secured to the chassis110. More particularly, for instance, fastener holes in the front stop210may be aligned with mating fastener holes in the chassis110and mechanical fasteners may be inserted through the fastener holes in both the front stop210and the chassis110. In addition, the mechanical fasteners may be inserted from which the interior of the chassis110to substantially prevent access to the mechanical fasteners from an exterior of the chassis110.

At block608, a front cover120may be attached to the front stop210. According to an example, during positioning of the front cover120in front of the front stop210, the cable may be maneuvered through a slot of the front stop210and out of a side of the front stop210such that the cable extends through a cable exit112. In addition, the lock122in the front cover120may be turned through use of an appropriate key to lock the front cover120onto the front stop210.

At block610, a rear stop220may be inserted into the rear opening208of the chassis110. As shown, for instance, inFIG. 2, the rear stop220may have a slightly smaller size as compared with the rear opening208such that the rear stop220fits relatively securely inside the rear opening208. According to an example, a cable may be attached to the device through the rear opening208. In this example, the rear stop220may be inserted into the rear opening208while causing the cable to be directed through the rear stop opening408.

At block612, the rear stop220may be secured to the chassis110. More particularly, for instance, fastener holes in the rear stop220may be aligned with mating fastener holes in the chassis110and mechanical fasteners may be inserted through the fastener holes in both the rear stop220and the chassis110. In addition, the mechanical fasteners may be inserted from which the interior of the chassis110to substantially prevent access to the mechanical fasteners from an exterior of the chassis110. Moreover, a movable bracket420may be moved into position to contact a rear portion of the device and the movable bracket420may substantially be held in that position.

At block614, a rear cover130may be attached to the rear stop220. According to an example, during positioning of the rear cover130behind the rear stop220, the cable may be maneuvered through a slot of the rear stop220and out of a side of the rear stop220such that the cable extends through a cable exit114. In addition, a lock in the rear cover130may be turned through use of an appropriate key to lock the rear cover130onto the rear stop220.