Subscribe to the Free Print Edition!
Celebrating 25 Years

One card is key to many nets

With controller, a Defense agency’s users no longer need multiple PCs

By William Jackson
GCN Staff

A secure government office has begun using the 2in1 PC controller card from Voltaire Advanced Data Security Ltd. of Vienna, Va., to connect to public and secure networks from a single PC.


Physically separating network connections inside the PC is eliminating multiple workstations at a secure Defense agency.


The National Security Agency in July certified the 2in1 PC controller for use with secret-level networks after it met Assurance Level 2 of NSA’s Common Criteria for Information Technology Security.

The surest way to keep secure networks separate from others has been an air gap—in other words, connecting through separate PC clients. The 2in1 PC puts the air gap on the controller card via electromechanical switches.

“Our initial purpose was to reduce the number of seats and the infrastructure support,” said Daniel L. Williams, a consultant working at a secure Defense Department agency in Alexandria, Va., where the card is in use.

More efficient

Williams said workers can be more productive when they do everything at a single PC instead of having to switch between two or more to get onto different networks.

Charley Gienger, an employee who has been using a 2in1 PC controller on a trial basis for several months, said the planning room where he works has three shared PCs connected to the Internet, plus a classified computer on each desk.

“We have to physically get up to use the Internet,” he said. “With the dual card, we have both capabilities on our desks.”

Williams, a principal functional analyst for Innolog Inc. of Alexandria, said the number of agency PCs will drop from 50 to about 30 when 2in1 PC is fully installed.

The 2in1 PC controller card, introduced in 1998, fits in an ISA slot. An IDE cable from the hard disk connects to the card, and a second cable connects the card to the motherboard. The card has receptors for RJ-11 and RJ-45 plugs for separate network connections.

The controller’s software, PartitionMagic from PowerQuest Corp. of Orem, Utah, segments the hard disk and sets aside a transition area to handle switching between networks. The user specifies the size of the secured and public partitions, each of which has its own operating system.

Partition information and master boot records reside in nonvolatile memory on the controller card. Relay switches allow only one physical network connection at a time.



GCN Popup