Interoperabel kommunikation för miljöer för samarbetspartners

Suverän, interoperabel och säker realtidsinfrastruktur för gemensamma operationer och koalitionsoperationer där varje partner behåller full kontroll.

Utmaningen

Tillhandahåller suverän och säker kommunikation mellan allierade styrkor.

Traditionellt har enskilda militärer sina egna säkra kommunikationssystem, men kan vanligtvis inte stödja kommunikation med andra allierade styrkor.

Mission Partner Environments (MPEs) tillhandahåller den säkra, interoperabla infrastruktur som gör det möjligt för militära styrkor och deras betrodda partners att kommunicera, samarbeta och utbyta känslig klassificerad information över organisations- och nationsgränser.

{"size":{"width":720,"height":600},"sizeMode":"aspect","aspectRatio":"4:3","clusters":[{"id":"c_mpe_1","name":"Cluster 1","radius":120,"rotation":0,"core":{"label":"","show":true,"shape":"cloud","rings":false,"filled":false},"rings":[{"id":"r_mpe_1","radius":60,"rotation":90,"connectToCore":true,"connectInRing":"full","animateConnections":true,"enclosed":true,"enclosedShape":"cloud","arrows":"both","nodes":[{"id":"n_mpe_1a","label":"","shape":"cloud","childRadius":10,"childRotation":45,"children":[{"id":"n_mpe_1a1","label":"","shape":"cloud","childRadius":10,"childRotation":0,"children":[{"id":"n_mpe_1a2","label":"","shape":"cloud"}]}]},{"id":"n_mpe_1b","label":"","shape":"cloud"}]}]},{"id":"c_mpe_2","name":"Cluster 2","radius":180,"rotation":120,"core":{"label":"","show":true,"shape":"cloud","rings":false,"labelPosition":"below"},"rings":[{"id":"r_mpe_2","radius":60,"rotation":270,"connectToCore":false,"connectInRing":"full","animateConnections":true,"enclosed":true,"enclosedShape":"cloud","enclosedStyle":"dashed","arrows":"both","edgeStyle":"solid","nodes":[{"id":"n_mpe_2a","label":"","shape":"cloud"},{"id":"n_mpe_2b","label":"","shape":"cloud"}]}]},{"id":"c_mpe_3","name":"Cluster 3","radius":180,"rotation":240,"core":{"label":"","show":true,"shape":"cloud","rings":false},"rings":[{"id":"r_mpe_3","radius":60,"rotation":300,"connectToCore":true,"connectInRing":"full","animateConnections":true,"enclosed":true,"enclosedShape":"cloud","nodes":[{"id":"n_mpe_3a","label":"","shape":"cloud"},{"id":"n_mpe_3b","label":"","shape":"cloud"},{"id":"n_mpe_3c","label":"","shape":"cloud"}]}]}],"connections":[{"from":"c_mpe_1","to":"c_mpe_2","style":"solid","arrows":"both","packetFlow":"bidirectional","animate":true},{"from":"c_mpe_2","to":"c_mpe_3","style":"solid","arrows":"both","packetFlow":"bidirectional","animate":true},{"from":"c_mpe_1","to":"c_mpe_3","style":"solid","arrows":"both","packetFlow":"bidirectional","animate":true}],"boundsIncludeEnclosure":true,"padding":0}
Matrisens kraft

En öppen standard som ger varje partner kontroll.

Matrix öppna standard gör det möjligt för varje deltagande nation eller organisation att driftsätta och kontrollera sin egen suveränitetsbevarande kommunikationslösning. Dessa separata driftsättningar kan sedan ansluta multilateralt med hjälp av säker Matrix-baserad federation, över ett mycket motståndskraftigt decentraliserat nätverk.

Det finns inget centraliserat nätverk, ingen enskild kontrollpunkt, och ingen nation innehar huvudnycklarna.

{"sizeMode":"aspect","aspectRatio":"1:1","clusters":[{"id":"c1","name":"Nation A","radius":200,"rotation":270,"core":{"label":"","show":true,"shape":"square","color":"#0dbd8b","labelPosition":"inside","rings":false},"rings":[{"id":"r1","radius":46,"rotation":0,"connectToCore":true,"connectInRing":"full","animateConnections":false,"enclosed":true,"enclosedShape":"circle","enclosedStyle":"dashed","nodes":[{"id":"n1b","label":"","shape":"dot"},{"id":"n1c","label":"","shape":"dot"}]}]},{"id":"c2","name":"Nation B","radius":200,"rotation":342,"core":{"label":"","show":true,"shape":"square","color":"#0dbd8b","labelPosition":"inside","rings":false},"rings":[{"id":"r2","radius":46,"rotation":0,"connectToCore":true,"connectInRing":"full","animateConnections":false,"enclosed":true,"enclosedShape":"circle","enclosedStyle":"dashed","nodes":[{"id":"n2a","label":"","shape":"dot"}]}]},{"id":"c3","name":"Nation C","radius":200,"rotation":54,"core":{"label":"","show":true,"shape":"square","color":"#0dbd8b","labelPosition":"inside","rings":false},"rings":[{"id":"r3","radius":46,"rotation":330,"connectToCore":true,"connectInRing":"full","animateConnections":false,"enclosed":true,"enclosedShape":"circle","enclosedStyle":"dashed","nodes":[{"id":"n3a","label":"","shape":"dot"},{"id":"n_dkshyi","label":"","shape":"dot"},{"id":"n3b","label":"","shape":"dot"},{"id":"n3c","label":"","shape":"dot"},{"id":"n_wlu8j3","label":"","shape":"dot"}]}]},{"id":"c4","name":"Nation D","radius":200,"rotation":126,"core":{"label":"","show":true,"shape":"square","color":"#0dbd8b","labelPosition":"inside","rings":false},"rings":[{"id":"r4","radius":46,"rotation":0,"connectToCore":true,"connectInRing":"full","animateConnections":false,"enclosed":true,"enclosedShape":"circle","enclosedStyle":"dashed","nodes":[{"id":"n4a","label":"","shape":"dot"},{"id":"n_yvjy77","label":"","shape":"dot"},{"id":"n4b","label":"","shape":"dot"},{"id":"n4c","label":"","shape":"dot"}]}]},{"id":"c5","name":"Nation E","radius":200,"rotation":198,"core":{"label":"","show":true,"shape":"square","color":"#0dbd8b","labelPosition":"inside","rings":false},"rings":[{"id":"r5","radius":46,"rotation":0,"connectToCore":true,"connectInRing":"full","animateConnections":false,"enclosed":true,"enclosedShape":"circle","enclosedStyle":"dashed","nodes":[{"id":"n5a","label":"","shape":"dot"},{"id":"n5b","label":"","shape":"dot"},{"id":"n5c","label":"","shape":"dot"}]}]}],"connections":[{"from":"c1","to":"c2","style":"solid","arrows":"none","packetFlow":"bidirectional","animate":true},{"from":"c1","to":"c4","style":"solid","arrows":"none","packetFlow":"bidirectional","animate":true},{"from":"c1","to":"c5","style":"solid","arrows":"none","packetFlow":"bidirectional","animate":true},{"from":"c2","to":"c3","style":"dashed","arrows":"none","packetFlow":"bidirectional","animate":true},{"from":"c2","to":"c4","style":"solid","arrows":"none","packetFlow":"bidirectional","animate":true},{"from":"c3","to":"c4","style":"solid","arrows":"none","packetFlow":"bidirectional","animate":true},{"from":"c3","to":"c5","style":"solid","arrows":"none","packetFlow":"bidirectional","animate":true},{"from":"c4","to":"c5","style":"solid","arrows":"none","packetFlow":"bidirectional","animate":true}]}

Kombinationen av Element och Matrix ger nationella säkerhetsoperatörer en säker, interoperabel och motståndskraftig kommunikationslösning. Den bevarar digital suveränitet samtidigt som den möjliggör effektivt samarbete mellan regeringar, samarbetspartners och försvarsindustrin.

Matthew Hodgson
VD och medgrundare, Element
Kraften i Element

Lösningen som gör den driftsättningsbar

Element är den Matrix-baserade produktstacken som levererar en komplett, militärklassad MPE-kommunikationslösning, från användarupplevelsen till serverinfrastrukturen och klassificeringsgränserna.

Frontend

Element Pro

Elements flaggskeppsapplikation för företag, som stöder MPE-användningsfall via Pro-tillägg, tillgänglig för webb, dator, Android och iOS. Utformad för att möta användbarhetsförväntningarna för moderna operationer samtidigt som den uppfyller säkerhetskraven för klassificerade miljöer.

Classification labels

SPIF-managed cryptographically-bound STANAG 4774 classification labels on a per-message and per-room granularity.

Client-side policy enforcement

Enforce security policies directly on user devices.

Mobile device management

MDM controls across managed device fleets.

Certificate pinning

Ensures connection with the intended server.

Grid View

Single pane of glass dashboarding.

Hardware token & X.509 auth

Capacity for hardware token and X.509 client TLS certificate authentication.

Whitelabel apps

Custom branding.

Server

Element Server Suite Pro (ESS Pro)

Den serverbaserade infrastrukturen som möjliggör självdrift, konfigurationer och policykontroller för att hålla varje partnerlands implementering suverän och redo för ackreditering.

Server-side Policy Enforcement

Server-side Policy Enforcement Point for STANAG 4774 CMLS labelling.

Element PRO Admin dashboard (dark mode) showing users list and server controls like and Auditing and Moderation.

Federation control

Closed or open federation with full admin control over connections, end-users and access management.

LTS releases

Long-term support releases with SLA commitments.

Advanced security advisories

Advanced security advisories for seamless updates

Advanced identity and access

Identity and access management, auditing and admin capabilities.

Deployment options

Air-gapped, self-hosted and hosted deployment options.

{"size":{"width":720,"height":600},"core":{"label":"HIGH","show":true,"shape":"square","labelPosition":"inside","rings":false,"color":"#0dbd8a"},"rings":[{"id":"r_cds_inner","radius":39,"rotation":90,"connectToCore":true,"connectInRing":"full","animateConnections":true,"enclosed":true,"nodes":[]},{"id":"r_cds_outer","radius":66,"rotation":90,"connectToCore":true,"connectInRing":"none","animateConnections":true,"nodes":[{"id":"n_cds_diamond","label":"Cross Domain Gateway","shape":"diamond","labelPosition":"below","color":"#0DBD8B","filled":true,"size":"small","childRadius":70,"childRotation":0,"childArrows":"both","children":[{"id":"n_cds_low","label":"LOW","shape":"square","color":"#0096ff","enclosed":true}]}]}],"boundsIncludeEnclosure":false,"sizeMode":"aspect","aspectRatio":"2:1"} HIGH Cross Domain Gateway LOW
Överbrygga luftgapade miljöer

Domänöverskridande gateways

Anslut säkert miljöer med hög och låg tillit, genom att dekryptera, inspektera och återkryptera data.

Tillämpa strikta regler för dataläckageskydd och innehållsfiltrering vid varje klassificeringsgräns.

Ersätt manuell informationsdelning med kontrollerade, granskningsbara flöden i realtid mellan högsäkerhets- och lågsäkerhetsnätverk.

{"size":{"width":720,"height":600},"core":{"label":"INT","show":true,"shape":"square","labelPosition":"inside","rings":false,"color":"#0dbd8a"},"rings":[{"id":"r_sbg_inner","radius":39,"rotation":90,"connectToCore":true,"connectInRing":"full","animateConnections":true,"enclosed":true,"nodes":[]},{"id":"r_sbg_outer","radius":66,"rotation":90,"connectToCore":true,"connectInRing":"none","animateConnections":true,"nodes":[{"id":"n_sbg_diamond","label":"Secure Border Gateway","shape":"triangle","labelPosition":"below","color":"#0DBD8B","filled":true,"size":"small","childRadius":70,"childRotation":0,"children":[{"id":"n_sbg_partner","label":"Ext","shape":"square","color":"#0096ff"}]}]}],"boundsIncludeEnclosure":false,"sizeMode":"aspect","aspectRatio":"2:1"} INT Secure Border Gateway EXT
Nätverksperimeterskydd

Säkra gränsgateways

Kontrollera intern och extern federation vid nätverksgränsen.

Regelbaserad brandvägg på applikationsnivå med federationskontroller för att säkert hantera ditt Matrix-nätverk.

Bestäm och hantera vem som får ansluta, för att hantera risken för obehörig åtkomst, dataintrång och skadlig aktivitet.

Scenarierna

Byggd för hur koalitionsoperationer faktiskt fungerar

Från strategiska högkvarter till den taktiska frontlinjen stöder Element hela det operativa spektrumet av MPE-användningsfall.

Multinationellt koalitionshögkvarter

Varje partnernation driver sin egen federerade ESS Pro-server. Personal kommunicerar över nationsgränser i realtid, där varje nation behåller digital suveränitet och full administrativ kontroll över sin egen distribution.

Cross domain intelligence sharing

Element’s Cross Domain Gateways act as a secure policy-enforced bridge between classification levels. High-side and low-side networks exchange controlled information without manual transfer or removable media.

Exercises and surge operations

Set up a federated MPE environment in hours, not months. When exercises conclude, partner connections dissolve cleanly, and each nation's data remains entirely within its own infrastructure.

Tactical edge and DDIL operations

Support field units, vessels and vehicles operating in denied, disrupted, intermittent and limited environments. Element’s low-bandwidth and ultra-low-bandwidth transports and mesh-ready architecture keep teams connected where conventional messaging fails.

Interagency and NGO coordination

Humanitarian response operations need to extend to civilian agencies and NGOs. Partners can be added through multi-tenancy, managed hosting or each party being able to spin up its own deployment.

End-user assurance

Each partner connects Element to their own directory system to carefully control which end users join, and under what conditions. Federated identity that respects each nation's own access policies.

Data centric security

STANAG 4774 labelling and policy enforcement built in

Element Pro supports STANAG 4774.7 Confidentiality Metadata Labelling Syntax (CMLS) for cryptographically enforced data centric security. Labels are applied at every level - server, room, and individual message.

On the server side, ESS Pro provides a Policy Enforcement Point for integration with external Policy Decision systems. Full SIEM integration ensures that every policy decision can be ingested for a complete forensic audit trail across the MPE.

Two federated Matrix deployments showing Element Pro clients, homeservers with policy enforcement for client-server and server-server traffic, Matrix Authentication Service, upstream identity providers and policy decision points, plus an XMPP bridge on the first deployment.
Air-gapped deployment

Fully isolated. Zero external dependencies.

Element Pro and ESS Pro operate in air-gapped environments without dependencies on internet connections. The full MPE capability stack, running entirely within your own classified or private network.

Air-gapped Network illustration

XMPP and existing bridging

Bridge to JChat (XMPP) and other existing military communications platforms enabling interoperability, without requiring partners to replace existing infrastructure.

Also trusted by allied defence and government for low-side communication

A sovereign, federated messenger for NATO and its member nations

NATO is addressing the issues caused by consumer messaging apps by introducing NI²CE messenger - a sovereign and secure low-side messenger based on Element - that is providing interoperability and autonomy internally and for its members.

Secure, sovereign messaging for over 100,000 active service members

The German Armed Forces operate a sovereign Element deployment as the standard for real time communications, hosted entirely within national infrastructure.

Organisations with requirements for interoperability, federation and data sovereignty should consider Element.

Heidi Shey, Principal Analyst, Forrester
The Forrester Wave™: Secure Communications, Q3 2024

Be in your element.

Suverän och säker kommunikation.