BLACKPIQ / POST-QUANTUM IPsec

Post-quantum IPsec.
Locked to the port.

Protect industrial Ethernet with a post-quantum IPsec tunnel using optional hybrid ML-KEM key establishment, plus physical locking at the controller.
Hybrid ML-KEM / Encrypted IPsec / Port locking
*Optional hybrid ML-KEM-768/1024 in Standard Mode. Both endpoints must support and enable the selected profile.
The supplied BlackPiQ product photo shows the device physically secured to the controller. A highlighted post-quantum IPsec tunnel connects a compatible control-center gateway to BlackPiQ, with optional hybrid ML-KEM and classical key establishment.
The supplied BlackPiQ product photo shows the device physically secured to the controller. A highlighted post-quantum IPsec tunnel connects a compatible control-center gateway to BlackPiQ, with optional hybrid ML-KEM and classical key establishment.
BLACKEDGE / SECURE REMOTE CONSOLE ACCESS

Remote access.
Physical control.

Connect authorized operators to critical RS232 consoles with SSH or HTTPS, strong authentication and physical port security.
SSH & HTTPS / MFA & AAA / Tamper alerts
Simplified BlackEdge diagram: remote operator connects by SSH or HTTPS over Ethernet to BlackEdge, physically locked to a router or switch RS232 console. Optional TACACS+ or RADIUS AAA is a separate side connection.
Simplified BlackEdge diagram: remote operator connects by SSH or HTTPS over Ethernet to BlackEdge, physically locked to a router or switch RS232 console. Optional TACACS+ or RADIUS AAA is a separate side connection.
BLACKVAULT HSMs / HARDWARE KEY PROTECTION

Protect the keys.
Keep control.

Generate, safeguard and manage cryptographic keys in protected hardware for enterprise applications and critical infrastructure.
Key generation / Tamper response / Access control
BlackVault HSM touchscreen model with inserted smart card, shown as the example for the BlackVault HSM family.
BLACKVAULT TOUCHSCREEN
HSM / HSM.TAC / HSM.RAS
BLACKSER AES / SERIAL DATA ENCRYPTION

Encrypt serial data.
Protect operations.

Add AES-256 protection to existing RS232 communications serving RTUs, PLCs, meters and protective relays.
RS232 / Modbus · DNP · IEC101 / Inline encryption
BlackSER AES inline RS232 serial data encryptor, front view.
AES-256
SERIAL DATA PROTECTION
RS232
EXISTING SERIAL ASSETS
INDUSTRIAL CONTROL SYSTEM PROTECTION

Critical control.
Post-quantum IPsec.

Protect PLCs, RTUs and IEDs with an optional hybrid post-quantum IPsec tunnel, physically locked to the industrial controller by BlackPiQ.
Hybrid ML-KEM / PLCs · RTUs · IEDs / Port locking
*Optional hybrid ML-KEM-768/1024 in Standard Mode. Both endpoints must support and enable the selected profile.
The supplied BlackPiQ and controller photo with a highlighted post-quantum IPsec tunnel terminating at BlackPiQ and physical protection at the controller Ethernet port. Hybrid ML-KEM key establishment is optional and requires a compatible configuration at both endpoints.
previous arrowprevious arrow
next arrownext arrow
PlayPause
Slider

Kentucky Counties lower cost of First Responder networks without sacrificing reliability

One of the key elements of an E-911 network is reliable routing of emergency calls to the Public Safety Answering Point (PSAP). This often consists of dedicated analog circuits carried on T1 lines from the Local Exchange Carrier to dispatch centers. In order to reduce monthly telecom costs while retaining the existing dispatch gear, a leading E-911 solutions provider employed Engage Communication equipment to seamlessly transport T1 traffic over cost effective IP networks for a number of Kentucky Counties.

E-911 infrastructure, with life changing consequences, must be extremely reliable. At the same time, government service costs are under intense scrutiny. Fortunately the increased availability of affordable Ethernet / IP networks often make them a viable and cost effective alternative to T1 circuits.

However, many believe the entire E-911 infrastructure must be converted to IP to take advantage of this transport cost savings, including introduction of Voice over IP (VoIP) PSAPs. This would require costly capital expenditures as well as new complexities in training and operations; jeopardizing the Return on Investment (ROI) of replacing T1 with IP circuits.

Fortunately, the Engage IP•Tube product line reliably and cost effectively converts T1 traffic to IP, and then back to T1 again at the other end of the circuit. Thus no changes are required to the PSAP or Local Exchange hand off to take advantage of lower cost IP transport.

 FirstResponder1

With the IP•Tube “Mux” feature, different groups of DS0 voice channels are groomed from a T1 circuit for IP transport to specific PSAPs. This saves on equipment cost and reduces network complexity. The IP•Tube provides numerous other advanced features to ensure high quality transport, including:

  • Echo Cancellation to improve voice quality when echo is encountered due to excessive delay in some IP networks;
  • Data Compression to reduce Ethernet bandwidth consumed;
  • Protection to automatically switch to an alternate IP path if the primary fails;
  • Assured Packet Delivery for challenging network environments;
  • Stand alone and Chassis configurations.

The IP•Tube product line also converts T3 and serial circuits (RS232, RS530, V.35, etc.) to packets for effective and efficient transport over IP network.


Engage logo 990000 rev 2.000
9565 Soquel Drive Dr,
Aptos, CA 95003
 
Telephone: +1-831-688-1021
Toll Free : +1-877-ENGAGE4
​Designed, Fabricated, and Assembled
in America icon
Supported Worldwide

© 1989-2025 Engage Communication, Inc. All Rights Reserved.