OHP Encryption

[LowderK]

Has anyone heard that OHP may be going fully encrypted on all there systems.?

 

[Jon1984]

I have not heard anything about OHP going full time Encryption where did you hear this from?

 

[Freqed]

I really see no benefit for OHP to use encryption as their radio traffic is mostly mundane, due to the use of MDT's.

 

[rvacs]

Correct @Freqed - all sensitive information goes over the MDT.

 

[KOK5CY]

If there using MDT then where is the dome antenna? The reason I’m asking is when I come across a ohp vehicle I only see the single 800 trunked antenna and maybe 1 or 2 whips on the trunk lid or the roof

 

[wmccr]

Its just cellular internet ran through whatever VPN they're using.
Its done through an external hotspot connected to the laptop or a SIM built into the laptop.
The same way a phone gets an internet connection while you're driving.

 

[BinaryMode]

Its just cellular internet ran through whatever VPN they're using.
Its done through an external hotspot connected to the laptop or a SIM built into the laptop.
The same way a phone gets an internet connection while you're driving.

In addition to this, I've seen dedicated talkgroups for MDT data. Though, I think cellular is more common.

 

[Tulsa731]

I really see no benefit for OHP to use encryption as their radio traffic is mostly mundane, due to the use of MDT's.

So does TPD, but they decided to encrypt everything. “For public safety”.

 

[peterjmag]

One of the main reasons why TPD went fully encrypted is due to the RTIC coming online. There is too much information being passed back and forth on all radio channels now that it would be considered an officer safety issue. This would also satisfy the new requirements of the FBI. Sign of the times. At least they still tone out major incidents on RMA 2A.

 

[ScanRafael]

This would also satisfy the new requirements of the FBI.

What rule is this?

 

[mwjones]

What rule is this?

I've been researching this as more and more agencies are disappearing behind the big 'E'...

According to the Douglas County Kansas Sheriff, it is the FBI Criminal Justice Information Services Security Policy.

Further research points to this document:

https://le.fbi.gov/cjis-division/cj...nter/cjis_security_policy_v5-9-5_20240709.pdf

The word "radio" is mentioned 15 times, and "encryption" 208 times across the 451 pages - I haven't had time to read through it in depth, but at a glance, this is more talking about data encryption, and the use of cellular/wi-fi networks and not LMR (LMR is only mentioned twice).

I would love to see the powers that are incoming in DC in January do a full 180 for sake of law enforcement transparency, but I'm not holding my breath, and even if they did, how fast would agencies turn off the big 'E' unless there's a financial incentive for them to do so.

[EDIT] In the first draft of this reply I pointed to a 2020 version of the document, but as I was closing my browser tabs found a 2024 version of the document, so the link and counts have been updated to reflect the newer document

 

[Trunktrunk247]

What rule is this?

CJIS

 

[BinaryMode]

The document states the encryption needs be a FIPS 140-2 approved algorithm, which is AES. ADP encryption is NOT FIPS 140-2 approved. Meaning a whole lot of law enforcement agencies in my neck of the woods and everywhere else around the country are not compliant. Further, the document states that criminal justice information (CJI) needs to be encrypted, not the whole lot of talkgroups. So by this, dispatch CAN be in the clear and CJI related information can be on another talkgroup that IS encrypted.

It's probably why Chicago PD and others have graciously allowed us a 30 minute delayed feed for dispatch ONLY. And as such other agencies should follow suite as it pertains to openness, transparency and accountability.

Just my two faux copper pennies worth...

Edit-


Lets not forget the use of MDTs.

I get the felling two-way radio and CJI and more protected than my medical records that are not only sold to data brokers, but rife for the taking by a would-be hacker.