Resilient, Secure, and Scalable: The SecureSync® 2400 Advantage

Assured Timing for Evolving Threat and Regulatory Environments

SecureSync® 2400 is Safran’s resilient time and frequency synchronization platform, engineered to secure time reference acquisition and precise time keeping in environments exposed to GNSS interference, cyber threats, and regulatory pressure.

Modern defense and critical infrastructure systems increasingly depend on trusted timing. Government initiatives such as the US Executive Order on Resilient Positioning, Navigation, and Timing, the European Cyber Resilience Act (CRA), are shaping requirements for availability, integrity, resilience, monitoring, and recoverability of timing infrastructures.

SecureSync 2400 directly addresses these challenges through a layered‑defense timing architecture, minimizing the probability and impact of both RF‑based and cyber‑based attacks on timing services.

Resilient Timing Architecture Against GNSS Interference

Resilient timing depends on protecting both time reference acquisition and holdover performance when GNSS signals are degraded or denied.

SecureSync 2400 Provides:

• Multi‑band, multi‑constellation GNSS reception (GPS, Galileo, QZSS, NavIC, BeiDou)
• Optional GNSS interference detection, including jamming and spoofing
• Multiple high‑performance internal oscillator options, ensuring timekeeping continuity during GNSS outages
• Support for external network and legacy references to build multi‑source, fault‑tolerant architectures

This layered approach increases the complexity required to compromise timing services and aligns with resilience objectives emphasized in both EU and US critical infrastructure guidance.

Cybersecurity‑Driven Design

SecureSync 2400 is designed with security as a foundational requirement, not an add‑on.

Core Cybersecurity Capabilities:

• VLAN support and network segmentation
• Account and access management with configurable password policies
• Authentication via LDAP, RADIUS, TACACS+
• Configurable protocol enable/disable and access control lists
• Encrypted management and services via SSL/TLS and SSH
• Security event logging and auditability
• Regular, signed firmware updates

Cryptographic Assurance:

SecureSync 2400 integrates a FIPS 140‑3 certified cryptographic module, used for all authentication and cryptographic functions.

Scalable Network Timing: From NTP to White Rabbit

SecureSync 2400 delivers high‑performance, scalable network timing to support small protected networks as well as large, distributed infrastructures.

Network timing capabilities:

• NTP v2 / v3 / v4, SNTP, and NTP Anycast
• PTP v2 (IEEE 1588‑2019) with support for:
  • Default profile
  • Power profiles (IEEE 61850‑9‑2 / C37.238)
  • Telecom profiles (G.8265.1, G.8275.2 master only)
  • Enterprise and IEEE 802.1AS profiles
• White Rabbit (via WROX option card), achieving nanosecond‑level accuracy on 1 GbE or 10 GbE, comparable to GNSS‑based timing

High‑throughput performance:

• Base unit includes dual Gigabit Ethernet ports (RJ‑45 and SFP)
• Expansion via option cards up to:
  • 12 × 1 GbE ports
  • 8 × 10 GbE ports

As a PTP Grandmaster, SecureSync 2400 supports up to 2 million PTP requests per second, enabling large‑scale deployment without architectural compromise.

Unmatched Modularity for Legacy and Modern Timing Interfaces

SecureSync 2400 is built on a highly modular architecture, allowing precise adaptation to mission and infrastructure requirements.

Base Timing Interfaces:

• 10 MHz frequency output
• 1 PPS timing output
• Software‑configurable I/O supporting:
  • TTL pulse signals
  • RS‑232 / RS‑485
  • IRIG AM and IRIG DCLS
  • NMEA and Have Quick time codes

Expansion Flexibility:

• Available in 2‑slot (2402) and 6‑slot (2406) configurations
• Support for more than 40 option cards, covering frequency, phase, network, and legacy timing interfaces
• Field‑upgradeable to preserve long‑term system value and regulatory compliance