February 14, Introducing.. Provable regulatory compliance!

Transcription

1 February 14, 2011 Introducing.. 1

2 Secure Cloud Computing 2

3 Secure Cloud Computing Secure Cloud Storage 3

4 The first complete security solution that lets you take advantage of Public Clouds while proving compliance to regulations! 4

5 FEATURES Encryption Tokenization Key Management Cryptographic hardware module Fully integrated Reduce scope of compliance audits Manage trillions of keys/objects Fully operational in 48 hours or less 5

6 BEFORE KeyAppliance System-1 Sensitive Data System-2 Sensitive Data System-3 Sensitive Data System-4 Sensitive Data System-5 Sensitive Data

7 Scope of PCI-DSS Audit BEFORE KeyAppliance System-1 Sensitive Data System-1 Sensitive Data System-1 Sensitive Data System-1 Sensitive Data System-1 Sensitive Data

8 Scope of PCI-DSS Audit AFTER KeyAppliance System-1 Sensitive Data System-4 Sensitive Data System-2 Sensitive Data KeyAppliance System-3 Sensitive Data System-5 Sensitive Data

9 FEATURES Automatic Key Management Split-Knowledge Control Highly Available Enterprise Scalability Simple service API Active Directory Integration Graphical Admin Console Dual Gigabit Ethernet LOWEST COST EKM appliance. GUARANTEED! 4 Core 64-bit CPU 8 GB DRAM certified HSM Or TPM 9

10 ARCHITECTURE LDAP Server Server 2 3 C/C Java 4 5 Crypto-Module Internal DB 1 Network RPG 7 Server 2 3 LDAP Server Ruby/PHP 6 Client s 4 5 Crypto-Module Internal DB Key Appliances 10

11 E-COMMERCE PUBLIC CLOUD CCN Name Public Cloud App Customer ID Billing Address Phone address Order Detail Token 5 3 CCN Token 4 Token 1 Customer ID Billing Address Phone address Order Detail Enterprise 2 Customer ID Name Credit Card Number Card Expiry Date Card Verification Value Amount 11

12 E-COMMERCE - VPDC CCN Name VPDC at provider's premises App Customer ID Billing Address Phone address Order Detail Token 5 Token 3 CCN Token 4 Enterprise 2 Customer ID Name Credit Card Number Card Expiry Date Card Verification Value Amount 1 Customer ID Billing Address Phone address Order Detail 12

13 FEATURES Encryption Decryption Key generation Key escrow and recovery on StrongAuth KeyAppliance Automatically transfer files to public clouds, VPDC, NAS Reduce cost of storage infrastructure 13

14 FEATURES Automatic Key Management Integration to Public Clouds Highly Available Enterprise Scalability Simple service API Active Directory Integration Graphical Interface Dual Gigabit Ethernet LOWEST COST crypto-engine. GUARANTEED! 4 Core 64-bit CPU 4 GB DRAM 14

15 ENCRYPTION MECHANICS Public Cloud or VPDC C/C++/C# 1 Plaintext 5 Ciphertext Private SAN or NAS Java Key 15

16 DECRYPTION MECHANICS Public Cloud or VPDC C/C++/C# 5 Plaintext 1 Ciphertext Private SAN or NAS Java Key 16

17 HEALTHCARE PUBLIC CLOUD PII Keys Patient ID Non-PII Data XENC File App Key Token Patient ID Non-PII Data 5 10 XENC File X-Ray 2 PII Lab 6 X-Ray 1 PII 7 4 Hospital Radiograph:: Courtesy Diego Grez 17

18 HEALTHCARE - VPDC VPDC at provider's premises Patient ID Non-PII Data XENC File App PII Keys Key Token Patient ID Non-PII Data 5 10 XENC File X-Ray 2 PII Lab 6 X-Ray 1 PII 7 4 Hospital Radiograph:: Courtesy Diego Grez 18

19 FOR E-COMMERCE 19

20 E-COMMERCE - 1 Public Cloud App Customer ID Billing Address Phone address Order Detail 1 Customer ID Billing Address Phone address Order Detail Enterprise 20

21 E-COMMERCE - 2 Public Cloud App Customer ID Billing Address Phone address Order Detail Enterprise 2 Customer ID Name Credit Card Number Card Expiry Date Card Verification Value Amount 21

22 E-COMMERCE - 3 CCN Name Public Cloud App Customer ID Billing Address Phone address Order Detail 3 CCN Enterprise 22

23 E-COMMERCE - 4 CCN Name Public Cloud App Customer ID Billing Address Phone address Order Detail Token 4 Enterprise 23

24 E-COMMERCE - 5 CCN Name Public Cloud App Customer ID Billing Address Phone address Order Detail Token 5 Token Enterprise 24

25 E-COMMERCE PUBLIC CLOUD CCN Name Public Cloud App Customer ID Billing Address Phone address Order Detail Token 5 3 CCN Token 4 Token 1 Customer ID Billing Address Phone address Order Detail Enterprise 2 Customer ID Name Credit Card Number Card Expiry Date Card Verification Value Amount 25

26 E-COMMERCE - VPDC CCN Name VPDC at provider's premises App Customer ID Billing Address Phone address Order Detail Token 5 Token 3 CCN Token 4 Enterprise 2 Customer ID Name Credit Card Number Card Expiry Date Card Verification Value Amount 1 Customer ID Billing Address Phone address Order Detail 26

27 FOR HEALTHCARE 27

28 HEALTHCARE - 1 App Lab 1 PII Hospital 28

29 HEALTHCARE - 2 App 2 PII Lab Hospital 29

30 HEALTHCARE - 3 PII App 3 Lab Hospital 30

31 HEALTHCARE - 4 PII App Lab 4 Hospital 31

32 HEALTHCARE - 5 PII Patient ID Non-PII Data XENC File App Patient ID Non-PII Data 5 Lab Hospital 32

33 HEALTHCARE - 6 PII Patient ID Non-PII Data XENC File App Lab 6 X-Ray Hospital Radiograph:: Courtesy Diego Grez 33

34 HEALTHCARE - 7 PII Patient ID Non-PII Data XENC File App X-Ray Lab 7 Hospital Radiograph:: Courtesy Diego Grez 34

35 HEALTHCARE - 8 PII Patient ID Non-PII Data XENC File App Key 8 Lab Hospital 35

36 HEALTHCARE - 9 PII Keys Patient ID Non-PII Data XENC File App Token 9 Lab Hospital 36

37 HEALTHCARE - 10 PII Keys Patient ID Non-PII Data XENC File App 10 XENC File Lab Hospital 37

38 HEALTHCARE PUBLIC CLOUD PII Keys Patient ID Non-PII Data XENC File App Key Token Patient ID Non-PII Data 5 10 XENC File X-Ray 2 PII Lab 6 X-Ray 1 PII 7 4 Hospital Radiograph:: Courtesy Diego Grez 38

39 HEALTHCARE VPDC VPDC at provider's premises Patient ID Non-PII Data XENC File App PII Keys Key Token Patient ID Non-PII Data 5 10 XENC File X-Ray 2 PII Lab 6 X-Ray 1 PII 7 4 Hospital Radiograph:: Courtesy Diego Grez 39