Secure service for comfortable cross-enterprise collaboration & data exchange

Transcription

1 Secure service for comfortable cross-enterprise collaboration & data exchange Dr. Ralf Rieken CEO, Uniscon GmbH selected by für die all4cloud Lösung

2 Uniscon at a Glance Founded 2009 (Munich Technology Center, MTZ) Tech leader in web security R&D and data centers in Germany Approx. 40 employees Mile stones 2015 PwC selects idgard & Sealed Cloud for ist all4cloud offering TÜV IT certifies idgard with Protection Class III of Trusted Cloud Data Protection Profile More than 200 news reports cover idgard & Sealed Cloud already within the first six months Experton Group AG evaluates Uniscon as Rising Star IT Security 2015

3 Our Solution idgard service for efficient and secure cross-company collaboration File exchange and data rooms in the Sealed Cloud Alternative to FTP & file sharing services Project & team rooms, audit proof data rooms Unique operator proof services Prevents unwanted access by technology Protects content & meta data Sealed processing of data Developed and operated in Germany Secure mobile access Secure transfer of attachments Certified by TÜV-IT against Trusted Cloud Data Protection Profile (TCDP) Result: Protection class III (highest level) Compliant for professional secrets (physicians, tax advisors, auditors etc. 203 StGB) Industrie 4.0 machine-to-machine Technology promoted by German Ministry of Economy and Technology

4 PwC selected idgard and Sealed Cloud for their all4cloud solution offering Selected by

5 Web services are enticing... Productivity Profitability Latest applications Mobility, store & share / type & share file exchange Current data available any time on any device Automatic updates (Customarily) no set-up costs No operating costs Pay-per-use Flexibility (e.g. upon peak demand) Day-by-day invoicing 5

6 Solution: idgard + Sealed Cloud Mobile office File transfer and exchange Collaboration applications Team, project & data rooms Interconnect processes Technology excludes service provider access to data Technically sealed data center User does have exclusive control of access to all own data 6

7 idgard is Easy to Use Files, chats, s Encrypted transfer per regular browser Encrypted transfer per regular browser Automatic key management Provider-proof Ad-hoc-integration of external business partners, no key management No client software necessary. A Web browser is all you need Added convenience with free apps for online & offline access

8 Secure Collaboration for large and small Enterprises Starter Package Companies with up to 50 users Flexible management by Web portal Immediate response Monthly invoice based on use Guest licences for external partners for bidirectional communication & realtime group collaboration Option: Additional protection of documents against data leakage and audit proof journal Premium Package for enterprises Integration with LDAP/Active Directory Single-sign-on in the Intranet Predefined rights for LDAP groups Integration in business processes (connektors, Web service APIs) Concurrent licences Guest licences for external partners for bidirectional communication & realtime group collaboration Detailed accounting option Option : Additional protection of documents against data leakage and audit proof journal 8

9 Application Scenarios Sealed file transfer (instead of limited FTP solutions) Sealed messaging (instead unprotected ) Sealed data rooms (team and project rooms) (instead of Dropbox & Google Drive) Sealed chat (instead of WhatsApp) Secure mobile access to files and messages (instead of Dropbox) Secure scheduling of appointments (instead of Doodle) Sealed machine-to-machine data rooms (instead of complex VPN networks and open ports) 9

10 idgard Use Case File Transfer & Exchange Demand: - FTP servers have reached a dead end (e.g. on file size limitations) - Internal revision, auditing prohibit Dropbox idgard offers: Transfer of large files (standard setting: 5GB) Integrated into Intranet (single sign-on) Licenses may be granted short term (floating licenses / license pool) Integrating external partners is easy (a browser is all you need; no installation, configuration, or licensing) Compliance is automatic End-to-end data protection, provider-proof, admin-proof Your Benefits: Time savings Legal security 10

11 idgard Use Case Team Workspace & Data Rooms Demand: Your current common workspace doesn t protect your know-how sufficiently (e.g. per watermark, read-only features, journals) and may be forwarded? idgard offers: Safe teamwork with external business partners Anti-forwarding measures, e.g. watermarks and/or read-only features Provider-proof data processing based on patented Sealed Cloud technology Logs Alerts Your Benefits: Protection against retransmission Confidentiality: competitive IP stays protected (Auditable) logging 11

12 idgard Use Case Secure Mobile Access to Files Demand: Employees need (worldwide) access to current files. Common sync arrangements are too complicated / too unsafe idgard offers: Auto-sync of files with idgard / offline encryption Files may be accessed worldwide from any device End-to-end data protection; provider access excluded Prevents inadvertent data sync to icloud, Google Drive, etc. Your Benefits: Major time savings Data available even offline 12

13 idgard Use Case Secure Messenger on Any Device Demand: Unencrypted chatting prohibited by internal auditors idgard offers: Real-time communication with any device Encrypted & sealed alternative to WhatsApp, Facebook Messenger, Skype Your Benefits: Automatic notification Collaboration in real-time Combines remote & local office work Effective integration into daily workflow

14 idgard Productivity Tools The Windows Client Work locally as always. Everything else is automatic. Synchronize your online Boxes with local directories Automatic notification Create & store data easily Automatic versioning No overwriting Automatable per Windows server Effective integration into daily workflow

15 Integration into Business Procedures APIs, Web-DAV, Apps, Public Cloud Intranet / Private Cloud Automatic report distribution security M2M communication Active Directory integration

16 Data Privacy Certification idgard is certified pursuant to Trusted Cloud Data Protection* (TCDP) standards idgard users automatically meet SaaS provider inspection obligations** * idgard is the 1 st service to currently be audited for TCDP certification by the German Ministry of Economics and Energy and the Federal Office for Information Security. Certification is based on ISO 27001/2 and ISO ** Obligations pursuant to 11 BDSG (German Data Protection Act). 17

17 idgard Trusted Cloud Data Privacy Certificate: Comparable Security & Exoneration of Users To date: various cloud providers standards were not comparable Now: TCDP certification: protection classes, comparability, binding legal consequences Protection Class III of TCDP certification is running a pilot with idgard. Certification* and Result German Trusted Cloud Data Privacy Profile (TCDP) References to date become mandatory: ISO/IEC 27002:2013, ISO/IEC 29100:2011, ISO/IEC27018:2014 Protection Class III Protection Class II Protection Class I Result: (a) Privacy demands met (b) Cloud user control obligations fulfilled ISO/IEC 27001:2013 or BSI IT-Grundschutz (base protection per Federal Office of Information Security) Result: Providing organization is compliant General Framework Legal Requirements (German Data Protection Act, later EU data protection decree) Protection Class Concept Demands Classes I III Requirements Classes I - III

18 Comfortable Application internal external Single read access Employee read files Temporary guest Administrator Invite external users into project room Employee exchange files Permanent guest 19

19 Open LDAP / Active Directory Integration AD Domain/Intranet DMZ Internet Windows Client idgard use idgard EMS* Active Directory/ LDAP * Enterprise Management System User rights stored in LDAP/AD User enjoys idgard via single-sign-on (SSO) idgard session per click on icon: idgard authentification by proxy agent User may use idgard immediately Also home office, mobile devices (VPN or UN/PW) Option: Floating Lizenzen / Pay per Use Saves costs: One licence for several users 20

20 idgard Groups and LDAP Employee data base (LDAP): Assign persons to idgard groups (Examples) Group 1 (e.g. Board ) Group 2 (e.g. Management ) Group 3 (e.g. Project managers ) Group 4 (e.g. Experts ) (Groups are individual per enterprise) Automatically set up by 21

21 More Users at the Same Price Example: Company with 500 users Named Licenses 267 employees use idgard 233 employees without idgard Floating Licenses 83 emplyees use IDGARD all the time 417 need IDGARD occasionally (e.g. on average twice per year) idgard users idgard users / month month Months 150 (average use) Months Real use 200 * 7,50 / full licence 500 * 1,00 / provisioning fee per user 150 * 10,0 / real monthly need (postpaid) Saving option: 150 * 6,50 prepaid Flexible volume: Prepaid for preferred prices or totally flexible postpaid

22 Positioning and Competition Usability / comfort Productivity File-Sharing Chat Encrypted Chat Web- Conferencing File-Sharing Encryption Collaboration Document / Content Management Data Rooms FTP, VPN, etc. D Security Privacy Not compliant with EU laws Compliant with privacy laws Compliant also with laws for professional secrets Size of bubbles indicates functional richness 23

23 idgard Benefits + = Profitability No set-up costs No operational costs No training expenses Pay-as-you-go Security Sealed Cloud Provider access to content AND metadata excluded Data encryption 2-factor authentication Anti-forwarding measures R&D and data center in Germany Usability Intuitive use A browser is all you need, i.e. guests are set up quickly. No installation or configuration Supports any device No key management Single sign-on

24 Summary Conventional solutions have significant weaknesses, due to organizational measures. Purely technically implemented privacy is much safer and sustainable. Live examples: idgard & Sealed Cloud Sealed Cloud technology and derived solutions address many key application scenarios.

25 Contact Uniscon GmbH The Web Privacy Company Agnes-Pockels-Bogen München contact@uniscon.de Telefon: (089)