Provable regulatory compliance!

Transcription

1 1

2 Secure Cloud Computing 2

3 Secure Cloud Computing Secure Cloud Storage 3

4 The first complete security solution that lets you take advantage of Public Clouds while proving compliance to regulations! 4

5 FEATURES Encryption Reduce scope of Tokenization compliance audits Key Management Cryptographic hardware module Fully integrated Manage trillions of keys/objects Fully operational in 48 hours or less 5

6 BEFORE KeyAppliance System-1 Sensitive Data System-2 Sensitive Data System-3 Sensitive Data System-4 Sensitive Data System-5 Sensitive Data

7 Scope of PCI-DSS Audit BEFORE KeyAppliance System-1 Sensitive Data System-1 Sensitive Data System-1 Sensitive Data System-1 Sensitive Data System-1 Sensitive Data

8 Scope of PCI-DSS Audit AFTER KeyAppliance System-1 Sensitive Data System-4 Sensitive Data System-2 Sensitive Data KeyAppliance System-3 Sensitive Data System-5 Sensitive Data

9 FEATURES Automatic Key Management Split-Knowledge Control Highly Available Enterprise Scalability Simple service API Active Directory Integration Graphical Admin Console Dual Gigabit Ethernet LOWEST COST EKM appliance. GUARANTEED! 4 Core 64-bit CPU 8 GB DRAM certified HSM Or TPM 9

10 ARCHITECTURE LDAP Server Server 2 3 C/C Java 4 5 Crypto-Module Internal DB 1 Network RPG 7 Server 2 3 LDAP Server Ruby/PHP 6 Client s 4 5 Crypto-Module Internal DB Key Appliances 10

11 E-COMMERCE PUBLIC CLOUD CCN Name Public Cloud Customer ID Billing Address Phone address Order Detail Token 5 3 CCN Token 4 Token 1 Customer ID Billing Address Phone address Order Detail Enterprise 2 Customer ID Name Credit Card Number Card Expiry Date Card Verification Value Amount 11

12 E-COMMERCE - VPDC CCN Name VPDC at provider's premises Customer ID Billing Address Phone address Order Detail Token 5 Token 3 CCN Token 4 Enterprise 2 Customer ID Name Credit Card Number Card Expiry Date Card Verification Value Amount 1 Customer ID Billing Address Phone address Order Detail 12

13 FEATURES Encryption Automatically transfer Decryption Key generation Key escrow and recovery on files to public clouds, VPDC, NAS Reduce cost of storage infrastructure StrongAuth KeyAppliance 13

14 FEATURES Automatic Key Management Integration to Public Clouds Highly Available Enterprise Scalability Simple service API Active Directory Integration Graphical Interface Java-based Free and Open-Source Software Download at: 14

15 ENCRYPTION MECHANICS Public Cloud or VPDC C/C++/C# 1 Plaintext 5 Ciphertext Private SAN or NAS Java Key 15

16 DECRYPTION MECHANICS Public Cloud or VPDC C/C++/C# 5 Plaintext 1 Ciphertext Private SAN or NAS Java Key 16

17 HEALTHCARE PUBLIC CLOUD PII Keys Patient ID Non-PII Data XENC File Key Token Patient ID Non-PII Data 5 10 XENC File X-Ray 2 PII Lab 6 X-Ray 1 PII 7 4 Hospital Radiograph:: Courtesy Diego Grez 17

18 HEALTHCARE - VPDC VPDC at provider's premises Patient ID Non-PII Data XENC File PII Keys Key Token Patient ID Non-PII Data 5 10 XENC File X-Ray 2 PII Lab 6 X-Ray 1 PII 7 4 Hospital Radiograph:: Courtesy Diego Grez 18

19 FOR E-COMMERCE 19

20 E-COMMERCE - 1 Public Cloud Customer ID Billing Address Phone address Order Detail 1 Customer ID Billing Address Phone address Order Detail Enterprise 20

21 E-COMMERCE - 2 Public Cloud Customer ID Billing Address Phone address Order Detail Enterprise 2 Customer ID Name Credit Card Number Card Expiry Date Card Verification Value Amount 21

22 E-COMMERCE - 3 CCN Name Public Cloud Customer ID Billing Address Phone address Order Detail 3 CCN Enterprise 22

23 E-COMMERCE - 4 CCN Name Public Cloud Customer ID Billing Address Phone address Order Detail Token 4 Enterprise 23

24 E-COMMERCE - 5 CCN Name Public Cloud Customer ID Billing Address Phone address Order Detail Token 5 Token Enterprise 24

25 E-COMMERCE PUBLIC CLOUD CCN Name Public Cloud Customer ID Billing Address Phone address Order Detail Token 5 3 CCN Token 4 Token 1 Customer ID Billing Address Phone address Order Detail Enterprise 2 Customer ID Name Credit Card Number Card Expiry Date Card Verification Value Amount 25

26 E-COMMERCE - VPDC CCN Name VPDC at provider's premises Customer ID Billing Address Phone address Order Detail Token 5 Token 3 CCN Token 4 Enterprise 2 Customer ID Name Credit Card Number Card Expiry Date Card Verification Value Amount 1 Customer ID Billing Address Phone address Order Detail 26

27 FOR HEALTHCARE 27

28 HEALTHCARE - 1 Lab 1 PII Hospital 28

29 HEALTHCARE PII Lab Hospital 29

30 HEALTHCARE - 3 PII 3 Lab Hospital 30

31 HEALTHCARE - 4 PII Lab 4 Hospital 31

32 HEALTHCARE - 5 PII Patient ID Non-PII Data XENC File Patient ID Non-PII Data 5 Lab Hospital 32

33 HEALTHCARE - 6 PII Patient ID Non-PII Data XENC File Lab 6 X-Ray Hospital Radiograph:: Courtesy Diego Grez 33

34 HEALTHCARE - 7 PII Patient ID Non-PII Data XENC File X-Ray Lab 7 Hospital Radiograph:: Courtesy Diego Grez 34

35 HEALTHCARE - 8 PII Patient ID Non-PII Data XENC File Key 8 Lab Hospital 35

36 HEALTHCARE - 9 PII Keys Patient ID Non-PII Data XENC File Token 9 Lab Hospital 36

37 HEALTHCARE - 10 PII Keys Patient ID Non-PII Data XENC File 10 XENC File Lab Hospital 37

38 HEALTHCARE PUBLIC CLOUD PII Keys Patient ID Non-PII Data XENC File Key Token Patient ID Non-PII Data 5 10 XENC File X-Ray 2 PII Lab 6 X-Ray 1 PII 7 4 Hospital Radiograph:: Courtesy Diego Grez 38

39 HEALTHCARE VPDC VPDC at provider's premises Patient ID Non-PII Data XENC File PII Keys Key Token Patient ID Non-PII Data 5 10 XENC File X-Ray 2 PII Lab 6 X-Ray 1 PII 7 4 Hospital Radiograph:: Courtesy Diego Grez 39