PaperClip Incorporated 3/7/06; Rev 9/18/09. PaperClip Compliant Service Whitepaper

Transcription

1 Incorporated 3/7/06; Rev 9/18/09 PaperClip Compliant Service Whitepaper

2 Overview The FTC Safeguard Rules require Financial, Insurance and Medical providers to protect their customer s private information or Non Public Information (NPI). This requires special handling of electronic information specific to on the public Internet. messages must be encrypted before releasing them on the Internet. Many organizations have deployed solutions securing their internal domain traffic but either send in clear text to their trading partners or share their proprietary interface. Trading partners cannot effectively use and meet compliance. PaperClip proposes a compliant service that can address interoperability, compliance, ease of use and necessary auditing. The Compliance Landscape The Internet has dramatically changed the way we conduct business today. The ability to deliver information, answer questions, exchange ideas has benefited all who participate. One significant use of the Internet is electronic mail. The ability to replace a letter, fax or phone call with a simple electronic message has won the day. Storing and quickly retrieving these messages allow organizations to streamline its communications process and by today s business standards, has become a cornerstone. In recent years, the United States Federal Government has passed new initiatives targeted at the way personal information must be handled on the public Internet. The major acts are Financial Services Modernization Act (GLB), Identity Theft Prevention Act of 2000 and the Health Insurance Portability and Accountability Act of 1996 (HIPAA). These acts focus on different aspects of personal information but all have the same mandate, protecting customer s personal information from unwarranted access and the accountability for its use. PaperClip Incorporated Page 2 of 15 9/18/2009

3 Non Public Information (NPI) is defined as personal information, which by itself or with other information could allow access to private assets or health information. Items listed below are a representation of NPI; Social Security Number (9 digits) Address Demographic Information Phone Number Age Date of Birth Race Sex /gender Religion Mother's maiden name Driver's License Number Passport Number (9 digits) State identification card number Personal identification numbers Information commonly provided on an application for an insurance product or service. Logon IDs and Account passwords Digitized or other electronic signatures Employer assigned employment identification number AESC assigned ID (9 digits) Unique electronic identification number or routing code Government issued identification number Bank Account Number Debit Card Number (16 digits) Credit Card Number (15-16 digits) Payment History Account Balance Fund (investments) value/balance Factors around customer s income or assets Fact that person is a customer of a financial institution Fact that the customer is or has obtained insurance policy Financial account number or credit card or debit card number Information obtained when requesting or getting, collecting, or servicing a loan Information from a consumer or credit report Height or Weight Other medical specifics such as blood type Medical Conditions, Medical Diagnosis, Medical Test Results, Medications Used Past, present, or future physical, mental, or behavioral health Health care being provided Health-related policy premiums Health policy numbers Biometric data, such as fingerprints, retina, iris images or DNA profile PaperClip Incorporated Page 3 of 15 9/18/2009

4 PaperClip s Compliance Position Reviewing the compliance landscape outside of the box, PaperClip believes securing (encrypting) the message on the public Internet is the objective. Reasonable levels of authentication are satisfied with trust protocols around addressing. An individual that has an account (login and password) on a corporate sponsored infrastructure is a trusted individual therefore their address is secure and unique. If the reader is in agreement, simply sending an encrypted to a receiver which passes from and through respective firewalls decrypted and delivered to the receiver in clear text meets Safeguard Rule compliance requirements. PaperClip also believes a record of that transaction ( exchange) must be logged by and stored at a disinterested third party. The mere requirement for annual auditing implies impartiality. To only conduct internal audits on internal information can be considered a conflict of interest and typically receives the most scrutiny by regulatory agencies. Transactional information stored and made accessible to customers and authorized third parties provide a degree of integrity resulting in quicker, less expensive audits. The FTC s track record in settlements, include monitoring and audits conducted by an independent third party every 10 to 20 years at the violators expense. Adopting a third party auditing scheme as part of the service only enhances compliance. Conclusion - encrypting messages firewall to firewall and recording the transaction metadata with a third party meets the FTC Safeguard Rules. PaperClip Incorporated Page 4 of 15 9/18/2009

5 PaperClip s Solution Approach PaperClip believes any chance to overcome the current market solution shortcomings and gain wide adoption is to change the paradigm. Ten years ago PaperClip s Internet express was a new paradigm and its success today is measured with 300 plus customers exchanging over 136 million documents as of 2009, a sixty percent growth year over year. PaperClip s approach again is to climb outside of the box and fix it. Starting with some simple user requirements, a proven encryption algorithm, a vendor service track record with our eye on the target, a new paradigm is created (called for pronounced M4). The new approach resolves the many problems created in a diverse compliant industry: Encrypts s and their attachments firewall to firewall. Disinterested third party recording of transactions for auditing access. infrastructure independent, multiple deployment options. Ease of use accomplished, Subscriber s users don t have to learn something new. Commodity pricing, affordable by any size organization. s do not pass through the PaperClip Central Office. The Central Office serves only to manage encryption keys and collect auditing information. PaperClip Incorporated Page 5 of 15 9/18/2009

6 The Technology The Relay, engineered as a closed relay provides the highest level of security from the Internet. The Relay sits between your server and your Smart Host (Firewall) for sending and receiving s. Relay communicates directly over the Internet via Secure Socket Layer (Port 443 only) to the Central Office. This CO exchange is done asynchronously and provides configuration changes, session keys and metadata updates. Depicted below as logical servers, Relay and if needed, a Smart Host can reside on one Microsoft server platform. Service is comprised of several types of Relay options and an Central Office (Host) managed by PaperClip Incorporated. The CO is a n-tier architecture with a mirrored site(s) for reliability. Each CO has functional servers which maintain HTTPS services (Port 443 only), Transaction server, Database server, Portal server and other data center related resources. Relay Server is designed for the enterprise. Desktop is designed for the individual desktop client and Webmail hosted by PaperClip supporting the non subscriber. PaperClip Incorporated Page 6 of 15 9/18/2009

7 Encryption Options The Service has two deployment options, encryption enabled or disabled. These two options adhere to specific rules regarding how to encrypt s. Encryption Enabled follows six rules as described below: 1. If an recipient s address domain is an Subscriber. 2. If one or more recipients address domains are Subscribers, is encrypted to all recipients (Subscribers & Non Subscribers) 3. If the wild card address ([email protected]) appears as a recipient. 4. Microsoft Outlook AddIn Secure choice displaying a green ribbon. 5. If the wild card address ([email protected]) appears as a recipient, the will not be encrypted but audited as an exception. 6. Microsoft Outlook AddIn Force Not Secure choice displaying a red ribbon. Encryption Disabled follows two rules described below: 1. If the wild card address ([email protected]) appears as a recipient then encrypt the to all recipients. 2. Microsoft Outlook AddIn Force Secure choice displaying a green ribbon. Force Secure Force Not Secure Note: The addresses [email protected] and [email protected] can be supported with friendly names such as Secure and Not Secure supporting type ahead feature. The receiver of a decrypted Service will see appended to the bottom of the original a tag line Content protected by Paperclip Compliant System. PaperClip Incorporated Page 7 of 15 9/18/2009

8 The Relay Server The Relay Server has two basic configurations, Serial and Parallel. Serial configuration is the most simple requiring all s to pass through. In Parallel mode, Relay becomes a subsystem to your server. The host s rules decide what s are directed to the Relay for encrypting. Multiple Relays can be deployed to handle the largest traffic demands. Relay installed as a Serial process maintains locally a list of compliant receivers domains and Desktop subscribers maintained by the Central Office. In Serial operations the Sending server delivers the to the Relay. Relay applies the Serial Rules and encrypts or not. Relay then delivers the to the Smart Host for delivery across the Internet directly to the receiving Server. Receiving s start at the Smart Host and are forwarded to Relay(s) for decrypting as necessary. Relay then releases the to the internal Server. PaperClip Incorporated Page 8 of 15 9/18/2009

9 Relay deployed as a Parallel process to your Server allows your Server s rules engine to decide what s get encrypted going out. This method provides a centralized administration for more complex rules management leveraging existing resources. In this mode of operation, Relay adheres to the following rule: 1. All outgoing is encrypted. In Parallel operations the Sending Server decides what s are delivered to the Relay. Relay applies the Parallel Rules and encrypts all s. Relay then delivers the to the Smart Host for delivery across the Internet. Receiving s start at the Smart Host and are forwarded to the Internal Server. Internal Server rules identify it as an Relay encrypted and forward it on to the Relay(s) for decrypting. Relay(s) then releases the back to the Internal Server PaperClip Incorporated Page 9 of 15 9/18/2009

10 The Desktop Desktop is a version of the Relay designed to install on a user s Windows desktop and is client independent. The Desktop version supports POP3 s and manages the encrypting/decrypting process. The Desktop requires Internet access over port 443 capable of reaching PaperClip s Central Office. This deployment is for small groups requiring a desktop solution where services are ISP provided or do not warrant a server version of the Relay. The Desktop deployment acts on s as they are sent or received from the Server. The on the Server is encrypted. This meets the requirement for encrypted at rest while on third party servers. This operation does limit the use of hand held devices such as Blackberries. PaperClip Incorporated Page 10 of 15 9/18/2009

11 The Webmail Non Subscribers The Service has the ability to manage Non Subscribers (NonSubs) via PaperClip s Webmail hosted by PaperClip. Subscribers have the option to deploy Web Mail requiring receiver authentication. With no authentication required, the receiver can select the link and view the in a secure browser. Choosing authentication will require receivers to create and maintain credentials. NonSubs have the ability when registering to setup their Web Mail account. NonSubs will receive an with the appropriate link directing them back to the Service Web Mail host. NonSub will then have to login with their address or alias and authenticate with their password they registered with. The hosted Web Mail will secure the Internet pipe or tunnel via SSL. NonSubs will have the ability to save the and if desired, Reply to the sender securely. NonSub s will remain within the hosted environment for thirty days after opening then they will be purged. Non Subscribers do not have access to Service portal. NonSubs will be able to manage their own Web Mail accounts as necessary (i.e., change password). Subscribers can control the content of the body with relevant compliance notices. In addition they can brand their browser presentation with a custom banner or logo. Decrypt Incoming s Reply To: Supported Revocation Audited Lite Subscribers Subscribers have the option to purchase annual sponsored Lite licenses which they can freely distribute. This Lite license will only encrypt s and their attachments for the Subscriber s domain. In effect, the Lite license is a full feature subscriber limited to its registered subscribers. Lite license will allow NonSubs to freely initiate encrypted s to the sponsoring Subscriber at any time. There is no registration requirement for Lite users. Lite users will have the option to deploy the Desktop client. PaperClip Incorporated Page 11 of 15 9/18/2009

12 Clear Text Notice Secured Browser Access PaperClip Incorporated Page 12 of 15 9/18/2009

13 Service Administration Subscriber administrators have access to the Service portal via a browser. The portal provides user functions for analyzing Subscriber s metadata (Auditing), sender and revocation and reporting. PaperClip Incorporated Page 13 of 15 9/18/2009

14 Service Auditing Auditing captures and maintains information regarding transactions and administration. Auditing starts with the data collected every time a request is made to encrypt or decrypt. Sender s Relay connects (SSL) to the Central Office ( CO) and updates the CO in an asynchronous manner. The initial Sender s request message file includes: Client Metrics Transaction ID 3DES Session Key Sender address Receiver(s) address Request Date/Time Stamps Subject Line Attachment Names Receiver s Relay connects to the CO (SSL) and completes the data record closing the transaction. Relay connects to the CO in an asynchronous manner to update. This update passes the following metadata recorded by the CO: Client Metrics Transaction ID Sender address Receiver address Request Date/Time Stamps Non Subscriber s Add-In or Web Mail connects to the CO (SSL) and updates the transaction data in an asynchronous manner. This update passes the following metadata recorded by the CO: Add-In Metrics Transaction ID Sender address Receiver address Request Date/Time Stamps Auditing allows for the isolation of an transaction and all the events associated. Filter on senders or receivers drilling deeper with date and time ranges as needed. Auditing reports or data can be exported to Subscribers for continued reconciliation. PaperClip Incorporated Page 14 of 15 9/18/2009

15 . Conclusion The need to encrypt s and their attachments across the public Internet protecting NPI is an undisputed requirement. Current deployed market solutions suffer from industry interoperability, deviate and burden trading partners workflow and require many IT resources not available to all. It s time to climb out of the box. PaperClip s new paradigm that meets compliance, makes it easy to use, distributes cost based on usage (not buying a gun to kill a fly) and eliminates the conflict of interest objection with a disinterested third party audit is ready. This new paradigm or Service can scale from one to thousands of users. It makes industry compliance affordable and uniform. It s simple. PaperClip Incorporated Page 15 of 15 9/18/2009