CARTES 2012 Demo presentation. Secure Cloud Storage

Transcription

1 CARTES 2012 Demo presentation

2 Cloud Computing: NIST Framework Public Private Hybrid Deployment model Infrastructure as a service (IaaS Platform as a service (PaaS) Software as a service (SaaS) Service model On demand self-service Rapid elasticity Broad network access Measured service Essential characteristics Resource pooling Page 2

3 The Cloud is already happening! Storage cloud Telekom Cloud icloud Amazon Web Services SaaS cloud Picture processing Mindmap Sound studio Video editing Desktop publishing Vector graphics 3D / CAD SW Google Docs MS SkyDrive Page 3

4 Who is doing what in the Cloud? Page 4

5 Security at the center of the Mobile Cloud Mobile Cloud Services Web access Government services Storage Access Mobile Payment Music TV/ Video Entreprise App Billing History Location Subscriber context Consumer adoption SECURITY (DRM, encryption, strong authentication, identity management) EASE OF USE RELIABILITY AVAILABILITY INTEGRITY Cloud connectivity (MNOs, ISPs,...) M2M Cloud or Internet of Things Situative Use cases Page 5

6 Market challenges: Cloud Security Recent attacks target central Hubs storing Customer data Financial data Access credentials Attacks become increasingly sophisticated Social engineering (e.g. s pear phishing) Trojans, malware etc. Impacts increase For example: >75m data sets stolen from Sony including financial data 1.5m credit card data (MC, Visa) stolen from payment provider Global Payments Source: IBM X-Force 2011 Page 6

7 Security in the Cloud: User Perspective Cloud user perspective on security is ambiguous Cloud security threats Data control Data location Data deletion Data integrity Privacy Cloud provider Secure element Cloud security benefits Multiple backup Professional Security Management by cloud provider Security as a service offerings Page 7

8 Use case application: Cloud Storage, e.g. Dropbox Devices with Secure Elements NFC Page 8

9 A family of Secure Elements (SE) for SIM MicroSD ID-Card Embedded SE NFC Page 9

10 Cloud Security: G&D offering Security and privacy are a major topics in Cloud Computing Secure elements are key blocks for mobile cloud security G&D is successfully leveraging smart card technology into the cloud space We provide a coherent data encryption concept to realize Privacy by Design for cloud data storage Hardware based security (Secure Elements) is implemented to store the encryption keys Data encryption is done at the mobile device level, i.e. all the data in the cloud is encrypted and therefore not readable for third party attacks G&D Customer Portfolio can be enhanced with secure cloud offering Page 10

11 Securing Mobile Life. Page 11

12 Example: View Encrypted image (Tablet) Homescreen Tablet PIN Entry Page 12

13 Example: View Encrypted image (Tablet) File viewer File selection File decryption File viewing Page 13

14 Example: Create document (Tablet) Open Office application Open document Work on document Page 14

15 Example: Create document (Tablet) Share via Selection SecCloud PIN Entry Page 15

16 Example: Create document (Tablet) File naming Encrypted Upload Confirmation Page 16