Total PC Security Information & VPN Security Encryption By Crypto AG Crypto AG / cagfolie.ppt / 9727 / 1 HC-6360 PC Security System HC-6378 By Crypto AG. Crypto AG / HC-6360.ppt / 9727 / ## Page 1
Desktop and Notebook PC s Windows NT 4.0 Windows 2000 Accessory: PC Card Adapter for desktop PC s Crypto AG / cagfolie.ppt / 9727 / 3 Security Risks and Counter Measures Network Stored Data Message Security VPN Encryption Transmitted Data Local Security Crypto AG / cagfolie.ppt / 9727 / 4 Page 2
Main Components Network Security VPN Encryption (IP) Message Security Message Encryption (E-Mail) Local Security Access File Encryption (local, Server, File Transfer) Disk Encryption Virtual Memory Encryption Crypto AG / cagfolie.ppt / 9727 / 5 Local Security Encryption of files stored locally or on server Automatic decryption upon selection of encrypted file (double-click) Wipe Function (secure delete) Transparent Disk Encryption for extended hard disk partitions and floppy disks Access Protection to encrypted drives and encryption / decryption services Crypto AG / cagfolie.ppt / 9727 / 6 Page 3
Message & File Encryption Manual operation - Type and include files into CryptoPad application - Select in Explorer context menu - Drag & Drop files onto CryptoPad application - Works with single or multiple files Decryption - Automatically on double-click - Manually in Explorer context menu Includes Compression and Integrity Check Crypto AG / cagfolie.ppt / 9727 / 7 Message & File Encryption: Crypto Context Menu - Starts CryptoPad and sends file(s) via E-Mail application - Starts CryptoPad and saves file(s) encrypted to specified directory - Decrypts selected file and saves file(s) to specified directory - Starts CryptoPad and saves file(s) encrypted in current directory - Decrypts selected file and saves file(s) in current directory - Deletes selected file(s) Crypto AG / cagfolie.ppt / 9727 / 8 Page 4
File Encryption Master Communication Key (MCK) File(s) Include Crypto File Note File(s) Save encrypted Disk File Server Notes May be added to the file(s) to be encrypted Crypto AG / cagfolie.ppt / 9727 / 9 Example: File Encryption CryptoPad Explorer Explorer Work Flow Select ( Add Note ) Encrypt Crypto AG / cagfolie.ppt / 9727 / 10 Page 5
Message Encryption Send messages and files encrypted by E-Mail Automatic decryption upon selection of encrypted message (double-click) Works with all MAPI supporting E-Mail applications Crypto AG / cagfolie.ppt / 9727 / 11 Message Encryption E-Mail Address Master Communication Key (MCK) File(s) Include Crypto File Note File(s) Send Encrypted Message Body (Plain) Attachments Crypto File Other Attachments (Plain) Send Crypto AG / cagfolie.ppt / 9727 / 12 Page 6
Wipe Safely deletes files Automatically used after Encryption with - In-place Encryption command - Shutdown Encryption Wipe Procedure - Overwrites clusters used by a file Does not overwrite file names Crypto AG / cagfolie.ppt / 9727 / 13 Message Security: Send Encrypted Message by E-Mail Windows Desktop CryptoPad Example: Microsoft Outlook Express Work Flow Start Write Encrypt Address Send Crypto AG / cagfolie.ppt / 9727 / 14 Page 7
Message & File Encryption: Structure CryptoPad Selected Master Communication Key (MCK) Note File(s) Crypto AG / cagfolie.ppt / 9727 / 15 Disk Encryption Fully transparent - no user interaction required Supports - Non-boot hard disk partitions - Floppy disks Operational after Windows start-up Login required for access to encrypted disks Lockable with Internet Security Automatic initial disk encryption after installation Crypto AG / cagfolie.ppt / 9727 / 16 Page 8
PC Configuration with Encrypted Disk Partitions Boot Partition C:\ Windows Web Browser Mail Client Unprotected Virtual Memory Partition D:\ Page/Swap File Temp Files Protected Security Module Encrypted Partitions E:\ F:\ : Applications Data Protected Access Protection Disk Encryption Crypto AG / cagfolie.ppt / 9727 / 17 Disk Encryption Hard Disk Boot Partition Virtual Memory Partition Crypto PC Card Password Encrypted Partitions RAM Encrypted Floppy Diskettes Floppy Disk Transparent Disk Encryption Crypto AG / cagfolie.ppt / 9727 / 18 Page 9
Virtual Memory Encryption Crypto PC Card Hard Disk Random Key RAM Virtual Memory Partition Virtual Memory Encryption Crypto AG / cagfolie.ppt / 9727 / 19 Data Security on Network PC s Never access an unprotected network (e.g. Internet or LAN) from a workstation with confidential data! Data can be accessed directly from the network when connected! Use separated Workstations for network access! This is not always possible, e.g. when travelling with a notebook VPN Encryption will solve the problem Crypto AG / cagfolie.ppt / 9727 / 20 Page 10
Task Bar Icons HC-6378 Control VPN Encryption Status PC Security Status Crypto AG / cagfolie.ppt / 9727 / 21 HC-6378 Control Crypto AG / cagfolie.ppt / 9727 / 22 Page 11
Security Installation (HCA-420, Passwords) Crypto AG / cagfolie.ppt / 9727 / 23 PC Security Master Communication Key Definition Crypto AG / cagfolie.ppt / 9727 / 24 Page 12
VPN Encryption Settings and Security Management Crypto AG / cagfolie.ppt / 9727 / 25 Access Hierarchy System Card Additional Function: Copy Security Module User Card Available Functions Correct entry of higher level password unblocks lower levels SysMgr PW SysMgr PW System Manager Password SecMgr PW <3 SecMgr PW <3 Security Manager Password Op PW <3 Op PW <3 Operator Password Error Counters Password error counter: Three consecutive entries of a wrong password blocks corresponding password level Crypto AG / cagfolie.ppt / 9727 / 26 Page 13
PC Security Administration and Access Hierarchy Functions Operator Sec. Mgr. System Mgr. Access Change Password x x x Block Security Module x x x Unblock Security Module x Security Installation Define Module (CMP, SK, PW s) x x Factory Reset x x Copy Module (System Module required) x x Keys Define Master Comm. Keys x x Copy Master Comm. Keys x x Delete Master Comm. Keys x x x Enable Fallback Key x x Settings Change File, Message, Disk Settings x x Crypto AG / cagfolie.ppt / 9727 / 27 Passwords Operator Password Six to eight alphanumeric characters Password error counter: module is blocked on corresponding level after three consecutive wrong entries of the password Security Manager Password Six to eight alphanumeric characters, with error counter Correct entry resets the Operator s password error counter System Manager Password 32 hexadecimal characters, without error counter Correct entry resets the Operator s and Security Manager s password error counter Crypto AG / cagfolie.ppt / 9727 / 28 Page 14
Security Management MCK CMP Detachment of first Security Module (PC Card) according to customer s centralized rules (CMP) Manual input of MCK into first Security Module Distribution of securely copied Security Modules to the other communication partners On-line Management of VPN Encryption with SNMC-7000 Crypto AG / cagfolie.ppt / 9727 / 29 Topology of a Typical Network HC-6378 Mail Server RAS Server HC-7820 PSTN Crypto AG / cagfolie.ppt / 9727 / 30 Page 15
VPN Encryption HC-6378 Mail Server RAS Server HC-7820 PSTN VPN Tunnel Crypto AG / cagfolie.ppt / 9727 / 31 Message Encryption HC-6360 HC-6360 Mail Server HC-6378 RAS Server HC-7820 PSTN VPN Tunnel HC-6950 Crypto AG / cagfolie.ppt / 9727 / 32 Page 16