Open Telekom Cloud. ESA-ESPI Workshop Space Data & Cloud Computing Infrastructures: Policies and Regulations Provider View Andreas Falkner

Transcription

1 Open Telekom Cloud ESA-ESPI Workshop Space Data & Cloud Computing Infrastructures: Policies and Regulations Provider View Andreas Falkner

2 Source: flaticon.com cloud as the Basis for Digitization A door-opener for digitization not only in industry, but science as well 2

3 Source: flaticon.com Scientific computing soars Data Explosion Increase of produced and consumed data Tech Advancements Fast pace of innovation, nearly daily new options Collaboration Cross-science, science/industry, worldwide 3

4 Legal Challenges for Space data? Generally aerial Images are considered uncritical But there are exceptions For private individuals For businesses For nations ESA, creative commons license 4

5 known challenges Bundesdatenschutzgesetz (BDSG), German Federal Data Protection Act Consider data privacy regulations, when data can be connected with individuals Wirtschaftsgeheimnisse Satellite data of estates, properties can reveal economical secrets (that are protected) For private individuals For Businesses For nations Satellitendatensicherheitsgesetz (SatDSiG) Protecting (Germany) from harms, disturbance of peaceful living together or relationships to other nations 5

6 Answer 1: Open Telekom Cloud operations state of the art Twin-Core DC for high Data security Magdeburg Separate routes with 20 resp. 27 km/dwdm SOX compliant distance of >10 miles between DC Fulfils BaFin requirements for fail-safe DC Biere High security location area m² ca m² pure IT sq. footage nearly equal identically constructed like Biere Primary mainframe DC Protected area with according n safety installations T-Systems is a German provider and must fulfil legal requirements for high data protection. High security location area m² ca m² pure IT sq. footage Data Center 2020 with latest, ecofriendly technology 6

7 Answer 2: German data Privacy 11 BDSG 3 BDSG 9 BDSG 8,3 BDSG 7

8 Security Answer 3: Data Encryption Enterprise Agreements Financial Dashboard FW aas PAAS RDS CCE Workspace Services Distributed Cache SAAS Big Data Marketplace KMS EVS Encrypt. Management Cloud Eye Price Online Display Tag Mgmt Service Cloud Trace MaaS SMN DMS HEAT/ Res.Templ OBS Encrypt. IAM Compute ECS DeH AS IMS Bare Metal Storage Object Storage Service Elastic Volume Service Volume Backup Service Anti-DDoS Network Elastic IP Virtual Private Cloud Unified Load Balancer Domain Name Service Direct Connect ECS = Elastic Cloud Server, DeH =Dedicated Host, AS= Auto Scaling, IMS = Image Mgmt System KMS = Key Mgmt System, MaaS = Migration aas, SMN =SimpleMessage Notification, DMS = Distributed Message Service 8

9 Certified security ISO ISO Certified data-center operations ISO SOX ISAE 3402 OHS AS Type II DIN ISO 9001:2008 ESARIS 2/2016 ESARIS Enterprise Security Architecture for Reliable ICT Services CSA Star L. 2 Gold 3/2016 für R.1.1 R.1.1 (Q4/16), R.2.0 (Q1/17) TÜV Trusted Cloud Service 3/2016 DT Privacy + Security assessment Q1/2016 Certified to ISO ISO 27017, ISO Q4/2016 Letter of Confirmacy Trusted Cloud BMWI Q1/2017 SOC 1/2 Q4/2017 PCI Q4/2017 C5 Q1/2018 pre assessment based on SOC2 Achieved Planned Hosted in Germany Operated by T-Systems Free-of-charge anti-ddos Compliant with German data-privacy standards 9

10 Solutions for Science Hybrid Cloud for CERN/Helix Nebula Indigo DataCloud ESA DIAS Tender Hybrid Clouds for advanced #UX Secure/protected holistic environment 10

11 Challenge accepted and resolved in Open Telekom Cloud Service Specifications Certification Data stored in Germany Legally compliant Section 9, BDSG Contract. defined Encryption & Sec. Check Various ISO certificates, CSA Star Level 2 etc. currently enhanced All data stored only in Germany, meeting German legal requirements (> 50 years experience) In accordance with Sections 3 and 11, German Federal Data Protection Act (BDSG) Technical and organizational measures (TOM) for contract data processing Information on German legislation provided in advance in the service specifications, T&Cs and contract data processing agreement Beyond basic IT security: option to encrypt data and security-checked personnel 11

12 Thank you.

13 Open Telekom cloud public Iaas for European Customers Market and customer expectations are changing: Demand for scalable, dynamic IT resources is growing. Public IaaS is the answer (compute, storage, network, management) Secure Simple affordable Open Data protection in compliance with German legislation Meeting enterprise needs Rapid access Support/help getting started Easy to use Great pricing Moving from capex to opex for IT infrastructures OpenStack API No vendor lock-in Simple to integrate An open technology platform with built-in compliance, ease-of-use, and best pricing for businesses of any size, in any industry Open Telekom Cloud 13

14 Open Telekom cloud public Iaas for European Customers more than 60 flavors for big data, HPC, graphical processing, bare metal Great platform performance Excellent price/performance 100 G InfiniBand EDR OpenStack based (100 % DefCore compliant) Additional PaaS (Container, VDI, Databases) and SaaS (Big Data) Bitnami suite available 14

15 Open Telekom cloud public Iaas for European Customers 15