Time4Mind the cloud solution for people in mobility

Transcription

1 Time4Mind Time4Yu! Time4Mind the clud slutin fr peple in mbility Giuseppe Damian CTO B.U. Prducts Intesi Grup Pwered by Intesi Grup SpA 2012 Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 1 Barcelna, 14thMarch 2013 ETSI ESI Wrkshp - Signatures in the Clud

2 Time4Mind in three wrds Time4Mind is a clud envirnment designed and develped by Intesi Grup fr prviding services in the clud accessible via: Smartphne Tablet Web Services are addressed t: individuals and enterprises Mdular ffering The "three wrds" f Time4Mind: Secure, Simple and Mbile Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 2

3 Time4Mind fr Enterprises The clud platfrm perates accrding t the mdel PaaS (Platfrm as a Service) Time4Mind is equipped with APIs and administratin interfaces immediately integrated with business applicatins Features: Qualified Remte Digital Signature platfrm One Time Passwrd Strng Authenticatin service Safe publishing f dcuments t Internet with strng encryptin Strage service integrated with business CMS High-perfrmance autmatic signature service Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 3

4 Time4Mind fr Individuals The platfrm perates n a SaaS mdel (Sftware as a Service) Gateway t the mst cmmn strage prviders (DrpBx, Ggle Drive, Alfresc,...) Advanced file system functinalities (multi prvider file search, mve and cpy files between prviders and accunts, management f asynchrnus peratins n large amunts f data) Security features (Dcuments encryptin, OTP strng authenticatin) Signature Features (Qualified Remte Digital Signature) Multi-device (Smartphne, Tablet, Web) Sharing functinalities (multi prvider flders sharing, cnfiguring users grups, managing access rights t shared dcuments) Advanced features (client mdule fr synchrnizatin t a lcal drive, server mdule fr publishing f a private strage, cmments and custm metadata management, cmpressed files management, events and autmatic prcedures, custmizable GUI interfaces) Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 4

5 InfCert Qualified Remte Signature Service Users Internet Qualified Certificatin Authrity PkBx Remte PkBx HSM Remte Signature custmer Remte Signature prvider Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 5

6 InfCert Qualified Remte Signature Service Technical inf Up t Milins f users HSM - Thales nshield Sl F3 PCIe Dcuments and Signatures manager - PkBx Enterpise Up t RSA 1024 bits hash signatures per secnd Dual cntrl user authenticatin: Passwrd and OTP authenticatin Multi OTP prvider (SMS, Vasc, RSA, Radius, ) Web Services Remte Java and.net API Cmmunicatin - SSL with client authenticatin Hash algrithm - SHA 256 Digital signature - RSA 1024 bits (r mre) Signature frmats - ETSI CAdES, PAdES and XAdES Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 6

7 Time4Stre 1/5 Stttitl della slide Time4Stre is the Intesi Grup prpsal fr Advanced Clud Strage Nt a new Clud Strage but a new cncept fr publishing cntents Gateway t clud (DrpBx, GgleDrive, Bx, ) and private strages and CMS (Alfresc, Sharepint, Dcumentum, FileNet) Functinality f sharing, replicatin, backup Encryptin f files, flders and names Qualified Remte Digital Signature App ios, Andrid and WebApp Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 7

8 Time4Stre 2/5 Stttitl della slide Data Management features Dcuments can be managed bth by users and applicatins Dcument sharing, replicatin, distributin (multi-prvider and multi-user) Optimized space management Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 8

9 Time4Stre 3/5 Stttitl della slide Data prtectin features Encryptin f files and flders fr a secure strage n external prviders Names encryptin fr a full prtectin f infrmatin Transparent decryptin n user s device HSM usage fr maximum key prtectin Standard frmats: Encrypted CMS (RFC 3852) and PGP (RFC 2440) Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 9

10 Time4Stre 4/5 Stttitl della slide Remte Digital Signature Qualified Remte Digital Signature n files and flders Different OTP authenticatin mechanisms (Hardware tken, Mbile App, SMS) Silent OTP integrated within the mbile applicatin fr better user experience Standard signature frmats: ETSI CAdES, PAdES and XAdES Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 10

11 Time4Stre 5/5 Stttitl della slide Strengths f Time4Stre prpsal A unified view f all my data, prvider independent High security and data prtectin regardless f strage prvider Multi prvider dcument sharing Qualified Remte Digital Signature Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 11

12 Time4Mind - Technical inf API - Web Services and JSON RPC 2.0 REST API GUI Javascript Web GUI, ios and Andrid native app Cmmunicatin - SSL with client authenticatin DataBase MySQL with Galera cluster Systems management and cnfiguratin Puppet Virtualizatin - VMWare Web SSO - Shibbleth Tw factrs user authenticatin User Name and Passwrd with OTP Encryptin - RSA 1024 bits (r mre) with AES 256 bits Encryptin frmats: Envelped CMS (RFC 3852) and Encrypted PGP (RFC 2440) Dcuments and Database encryptin with HSM HSM - Thales nshield Cnnect 1500 Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 12

13 Time4Mind Time4Yu! Time4Mind the clud slutin fr peple in mbility Giuseppe Damian CTO B.U. Prducts Intesi Grup NB Trademarks and lgs shwn here are wned by the cmpanies t which they refer Pwered by Intesi Grup SpA 2012 Cpyright 2013 Intesi Grup S.p.A Milan, 19 marz 2013 Slide N. 13