High Security SaaS Concept Software as a Service (SaaS) for Life Science

Transcription

1 Sftware as a Service (SaaS) fr Life Science Cpyright Cunesft GmbH

2 Cntents Intrductin... 3 Data Security and Islatin in the Clud... 3 Strage System Security and Islatin... 3 Database Security and Islatin... 4 User Identity and Access Management... 4 Data Integrity... 4 Lcatin & Perfrmance... 5 Eurpean Data Security Act... 5 Backup and Recvery... 5 Clud Based Backup and Recvery... 6 Traditinal Backup and Recvery... 6 Applicatin Layer Security... 6 Transprt Level Security... 7 Cnclusins... 7 Cntact us fr a Live Dem... 7 Page 2 f 7

3 Intrductin IT Budgets are being mre and mre limited in tday s business wrld. In rder t save csts, mst cmpanies cnsider implementing a clud based r Sftware as a Service (SaaS) slutin, in rder t cut ttal cst f wnership. Main questin being asked, and nt nly frm Data Security Officers, is hw can such a system be prvided as secure as an n premise installatin, respectively can it be implemented even mre secure? The fllwing whitepaper prvides a detailed view int the Cunesft private clud architecture and describes hw an end-tend security is being achieved. Furthermre the prmise is that the reader will find many aspects f exceeded security ver currently and cmmnly used n premises architecture. This whitepaper will fcus n hw the fllwing security aspects are being ensured and fulfilled: Data Security n Clud Strage Systems Data Islatin n Clud Strage Systems Data Integrity Backup / Recvery in the Clud Applicatin Level Security Transprt Level Security Data Security and Islatin in the Clud Strage System Security and Islatin The fundatin f each cmputer system is the strage system, at which all data, all cnfiguratins and all knwledge is persisted. Securing this system is the first part t a secure private clud envirnment. The Cunesft implementatin is based n encryptin alngside with separatin. Each custmer in the Cunesft private clud is being assigned an individual database, an individual strage drive, as well as a unique encryptin key. The separatin f strage drives ensures that a custmer nly has access t the data specific t his implementatin and data set. This layer ensures that custmer s data is always separated frm ther custmer s data and via that secures each custmers bucket f data. After separatin f each data bucket is ensured, anther layer f security has been added t ensure that the custmer itself can nly access the data stred within the bucket and that the data is secure even in an event f physical access t the server, due t maintenance r ther events. Data encryptin fr each data bucket ensures this additinal security. Each custmer is prvided with an individual, unique encryptin key. This key is then used by the applicatin layer (user interface) t encrypt all data that is passed int the system befre being stred n a server. Upn data read the data is transferred frm the strage bucket, decrypted again n the applicatin layer and then displayed t the user ensuring that n unencrypted, insecure data is stred n any server at any time. Page 3 f 7

4 Database Security and Islatin Data security fr files stred n servers is ne part f data security. Anther imprtant cmpnent f infrmatin is nt stred n servers but in database systems, such as recrds and audit trails. Cunesft is using Micrsft SQL Server as a strage engine. The database engine supprts multiple databases as well as a transparent data encryptin. Each custmer instance within the Cunesft private clud is prvided with a cmpletely separate database autmatically and alngside with an individual user accunt, used t cnnect the applicatin Layer t the database Layer. Sensitive data is then autmatically encrypted, nce written t the database. User Identity and Access Management User de-prvisining is an issue that will becme mre challenging as passwrdauthenticatin methds grw in cmplexity and vlume. Federated identity management schemes will make it easier fr users t lg n t multiple cluds, and that will make de-prvisining much trickier. Typically IT departments wish t have a prcess and rutine defined, that describes and ensures that when an emplyee leaves the cmpany, this persn gets deprvisined frm their Windws accunt and any internal enterprise applicatins, their mbile phne gets wiped f crprate infrmatin, and they're blcked frm the cmpany's SaaS applicatins. Cunesft fulfills the user identity, access management and de-prvisining in the fllwing manner: Each user is identified by a unique username by the system. Each user initially receives an autmatically generated passwrd, which can be changed by the user at any time. Administratrs can generate a new passwrd fr each user assigned t them, hwever n administrative user can see r access the passwrd assigned t a user. Passwrd plicies can be enfrced, frcing a certain cmplexity within a passwrd r frcing the user t change the passwrd n a specified schedule. Data Integrity All data, regardless if the data is stred n servers r disk drives, r if the data is stred within the database system, is stred n a disk array with multi disk cnfiguratin. This ensures that even if a disk within the array fails, all data is still available nline. Anther layer f security is mirrring. Data is autmatically mirrred t different data centers, ensuring that every piece f infrmatin stred within the clud is still available, even if the primary datacenter is cmpletely discnnected r destryed in case f a disaster. The mirrred data center is ensured t be in a different cuntry, t ensure data security and availability even in the wrst-case scenaris. Data mirrring is an autmated prcess that is replicating the data written t disk, database and the cmplete server envirnment t the fall back datacenter upn write request, ensuring data integrity at all times. All data centers used by Cunesft t perate, guarantee an uptime f min. 99 % - Cunesft guarantee s the same level f availability with the exceptin f scheduled Page 4 f 7

5 update days, where new versins f the Cunesft clud are ppulated within the envirnment. This maintenance windw is cmmunicated well in advance and scheduled during lw peak times. The verall availability during patching and upgrade windws is 99%. Lcatin & Perfrmance Cunesft s data centers are all Eurpean based data centers fr ur Eurpean custmers t ensure the highest perfrmance pssible within Eurpe. Hwever, clud based slutins have the benefit f being decentralized. This means that the applicatin implemented within the Cunesft clud might be accessed frm ther places scattered arund the wrld. T ensure the highest perfrmance pssible fr all end-users wrldwide, Cunesft ffers an ptinal cntent delivery netwrk service. This Service ensures that data is delivered frm a cnnectin pint near the end-user, transferring the data t that pint within the ptimized delivery netwrk. This prvides the user with high bandwidth, lw latency and fast access times acrss the glbe. Anther ptinal service is the analysis and ptimizatin f the custmer s netwrk. Essentially, data that is stred in the clud needs t be transferred ver the Internet frm and t the client s netwrk t wrk and / r display the data. Fr a fast and reliable cnnectin and high user acceptance and satisfactin it is imprtant t ensure cnnectivity at the highest bandwidth pssible. One pssibility t ptimize the netwrk t and frm the Cunesft clud is implementing caching facilities such as Riverbed technlgies and WAN ptimizatin. Eurpean Data Security Act The Eurpean Unin recently submitted a guideline fr member states t update data security and data prtectin laws. The new laws enfrced by the member states caused a lt f cnfusin especially in the Clud Segment f Infrmatin Technlgy. At the heart f all laws passed within the member states, the data security act requires t ensure the fllwing: The cmmand and cntrl f data lies with the custmer and is nt cntrlled by anyne utside Custmers must be able t safely delete data An audit trail must be available dcumenting all manipulated data details Cunesft addresses all f these requirements in its high security clud cncept. Due t the nature f Part 11 Cmpliance, the requirement f having an audit trail is fulfilled. Deletin f data is pssible within the clud implementatin and is ensured by autmated checks within the clud implementatin. Cunesft dcuments all details n datacenter lcatin hsting and dcuments which data centers it is being mirrred t. This ensures that custmers have cntrl ver the lcatin f their data and knw where it is stred at all times. Backup and Recvery The Cunesft private clud supprts tw backup and recvery mdels. Page 5 f 7

6 Clud Based Backup and Recvery The clud based backup and recvery service will be an autmated service, which transfers all data t a secure strage area netwrk in tw data centers acrss the glbe. Based n a defined schedule, all files, databases and system installatins are packaged autmatically, encrypted and stred in tw different lcatins in the clud, t ensure maximum data security. The guaranteed backup time by Cunesft is six t eight hurs, depending n the size f data restred. Traditinal Backup and Recvery The secnd mdel is a traditinal backup and recvery mdel, which can be implemented in fllwing the custmers n premise back up strategy. The Cunesft private clud prvides a file share, where all data is being exprted t, based n a defined schedule. The custmers backup and recvery slutin will be able t pick up the data frm the file share. Via this alternative backup and recvery ptin, custmers can cntinuusly stre a cpy f all relevant data within their rganizatin and keep a cpy at all times. Upn request, the data prvided n the file share can be decrypted, r a tl t decrypt the data will be prvided by Cunesft, s that even n premise, the data is stred in a high security manner. Applicatin Layer Security The frnt end applicatin layer, in essence the real applicatin, is the cnslidated user interface fr custmers, which cmbines all cmpnents discussed and described in previus sectins f this whitepaper. applicatin layer ensures that all data, dcuments and ther infrmatin is being stred t the apprpriate and crrect databases and strage buckets within the Cunesft high security private clud envirnment. Befre string files n any strage envirnment, the applicatin layer rutine autmatically encrypts all data with the unique custmer key, t ensure that n human readable data is stred within the clud strage systems at any time. Upn access t infrmatin fr dwnlad r read, the applicatin layer retrieves the encrypted piece f data, transfers it int memry, decrypts it and displays it t the user. This is being dne with applied transprt level security, ensuring that even if a user requests data, there is n piece f infrmatin stred unencrypted within the system. Anther service ffered by the applicatin layer prvides authenticatin and authrizatin. Whenever a user accesses the Cunesft system, the user is prmpted fr a username and passwrd. This unique cmbinatin ensures that the user is directed t the specific custmer s accunts and crrespnding data buckets fr this specific accunt. Fr further details, refer t the previus chapter data security and islatin f this whitepaper. Each time a user uplads r creates a piece f infrmatin within the system, the Page 6 f 7

7 Once authenticated, the system prceeds t the authrizatin stage, as with any nnclud based dcument and data strage envirnment. The authenticatin and authrizatin is cmpletely transparent t the underlying system. Transprt Level Security As with all clud based systems users cnnect t this envirnment thrugh the Internet. The cnnectin frm the custmer s netwrk t the clud envirnment is always made thrugh the Internet, regardless f the cnnectin type: HTTP r VPN, all cnnectins have t g thrugh the public internet in rder t make a successful cnnectin. sftware, such as brwsers, are frced int a secure channel befre any data is transferred between the clud and the end user. This security measure is als enfrced, in case any dwnlad r uplad happens. Cnclusins Creating a high security clud implementatin requires a thrugh detailed cncept and executin n a rck slid applicatin architecture and infrastructure. Even if a clud service is nt cnnected thrugh VPN netwrks, highest levels f security are reached with the Cunesft implementatin and architecture cncept. Encrypting data end-t-end shuld prvide cmplete cnfidence n securing that nly authenticated users are able t read data. Data separatin ensures that encrypted data cannt be accessed by anyne utside the rganizatin. The HTTPS encryptin clses the gap between the clud service and the crprate netwrk t ensure that the data flwing between these services cannt be accessed unencrypted. Implementing data mirrring between data centers and redundant backup and recvery facilities ensures that ur custmers data is available and accessible at all times even in case f a disaster happening in the primary hsting data center. The key aspect t cnsider fr cnnectins thrugh the internet is t ensure that all data flwing in and ut is encrypted and secured at all times, especially in the case f transferring user data such as username and passwrd. T frce this security rule, Cunesft allws encrypted HTTP cnnectins thrugh HTTPS nly. Users are autmatically redirected t the secure cnnectins, even if the attempt is made t establish an unsecured cnnectin. The User and all accessing Cntact us fr a Live Dem Cunesft GmbH Marsstrasse Luise-Ullrich-Strasse Munich Germany Phne: +49-(0) Website: inf@cunesft.cm Page 7 f 7