Encrypted containers for secure file transport

Transcription

1 Encrypted containers for secure file transport Use Zed! encrypted containers to protect your file transports regardless of the method used ( attachment, USB stick, removable device, file transfer, etc.)..zed containers are like diplomatic suitcases because they contain sensitive information only their recipients are authorised to read. Algorithms: AES (128 to 256 bits) and RSA (1024 to 4096 bits). PKCS#1, PKCS#5, PKCS#11, X509, Microsoft CSP, LDAP Available for Windows10 & 7, Linux (several distributions) and Mac OS. Zed! mobile app for ios et Android. User-friendly and intuitive Encrypted container use is very intuitive. The style and the feel of these pseudofolders make them very similar to the native compressed (.zip) files of Windows. In just one click, the user creates a container to which he add folders, files, and accesses. The.zed is ready to be sent, the files are encrypted. Zed! is capable of transporting an entire tree structure, with no limitation on volume. File compression Zed! technology includes a compression algorithm that reduces the total size of the encrypted container. Different access key formats Zed! uses keys, either in the form of passwords, agreed upon with a correspondent, or in the form of RSA certificates (certificate files or LDAP directory). Integrated password wallet When the sender has no certificate for the recipient, they can create a password for this correspondent and store it in their secure password wallet managed by Zed!. Recovery A recovery plan can be configured by the company. It will be automatically and systematically applied by Zed! to enable the Security Officer to recover files. Freeware for an encrypted response To allow users to exchange Zed! encrypted containers with their external contacts, Prim X has made a free version, called Zed! FREE, available to everyone. This freeware is used to read encrypted containers and modify their content to ensure responses are encrypted. EAL3+ Certificate and Standard Qualification Zed! has obtained the EAL3+ Common Criteria Certificate and the Standard Qualification level from the ANSSI (French Network and Information Security Agency). PDF Adobe Add/Delete files Authentification Read Modify Delete Add files Creating documents Securing documents in a encrypted container Archiving Add access(es) - password - RSA (PKIs, LDAP, etc.) Opening the encrypted container Consultation Modification Adding files and returning by Return container to sender

2 Encryption of corporate ZedMail protects the confidentiality of data exchanged by . Integrated in your application, it automatically encrypts and decrypts the messages you exchange. access is restricted to authorized and identified recipients only. ZedMail is easy to use for regular exchanges with colleagues, clients, and partners. Algorithms: AES (128 to 256 bits) and RSA (1024 to 4096 bits). PKCS#1, PKCS#5, PKCS#11, X509, Microsoft CSP, LDAP Available for Microsoft Outlook Available for Windows10 & 7. Zed! mobile app for ios et Android. End-to-end encryption The user sends their as usual, the body of the message and any attachments are automatically and transparently encrypted. On reception, the is decrypted locally and the original message is reconstructed. with user secrecy Messages are encrypted and decrypted with the password or the certificate of the sender and the recipient. These secrets are consequently not handled by third party machines/software (VPN, encryption units, etc.); this ensures content can only be read by key holders (Right-to-Know). Integrated in the corporate application ZedMail is integrated in the corporate tool and has no impact on its operation. Once the user is authenticated, encryption/ decryption takes place automatically. Messages transit encrypted over the network and through the server. Secure exchanges and synchronisation with mobile terminals ZedMail is compatible with the push-mail features of corporate applications: encrypted messages received on the user s mobile terminal will be decrypted locally. Secure exchanges with partners To exchange encrypted messages with correspondents outside the company, Prim X proposes a free version, called Zed! FREE. This freeware makes it possible to read encrypted messages and attachments regardless of the recipient s application and, if required, encrypt the response. Data compression ZedMail features a data compression function to reduce the total size of the encrypted message (message and attachments). Encryption by certificate To encrypt s, ZedMail uses recipient certificates, which it automatically searches for in the company s usual directories (AD, LDAP) and in the user s personal certificate stores. Integrated password wallet When there are no certificates available for the recipient, ZedMail automatically generates a password for that correspondent and stores it in a secure password wallet it manages for the user. The sender can therefore send s to the recipients of their choice with no further intervention. Recovery A recovery plan can be configured by the company. It will be automatically and systematically applied by ZedMail to enable the Security Officer to recover messages. Easy deployment and administration ZedMail installation on workstations is compatible with administered installation tools (SMS, etc.). The security policy that applies to the application is defined by the Security Officer via Windows Security Strategies (Policies). Proven technology, certified EAL3+ and Standard level qualified The ZedMail solution is developed based on Zed! encrypted containers technology, already widely and successfully deployed by Prim X. The Zed! product was awarded EAL3+ certification and Standard Qualification by the ANSSI (French Network and Information Security Agency). Complementary infrastructure protection ZedMail can function as standalone or in conjunction with all Prim X encryption software to ensure comprehensive protection of corporate infrastructure data.

3 Apply automatic encryption on notebooks, stationary workstations, and servers, etc. ZoneCentral is the next-generation, easyto-deploy corporate security product featuring automatic administration and transparent use. This solution offers enhanced security by encrypting data and restricting access to authorised users identified as such. With no organisational constraints, ZoneCentral protects files and folders wherever they might be. Encryption on-the-fly, transparent for users Users access their files as usual with no special handling. They won t even notice a difference in handling between files that are encrypted and files that are not. They simply provide an access key once during their work session in order to decrypt the encrypted files they access. Permanent automatic protection The data security plan is defined by the company s security managers. ZoneCentral then automatically and systematically applies this security plan, with no user intervention. Files are constantly encrypted (no unencrypted copies at any given time). Data organisation remains unchanged Files are encrypted in place, wherever they happen to be located, on a workstation or a data server. With ZoneCentral, there is no need to change data organisation. Secure collaborative workspaces and network traffic ZoneCentral encrypts and decrypts files where they are used: on the workstation, in memory. Correspondingly, when files are accessed on a server via the company s local network, or remotely, data is carried in encrypted form. What is more, in a collaborative workspace, only users with access rights will be able to read the content of shared files. User access keys To access encrypted areas, ZoneCentral uses authentication methods that already exist in the corporate environment: passwords, key files (.p12,.pfx), smart cards or USB tokens (major manufacturers), CSP containers, or other devices. ZoneCentral is consequently compatible with most of the PKIs on the market (though they are not required for its use). Removable devices Users Netbooks Applications Local disks & network shared Web Filers & Servers Encrypted s and attachments ZoneCentral includes an encryption service and a complementary encrypted containers service. Users can exchange information with others, regardless of whether they too use ZoneCentral or not. Exchanges can use passwords (shared) or certificates. [Refer to Zed! and ZedMail product sheets]

4 Compatibility and cooperation with Cryhod ZoneCentral is compatible and cooperative with Cryhod for the encryption of disks/ partitions with pre-boot authentication. Flexible and easy deployment The installation of ZoneCentral on workstations is compatible with the installation tools administered (SMS etc.). The security rules and configurations that apply to fixed or mobile workstations, shared zones on the network, and removable volumes are defined by the Administrator using Windows Security Policies. Windows applies these rules automatically and in real time. Operation and supervision With the ZoneBoard console, the security administrator can easily control access rights to encrypted areas and shares from their station. The ZoneBoard application, included in ZoneCentral, does not require the use of a server. EAL3+ certificate and Standard Qualification ZoneCentral has obtained the EAL3+ Common Criteria Certificate and the Standard Level Qualification from the ANSSI (French Network and Information Security Agency). Data is also encrypted for the system administrator In-place encryption means network operation and administration is unaffected. System operators do not have access to data content, which makes ZoneCentral an essential part of any outsourcing project. Even backups can be encrypted to ensure the long-term confidentiality of sensitive information. Algorithms: AES (128 to 256 bits) and RSA (1024 to 4096 bits). PKCS#1, PKCS#5, PKCS#11, X509, Microsoft CSP, LDAP Available for Windows 10 & 7. Compatible with Windows, Novell, and UNIX servers (NTFS & Samba). Available in 7 languages. Key Functions Encryption On-the-fly and in-place encryption Encrypted s and containers for secure exchanges Encryption of Internet browser caches (Intranet protection) and the swap (virtual memory) Encryption of user profile possible (My Documents, Desktop, etc.), including in roaming Encryption managed on removable volumes (memory stick, external hard disk, etc.) Workstation security Cryptographic engine operating in Kernel mode reduces exposure to spyware Keyboard driver prevents password capture Signed administration settings (policies) Corporate recovery mechanism User support mechanism Secure automatic file deletion (wiping)

5 Ensuring the confidentiality of documents on SharePoint ZonePoint ensures the encryption of all documents placed in SharePoint libraries, offering the layer of confidentiality that is crucial to any document sharing or data outsourcing project. Encrypted document archiving The documents are permanently encrypted on SharePoint portals. At no time is there any movement of unencrypted data on the servers. The documents are encrypted and decrypted locally on the workstations with the user key. Secure sharing and collaborative working ZonePoint provides cryptographic partitioning of documents between users, workgroups or categories of personnel (Right to know management). Outsourced Data Servers: SharePoint 2013, 2010 & Supported browsers: Internet Explorer 7+, Firefox 10+, Chrome 10+. Algorithms: AES (128 to 256 bits) and RSA (1024 to 4096 bits). Technologies: PKCS#1, PKCS#5, PKCS#11, X509 technologies, PKIx compatible.). Secure outsourcing of data Companies are free to choose where to host their data: in-house, outsourced to a third party or in the Cloud In all cases, the data stays protected and the encryption governance remains in the hands of the company. Users Internal Data Customers - Partners Key functions Depositing / retrieval of encrypted documents that is transparent to the user Access via Windows Explorer (Webdav) or web browser Authentication via X509 certificate or password Enterprise recovery mechanism Approved for protecting information at the levels : Restricted, EU Restricted and NATO Restricted 100% recycled paper - Imprim Vert

6 Anti-theft encryption of your laptops For a business, the prejudice associated with the theft or loss of a laptop costs more than the value of the hardware. Losing the information stored on a netbook s hard disk or the mere communication of that information to a third party can generate all sorts of serious problems: recovery of sensitive information by the competition, brand damage, etc., all of which could come accompanied with a breach of regulations or an offence under a law. The Cryhod hard disk encryption solution from Prim X Technologies shields your business from these risks. Cryhod is modern encryption software offering full-disk encryption of all your business s mobile workstations. With Cryhod, data is only accessed by authorised users duly authenticated at preboot. Algorithms: AES (128 to 256 bits) and RSA (1024 to 4096 bits). PKCS#1, PKCS#5, PKCS#11, X509 Available for Windows 10 &7. Password or certificate authentication. Smartcard and token: support for major manufacturers models. All disk types supported. BIOS & UEFI Firmwares. Strong Points Encryption of entire disks and/or partitions (including system partition) On-the-fly encryption transparent for users Pre-boot authentication (before start-up) Free choice of authentication method: password or certificate SSO with Windows session log-in Secure hibernation Single user or multiple access workstation Integrated user recovery and troubleshooting Flexible and easy to deploy Simple to operate and supervise (scheduling via GPO) Transparent initial encryption of disks/partitions Secure initial encryption, with automatic recovery in case of an interruption in service (power outage, station closing, etc.) Compatibility and cooperation with ZoneCentral for managing «right to know» Cryhod has obtained the EAL3+ Common Criteria Certificate and the Standard Level Qualification from the ANSSI (French Network and Information Security Agency). Approved by the Council of the European Union for the Protection of EU Restricted data marked 100% recycled paper - Imprim Vert Cryhod software is cofinanced by the European Union. Europe is committed Rhone-Alpes with the European Regional Development Fund(Feder).