DISUK launches iSecure encrypted backup data
Posted on 24 April 2007
First true remote management solution for encrypted backup tapes and optical discs
24th April 2007 –Infosecurity Europe, London – DISUK today launches iSecure smart card management for its Paranoia2 and SafeTape in-line encryption devices that keep vital backup data secure and compliant with standards such as the Payment Card Industry Data Security Standard (PCI DSS). Security managers can now remotely manage units at unmanned disaster recovery data centres and restore encryption keys for backup data without having to go to the site.
Operations staff may be given appropriate levels of access authority at each site in order to restore data quickly should a disaster happen.
Designed to fit the distinct roles of security and operations in the day-to-day management of encrypted backup data, iSecure offers key generation, management and entry; selection of encryption modes; selection of secure and non-secure modes; engineering functions and full audit logging and reporting.
DISUK’s in-line encryption uses a unique user encryption key and also a unique hardware encryption key on the processor, so that even if someone attempted to read a tape on another unit, it will be unreadable.
However, for disaster recovery scenarios, where another unit is kept at your DR supplier’s site or unmanned secondary data centre, a spare chip is provided and iSecure will allow managers to re-enter the keys over a secure link in order to read the data, negating the need to ship keys.
“More organisations are looking to secure data at rest using encryption. The management and control of this environment will become ever more important. The use of smart card technology has become increasingly acceptable within the organisation looking to secure, control and protect identities,” said Glenn Robinson, Director of QUATTRO Consulting Limited, a technical service provider to the IBM System i marketplace.
The iSecure product includes security management for creating, tailoring and deletion of smart cards and an operations management package for control and remote monitoring of DISUK’s Paranoia2 and SafeTape in-line encryption via the smart card system. Keys, encryption methodology and passwords generated by security department are loaded on to Paranoia2 or SafeTape unit via a set of smart card keys, at no time is the information visible to operations staff. Each user can only access functions according to their job role for example if they are an operator, the only information they may see is the status of the unit.
“Smart cards allow you to deliver department/ job role separation. One half of the equation is security, compliance and audit departments and the other half is operations. We have designed iSecure with ease of use and simplicity of management in mind. Key management stays with security and compliance while operations are given access to varying levels of functionality based on their authority,” said Rob Gretton, Business Development Director for DISUK. “Our key cards do not live inside the box so allow for remote management, and this separation of roles lends itself to business continuity and DR third party partner scenarios. A DR partner can have a unit and support the DR strategy, while the keys and their management remain within the organisation.”
